Method and system for cryptographically enabling and disabling lockouts for critical operations in a smart grid network
A method for locking out a remote terminal unit includes: receiving a lockout request, wherein the lockout request includes at least a public key associated with a user, a user identifier, and a terminal identifier; identifying a user profile associated with the user based on the user identifier included in the received lockout request; verifying the public key included in the received lockout request and permission for the user to lockout a remote terminal unit associated with the terminal identifier included in the received lockout request based on data included in the identified user profile; generating a lockout permit, wherein the lockout permit includes at least the public key included in the received lockout request; and transmitting at least a lockout request and the generated lockout permit, wherein the lockout request includes an instruction to place a lockout on the remote terminal unit.
1. A method for locking out a remote terminal unit, comprising:
receiving, by a receiving device, at least a lockout request and a lockout permit, wherein the lockout permit includes at least a public key associated with a user;
placing, by a processing device, a lockout on the remote terminal unit;
generating, by the processing device, a lockout identifier associated with the remote terminal unit, and a lockout removal nonce;
encrypting, by the processing device, the generated lockout removal nonce using the public key associated with the user;
generating, by the processing device, a receipt including at least the generated lockout identifier and encrypted lockout removal nonce;
transmitting, by a transmitting device, the generated receipt in response to the received lockout request;
if the lockout associated with the generated lockout identifier is a first lockout placed on the remote terminal unit, de-energizing one or more energized circuits associated with the remote terminal unit; and
if the lockout associated with the generated lockout identifier is a second or subsequent lockout placed on the remote terminal unit, verifying that the one or more circuits associated with remote terminal unit are de-energized.
2. The method of claim 1 , further comprising:
receiving, by the receiving device, the public key associated with the user from a smart card inserted into a computing device in communication with the remote terminal unit.
3. The method of claim 1 , wherein placing a lockout on the remote terminal unit includes de-energizing one or more energized circuits associated with the remote terminal unit.
4. The method of claim 1 , wherein placing a lockout on the remote terminal unit includes changing an operation mode of the remote terminal unit to a critical operations mode.
5. The method of claim 1 , wherein the processing device includes a hardware security module or smart card configured to perform at least the placing step.
6. The method of claim 5 , wherein the hardware security module or smart card is configured to produce a physical signal after completion of the placing step, the physical signal being used to change an operation mode of a device.
7. The method of claim 6 , wherein the device is one of: the remote terminal unit and a second device.