Authentication and Authorization Scheme for Various User Roles and Devices in Smart Grid

IEEE Transactions on Information Forensics and Security

Volumn 11, Issue 5, 2016, Pages 907-921

  Saxena, Neetesh ^a,b   Choi, Bong Jun ^a,b   Lu, Rongxing ^c  

^a SUNY   (South Korea)

^b USA   (United States)

^c NANYANG TECHNOLOGICAL UNIVERSITY   (Singapore)

Author keywords

Authentication; Authorization; Insider Threat; Security; Smart Grid

Indexed keywords

ACCESS CONTROL; COMPUTATION THEORY; ELECTRIC POWER TRANSMISSION NETWORKS; ELECTRON DEVICES; NEXT GENERATION NETWORKS; SMART POWER GRIDS;

ATTRIBUTE BASED ACCESS CONTROL; AUTHENTICATION AND AUTHORIZATION; AUTHORIZATION; INSIDER THREAT; INTELLIGENT ELECTRONIC DEVICE; SECURITY; SECURITY AND PERFORMANCE; SMART GRID;

AUTHENTICATION;

EID: 84963978859     PISSN: 15566013     EISSN: None     Source Type: Journal    
DOI: 10.1109/TIFS.2015.2512525     Document Type: Article

References (54)

1. "Cyber-physical systems security for smart grid," Power Syst. Eng. Res. Center, Tech. Rep., Feb. 2012, p. 29. [Online]. Available: http://pserc. wisc.edu/documents/publications/papers/fgwhitepapers/govindarasu-future-grid-white-paper-cps-feb2012.pdf
2. N. M. Pindoriya, D. Dasgupta, D. Srinivasan, M. Carvalho, "Infrastructure security for smart electric grids: A survey," Optimization and Security Challenges in Smart Power Grids (Energy Systems), V. Pappu, M. Carvalho, P. Pardalos, Eds. Berlin, Germany: Springer, 2013, pp. 161-180.
3. "Smart grid cyber security potential threats, vulnerabilities and risks," Public Interest Energy Res. (PIER) Prog. Interim Rep., California State Univ., Sacramento, Sacramento, CA, USA, Tech. Rep. CEC-500-2012-047, May 2012, p. 83. [Online]. Available: http://www.energy.ca.gov/2012publications/CEC-500-2012-047/CEC-500-2012-047.pdf
4. "Guidelines for smart grid cybersecurity: Supportive analyses and references," NISTIR, Tech. Rep. 7628, Aug. 2010. [Online]. Available: http://csrc.nist.gov/publications/nistir/ir7628/nistir-7628-vol3.pdf
5. Tropos Wireless Communication Systems, ABB. (2012). A Secure Distribution Area Network Architecture for Smart Grids. [Online]. Available: https://library.e.abb.com/public/e61e21b95fd4482585257bcb006d71d6/GridCom-secure-distributionnetwork-architecture.pdf.
6. C.-H. Lo and N. Ansari, "Decentralized controls and communications for autonomous distribution networks in smart grid," IEEE Trans. Smart Grid, vol. 4, no. 1, pp. 66-77, Mar. 2013.
7. "Smart grid information assurance and security technology assessment," Energy Res. Develop. Division, Final Project Rep. CEC-500-2013-056, 2010. [Online]. [Online]. Available: http://www.energy.ca.gov/2013publications/CEC-500-2013-056/CEC-500-2013-056.pdf
8. N. Saxena and B. J. Choi, "State of the art authentication, access control, secure integration in smart grid," Energies, vol. 8, pp. 11883-11915, Oct. 2015.
9. H. Khurana, M. Hadley, N. Lu, D. A. Frincke, "Smart-grid security issues," IEEE Security Privacy, vol. 8, no. 1, pp. 81-85, Feb. 2010.
10. H. Li, R. Lu, L. Zhou, B. Yang, X. Shen, "An efficient Merkletree-based authentication scheme for smart grid," IEEE Syst. J., vol. 8, no. 2, pp. 655-662, Jun. 2014.
11. H. Nicanfar, P. Jokar, K. Beznosov, V. C. M. Leung, "Efficient authentication and key management mechanisms for smart grid communications," IEEE Syst. J., vol. 8, no. 2, pp. 629-640, Jun. 2014.
12. P. Deng and L. Yang, "A secure and privacy-preserving communication scheme for advanced metering infrastructure," in Proc. IEEE PES Innov. Smart Grid Technol., Columbia, SC, USA, Jan. 2012, pp. 1-5.
13. H. Liu, H. Ning, Y. Zhang, L. T. Yang, "Aggregated-proofs based privacy-preserving authentication for V2G networks in the smart grid," IEEE Trans. Smart Grid, vol. 3, no. 4, pp. 1722-1733, Dec. 2012.
14. Z. Baharlouei and M. Hashemi, "Efficiency-fairness trade-off in privacypreserving autonomous demand side management," IEEE Trans. Smart Grid, vol. 5, no. 2, pp. 799-808, Mar. 2014.
15. D. Liu, H. Li, Y. Yang, H. Yang, "Achieving multi-authority access control with efficient attribute revocation in smart grid," in Proc. IEEE Commun. Inf. Syst. Secur. Symp., Sydney, NSW, Australia, Jun. 2014, pp. 634-639.
16. S. Ruj and A. Nayak, "A decentralized security framework for data aggregation and access control in smart grids," IEEE Trans. Smart Grid, vol. 4, no. 1, pp. 196-205, Mar. 2013.
17. T. M. Chen, J. C. Sanchez-Aarnoutse, J. Buford, "Petri net modeling of cyber-physical attacks on smart grid," IEEE Trans. Smart Grid, vol. 2, no. 4, pp. 741-749, Dec. 2011.
18. A.-H. Mohsenian-Rad and A. Leon-Garcia, "Distributed Internet-based load altering attacks against smart power grids," IEEE Trans. Smart Grid, vol. 2, no. 4, pp. 667-674, Dec. 2011.
19. X. Liu and Z. Li, "Local load redistribution attacks in power systems with incomplete network information," IEEE Trans. Smart Grid, vol. 5, no. 4, pp. 1665-1676, Jul. 2014.
20. C.-W. Ten, J. Hong, C.-C. Liu, "Anomaly detection for cybersecurity of the substations," IEEE Trans. Smart Grid, vol. 2, no. 4, pp. 865-873, Dec. 2011.
21. O. Kosut, L. Jia, R. J. Thomas, L. Tong, "Malicious data attacks on the smart grid," IEEE Trans. Smart Grid, vol. 2, no. 4, pp. 645-658, Dec. 2011.
22. M. Esmalifalak, G. Shi, Z. Han, L. Song, "Bad data injection attack and defense in electricity market using game theory study," IEEE Trans. Smart Grid, vol. 4, no. 1, pp. 160-169, Mar. 2013.
23. A. Giani, E. Bitar, M. Garcia, M. McQueen, P. Khargonekar, K. Poolla, "Smart grid data integrity attacks," IEEE Trans. Smart Grid, vol. 4, no. 3, pp. 1244-1253, Sep. 2013.
24. B. Sikdar and J. H. Chow, "Defending synchrophasor data networks against traffic analysis attacks," IEEE Trans. Smart Grid, vol. 2, no. 4, pp. 819-826, Dec. 2011.
25. Y. Yang et al., "Man-in-the-middle attack test-bed investigating cybersecurity vulnerabilities in smart grid SCADA systems," in Proc. SUPERGEN, Hangzhou, China, Sep. 2012, pp. 1-8.
26. S. Liu, X. P. Liu, A. El Saddik, "Denial-of-service (DoS) attacks on load frequency control in smart grids," in Proc. IEEE PES Innov. Smart Grid Technol., Washington, DC, USA, Feb. 2013, pp. 1-6.
27. I. Stojmenovic, "Access control in distributed systems: Merging theory with practice," in Proc. IEEE TrustCom, Changsha, China, Nov. 2011, pp. 1-2.
28. H. Cheung, A. Hamlyn, T. Mander, C. Yang, R. Cheung, "Rolebased model security access control for smart power-grids computer networks," in Proc. IEEE PES General Meeting, Pittsburgh, PA, USA, Jul. 2008, pp. 1-7.
29. D. Rosic, U. Novak, S. Vukmirovic, "Role-based access control model supporting regional division in smart grid System," in Proc. ICCICSN, Tainan, Taiwan, Jun. 2013, pp. 197-201.
30. B. Vaidya, D. Makrakis, H. T. Mouftah, "Device authentication mechanism for smart energy home area networks," in Proc. IEEE ICCE, Las Vegas, NV, USA, Jan. 2011, pp. 787-788.
31. E. Ayday and S. Rajagopal, "Secure, intuitive and low-cost device authentication for smart grid networks," in Proc. IEEE CCNC, Las Vegas, NV, USA, Jan. 2011, pp. 1161-1165.
32. Y.-S. Kim and J. Heo, "Device authentication protocol for smart grid systems using homomorphic hash," J. Commun. Netw., vol. 14, no. 6, pp. 606-613, Dec. 2012.
33. A. C.-F. Chan and J. Zhou, "Cyber-physical device authentication for the smart grid electric vehicle ecosystem," IEEE J. Sel. Areas Commun., vol. 32, no. 7, pp. 1509-1517, Jul. 2014.
34. S. Lee, J. Bong, S. Shin, Y. Shin, "A security mechanism of smart grid AMI network through smart device mutual authentication," in Proc. ICOIN, Phuket, Thailand, Jan. 2014, pp. 592-595.
35. X. Huang, Y. Xiang, E. Bertino, J. Zhou, L. Xu, "Robust multi-factor authentication for fragile communications," IEEE Trans. Dependable Secure Comput., vol. 11, no. 6, pp. 568-581, Nov./Dec. 2014.
36. S. Kim et al., "A secure smart-metering protocol over powerline communication," IEEE Trans. Power Del., vol. 26, no. 4, pp. 2370-2379, Oct. 2011.
37. S.-H. Seo, X. Ding, E. Bertino, "Encryption key management for secure communication in smart advanced metering infrastructures," in Proc. SmartGridComm, Vancouver, BC, Canada, Oct. 2013, pp. 498-503.
38. G. Gilchrist, "Secure authentication for DNP3," in Proc. IEEE PES General Meeting, Pittsburgh, PA, USA, Jul. 2008, pp. 1-3.
39. B. Vaidya, D. Makrakis, H. Mouftah, "Provisioning substation-level authentication in the smart grid networks," in Proc. Military Commun. Conf., Baltimore, MD, USA, Nov. 2011, pp. 1189-1194.
40. R. Tabassum, K. Nahrstedt, E. Rogers, K.-S. Lui, "SCAPACH: Scalable password-changing protocol for smart grid device authentication," in Proc. 22nd ICCCN, Nassau, Bahamas, Jul./Aug. 2013, pp. 1-5.
41. E. Coyne and T. R. Weil, "ABAC and RBAC: Scalable, flexible, auditable access management," IT Prof., vol. 15, no. 3, pp. 14-16, May/Jun. 2013.
42. X. Jin, R. Krishnan, R. Sandhu, "A role-based administration model for attributes," in Proc. WSRAS, Minneapolis, MN, USA, Sep. 2012, pp. 7-12.
43. "Best practices in enterprise authorization: The RBAC/ABAC hybrid approach," EmpowerID, 2013. [Online]. Available: http://info.empowerid.com/best-practices-in-enterprise-authorization
44. D. M. Freeman, "Converting pairing-based cryptosystems from composite-order groups to prime-order groups," in Proc. 29th EUROCRYPT, May/Jun. 2010, pp. 44-61.
45. F. Zhang and K. Kim, "ID-based blind signature and ring signature from pairings," in Proc. ASIACRYPT, Dunedin, New Zealand, Dec. 2002, pp. 533-547.
46. B. Lynn, "On the implementation of pairing-based cryptosystems," Ph.D. dissertation, Dept. Comput. Sci., Stanford Univ., 2007. [Online]. Available: https://crypto.stanford.edu/pbc/thesis.pdf
47. D. Boneh and M. Franklin, "Identity-based encryption from the Weil pairing," in Proc. CRYPTO, Santa Barbara, CA, USA, Aug. 2001, pp. 213-229.
48. N. Saxena and N. S. Chaudhari, "EasySMS: A protocol for end-to-end secure transmission of SMS," IEEE Trans. Inf. Forensics Security, vol. 9, no. 7, pp. 1157-1168, Jul. 2014.
49. J.-L. Huang, L.-Y. Yeh, H.-Y. Chien, "ABAKA: An anonymous batch authenticated and key agreement scheme for value-added services in vehicular ad hoc networks," IEEE Trans. Veh. Technol., vol. 60, no. 1, pp. 248-262, Jan. 2011.
50. SmartGridware IEC61850 Java Software Solutions. [Online]. Available: http://www.smartgridware.com, accessed Mar. 12, 2015.
51. "SEC1: Elliptic curve cryptography," Standards Efficient Cryptogr., Certicom Res., Tech. Rep., 2000. [Online]. Available: http://www.secg.org/SEC1-Ver-1.0.pdf
52. (Nov. 13, 2014). Measuring Mobile Broadband Performance in the UK. [Online]. Available: http://stakeholders.ofcom.org.uk/binaries/research/broadband-research/mbb-nov14.pdf
53. J. Wessels. (2001). Applications of BAN-logic. CMG Finance B.V. [Online]. http://www.win.tue.nl/ipa/archive/springdays2001/banwessels. pdf
54. ProVerif: Cryptographic Protocol Verifier in the Formal Model. [Online]. Available: http://prosecco.gforge.inria.fr/personal/bblanche/proverif, accessed Apr. 20, 2015.