Secure and privacy-preserving AMI-utility communications via LTE-A networks

Abstract

The industry has recognized the risk of cyber-attacks targeting to the advanced metering infrastructure (AMI). A potential adversary can modify or inject malicious data, and can perform security attacks over an insecure network. Also, the network operators at intermediate devices can reveal private information, such as the identity of the individual home and metering data units, to the third-party. Existing schemes generate large overheads and also do not ensure the secure delivery of correct and accurate metering data to all AMI entities, including data concentrator at the utility and the billing center. In this paper, we propose a secure and privacy-preserving data aggregation scheme based on additive homomorphic encryption and proxy re-encryption operations in the Paillier cryptosystem. The scheme can aggregate metering data without revealing the actual individual information (identity and energy usage) to intermediate entities or to any third-party, hence, resolves identity and related data theft attacks. Moreover, we propose a scalable algorithm to detect malicious metering data injected by the adversary. The proposed scheme protects the system against man-in-the-middle, replay, and impersonation attacks, and also maintains message integrity and undeniability. Our performance analysis shows that the scheme generates manageable computation , communication, and storage overheads and has efficient execution time suitable for AMI networks.

Security for 4G and 5G cellular networks: A survey of existing authentication and privacy-preserving schemes

“…The question we ask here is: Does detecting the replay attack is sufficient to detect the MITM attack? The privacy-preserving authentication scheme proposed recently by Haddad et al [66] can answer this question where he can prove that the idea of checking the timestamp to detecting the MITM attack is not sufficient, but it is necessary to use the private keys that are not known to the attackers. Yao et al [67] proposed a groupbased secure authentication scheme, named, GBS-AKA, which he can detect the MITM attack using the session keys and timestamp during the authentication procedure.…”

“…Classification of RFID authentication protocols with RFID privacy According to Madueno et al [189], the LTE network is a promising solution for cost-efficient connectivity of the smart grid monitoring equipment. To ensure the security of this equipment, Haddad et al [66] proposed a privacy-preserving scheme to secure the communications of an automatic metering infrastructure via LTE-A networks. To share keys, the scheme [66] uses a key agreement protocol between the smart meters, the utility company, and the LTE network.…”

“…To ensure the security of this equipment, Haddad et al [66] proposed a privacy-preserving scheme to secure the communications of an automatic metering infrastructure via LTE-A networks. To share keys, the scheme [66] uses a key agreement protocol between the smart meters, the utility company, and the LTE network. The scheme [66] cannot only achieve the mutual authentication, key agreement, and key evolution but also can preserve the confidentiality/data integrity and authenticity.…”

Scalable Certificate Revocation Schemes for Smart Grid AMI Networks Using Bloom Filters

“…Based on studying the security requirements as well as the scale of the smart grid, the authors strongly believe that the PKC is the most effective key management solution for securing the SG. Existing works on AMI network security such as [3], [33] use PKC to secure the network. Different aspects of certificate revocation problem in SG applications were discussed in [34], [35], [36] without providing a solution to AMI networks.…”

Efficient Privacy-Preserving Chatting Scheme with Degree of Interest Verification for Vehicular Social Networks

“…In the context of smart grid, several schemes have been proposed to preserve the privacy of the power consumption and injection data [17], [18], [19]. Several schemes have been proposed to preserve the privacy of the nodes involved in a communication session in ad hoc networks [20], [21], [22].…”