Itron Gmbh

Silver Spring Networks, Inc.

Itron Networked Solutions, Inc.

Itron Global Sarl

Benjamin N Damm

Raj Vaswani

Aditi Dubey

Michael StJohns

Cristina A Seibert

Eric Donald White

Tommi Petteri Parkkila

Nelson Bruce Bolyard

Wilson Chuen Yew Yeung

Michael C Stjohns

Aditi Hilbert

David Drinan

Christopher Vigliaturo

Donald Lloyd Reeves, Iii

Cristina Seibert

Timothy James Driscoll

Julia Ahopelto

Juan Alemany

David Wu Ganger

Thomas J Barbour

Aaron Glasenapp

Connie Bradbury

Stjohns Michael C

Techniques are provided for ad-hoc authenticated group discovery and data sharing in a mesh network. A group of devices is created without leaving a security gap due to the open communication needed to establish the discovery of the devices forming the group. The group can be authenticated autonomously following network discovery of the devices. Instead of requiring global pre-assigned keys for authentication, the devices in the group are authenticated with signatures and certificate passing thereby providing strong security. The efficiency of data sharing between the devices of the network, such as a mesh network, can also be increased. One or more devices may act as a bridge device between devices of a same group that are not in direct wireless communication with each other to reduce re-broadcasts within the mesh network.

Ad-hoc authenticated group discovery

A method, apparatus, and system for disconnecting loads from the electrical grid are disclosed. An application programming interface (API) frontend of an advanced metering infrastructure (AMI) load shedding system may receive a load shedding activation command; in response to receiving the load shedding activation command, the API frontend may deploy a load shedding token to one or more electricity meters of the AMI load shedding system, and cause the one or more electricity meters to disconnect corresponding loads from the one or more electricity meters.

Load shedding in advanced metering infrastructure

Various embodiments set forth a method comprising validating, by a first computing system in a secured computing environment, a demand event generated by an operator, where the operator is authenticated to generate demand events within the secured computing environment and the demand event corresponds to a set of endpoints operating outside the secured computing environment, generating, by the first computing system, an authorization permit associated with the demand event, and sending, from the first computing system to a second computing system outside of the secured computing environment, (i) an indicator of the demand event, and (ii) the authorization permit, where the demand event is usable by the second computing system to generate a demand event command for the set of endpoints, and the authorization permit is usable by the set of endpoints to validate the demand event command.

Secured authorization for demand response

Data sharing in a mesh network

A method for enabling a scalable public-key infrastructure (PKI) comprises invoking a process of receiving a message for a device, identifying an association ID for the device, retrieving encrypted association keys stored on the server for communicating with the device, the encrypted association keys encrypted using a wrapping key stored on a Hardware Security Module (HSM). The method further comprises sending the message and the encrypted association keys to the HSM, unwrapping, by the HSM, the encrypted association keys to create unwrapped association keys, cryptographically processing the message to generate a processed message, deleting the unwrapped association keys, sending the processed message to the device, and invoking, concurrently and by a second application, the process.

System and method for enabling a scalable public-key infrastructure on a smart grid network

To provide overall security to a utility management system, critical command and control messages that are issued to components of the system are explicitly approved by a secure authority. The explicit approval authenticates the requested action and authorizes the performance of the specific action indicated in a message. Key components of the utility management and control system that are associated with access control are placed in a physical bunker. With this approach, it only becomes necessary to bunker those subsystems that are responsible for approving network actions. Other management modules can remain outside the bunker, thereby avoiding the need to partition them into bunkered and non-bunkered components. Access to critical components of each of the non-bunkered subsystems is controlled through the bunkered approval system.

Physically secured authorization for utility applications

A permitting system for controlling devices in a system includes a permit issuing agent that receives a command to be sent to a device. Based upon at least one attribute of the command, the permit issuing agent identifies one or more business logic modules that is pertinent to the command. Each business logic module has a respectively different set of business rules associated with it. Each identified business logic module determines whether the command complies with the business rules associated with that module. If the command is determined to comply with the business rules of all of the identified business logic modules, the agent issues a permit for the command, and the permit is sent to the device for execution of the command.

Secure end-to-end permitting system for device operations

A method for removing credentials from a smart grid device includes: receiving, by a receiving device, a removal request, wherein the removal request includes a device identifier associated with a smart grid device and is signed by an entity associated with a set of security credentials stored in a memory of the smart grid device, the set of security credentials restricting access to one or more components or operations of the smart grid device; extracting, by a processing device, the device identifier included in the received removal request; generating, by the processing device, a permit configured to remove the set of credentials from the smart grid device, wherein the generated permit includes the extracted device identifier; and transmitting, by a transmitting device, the generated permit to the smart grid device for removal of the set of credentials from the memory of the smart grid device.

Return material authorization fulfillment system for network devices with specific cryptographic credentials

Return material authorization fulfillment system for smart grid devices with customer specific cryptographic credentials

Growing community of inventors

San Francisco, CA, United States of America

Benjamin N Damm