Landis+gyr Innovations, Inc.

Landis+gyr Technology, Inc.

Stephen John Chasko

Damien Hugoo

James Paul Hartman

Jeffrey B Shudark

Michael Gerard Demeter

Ruben Salazar

James Patrick Hanley

Chris Calvert

Emmanuel Monnerie

Sean Holcombe

Pushpesh Kumar Deshmukh

Jeff B Shudark

Dave Stenberg

James P Hartman

Jeff Shudark

James Hartman

A method includes storing, at a head-end system, an indication of initial configuration parameters of a configurable resource meter. The method also includes requesting, by the head-end system, a report indicating updated configuration parameters from the configurable resource meter and receiving, at the head-end system, the report indicating the updated configuration parameters of the configurable resource meter. Additionally, the method includes comparing an indication of the updated configuration parameters to the indication of the initial configuration parameters. Further, the method includes determining a potential compromise of the configurable resource meter when the indication of the updated configuration parameters is different from the indication of the initial configuration parameters.

Automated tamper detection of meter configuration parameters

A network tap device is configured to join a secured network to be monitored through a joining process. The joining process includes communicating with the access point to obtain security keys of the monitored network and communicating with the access point to obtain a network address for the network tap device. After joining the secured network, the network tap device collects the network data on the secured network. Collecting the network data includes detecting network traffic on the monitored network, the network traffic containing encrypted data and unencrypted data, decrypting the encrypted data in the network traffic using the security keys to generate decrypted data, and adding the decrypted data and unencrypted data to the network data. The network tap device further transmits the collected network data to a monitoring workstation via a data transmission network.

Monitoring secured network using network tap devices

Techniques are disclosed for software development on utility devices. In an example, a utility device, responsive to validating a manufacturer signature, transitions to an isolated development mode. When in the isolated development mode, the utility device is restricted from joining a network and receives an application from a development computing system. The utility device validates a network signature and transitions to a network testing mode. When in the network testing mode, the utility device joins the network, registers with a head end system via the network, and executes the application. After a threshold amount of time has lapsed the utility device transitions to the isolated development mode.

Enabling isolated development mode in utility end points

Systems and methods are disclosed for reconstructing a personal area network ('PAN') after a failure in a system or network. A method can include detecting, by a node, a power failure in a system. The method can further include storing, by the node, data about a parent node in the system at a time of the power failure. The method can further include detecting, by the node, power restoration in the system and entering a restoration state in response to detecting the power restoration. The method can further include transmitting, by the node and to the parent node, an enhanced beacon request via a particular frequency channel associated with the parent node. The method can also include receiving, by the node, an acknowledgment response from the parent node via the frequency channel and receiving, by the node, an enhanced beacon request from the parent node via the frequency channel.

Reconstructing a personal area network or system after a failure in the network or system

In some embodiments, a secure local connection between a network node of a network and an edge device attached to the network node is provided by extending the security of the network to this local connection. The edge device attached to the network node communicates with a network manager of the network to obtain security keys and security credentials for the edge device. Using the security keys and the security credentials, the edge device can establish a secure channel between the network node and the edge device over the local connection. The edge device further communicates with the network manager to exchange routing information and to obtain a network address for the edge device. The edge device can then communicate, through the network node, with other network nodes in the network using the security keys, the security credentials, and the network address.

Extending network security to locally connected edge devices

A method for performing a blockchain operation includes receiving an indication of a number of a plurality of endpoints in a processing network. The method further includes assigning nonce offsets to each endpoint of the plurality of endpoints and assigning communication randomization windows to each endpoint of the plurality of endpoints. The communication randomization windows stagger communication windows of the endpoints to a head-end. Additionally, the method includes sending a message to each of the endpoints indicating an operation to perform and an expected result. Further, the method includes receiving a success indication from a first endpoint of the plurality of endpoints. The success indication including a nonce match value from the nonce offset of the first endpoint. Furthermore, the method includes verifying a nonce match value with the expected result.

Cryptographic operations using internet of things device pool

Systems and methods are disclosed for reconstructing a personal area network ('PAN') after a failure in a system or network. A method can include detecting, by a node, a power failure in a system. The method can further include storing, by the node, data about a parent node in the system at a time of the power failure. The method can further include detecting, by the node, power restoration in the system and entering a restoration state in response to detecting the power restoration. The method can further include transmitting, by the node and to the parent node, an enhanced beacon request via a particular frequency channel associated with the parent node. The method can also include receiving, by the node, an acknowledgement response from the parent node via the frequency channel and receiving, by the node, an enhanced beacon request from the parent node via the frequency channel.

Systems and methods are disclosed for interleaving communications with a home area network (HAN) and a data network. A gateway device interleaves communications within timeslots of a time slotted channel hopping protocol. A gateway device can be configured to determine, during a first portion of a timeslot, whether the gateway device received a portion of a message from a data network. If the gateway device receives no messages from the data network during the first portion of the timeslot, the gateway device switches to listen for communication from the HAN during a second portion of the timeslot. If the gateway device receives a portion of the message from the HAN, the gateway device continues to receive receives the remainder of the message until one or more trigger conditions that cause the gateway device to listen for communication from the data network.

Interleaved communication with resource providers and a home area network

Systems and methods for securing communication within a network endpoint, for example, a meter. The meter may include a communication module and a metrology module where the modules are connected via a communication path that is external to both modules. The modules exchange a pairing key to establish a paired channel of communication. When the communication module receives a communication through a network for establishing a secure channel to the endpoint, the communications module sends some or all of the security data to the metrology module to establish a secure communication from a head-end system through the communication module to the metrology module.

Securing communication within a network endpoint

Systems and methods are provided for generating subsequent encryption keys by a client device as one of a plurality of client devices across a network. Each client device is provided with the same key generation information and the same key setup information from an authentication server. Each client device maintains and stores its own key generation information and key setup information. Using its own information, each client device generates subsequent encryption keys that are common or the same across devices. These subsequent encryption keys are generated and maintained the same across devices without any further instruction or information from the authentication server or any other client device. Additionally, client devices can recover the current encryption key by synchronizing information with another client device.

System and method for updating an encryption key across a network

Systems and methods for detecting intrusion into a data network are disclosed. Such intrusion can be detected, for example, by providing at least two network devices in a data network. Each of the network devices has a decoy cryptographic key that is used to detect unauthorized data and an authentic cryptographic key that is used to encrypt authorized data. The first network device receives data from the second network device that is encrypted using the decoy cryptographic key. The first network device determines that the data is encrypted using the decoy cryptographic key. The first network device deletes or otherwise discards the data encrypted using the decoy cryptographic key. The first network device can generate an alert message instructing other network devices that the second network device is generating the unauthorized data. The alert message also instructs the other network devices to ignore data originating from the second network device.

Detecting network intrusion using a decoy cryptographic key

Systems and methods are disclosed for sending messages regarding an emergency at a facility. The messages can be sent to an emergency response service or directly to another facility through a wireless mesh network. The wireless mesh network can comprise one or more nodes that route measurement data, such as utility meter reading data. The emergency messages can be assigned a higher priority so that they travel through the wireless mesh network more quickly. A device receiving an emergency message may identify the address of the associated facility, for example, by identifying an address associated with utility service also provided at the same facility. The address can be forwarded to an emergency response service and a confirmation or other message may be sent back to the facility. A device at a facility may receive various messages from a control center, such as a weather center, over the wireless mesh network.

Growing community of inventors

Marietta, GA, United States of America

Stephen John Chasko