PET PhD Course 2012 SWITS The Smart Grid and Anonymous - - PowerPoint PPT Presentation
PET PhD Course 2012 SWITS The Smart Grid and Anonymous - - PowerPoint PPT Presentation
PET PhD Course 2012 SWITS The Smart Grid and Anonymous Communication Mechanisms Leonardo Martucci Security and Networks Group, ADIT Department of Computer and Information Science About me EE Degree (95-00) + Master in EE (00-02)
About me
EE Degree (95-00) + Master in EE (00-02)
University of São Paulo
PhD in CS (04-09)
Karlstad University
Postdoc (09-12)
Center for Advanced Security Research
Technische Universität Darmstadt
Postdoc (12- )
Linköping University
2/32
The Smart Grid: What we already know
We already know: What the Smart Grid is How the Smart Grid is organized Why privacy is a concern in the Smart Grid Standards for the Smart Grid That there are already PET proposals for it
3/32
A Sudden Interest
4/32
About this presentation
Based on the paper: “Analysis of Privacy-Enhancing Protocols Based on Anonymity Networks ”
- F. Borges, L. Martucci and M. Mühlhäuser
to appear SmartGridComm 2012 with some bits from:
“A Survey on Privacy-Enhancing Technologies for the Smart Grid ”
- F. Borges and L. Martucci
under submission
5/32
In this presentation
General Research Question on Privacy in the Smart Grid
A theoretical PET for the Smart Grid and PET categories
General Anonymous Communication Networks
Computational performance against a general homomorphic encryption solution
* we that work on privacy
6/32
How NIST sees the Smart Grid
* National Institute of Standards and Technology
7/32
How we* see the Smart Grid
information
* we that work on privacy
produces information collects information Personal Identifiable Information SP & O
8/32
How we* see the Smart Grid
information
* we that work on privacy
produces information collects information Personal Identifiable Information customer SP & O
9/32
The Information Flow in the Smart Grid
Two information flows with different natures
real-time control data billing data SP & O customer
10/32
Real-Time Control Data
11/32
Real-Time Control Data
(Nonintrusive Appliance Load Monitoring)
12/32
General Research Question
Personal Identifiable Information BUT
allow billing according to a given pricing scheme
allow real-time control over the electricity network
13/32
Recalling
Two information flows with different natures
SP & O real-time control data billing data customer
14/32
Testing a theoretical PET
Assuming a method M that eliminates the source from real-time control data and direct communication between customer and SP&O IF M THEN there is no M that protects privacy
customer control data SP & O billing data differentiate sources, but not identify them
15/32
Considering other options
Modify the control data
Solutions based on data aggregation, batteries and micro-generation
customer f (control data) SP & O
16/32
Considering other options
NO direct communication between customers and SP&O
- TTP-based solutions
- Use partial identities and distinct communication channels
according to the nature of the information flow
Real-time control data
Billing data customer 2 Partial identities pseudonym customer ID
17/32
PET Categories for the Smart Grid
The 6 different strategies
A.
Symmetric Data Aggregation
B.
Asymmetric Data Aggregation
C.
Anonymous Communication Networks
D.
Schemes based on Trusted Third Parties
E.
Batteries and Local Generation Schemes
F.
(Hybrid Schemes)
* from “A Survey in Privacy-Enhancing Technologies for the Smart Grid” 18/32
Designing PETs for the Smart Grid
information SP & O customer
19/32
Today we address
The 6 different strategies
A.
Symmetric Data Aggregation
B.
Asymmetric Data Aggregation
C.
Anonymous Communication Networks
D.
Schemes based on Trusted Third Parties
E.
Batteries and Local Generation Schemes
F.
(Hybrid Schemes)
* from “A Survey in Privacy-Enhancing Technologies for the Smart Grid” 20/32
Anonymous Communication Networks and the Smart Grid
Established concept + new application scenario
The objective: sender anonymity towards the SP&O Secure Session
21/32
The General Solution: Partial Identities and Anonymous Communication
Group ID is used for geographical reasons group ID customer ID SP & O begin secure session end secure session
22/32
The relation between sets of customers, IDs, pseudonyms and secure sessions
group ID customer ID secure sessions
23/32
How many messages per session?
- ne secure session only
privacy tends to zero
1 pseudonym for all messages
- ne secure session = one key agreement
- ne secure session per message
maximum privacy
1 pseudonym per message
n messages = n key agreements
maximum computational cost (!)
24/32
Simulation: Measurements and Sessions
Processing time and measurements per session (obviously)
25/32
Analysis: Establishing Secure Sessions
We analyze and compare the computational performance of
a general solution based on homorphic encryption (HF) customer: 2.i.E + i.M sp&o: (i-1).M
a solution based on a Diffie-Hellman (DH) key agreement (IK) for customer: 4.j.E sp&o: 4.j.E i = number of measurements j = number of secure sessions E = exponential cost M = multiplication cost
26/32
Analysis: Performance HF and IK (i = j)
Homorphic functions perform better for i = j (maximum privacy)
27/32
Analysis: more measurements / sessions
Defining an inequality assuming constant costs for M and E we have i.e. 4 messages / secure session for similar performance
28/32
Simulation: measurements / sessions
exponention cost is not constant for the chosen bit-lenghts
10-bit message, 1024-bit for all other HF parameters 1024-bit for DH parameters (modulo 2048 bits)
29/32
Conclusions
There are different PET strategies for the Smart Grid
One are the anonymous communication networks.
it is about their core (how messages are forwarded) but also about their end-nodes (computational costs)
We compared the computational cost for end nodes in:
building secure sessions for a general anon. comm. net. and compared against a general homomorphic encr. solution
30/32
A final note (again!)
Based on the paper: “Analysis of Privacy-Enhancing Protocols Based on Anonymity Networks ”
- F. Borges, L. Martucci and M. Mühlhäuser
to appear SmartGridComm 2012 with some bits from:
“A Survey on Privacy-Enhancing Technologies for the Smart Grid ”
- F. Borges and L. Martucci
under submission
31/32
leonardo.martucci@liu.se
32/32
33/32