专利摘要:
Encrypted information is to be transmitted to a management entity in a system comprising smart electricity meters connected to a concentrator device via a first in-line carrier network, and connected to a collection bridge via a second LPWAN type network. Each intelligent electricity meter wishing to transmit said information: encrypts (302) said information using keys shared with the management entity in the context of an encryption application context established via the first network; selects (303) by default the first network, and switches (303) on the second network, following malfunctions of the first network; and transmitting (304, 305) a frame to the management entity via the selected network, the frame being such that its useful part is said encrypted information, so that said information is encrypted independently of the actually selected network.
公开号:FR3039308A1
申请号:FR1556897
申请日:2015-07-21
公开日:2017-01-27
发明作者:Henri Teboulle;Franck Harnay;Ziv Roter
申请人:Sagemcom Energy and Telecom SAS;
IPC主号:
专利说明:

The present invention relates to a transmission of encrypted information from smart electrical meters to a management entity of a communication system to which said electric meters belong.
Powerline Communications ("PowerLine Communications") networks for AMM (Automated Meter Management) systems have appeared in recent years. For example, the specifications PRIME ("PoweRline Intelligent Metering Evolution" in English) and the standard G3-PLC specified in the ITU-T Recommendation G.9903. In such powerline communication networks online, communications are established between so-called smart electrical meters ("smart electrical meters"), and a data concentrator device (sometimes referred to as "data concentrator"). base node ("base node" in English), or coordinator ("coordinator" in English), to allow in particular remote automated reading of power consumption measurements made by said smart electric meters. A plurality of such data concentrator devices is typically geographically deployed to distribute the management load remotely from a multitude of smart power meters, each data concentrator device then being connected to a single management entity of the AMM type system. which is managed by the operator of the power supply network to which said smart electric meters are connected.
Such on-line carrier communications must cope with interferences related to crosstalk phenomena, and / or unreliability of certain communication links in the carrier line communication network (eg range limit due the length of the cables), and / or noises of different natures (white noises, colored noises, impulse noises mainly), and / or impedance mismatches. As a reminder, crosstalk is a phenomenon that allows signals, typically by capacitive coupling, to propagate without passing through copper pairs themselves, but by non-visible parasitic links. This phenomenon is unstable, as it can vary depending on the temperature or the activity on the power line communication network. Note that there may also be crosstalk within the same device via copper links on printed circuits and / or via certain components that constitute said device. These phenomena can cause losses of packets or messages, in particular packets or signaling messages, and lead to disconnections of nodes devices of the communication network. Such instability of the in-line carrier communication networks makes it problematic the transmission of information from smart electricity meters to the management entity of the AMM-type system, especially in terms of latency since, for example, reconfigurations of the communication network following disconnections of smart electricity meters, some of which serve as a relay between a data concentrator device and other smart electricity meters, are long and tedious.
It is desirable to overcome these drawbacks of the state of the art, and in particular to improve the information transmission capabilities of the smart electric meters to the management entity of the AMM type system. In addition, the transmission of information from the smart electricity meters to the management entity of the AMM-type system is done in encrypted form to avoid an external collection of information vis-à-vis the electricity meters. smart and also avoid an external takeover of said smart electric meters. It is therefore in this context, moreover, desirable to maintain the level of security required for the transmission of information from the smart electricity meters to the management entity of the AMM-type system, and this, effectively and inexpensive. The invention relates to a method for transmitting encrypted information to a management entity in a communication system further comprising at least one data concentrator device to which smart electricity meters are attached via a first in-line carrier communication network, each data concentrator device being connected to the management entity via a second communication network and serving as a relay without decryption of useful frame portion between said smart electrical meters and the management entity. The communication system further comprises at least one collection gateway to which smart electricity meters are attached via a third LPWAN communication network, as well as a server connected to each collection gateway by a fourth communication network and to the management entity by a fifth communication network, each collection gateway serving as a relay without deciphering the useful part of the frame between said smart electrical meters and the server, the server serving as a relay without decrypting the useful part of the frame between each gateway collection and the management entity. The method is such that each intelligent electric counter wishing to transmit said information to the management entity performs the following steps: encrypting said information using keys shared with the management entity in the context of an encryption application context established via the first communication network and intended for data security operations on the first communication network; select by default the first communication network and switch to the third communication network, following malfunctions of the first communication network; and transmitting a frame to the management entity via the selected communication network, the frame being such that its useful part consists of said encrypted information, so that said information is encrypted independently of the communication network actually selected. Thus, the information transmission capabilities of smart electricity meters to the management entity are improved, while maintaining the level of security required for the transmission of information from smart electricity meters to the management entity, in an efficient and inexpensive way.
According to a particular embodiment, the third communication network is a LoRaWan long-range wide area network.
According to a particular embodiment, the first communication network complies with the PRIME specifications, said smart electrical meter switches to the third communication network, when said smart electric meter fails, after a first predetermined duration, to establish a connection according to the IEC 61334-4-32 standard with said data concentrator device.
According to a particular embodiment, said smart electrical meter again selects the first communication network, when said smart electrical meter is able to establish a connection in the sense of the IEC 61334-4-32 standard with said data concentrator device.
According to a particular embodiment, said smart electric meter switches to the third communication network, when said smart electric meter fails to obtain an acknowledgment from the management entity, after a second duration predefined, although it has successfully established a connection in the sense of the IEC 61334-4-32 standard with the data concentrator device.
According to a particular embodiment, said smart electrical meter again selects the first communication network, when said smart electric meter manages to obtain an acknowledgment from the management entity.
According to a particular embodiment, the first communication network conforming to the G3-PLC standard, said smart electrical meter switches to the third communication network, when said smart electricity meter fails to establish, after a third duration predefined, a route to the hub device.
According to a particular embodiment, said smart electric meter again selects the first communication network, when said smart electric meter manages to establish a route to the concentrator device.
According to a particular embodiment, said smart electric counter again selects the first communication network when a fourth predetermined duration has elapsed since said smart electric counter has switched to the third communication network.
According to a particular embodiment, when said smart electric meter has switched to the third communication network during the last previous sending to the management entity, said smart electric counter again selects the first communication network for sending. said information to the management entity.
According to a particular embodiment, said smart electric counter again selects the first communication network, when said smart electric counter detects a disconnection of the third communication network.
According to one particular embodiment, by again selecting the first communication network, said intelligent electric counter waits for a fifth predefined duration before attempting to transmit said information to the management entity via the first communication network. .
According to a particular embodiment, the third communication network is used by the management entity to broadcast to intelligent electricity meters transmission quality information relating to the first communication network, used to select the communication network to be used among the first communication network and the third communication network. The invention also relates to a communication system comprising a management entity to which encrypted information is to be transmitted and at least one data concentrator device to which smart electricity meters are attached via a first on-line carrier communication network, each data concentrator device being connected to the management entity via a second communication network and serving as a relay without decryption of useful frame portion between said smart electric meters and the management entity. The communication system further comprises at least one collection gateway to which smart electricity meters are attached via a third LPWAN communication network, as well as a server connected to each collection gateway by a fourth communication network and to the management entity by a fifth communication network, each collection gateway serving as a relay without deciphering the useful part of the frame between said smart electrical meters and the server, the server serving as a relay without decrypting the useful part of the frame between each gateway collection and the management entity. In addition, each intelligent electricity meter wishing to transmit said information to the management entity implements: means for encrypting said information using keys shared with the management entity in the context of an encryption application context established via the first communication network and intended for data security operations on the first communication network; means for selecting by default the first communication network and switching to the third communication network, following malfunctions of the first communication network; and means for transmitting a frame to the management entity via the selected communication network, the frame being such that its useful part consists of said encrypted information, so that said information is encrypted independently of the communication network actually selected. The invention also relates to a computer program, which can be stored on a medium and / or downloaded from a communication network, in order to be read by a processor. This computer program includes instructions for implementing the method mentioned above, when said program is executed by the processor. The invention also relates to storage means comprising such a computer program.
The characteristics of the invention mentioned above, as well as others, will emerge more clearly on reading the following description of an exemplary embodiment, said description being given in relation to the attached drawings, among which: Fig. 1 schematically illustrates a communication system in the context of automated remote management of smart electric meters, in one embodiment of the invention; FIG. 2 schematically illustrates an exemplary hardware architecture of the communication device of the system of FIG. 1; FIG. 3 schematically illustrates an algorithm, executed by each intelligent electric meter of the system of FIG. 1, for transmitting encrypted information to a management entity of the system of FIG. 1; FIG. 4 schematically illustrates an algorithm, executed each data concentrator of the system of FIG. 1, by each collection gateway of the system of FIG. 1 and by a server of the system of FIG. 1, to serve as a relay between the smart electric meters and the system management entity of FIG. 1; and - FIG. 5 schematically illustrates an algorithm executed by the system management entity of FIG. 1, to process the encrypted information from the smart electricity meters.
Fig. 1 schematically illustrates a communication system in the context of automated remote management of smart electric meters, in one embodiment of the invention.
The communication system of FIG. 1, of the AMM type, comprises a management entity 130 of said system and a plurality of smart electrical meters 120. The management entity 130 is in particular in charge of collecting information transmitted by the smart electrical meters 120, such as information from electrical consumption records of electrical installations that said smart electrical meters 120 are in charge of monitoring. To enable said smart electrical meters 120 to transmit said information to the management entity 130, in-line carrier communications are established between each of said smart electrical meters 120 and a data concentrator device 110. The communication system typically includes a plurality of data concentrator devices 110, only one of which is shown in FIG. 1. Each data concentrator device 110 is logically connected to a plurality of smart electrical meters 120, each data concentrator device 110 thus serving as a relay between said smart electrical meters 120 connected thereto and the management entity 130. An in-line carrier communication network 101 is thus formed between each data concentrator device 110 and the plurality of smart electrical meters 120 connected thereto, relying on a power supply network 100 serving to power in electricity the electrical installations that said smart electrical meters 120 are in charge of monitoring. Each smart electrical meter 120 thus comprises an in-line carrier communication interface 111 making it possible to communicate via the in-line carrier communication network 101. Similarly, each data concentrator device 110 comprises such a communication interface 111 by current communication. Online bearers for communicating via the carrier line communication network 101. According to an example embodiment, the line carrier communication network 101 complies with the PRIME specifications. According to another exemplary embodiment, the line carrier communication network 101 complies with the G3-PLC standard.
It should be understood that the topology of the line carrier communication network 101 is not fixed. Due in particular to crosstalk and other interference phenomena, smart electricity meters 120 can be disconnected from the carrier line communication network 101 and then seek to re-register within the line carrier communication network 101. The topology of the carrier line communication network 101 at this time is then probably different from the topology of the line carrier communication network 101 before disconnection of said smart electrical meters 120.
To make it possible to relay the information transmitted by the smart electrical meters 120 to the management entity 130, each data concentrator device 110 furthermore comprises a communication interface 113 with a communication network 102, to which is also connected the Since the data concentrator devices 110 can typically be installed within transformation stations of the power supply network 100, the communication network 102 is preferably a wireless telecommunications network. According to an exemplary embodiment, the communication network 102 conforms to the Universal Mobile Telecommunications System (UMTS) standard. According to another exemplary embodiment, the communication network 102 conforms to the LTE ("Long Term Evolution") standard.
In the context of the present invention, each smart electric meter 120 further comprises a communication interface 112 with a LPWAN wireless communication network 103 ("Low-Power Wide Area Network") as used in the Internet of Things ("Internet of Things"). To interconnect objects, called communicating objects, as part of the Internet of Things, collection gateways located on geographically high points are geographically deployed. Except for maintenance operations, these gateways are fixed and permanent. For example, SigFox or ThingPark networks can be used on this model. For example, in France, the SigFox network relies on the high points of TDF transmission sites ("Télédiffusion De France"). These collection gateways communicate with communicating objects through LPWAN low-power, long-range radio communication systems. Thus, to provide another means for enabling said smart electrical meters 120 to transmit information to the management entity 130, LPWAN communications are established between each of said smart electrical meters 120 and a collection gateway 150. Note that the smart electricity meters 120 attached to the same data concentrator device 110 can be attached to separate collection gateways 150. The communication system typically includes a plurality of collection gateways 150, only one of which is shown in FIG. 1. Each collection gateway 150 is logically connected to a plurality of smart electrical meters 120.
Each collection gateway 150 thus serves as a relay between said smart electrical meters 120 connected to it and an LPWAN server 140, which itself provides a relay with the management entity 130 via an IP type communication network 105 ( Internet Protocol "in English, as defined in normative document RFC 791), such as the Internet. Thus, each collection gateway 150 comprises a communication interface 112 with the wireless communication network 103 of the LPWAN type to enable it to communicate with the smart electrical meters 120 and a communication interface 114 with a unifying communication network 104 for allow it to communicate with the LPWAN server 140. The LPWAN server 140 then comprises a communication interface 114 to enable it to communicate, via the backbone communication network 104, with a plurality of collection gateways 150, and a communication interface 115. with the communication network 105 of IP type to enable it to communicate with the management entity 130.
As will be seen below, each data concentrator device 110 serves as a relay without decryption of the useful frame portion between the smart electrical meters 120 attached thereto and the management entity 130. In addition, each collection gateway 150 serves as a relay without decryption of useful frame portion between the smart electrical meters 120 attached thereto and the LPWAN server 140. Finally, the LPWAN server 140 serves as a relay without decryption of useful frame portion between each collection gateway 150 and the management entity 130.
Preferably, the wireless communication network 103 is a Long Range Wide-area Network (LoRaWan), also known as the "LoRa" of the name of the alliance promoting the wireless network. LoRaWan long range wide area network technologies. The management entity 130 thus comprises an interface 113 for communication with the communication network 102 enabling it to communicate with a plurality of data concentrator devices 110, and an interface 115 for communication with the IP type communication network 105 for it. to allow communication with the LPWAN server 140. The management entity 130 preferably conforms to the set of IEC 62056 standards, ie to the DLMS ("Device Language Message Specification" in English) and COSEM specifications ("Companion Specification for Energy Metering"). " in English).
The communications between the management entity 130 and the LPWAN server 140 are preferentially provided via a virtual private network VPN (virtual private network).
Such an arrangement then offers two alternatives to enable the smart electricity meters 120 to transmit information to the management entity 130. Thus, from the point of view of the smart electricity meters 120, the in-line carrier communication network 101 constitutes a primary collection network and the LPWAN communication network 103 constitutes a secondary collection network. An appropriate selection of the collection network to be used for transmitting information from the smart electrical meters 120 to the management entity 130 makes it possible to ensure good collection performance, while ensuring the security of said information, and this, efficiently and inexpensively. This aspect is detailed later in connection with Figs. 3 and 4.
It should be noted that each smart electrical meter 120 can connect to the communication network 103 of the LPWAN type during an initialization phase, thus making it possible to use the communication network 103 of LPWAN type as needed and in particular to receive, in a particular embodiment, transmission quality information relating to the line carrier communication network 101. This is all the more appropriate as the collection gateways 150 and the smart electrical meters 150 are intended to be geographically fixed . As a variant, each smart electrical meter 120 can connect to the LPWAN type communication network 103 at the moment when said smart electrical meter 120 needs to switch to the LPWAN communication network 103 following a failure of the current communication network. online porters 101; in the event of a reverse switchover, said smart electrical meter 120 can then disconnect from the communication network 103 of the LPWAN type.
Fig. 2 schematically illustrates an exemplary hardware architecture of the communication device of the system of FIG. 1, be it a data concentrator device 110, an intelligent electricity meter 120, a collection gateway 150, the LPWAN server 140, or the management entity 130.
The communication device then comprises, connected by a communication bus 210: a processor or CPU ("Central Processing Unit" in English) 201; Random Access Memory (RAM) 202; a ROM (Read Only Memory) 203; a storage unit 204, such as a hard disk drive HDD ("Hard Disk Drive" in English), or a storage medium drive, such as a SD card reader ("Secure Digital" in English); a set of interfaces 205 enabling the communication device to communicate within said system, as described above in relation to FIG. 1.
The processor 201 is capable of executing instructions loaded into the RAM 202 from the ROM 203, an external memory (not shown), a storage medium (such as an SD card), or a communication network. When the communication device is powered up, the processor 201 is able to read instructions from RAM 202 and execute them. These instructions form a computer program causing the processor 201 to implement all or part of the algorithms and steps described below in relation to the communication device concerned.
All or part of the algorithms and steps described below can be implemented in software form by executing a set of instructions by a programmable machine, for example a DSP ("Digital Signal Processor") or a microcontroller, or be implemented in hardware form by a machine or a dedicated component, for example an FPGA ("Field-Programmable Gate Array" in English) or an ASIC ("Application-Specific Integrated Circuit" in English).
Fig. 3 schematically illustrates an algorithm, executed by each smart electrical meter 120, for transmitting encrypted information to the management entity 130. The algorithm of FIG. 3 relates more particularly to information transmissions in "push" mode, i.e. when said smart electrical meter 120 decides to push said information to the management entity 130 without having previously received a request to do so. This makes it possible to simplify the protocol exchanges since neither the management entity 130 nor the data concentrator device 110 has to ask for the information again in the event of a transmission failure.
Prior to executing the algorithm of FIG. 3, said smart electrical meter 120 creates, in connection with the management entity 130 via the online carrier communication network 101, an encryption application context. This encryption application context, created in a coherent manner within said smart electrical meter 120 and the management entity 130, makes it possible to use encryption / decryption, authentication and signature keys intended for security protection operations. data on the power line communication network 101 101. These keys are therefore shared between the management entity 130 and said smart electrical meter 120. These keys can be pre-taught at the factory, or at the installation, within said counter 120 and the management entity 130 (in association with an identifier of said smart electrical meter 120). These keys can also alternatively be exchanged between said smart electrical meter 120 and the management entity 130, during the establishment of said application context, according to techniques known to those skilled in the art.
In a step 301, said smart electrical meter 120 obtains information to be transmitted to the management entity 130. For example, this information corresponds to a measurement of energy consumption measurements of the electrical installation that said smart electric meter 120 is in charge of monitoring. Preferably, said information is in the format of a DLMS message called DataNotification, as defined in the Green Book ("Green Book") edited by the association DLMS User Association.
In a subsequent step 302, said smart electrical counter 120 encrypts the information obtained in step 301 by virtue of the encryption application context defined via the line carrier communication network 101. This encryption will subsequently constitute the useful part (" payload ") of a frame that will be transmitted either via the primary collection network or via the secondary collection network.
In a next step 303, said smart electrical meter 120 selects a collection network from the primary collection network, ie the in-line carrier communication network 101, and the secondary collection network, ie the wireless communication network. 103 LPWAN type.
By default, the smart electricity meter 120 selects the primary collection network. However, instabilities or interference can impede the transmission of information to the management entity 130 via the line carrier communication network 101. Thus, the smart electric meter 120 switches to the secondary collection network, continued communication malfunctions on the primary collection network.
In a particular embodiment, when the line carrier communication network 101 complies with the PRIME specifications, said smart electrical meter 120 selects the secondary collection network, if said smart electrical meter 120 fails, after a predefined duration T1, to establish a connection (more particularly in application of IEC 61334-4-32, Service Specifies Convergence Sublayer) with the data concentrator device 110 to which said smart electrical meter 120 is supposed to be attached. For example, said predefined duration T1 is twelve hours.
In another even more particular embodiment, when the line carrier communication network 101 complies with the PRIME specifications, said smart electrical meter 120 selects the secondary collection network, if said smart electrical meter 120 fails to obtain an acknowledgment from the management entity 130, after a predefined duration T'1, although having succeeded in establishing a connection (more particularly in application of the standard IEC 61334-4-32, Service Specifies Convergence Sublayer) with the data concentrator device 110 to which said smart electrical meter 120 is supposed to be attached. For example, the predefined duration T'1 is identical to the predefined duration T1.
In yet another particular embodiment, when the line carrier communication network 101 conforms to the G3-PLC standard, said smart electrical meter 120 selects the secondary collection network, if said smart electric meter 120 fails to establishing, after a predefined period T2, a route to the data concentrator device 110 to which said smart electrical meter 120 is supposed to be attached. For example, said predefined duration T2 is one hour.
When said smart electric meter 120 has used the secondary collection network during the last previous sending of information to the management entity 130, said smart electrical meter 120 again selects the primary collection network for the new sending of the data. information to the managing entity 130.
In an alternative embodiment, said smart electric meter 120 decides to select the primary collection network again if a predefined duration T3 has elapsed since said smart electric meter 120 has switched to the secondary collection network.
In another variant embodiment, when the line carrier communication network 101 complies with the PRIME specifications, said smart electrical meter 120 again selects the primary collection network, if said smart electrical meter 120 is able to establish a connection ( more particularly in application of the standard IEC 61334-4-32, Service Specifies
Convergence Sublayef) with the data concentrator device 110 to which said smart electrical meter 120 is supposed to be attached.
In yet another alternative embodiment, when the line carrier communication network 101 complies with the PRIME specifications, said smart electrical meter 120 again selects the primary collection network, if said smart electrical meter 120 succeeds in obtaining an acknowledgment receipt by the managing entity 130.
In yet another embodiment, when the in-line carrier communication network 101 conforms to the G3-PLC standard, said smart electrical meter 120 again selects the primary collection network, if said smart electrical meter 120 is able to establish a route to the data concentrator device 110 to which said smart electrical meter 120 is supposed to be attached, while the reason for switching on the secondary network was the absence of a route.
In yet another embodiment, said smart electrical meter 120 selects the primary collection network again, if said smart electrical meter 120 detects a disconnection of the secondary collection network. Preferably, said smart electrical meter 120 expects, in this case, a predefined duration T4 before attempting to transmit said information to the management entity 130 via the primary collection network. For example, said predefined duration T4 is one hour.
In a particular embodiment, the secondary collection network is used by the management entity 130 to broadcast to the smart electricity meters 120 transmission quality information relating to the primary collection network. This transmission quality information is provided by each data concentrator device 110 to the management entity 130, which then distributes it, via the secondary collection network, to the smart electrical meters 120 attached to said data concentrator device 110. transmission quality are then used by each smart electric meter 120 to select the collection network to be used from the primary collection network and said secondary collection network. Thus, when this transmission quality information shows insufficient capacity to make it possible to contact the management entity 130 via the primary collection network, said smart electrical counter 120 selects the secondary collection network, and otherwise selects the primary collection network .
In a next step 304, said smart electrical counter 120 encapsulates the encrypted information in step 302, in a manner adapted to the collection network selected in step 303. Said smart electrical meter 120 thus constructs a frame having a header ( "Header") specific to the collection network selected in step 303 and a useful part ("payload" in English) consisting of the encrypted information in step 302. This means that, although the keys encryption / decryption are intended for operations for securing data on the line carrier communication network 101, said keys are also used when sending said information via the LPWAN wireless communication network 103. The encryption of said information to be transmitted to the management entity 130 is therefore independent of the collection network actually used to transport said encrypted information to the management entity 130.
In a next step 305, said smart electrical meter 120 transmits the frame created in step 304 via the collection network selected in step 303.
Fig. 4 schematically illustrates an algorithm, executed by each data concentrator 110, to serve as a relay between the smart electrical meters 120 attached thereto and the management entity 130. FIG. 4 also schematically illustrates an algorithm, executed by each collection gateway 150, to serve as a relay between the smart electrical meters 120 attached thereto and the management entity 130. FIG. 4 also schematically illustrates an algorithm, executed by the LPWAN server 140, to serve as a relay between the collection gateways 150 and the management entity 130.
Let us first consider that the algorithm of FIG. 4 is executed by each data concentrator 110.
In a step 401, said data concentrator 110 receives encrypted information from one of the smart electrical meters 120 attached thereto. The encrypted information is encapsulated in a frame adapted to the line carrier communication network 101.
In a next step 402, said data concentrator 110 de-encapsulates the encrypted information and re-encapsulates it in a frame adapted to the communication network 102. Then, said data concentrator 110 transmits, on the communication network 102, the frame thus obtained. No operation of decryption of said information that said smart electrical counter 120 wishes to transmit to the management entity 130 is performed by said data concentrator 110.
Now consider that the algorithm of FIG. 4 is executed by each collection gateway 150.
In step 401, said collection gateway 150 receives encrypted information from one of the smart electrical meters 120 attached thereto. The encrypted information is encapsulated in a frame adapted to the communication network 103 LPWAN type.
In step 402, said collection gateway 150 de-encapsulates the encrypted information and re-encapsulates it in a frame adapted to the communication network 104. Then, said collection gateway 150 transmits, on the communication network 104, the frame thus obtained. No operation of decryption of said information that said smart electrical meter 120 wishes to transmit to the management entity 130 is performed by said collection gateway 150.
Now consider that the algorithm of FIG. 4 is executed by the LPWAN server 140.
In step 401, the LPWAN server 140 receives encrypted information, originally from an intelligent power meter 120, which has been relayed by a collection gateway 150. The encrypted information is encapsulated in a frame adapted to communication network 104.
In step 402, the LPWAN server 140 de-encapsulates the encrypted information and re-encapsulates it in a frame adapted to the communication network 105. Then, the LPWAN server 140 transmits, on the communication network 105, the frame thus obtained. . No operation of decryption of said information that said smart electrical meter 120 wishes to transmit to the management entity 130 is performed by the LPWAN server 140. Communication systems based on LPWAN technologies typically allow to encrypt the useful parts of the data. which pass through the LPWAN gateways as the collection gateways 150. Encryption / decryption keys, authentication, signature for LPWAN transmissions are then used. The LPWAN server 140 is then able to decrypt said data. In the context of the present invention, the fact of using, in the context of LPWAN transmissions, useful portions of encrypted frames with keys intended for transmissions on the line carrier communication network 101 makes it possible to prevent the LPWAN server from being used. 140 is capable of decrypting said information that the smart electrical meters 120 wish to transmit to the management entity 130. The LPWAN encryption is then deactivated, eg when the wireless communication network 103 is a long-range LoRaWan extended network, the key called AppSKey is not used. The confidentiality of this information is maintained, at a lower cost in terms of processing and in terms of securing the LPWAN server 140 (the LPWAN server 140 is typically managed by another operator than the management entity 130).
Fig. 5 schematically illustrates an algorithm, executed by the management entity 130, for processing the encrypted information from the smart electrical meters 120.
In a step 501, the management entity 130 receives encrypted information from one of the smart electrical meters 120. This encrypted information has passed either via the communication network 102 and thus via the powerline communication network in line. 101, or via the communication network 105 and thus via the secondary collection network.
In a next step 502, the management entity 130 de-encapsulates the encrypted information and decrypts said information by means of said keys intended to be used for data transmissions via the line carrier communication network 101, without taking into account the This information has been received via the communication network 102 and therefore via the line carrier communication network 101, or via the communication network 105 and thus via the secondary collection network.
In a next step 503, the management entity 130 acknowledges said information from the smart electrical meter 120 that emitted them, by using the collection network that was used by said smart electric meter 120 to transmit them. The management entity 130 then processes the information that has been transmitted by said smart electric meter 120.
权利要求:
Claims (14)
[1" id="c-fr-0001]
1) A method for transmitting encrypted information to a management entity (130) in a communication system further comprising at least one data concentrator device (110) to which are attached smart electrical meters (120) via a first network of in-line carrier communication (101), each data concentrator device being connected to the management entity via a second communication network (102) and serving as a relay without decryption of the useful frame portion between said smart electrical meters and the management entity, characterized in that the communication system further comprises at least one collection gateway (150) to which smart electricity meters are attached via a third LPWAN communication network (103), and a server (140) connected to each collection gateway by a fourth communication network (104) and to the management entity by a fifth communication network (105), each collection gateway serving as a relay without decryption of useful frame portion between said smart electric meters and the server, the server serving as a relay without decryption of useful part frame between each collection gateway and the management entity, and in that each smart electrical counter wishing to transmit said information to the management entity performs the following steps: encrypting (302) said information using shared keys with the management entity in the context of an encryption application context established via the first communication network and intended for data security operations on the first communication network; selecting (303) by default the first communication network and switch (303) on the third communication network, following malfunctions of the first communication network; and transmitting (304, 305) a frame to the management entity via the selected communication network, the frame being such that its useful part is composed of said encrypted information, so that said information is encrypted independently of the communication network actually selected.
[0002]
2) Method according to claim 1, characterized in that the third communication network is a long-range wide area network LoRaWan.
[0003]
3) Method according to any one of claims 1 and 2, characterized in that, the first communication network complies with the PRIME specifications, said smart electric meter switches to the third communication network, when said smart electricity meter fails. at the end of a first predefined period, to establish a connection in the sense of the IEC 61334-4-32 standard with said data concentrator device.
[0004]
4) Method according to claim 3, characterized in that said smart electrical meter again selects the first communication network, when said smart electrical meter manages to establish a connection in the sense of standard IEC 61334-4-32 with said concentrator device. data.
[0005]
5) Method according to any one of claims 3 and 4, characterized in that said smart electric meter switches to the third communication network, when said smart electric meter fails to obtain an acknowledgment from the management entity, after a second predefined duration, although it has successfully established a connection in the sense of the IEC 61334-4-32 standard with said data concentrator device.
[0006]
6) Method according to claim 5, characterized in that said smart electrical meter again selects the first communication network, when said smart electrical meter manages to obtain an acknowledgment from the management entity.
[0007]
7) Method according to any one of claims 1 and 2, characterized in that, the first communication network being in accordance with the G3-PLC standard, said smart electric meter switches to the third communication network, when said smart electric meter does not fails to establish, after a third predefined time, a route to the concentrator device.
[0008]
8) The method of claim 7, characterized in that said smart electrical meter again selects the first communication network, when said smart electric meter manages to establish a route to the concentrator device.
[0009]
9) Method according to any one of claims 1 and 2, characterized in that said smart electric meter again selects the first communication network when a fourth preset time has elapsed since said smart electric meter has switched to the third network Communication.
[0010]
10) Method according to any one of claims 1 and 2, characterized in that, when said smart electric meter has switched to the third communication network during the last previous shipment to the management entity, said smart electric meter again selects the first communication network for sending said information to the management entity.
[0011]
11) Method according to any one of claims 1 to 9, characterized in that said smart electrical meter again selects the first communication network, when said smart electrical meter detects a disconnection of the third communication network.
[0012]
12) Method according to claim 11, characterized in that, by selecting again the first communication network, said intelligent electric counter waits a fifth predefined duration before attempting to transmit said information to the management entity via the first communication network.
[0013]
13) Method according to any one of claims 1 to 12, characterized in that the third communication network is used by the management entity to broadcast to the smart electricity meters transmission quality information relating to the first communication network, used to select the communication network to be used from the first communication network and the third communication network.
[0014]
14) A communication system comprising a management entity (130) to which encrypted information is to be transmitted and at least one data concentrator device (110) to which smart electrical meters (120) are attached via a first current communication network in-line carriers (101), each data concentrator device being connected to the management entity via a second communication network (102) and serving as a relay without deciphering the useful frame portion between said smart electrical meters and the communication entity. management, characterized in that the communication system further comprises at least one collection gateway (150) to which smart electricity meters are attached via a third LPWAN communication network (103), and a server (140). ) connected to each collection gateway by a fourth communication network (104) and to the management by a fifth communication network (105), each collection gateway serving as a relay without decryption of useful frame portion between said smart electrical meters and the server, the server serving as a relay without decryption of useful frame portion between each gateway of collection and the management entity, and in that each intelligent electric meter wishing to transmit said information to the management entity implements: means for encrypting (302) said information using keys shared with the management entity in the context of an encryption application context established via the first communication network and intended for data security operations on the first communication network; means for selecting (303) by default the first communication network and switching (303) on the third communication network, following malfunctions of the first communication network; and means for transmitting (304, 305) a frame to the management entity via the selected communication network, the frame being such that its useful part is comprised of said encrypted information, so that said information is encrypted independently of the network effectively selected communication.
类似技术:
公开号 | 公开日 | 专利标题
EP3122061B1|2018-10-03|Transmission of encrypted data from smart electric meters
EP1864466A1|2007-12-12|Device and method for communicating in a network
EP3629541A1|2020-04-01|Method of managing roaming by multi-network transfer
EP2291980A2|2011-03-09|Remote network access via a visited network
EP2210396A1|2010-07-28|System of interconnection between at least one communication apparatus and at least one remote information system and interconnection method
EP3629629B1|2021-05-12|Method of managing roaming by multi-network transfer
EP3149917B1|2021-06-30|Device and method of manager for consistent update of home network services
WO2014023550A1|2014-02-13|Device and method for providing services in a communication network
EP3777102B1|2022-02-09|Data transmission from a management entity to a smart electricity meter
WO2019076765A1|2019-04-25|Management of connection with other residential gateways of a residential gateway implementing link aggregation
WO2018193203A1|2018-10-25|Communication system and method
FR3011420A1|2015-04-03|IMPROVED MANAGEMENT OF NETWORK CONNECTIONS
EP3549352B1|2021-12-29|Electricity metering device comprising a powerline interface and at least a radiofrequency interface.
EP3530036B1|2021-04-07|Pairing method at a gateway
EP3709185A1|2020-09-16|Method for optimising data exchange in a connected object infrastructure
EP3809796A1|2021-04-21|Standby and reactivation methods of part of a wireless communications network and network collection node
EP3829101A1|2021-06-02|Method for securing data flows between a communication equipment and a remote terminal
WO2021074412A1|2021-04-22|Method for connecting a communication node, and corresponding communication node
WO2008087355A2|2008-07-24|Wireless network roaming method
EP2984723B1|2021-06-30|Decentralised supply of power
EP3759936A1|2021-01-06|Method for transmitting, by means of a smart electric meter, a message representing the detection of a failure in the electrical power supply
FR2985402A1|2013-07-05|Method for connecting e.g. access terminal to wireless fidelity network, involves authorizing creation of tunnel between terminal and domestic private local area network, so that terminal accesses resources of private network
EP1858224A1|2007-11-21|Method of setting up virtual private networks and remote access control
FR2884384A1|2006-10-13|METHOD FOR CONTROLLING THE PRESENCE OF A TERMINAL ON A POINT OF ACCESS TO A TELEPHONY NETWORK
EP2656563A1|2013-10-30|Method of communication between two items of termination equipment
同族专利:
公开号 | 公开日
EP3122061A1|2017-01-25|
EP3122061B1|2018-10-03|
FR3039308B1|2017-08-18|
引用文献:
公开号 | 申请日 | 公开日 | 申请人 | 专利标题
WO2009147314A2|2008-06-05|2009-12-10|Sagem Communications Sas|Method for remotely reading electric meters|
FR3014188A1|2013-12-04|2015-06-05|Schneider Electric Ind Sas|MEASURING SENSOR, MEASURING INSTALLATION COMPRISING SUCH SENSOR AND SERVER, DATA EXCHANGE METHOD, AND COMPUTER PROGRAM PRODUCT THEREOF|
WO2015091290A1|2013-12-20|2015-06-25|Sagemcom Energy & Telecom Sas|Method of tracking and maintaining topology of a communication network|
FR3078569B1|2018-03-01|2020-02-28|Sagemcom Energy & Telecom Sas|METHOD OF TRANSMITTING BY A INTELLIGENT ELECTRICAL METER A MESSAGE REPRESENTATIVE OF A DETECTION OF A BREAKDOWN OF A POWER SUPPLY|
FR3079700B1|2018-03-27|2020-10-23|Sagemcom Energy & Telecom Sas|DATA TRANSMISSION FROM A MANAGEMENT ENTITY TO AN INTELLIGENT ELECTRIC METER|
FR3081271B1|2018-05-17|2020-12-04|Sagemcom Energy & Telecom Sas|EQUIPMENT SUITABLE FOR CONNECTING TO AN AMM TYPE SYSTEM|
FR3081642B1|2018-05-28|2020-09-04|Sagemcom Energy & Telecom Sas|PROCESS FOR RECORDING AN INTELLIGENT ELECTRIC METER|
FR3083408B1|2018-06-28|2020-09-18|Sagemcom Energy & Telecom Sas|PROCESS FOR TRANSPORTING LORA FRAMES ON A PLC NETWORK.|
FR3084233B1|2018-07-18|2022-01-28|Sagemcom Energy & Telecom Sas|DEVICE FOR TRANSPORTING LORA FRAMES OVER A PLC NETWORK.|
CN109167615B|2018-08-16|2021-08-10|江苏林洋能源股份有限公司|Uplink and downlink time-sharing communication method based on G3-PLC communication network|
CN110730247A|2019-10-23|2020-01-24|国网重庆市电力公司电力科学研究院|Communication control system based on power line carrier|
法律状态:
2016-06-22| PLFP| Fee payment|Year of fee payment: 2 |
2017-01-27| PLSC| Search report ready|Effective date: 20170127 |
2017-06-21| PLFP| Fee payment|Year of fee payment: 3 |
2018-06-21| PLFP| Fee payment|Year of fee payment: 4 |
2019-06-21| PLFP| Fee payment|Year of fee payment: 5 |
2021-04-09| ST| Notification of lapse|Effective date: 20210305 |
优先权:
申请号 | 申请日 | 专利标题
FR1556897A|FR3039308B1|2015-07-21|2015-07-21|DATA TRANSMISSION FIGURES FROM INTELLIGENT ELECTRIC COUNTERS|FR1556897A| FR3039308B1|2015-07-21|2015-07-21|DATA TRANSMISSION FIGURES FROM INTELLIGENT ELECTRIC COUNTERS|
EP16178472.3A| EP3122061B1|2015-07-21|2016-07-07|Transmission of encrypted data from smart electric meters|
[返回顶部]