Energy big data: A survey <s> C. AUTHENTICATION <s> From the Publisher: ::: The object of the book is to produce a general, comprehensive textbook that treats all the essential core areas of cryptography. <s> BIB001 </s> Energy big data: A survey <s> C. AUTHENTICATION <s> Operations of electricity power systems have recently become more intricate due to development of microgrids, execution of open access competition, and use of network-controlled devices, etc. Computer network therefore turns into a key integral of modern power-grid operations. This paper proposes a new utility computer network security management and authentication for actions / commands requests in smart-grid operations. This management covers multiple security domains in a new security architecture designed for smart power grids. This paper presents the strategy and procedure of security checks and authentications of commands requests for operations in the host area electric power system (AEPS) and interconnected multiple neighboring AEPS. Case studies of the new security management and authentication for smart grids operations are presented. <s> BIB002 </s> Energy big data: A survey <s> C. AUTHENTICATION <s> Smart Grid (SG) technology, which aims at bringing the world's aging electric grids into the 21st century by utilizing intelligent transmission and distributed networks, has been gaining momentum in recent years. Despite its attractive features, the SG technology remains vulnerable to some security threats, such as spoofing and man-in-the-middle attacks. In this paper, to address these potential security issues, we propose a light-weight and secure message authentication mechanism. The proposed mechanism is based on Diffie-Hellman key establishment protocol and hash-based message authentication code, which allows various smart meters at different points of the SG to make mutual authentication and achieve message authentication with low latency and few signal message exchanges. Detailed security analysis shows it can satisfy the desirable security requirements. In addition, extensive computer-based simulation also demonstrates its efficiency. <s> BIB003 </s> Energy big data: A survey <s> C. AUTHENTICATION <s> Vehicle-to-grid (V2G) as an essential network component of smart grid, provides services by periodically collecting the charging status of a battery vehicle (BV). A BV is normally associated with a default interest group (e.g., power grid operator). When the BV accesses its default charging or communication point, it works in the home mode. The BV may move around and temporarily access other aggregators, and then it works in the visiting mode. In this paper, we first identify that, for an aggregator, BVs have different security challenges when they work in different modes. Then, we propose an aggregated-proofs based privacy-preserving authentication scheme (AP3A) to achieve simultaneous identification and secure identification for different working mode BVs. In AP3A, BVs are differentiated into either home or visiting mode, and multiple BVs can be simultaneously authenticated by an aggregator to conserve communication resources. In addition, the aggregated pseudo-status variation is presented to realize that multiple BVs' power status can be collected as a whole without revealing any individual privacy. We perform comprehensive analysis on the proposed scheme, including attack analysis, security analysis, and performance analysis. It is shown that AP3A can resist major attacks for security protection and privacy preservation, and can be an efficient authentication approach for V2G networks. <s> BIB004
In general, authentication means to verify participator's identity and map this identity to the existing authentication table in power network. A user gains access to a smart grid communication system with a valid account. Most security solutions use authentication as a basis to distinguish legitimate and illegitimate identity BIB004 . Hamlyn et al. BIB002 proposed a utility network authentication and security management in smart grid operations. A new security architecture was designed for this management to deal with actions and commands requests in multiple security domains. However, their research only focused on keeping electric power systems and electric circuits secure in host areas. Furthermore, Fouda et al. BIB003 proposed a light-weight message authentication mechanism which is based on the Diffie-Hellman key establishment protocol. This mechanism allows distributed smart meters to make mutual authentication with low latency and has similarities with secure aggregation technology above. Assume that HAN gateway i and BAN gateway j both have their private and secret key pairs which are respectively denoted as PK han i , SK han i , PK ban i , SK ban i . The Diffie-Hellman key establishment protocol will be adopted at the initial handshake between HAN and BAN gateways BIB001 . Define G = g as a group of large prime order p under the Computational Diffie-Hellman (CDH) assumption. Otherwise, if given g a , g b , for unknown a, b ∈ Z * p , it is difficult to calculate whether g ab ∈ G. The following steps are shown the procedure of the envisioned lightweight message authentication scheme: • HAN gateway han i chooses a number a ∈ Z * p ) randomly and computes g a , then sends g a with an encrypted request packets to BAN gateway ban j : • Gateway ban j in BAN decrypts the packets and sends a encrypted response including g b (b ∈ Z * p ): • After receiving ban j 's response packets, han i recovers g a with its Secret Key (SK). If the result is correct, it means that the ban j is authenticated by han i . Then, with number a and g b , han i can calculate the shared session key , where H : {0, 1} * → Z * p is a cryptographic hash function. Then han i sends g b to ban j in plaintext. • Once ban j has received the correct g b , ban j will authenticate han i and also compute the session key using the same way: . Because K i is shared only between han i and ban j , ban j can verify the authenticity of sender and the integrity of message M i . Thus, it can provide the NAN gateways with the authenticated messages.