Improving Software and Data Security in SCADA Systems

Zenpanion LLC proposes a hardware-based protection mechanism to substantially improve the security of a key component of a SCADA system. The protected component is the on-site intelligent electronic controller installed to perform energy management in a home or business. The controller’s responsibilities include monitoring and controlling local devices such as lighting, appliances, and HVAC systems to reduce energy use and lower costs. In the SCADA architecture of the new Smart Grid, such controllers are a key component of demand response and other resource controls. For example, a controller receives a demand response directive from the utility provider via an advanced metering infrastructure (AMI) channel. The controller then responds by reducing local resource use. The controller is typically also connected to the Internet, e.g. to obtain weather data or allow the home or business owner remote access. Controller vulnerabilities allow an intruder to perform actions such as shutting down all controlled electrical devices. A hardware-based protection system is proposed to secure the controller, ensuring it is not compromised. The protection system is transparent to the controller, has full monitoring and control access, and is interfaced in a way that makes it much more difficult to compromise than the controller itself.