slide title securing the smart grid as we move towards 100 ... · ericsson ksi infrastructure...

Slide title 44 pt

Text and bullet level 1 minimum 24 pt

Bullets level 2-5 minimum 20 pt

Characters for Embedded font: !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~¡¢£¤¥¦§¨©ª«¬®¯°±²³´¶·¸¹º»¼½ÀÁÂÃÄÅÆÇÈËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀāĂăąĆćĊċČĎďĐđĒĖėĘęĚěĞğĠġĢģĪīĮįİıĶķĹĺĻļĽľŁłŃńŅņŇňŌŐőŒœŔŕŖŗŘřŚśŞşŠšŢţŤťŪūŮůŰűŲųŴŵŶŷŸŹźŻżŽžƒȘșˆˇ˘˙˚˛˜˝ẀẁẃẄẅỲỳ–—‘’‚“”„†‡•…‰‹›⁄€™ĀĀĂĂĄĄĆĆĊĊČČĎĎĐĐĒĒĖĖĘĘĚĚĞĞĠĠĢĢĪĪĮĮİĶĶĹĹĻĻĽĽŃŃŅŅŇŇŌŌŐŐŔŔŖŖŘŘŚŚŞŞŢŢŤŤŪŪŮŮŰŰŲŲŴŴŶŶŹŹŻŻȘș−≤≥fifl

ΆΈΉΊΌΎΏΐΑΒΓΕΖΗΘΙΚΛΜΝΞΟΠΡΣΤΥΦΧΨΪΫΆΈΉΊΰαβγδεζηθικλνξορςΣΤΥΦΧΨΩΪΫΌΎΏ

ЁЂЃЄЅІЇЈЉЊЋЌЎЏАБВГДЕЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯАБВГДЕЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯЁЂЃЄЅІЇЈЉЊЋЌЎЏѢѢѲѲѴѴҐҐəǽẀẁẂẃẄẅỲỳ№

Do not add objects or text in the

footer area

© Ericsson AB 2017 |

Securing the smart grid as we move towards 100% renewables

Dr. Fiona Williams, Ericsson Germany [email protected] National Power Summit 2017

Slide title 44 pt







footer area


› Growing challenges to Power Grid security – Short video (ASM Terni, (DSO for the city of Terni) Italy)

› Approaches to securing Power Grids – Ericsson Data Centric Security – Using 5G features for Power Grid Security

›  What does 5G do? ›  Local Edge Processing for Distributed Intelligence and countermeasures at the Edge

– DCS and monitoring – Double Virtualisation for Resilience

› Field Trials of Solutions in the SUCCESS and RE-SERVE projects

Securing the Smart Grid as we move to renewable energy

Slide title 44 pt







footer area


Security is fundamental for Next generation utilities › Increase in cyber security attacks › Opening of new digital interfaces to facilitate use of renewable energy

› Overcome current gaps in the systematic security solutions for utilities in order to mitigate security threats by undertaking:

– System security by Design – Resilience by Design – Survivability by Design – Privacy by Design

Operations Service provider

Customer

Distribution Transmission

Markets

Bulk Generation

Attacks on the power grid are constantly increasing in sophistication

Slide title 44 pt







footer area


› Growing challenges to Power Grid security – Short video (ASM Terni, Italy)






Slide title 44 pt







footer area


Utility control center – monitoring screen

Slide title 44 pt







footer area


Ericsson Data centric Security to enable secure utility communication

Utility control centre

Communication Network 10101010101 01010101010 10101010101 01010101010 10101010101 01010101010

Ericsson KSI Infrastructure

eNodeB

KSI GW

10101010101 01010101010 10101010101 01010101010 10101010101 01010101010

Smart meter

2.

3.

4.

KSI signature & data

KSI client

Publication key

KSI signature & data

KSI GW

Ericsson Data Centric Security enables authenticity of crucial data For power grid state estimation and voltage control applications

KSI = Keyless Security Infrastructure

1.

KSI client

Slide title 44 pt







footer area


Reference architecture with Data Integrity Assurance

GIS DMS OMS FFA MDM CRM CIS Billing WEB

Grid Operations

Business Applications

Meter Data Management

Integration Bus

IP/ MPLS SDH 3GPP Fiber Micro-

wave Digital radio

ACCESS

BACKHAUL +

CORE WAN

Substation LAN

Secondary Distribution Substations (Grid Edge)

PLC/ MV MV Line

Devices MV/LV

transformers Meter data

concentrator

Transmission Substations (Vhv/Hv) & Primary Substation (Hv/Mv)

Coms Mgt

Coms Dev Mgt

Device Mgt

Meter Management Platform (Mmp)

NOC (OSS)

Grid Supervision Coms

Front-end Scada Reading Dev Mgt Inventor

y Performa

nce Fault Mgt

Telecom object Mgt

Meters & Lv

Devices

Substation Access Router Grid Edge Router

PLC LV

Mesh RF

Mobility 3GP

DCS – Data Centric Security

Meter manufacturer

Slide title 44 pt







footer area


› Provides protection against false data injection and potential disruption of service to customers giving higher operational efficiency

› Secures the authenticity of smart metering data over third party communication networks and enables detection of cyber-attacks on metering data

› Enables utility to distinguish between data which is correct and data which has been altered intentionally or unintentionally

› Security client can installed in meter or in gateway as an add-on to existing security solutions

› Can be operated by either utility or metering data service provider

Business value of Ericsson Data Centric Security for power network operators

Slide title 44 pt







footer area


SIM Card

User Equipment Terminal, phone, device, sensor, …

CellsandBasesta+onsinamobilenetworkCells and Base stations in a mobile network

Slide title 44 pt







footer area


Network Elements in a mobile network

Slide title 44 pt







footer area


The foundation of mobile telephony

The foundation of mobile broadband

Mobile telephony for everyone

The evolution of mobile broadband

Non-limiting access anywhere, anytime, anyone, anything

~ 1980 ~1990 ~2000 ~2010 ~2020

1G 2G 3G 4G 5G

NMT AMPS TACS

GSM D-AMPS

IS-95

WCDMA &

HSPA LTE LTE A

& NR

Providing a wireless connectivity platform for the services of the Networked Society

Wirelessaccessgenera+onsofmobilenetworks

Wireless access generations of mobile networks

Slide title 44 pt







footer area

© Ericsson AB 2017 | Source: METIS

10-100X End-user Data Rates

5X Lower Latency

10-100X Connected Devices

10X Battery Life

1000X Mobile Data

Volumes

Critical Communications

Intelligent Transport Systems

Massive Communications

Connected Sensors

<5ms e2e delay 99.999% transmission reliability

500Kmph relative velocity

>10yrs battery lifetime >80% cost reduction 20dB better coverage

Extreme availability

Scalability and flexibility

5G Performance Requirements

Slide title 44 pt







footer area


Automated Guided Vehicle

Logistics Tracking

Remote assistance & maintenance Text

Text

Text Text

Shipping

Text

Text

Text

Text

Text

Text

Text

Building Monitoring

Healthcare

Augmented Reality

Smart Agriculture

Cell automation

Energy Meters

Transport/Automotive

Process Control

5GNewandDiverseUseCases

Slide title 44 pt







footer area


MACHINE-TYPE COMMUNICATIONS

Slide title 44 pt







footer area


VNF VNF

Management & Orchestration, Analytics & Exposure

Virtualization Software Defined Networking (SDN)

Distributed Cloud Network Slicing

5GCoreNetworkEvolu+on

Slide title 44 pt







footer area


Industrial Use Case Studies & Pilots

Rel-15 Rel-14 Rel-16

5G Study Item NR Phase 1 NR Phase 2

LTE evo LTE evo LTE evo

Requirements Proposals

5G Commercial Launch 2020

ITU

3GPP

Specifications

2015 2016 2017 2018 2019 2020

IMT-2020

E2E Network and Pre-commercial Trials Field Trials

5G Radio Prototype Ericsson 5G

Radio Testbed

5G Time Plan

Slide title 44 pt







footer area


5G Local Edge Processing

HSS SDN

controller SDN control plane

Core network

Radio access

Edge cloud

Efficiency: low latency

high bandwidth

eNB Security: traffic

remains local

packet core application on SDN controller

B-

GW

Internet/VPN

Power Grid

Control & Monitoring

OPEX: simplified

packet core on SDN controller

Core network

HSS P-GW MME PCRF

Internet/VPN SCADA

Radio access

Wireline access

Application data plane

S-GW

RAN/backhaul

Security: traffic leaves

site

OPEX: complex packet core

eNB

Efficiency: tromboning

of traffic Power Grid Security:

Heterogeneous

Network

Control & Monitoring

Today’s Centralised SCADA

Solutions Attack spreads to whole network

Future Decentralised SCADA

solution Enabled by 5G ICT

Attack (false data) terminated at the Edge processor

B-GW

Slide title 44 pt







footer area


RTDS SM SM

Prot-1

…

Prot-n

Table1 Table0 Table2

Func-2 Edge Cloud

Zone-1

Functional Layer

Data Layer

x66

Zone-2

SM …

Func-1

Double Virtualisation – Grid Resilience

Legend: Func-1 – application function instance, e.g., ‘State estimation’)

Func-2 – application function instance, e.g., Monitoring Table – Database table

Prot-n – Data handler instance (n<67)

Func-1

•  Functionality migrates to a new location with no effect on the application

•  Mitigation of attacks on specific servers needed for power grid operation

•  Mitigation of faults or local outages on specific servers needed for power grid automation

Slide title 44 pt







footer area


› Growing challenges to Power Grid security – Short video (ASM Terni, Italy)






Slide title 44 pt







footer area


Success solutions •  Securing smart grid communication with Ericsson Data

Centric Security Solution - Enabling real time control with 5G latency

•  SDN enabled Breakout Gateway Ericsson 5G solutions

•  Virtualised SCADA system replicated at several sites and control moving from site to site

•  Based on Ericsson Cloud

Double virtualisation of SCADA

•  Identification of cyber attacks for DSOs and for attacks only visible by data analysis at a European level

DSO & Pan European Monitoring Centres

•  A new real time open secure meter •  Enabled with Physical Unclonable Function •  Open source software building on RaspberryPi

NORM

Slide title 44 pt







footer area


Success trials & technologies

Slide title 44 pt







footer area


Test Setup at RWTH, Germany with Live Mobile network

Power System Simulator

RTDS

Analog Signals

MMS Server

Power Messages Background

Traffic

SCADA Control Centre

eNodeB

Core Network

Power Messages

Slide title 44 pt







footer area


Re-serve - Up to 100% Renewables in a Stable Electric Grid

› Goals –  New concepts for Voltage and Frequency Control –  Enabled by 5G ICT & network slicing for real-time

control applications –  Pan European Real-Time Simulation Infrastructure

(connecting labs from Italy, Germany, Ireland, Romania) –  Harmonized Networks codes development

› Project details –  Funded under EU Horizon 2020 framework –  11 Partners across Europe –  3 Trial sites (Ireland, Germany, Romania) –  Ericsson Eurolab as project coordinator –  Duration: October2016 – September 2018

slide title securing the smart grid as we move towards 100 ... · ericsson ksi infrastructure...

Documents