Intelligent sensor and controller framework for the power grid

Patent metadata

Field	Value
Publication number	US-9923723-B2
Application number	US-201514746577-A
Country	US
Kind code	B2
Filing date	Jun 22, 2015
Priority date	Aug 5, 2011
Publication date	Mar 20, 2018
Grant date	Mar 20, 2018

Abstract

Disclosed below are representative embodiments of methods, apparatus, and systems for monitoring and using data in an electric power grid. For example, one disclosed embodiment comprises a sensor for measuring an electrical characteristic of a power line, electrical generator, or electrical device; a network interface; a processor; and one or more computer-readable storage media storing computer-executable instructions. In this embodiment, the computer-executable instructions include instructions for implementing an authorization and authentication module for validating a software agent received at the network interface; instructions for implementing one or more agent execution environments for executing agent code that is included with the software agent and that causes data from the sensor to be collected; and instructions for implementing an agent packaging and instantiation module for storing the collected data in a data container of the software agent and for transmitting the software agent, along with the stored data, to a next destination.

First claim

What is claimed is:

1. A method, comprising: receiving data representing a software agent, the data including data indicating a cryptographic signature for the software agent, data indicating computing hardware resource requirements for executing the software agent, and executable code for performing an agent task; determining that the executable code is authorized for execution; and responsive to the determining, executing the executable code on a processor, thereby performing the agent task, wherein the determining that the executable code is authorized for execution comprises verifying that the software agent is authorized using the data indicating the cryptographic signature, and verifying that sufficient computing resources are available for the software agent using the data indicating the computing hardware resource requirements.

2. The method of claim 1 , wherein the data representing the software agent further comprises data indicating an identity of an initiator of the software agent, and
wherein the determining that the executable code is authorized for execution further comprises verifying that the initiator is a recognized and authorized initiator using the data indicating the identity of the initiator of the software agent.

3. The method of claim 1 , wherein the data representing the software agent further comprises data indicating a cryptographic signature for configuration data of the software agent, the configuration data indicating parameters for the executable code and destination nodes for the software agent, and
wherein the determining that the executable code is authorized for execution further comprises verifying that the configuration data of the software agent has not been altered using the cryptographic signature for the configuration data.

4. The method of claim 1 , wherein the data representing the software agent further comprises data indicating a cryptographic signature for mutable data of the software agent, and
wherein the determining that the executable code is authorized for execution further comprises verifying that the mutable data of the software agent has not been altered using the cryptographic signature for the mutable data.

5. The method of claim 1 , wherein the method is performed by computing hardware in communication with one of (a) a sensor for measuring an electrical parameter of a power line of a power grid, (b) a sensor for measuring an electrical parameter of a distributed generator coupled to the power grid, (c) an electrical meter for a household coupled to the power grid, (d) a control unit for one or more household electrical devices that receive power from the power grid, or (e) a control unit for controlling power distribution on the power grid.

6. The method of claim 1 , wherein the executing the executable code comprises:
instantiating an instance of an agent execution environment; and
executing the executable code in the agent execution environment.

7. The method of claim 1 , wherein the agent task is to update agent code for an existing agent.

8. The method of claim 1 , further comprising:
collecting data from a sensor as a result of executing the executable code on the processor;
storing the collected data in a mutable data container of the software agent; and
transmitting the software agent, along with the collected data, to a next destination in a manner in which the mutable data container is protected from tampering during transmission.

9. The method of claim 8 , wherein the sensor is configured to measure an electrical characteristic of a power line, a distributed generator, or an electrical device.

10. One or more non-transitory computer-readable media storing computer-executable instructions, which when executed by a computer cause the computer perform a method, the instructions comprising:
instructions to receive data representing a software agent, the data including data indicating a cryptographic signature for the software agent, data indicating computing hardware resource requirements for executing the software agent, and executable code for performing an agent task;
instructions to determine that the executable code is authorized for execution by:
verifying that the software agent is authorized using the data indicating the cryptographic signature, and
verifying that sufficient computing resources are available for the software agent using the data indicating the computing hardware resource requirements; and responsive to implementing the instructions to determine, implementing instructions to execute the executable code on a processor, thereby performing the agent task.

11. The computer-readable media of claim 10 , wherein:
the data representing the software agent further comprises data indicating an identity of an initiator of the software agent and
the instructions to determine that the executable code is authorized for execution further comprise instructions to verify that the initiator is a recognized and authorized initiator using the data indicating the identity of the initiator of the software agent.

12. The computer-readable media of claim 10 , wherein:
the data representing the software agent further comprises data indicating a cryptographic signature for configuration data of the software agent, the configuration data indicating parameters for the executable code and destination nodes for the software agent; and
the instructions to determine that the executable code is authorized for execution further comprise instructions to verify that the configuration data of the software agent has not been altered using the cryptographic signature for the configuration data.

13. The computer-readable media of claim 10 , wherein:
the data representing the software agent further comprises data indicating a cryptographic signature for mutable data of the software agent; and
the instructions to determine that the executable code is authorized for execution further comprise instructions to verify that the mutable data of the software agent has not been altered using the cryptographic signature for the mutable data.

14. The computer-readable media of claim 10 , wherein the instructions to execute the executable code comprise:
instructions to instantiate an instance of an agent execution environment; and
instructions to execute the executable code in the agent execution environment.

15. The computer-readable media of claim 10 , wherein the agent task is to update agent code for an existing agent.

16. The computer-readable media of claim 10 , wherein the instructions further comprise:
instructions to collect data from a sensor as a result of executing the executable code on the processor;
instructions to store the collected data in a mutable data container of the software agent; and
instructions to transmit the software agent, along with the collected data, to a next destination in a manner in which the mutable data container is protected from tampering during transmission.

17. A circuit comprising computing hardware configured to perform a method, the method comprising:
receiving data representing a software agent, the data including data indicating a cryptographic signature for the software agent, data indicating computing hardware resource requirements for executing the software agent, and executable code for performing an agent task;
with the circuit, determining that the executable code is authorized for execution by:
verifying that the software agent is authorized using the data indicating the cryptographic signature, and
verifying that sufficient computing resources are availab

Assignees

• Battelle Memorial Institute

Inventors

• Akyol Bora A
• Haack Jereme Nathan
• Craig Jr Philip Allen
• Tews Cody William
• Kulkarni Anand V
• Carpenter Brandon J
• Maiden Wendy M
• Ciraci Selim

Classifications

• G01R19/2513

  Arrangements for monitoring electric power systems, e.g. power lines or loads; Logging · CPC title

• H04L63/123

  received data contents, e.g. message integrity · CPC title

• H04L9/3247 Primary

  involving digital signatures · CPC title

• H04L63/08 Primary

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• Y04S40/24

  Cross-Sectional Technologies · mapped topic