In an effort to further fortify smart grid security, Sensus is incorporating encryption and key management technologies from IBM (News - Alert) into its FlexNet Advanced Metering Infrastructure (AMI) platform.

 Raleigh, North Carolina-based Sensus will integrate IBM's asymmetric encryption and enhanced key management technologies into its FlexNet communications system for electric, gas and water utility smart endpoints, including meters and distribution automation devices.

Specifically, Sensus will use IBM Tivoli Key Lifecycle Manager (TKLM) software to unify and automate the encryption key management process for all network deployments. Further, the technology integration will include NSA Suite B standards- compliant cryptographic logic from IBM in all newer generation devices.

As described by IBM, “through TLKM’s elegant user interface and built-in wizards, fewer encryption keys are required; keys are more easily, more consistently and more centrally managed; and overall data security is enhanced because storage devices are more securely administered.”

"We have to look at security as a moving target," said Matt Zafuto, Vice President of Strategic Alliances at Sensus. "In the same way that we continually update a personal computer against new viruses, we have to be constantly vigilant [about] new threats against critical infrastructures, such as utility networks."

Armonk, New York-based IBM will implement an asymmetric key-based solution using elliptic curve cryptography (ECC). In addition to the strong confidentiality and integrity of the existing encryption protocol, Sensus FlexNet customers now will get the added benefit of digital signatures and non-repudiation.

Non-repudiation protects against denial by one of the entities involved in a communication of having participated in all or part of the communication. Non-repudiation with proof of origin protects against any attempts by the sender to repudiate having sent a message, while non-repudiation with proof of delivery protects against any attempt by the recipient to deny, falsely, having received a message.

 TKLM integration also will provide a simple, user-friendly key-locker interface that will enable utilities to securely manage the encryption keys.

"Energy and utility providers are continually looking for ways to better maintain the stability and security of their existing systems so they can better service customers and maintain operational efficiency," said Doug Scheller, Global IUN Smart Metering Solution Leader, Energy and Utilities Industry, IBM. "By working with Sensus, we are able to introduce technologies such as encryption and key management into the smart grid market, to ensure the communication between smart meters and utilities is reliable, secure and uninterrupted."

The FCC-licensed wireless spectrum network and strong encryption tools currently employed by Sensus offer robust protection levels. The company also has participated in several third-party certification processes for network integrity and, in early 2011, became the first AMI vendor to achieve both Achilles Communication and Practices Certifications for overall cyber security through industrial testing and certification firm, Wurldtech Security Technologies, based in Vancouver, British Columbia, Canada.

According to Zafuto, the IBM products will ensure a much higher degree of safety from any future threats. "By combining the technological strengths of both Sensus and IBM, we can produce the level of security our customers require and help drive industry compliance with the most rigorous security standards and guidelines like the NIST IR 7628," added Zafuto.

Sensus expects to have the new IBM encryption and key management functionality available by early 2012. For more information, visit the Sensus website.