MIT Communication & Risk Management Language Workshop - Middleware Improved Technology for Interdependent Critical Infrastructures 8 February 2007, Rome Felix Flentge

IRRIIS MIT Communication Need of Communication Concepts for Communication Example Internal Processes Risk Management Language Summary

IRRIIS Distribution Systems Clients Transmission System Generators Qualified Clients IPP Trading Companies Market Operator System Operator Private Communications Network Public Communications Network Source: Antoni Diu Masferrer, Aplicaciones en Informática Avanzada, Spain Example: Dependency of Electricity on Telecommunication

IRRIIS Distribution Systems Clients Transmission System Generators Qualified Clients IPP Trading Companies Market Operator System Operator Private Communications Network Public Communications Network Source: Antoni Diu Masferrer, Aplicaciones en Informática Avanzada, Spain Example: Dependency of Electricity on Telecommunication Communication within the electric power infrastructure Even more communication ???

IRRIIS Need for Communication Recommendation #4 „Information Sharing“: Member States and the Private Sector should establish formal means for sharing information that can improve the protection and rapid restoration of infrastructure critical to the reliability of communications within and throughout Europe. Source: Study on Availability and Robustness of Electronic Communications Infrastructures  MIT Communication as bottom up approach for information sharing.

IRRIIS Need for Communication Within the same sector communication between different actors exist (e.g. UCTE information highway) Usually, between different sectors even between dependent actors no (formal) communication exists

IRRIIS First Use Cases Distribution System Operator  Qualified Client Electricity – Information about a possible outage – Negotiation about time or place Mobile or Fixed Telecommunication  Qualified Client Telecommunication – Information about a degradation of a telecommunication service ???

IRRIIS Concepts: Implementation – Service - Effect Effect Service Implement. Infrastructure  physical  cyber  human / management Products For example:  delivery of electricity  provision of communication Effects (internal)  monetary  image  …  Complex Structures  Confidential Information  Modells are available  Manageable Number  Public Information  Definitions are available  Measures / Models exist  Confidential Information  Procedures are available

IRRIIS Concepts: Implementation – Service - Effect Effect Service Implement. Infrastructure  physical  cyber  human / management Products For example:  delivery of electricity  provision of communication Effects (internal)  monetary  image  … Effect Service Implement. Infrastructure  physical  cyber  human / management Products For example:  delivery of electricity  provision of communication Effects (internal)  monetary  image  … Provision of a service Service Level Agreement Communication

IRRIIS Risk Management Language Different sectors speak different languages  Common language is needed IEC ???

IRRIIS Risk Management Language XML based Extensible, open design Independent from specific ways of communication RML service A, QoS !!!

IRRIIS Information & Negotiation Service Provider provides service A RML Service Consumer consume service A internal process risk „50% prob. of failure for A at time X and place Y“ proposal „Preference to have failure at place Z.“ accept „Proposal accepted“ Info Negotiation Info Negotiation

IRRIIS Example: DSO – Telco communication DSO Rome  Telco; ServiceInfo Service power supply, , Rome West, probability 1.0, inoperability 1.0 The DSO of Rome informs a telecommunication company of a planned outage.

IRRIIS Example: DSO – Telco communication Telco  DSO Rome; ServiceNegotiation Proposal 1, priority 1 Suggestion: Service power supply, , Rome South, inoperability 1.0 Suggestion: Service power supply, , Rome West, inoperability 0 Proposal 2, priority 2 Suggestion: Service power supply, , Rome West, inoperability 0 Suggestion: Service power supply, , Rome West, inoperability 1

IRRIIS Example: DSO – Telco communication DSO Rome  Telco; ServiceNegotiation Proposal 1 reject Proposal 2 accept The DSO accepts to change the time.

IRRIIS Example: DSO – Telco communication DSO Rome  Telco; ServiceInfo Service power supply, , Rome West, probability 1.0, inoperability 1.0 A new info message with the change time is send.

IRRIIS Generation of Info Messages

IRRIIS Generation of Negotiation Msg.

IRRIIS Responding to Negotiation Msg.

IRRIIS Distributed Risk Assesment

IRRIIS Structure of an RML Message

IRRIIS ServiceInfo Element

IRRIIS ServiceNegotiation Element

IRRIIS ServiceSubscription Element

IRRIIS TCP/IP based XML Encryption XML Signature Service-oriented Architecture for whole MIT system Technical Implementation

IRRIIS Summary (Intra-sector) communication between service provider and service consumer Risk Management Language – Information about estimated (future) QoS – Negotiation about (future) QoS – open, extensible design based on XML Integration in company internal (MIT) processes Distributed risk assessment