1. ZigBee Based Smart Meter Networks Aniqua Z. Baset CSCE 813 Internet Security, Spring 2014

2. Smart meter ▪ Automated reading ▪ Appliance specific usage ▪ Near real-time Electricity Meters 2 Conventional ▪ Manual reading ▪ Total usage AMR ▪ Automated reading ▪ Total usage

3. Why Smart Meters? Appliance specific real-time usage data Energy consumption adjust Renewable energy usage monitoring Two way communication Pricing notification Load control Power quality monitoring 3

4. Smart Meter Adoption in US 4 Number of entities reported: 81 Updated on April 1, 2014 Source: Smart Grid Investment Grant (SGIG)

5. Smart Meter Market Forecast 5 Source: Navigant Research

6. Smart Meter Hacks Reprogram through infrared ports – Widespread incidents of power thefts in Puerto Rico – laptop, an optical converter device and a free downloadable program from internet – According to FBI, former employees of the meter manufacturer and employees of the utility company were involved Termineter – An open source hacking tool by researchers Need physical access Wireless??? 6

7. Smart Meter Network 7

8. ZigBee: The Wireless Technology for Smart Meters 8 Global standard for control and sensor networks Based on IEEE 802.15.4 standard Low cost, low data rate, low power Wireless Personal Area Networks and device-to-device networks Mesh network, up to 216 nodes Maintained by ZigBee Alliance Got it name from Honeybees!

9. 9 ZigBee vs. Other Wireless Technologies

10. ZigBee Protocol Stack 10

11. ZigBee Applications 11

12. ZigBee Smart Energy Profile Defines commands and attributes for smart meters, home energy display devices, smart appliances and load control devices Supports for – Network join, re-join, leave – Key establishment – Pricing – Demand response and load control – Metering – Messaging – Time synchronization Versions 1.0, 1.1, 2, widely used 1.1 12

13. ZigBee Smart Energy Home Area Network 13 Smart Energy Device Every SED shares a pre- configured trust center link key with ESI Network operations are carried out using network key Every device in the network establishes a pairwise link key with other devices

14. Current Work Goal: – A formal protocol analysis using automated tool Analyzed – Network join and key establishment Tool used – AVISPA (Automated Validation of Internet Security Protocols and Applications) – HLPSL (High Level Protocol Specification Language) 14

15. Network Join role sed(S,E:agent, Ktcl:symmetric_key, JoinReq:protocol_id, SND,RCV:channel(dy)) played_by S def= local State:nat, Knwk:symmetric_key init State := 0 transition 1. State = 0 /\ RCV(start) =|> State':= 2 /\ SND({S.JoinReq}_Ktcl) 2. State = 2 /\ RCV({Knwk'}_Ktcl) =|> State':= 4 end role role esi(E:agent, Knwk,Ktcl:symmetric_key, JoinReq:protocol_id, SND,RCV:channel(dy)) played_by E def= local State:nat,S:agent init State := 1 transition 1. State = 1 /\ RCV({S'.JoinReq}_Ktcl) =|> State':= 3 /\ SND({Knwk}_Ktcl) /\ secret(Knwk,network_key,{S,E}) end role 15

16. Key Establishment 16

17. Key Establishment: AVISPA Attack Trace 17

18. Future Work Practicality analysis of attack found by AVISPA AVISPA is not so expressive, analysis using other tool Analysis of other processes from ZigBee Smart Energy Profile 18

19. Any Question ?? 19

20. References NaturalNews. " How privacy-conscious consumers are fooling, hacking smart meters.".url:http://www.naturalnews.com/036476_smart_meters_hacking_privacy.html#ix zz2zg3XEyL2url:http://www.naturalnews.com/036476_smart_meters_hacking_privacy.html#ix zz2zg3XEyL2 ZigBee Alliance. "ZigBee Smart Energy Profile Specification". Revision 16 Kinney, Patrick. "Zigbee technology: Wireless control that simply works." Communications design conference. Vol. 2. 2003. ZigBee Alliance. URL: https://www.zigbee.org/https://www.zigbee.org/ ZigBee Alliance. "ZigBee Specification". http://www.zigbee.org/Specifications/ZigBee/Overview.aspx http://www.zigbee.org/Specifications/ZigBee/Overview.aspx ZigBee Alliance. "ZigBee Smart Energy Overview. " http://www.zigbee.org/Standards/ZigBeeSmartEnergy/Overview.aspx http://www.zigbee.org/Standards/ZigBeeSmartEnergy/Overview.aspx The AVISPA project. URL: http://www.avispa-project.org/http://www.avispa-project.org/ AVISPA, Team. "AVISPA v1. 1 User manual." (2006) 20

21. Image References Smart meter adoption in US. URL: https://www.smartgrid.gov/recovery_act/deployment_status/ami_and_customer_ systems https://www.smartgrid.gov/recovery_act/deployment_status/ami_and_customer_ systems Smart meter market forecast. URL: http://www.energymanagertoday.com/assets/smart-meter-market- penetration.jpg http://www.energymanagertoday.com/assets/smart-meter-market- penetration.jpg ZigBee vs. other wireless technologies. URL: http://www.iebmedia.com/images/art_images/ieb34wirelessnet4.gif http://www.iebmedia.com/images/art_images/ieb34wirelessnet4.gif ZigBee protocol stack. URL: http://www.sanjuansw.com/?p=31http://www.sanjuansw.com/?p=31 21