Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Security Vulnerabilities of Smart Electricity Meters
Schneier on Security ^ | 29 July 2010 | Bruce Schneier

Posted on 07/29/2010 10:46:03 AM PDT by Palter

"Who controls the off switch?" by Ross Anderson and Shailendra Fuloria.

Abstract: We're about to acquire a significant new cybervulnerability. The world's energy utilities are starting to install hundreds of millions of 'smart meters' which contain a remote off switch. Its main purpose is to ensure that customers who default on their payments can be switched remotely to a prepay tariff; secondary purposes include supporting interruptible tariffs and implementing rolling power cuts at times of supply shortage.

The off switch creates information security problems of a kind, and on a scale, that the energy companies have not had to face before. From the viewpoint of a cyber attacker -- whether a hostile government agency, a terrorist organisation or even a militant environmental group -- the ideal attack on a target country is to interrupt its citizens' electricity supply. This is the cyber equivalent of a nuclear strike; when electricity stops, then pretty soon everything else does too. Until now, the only plausible ways to do that involved attacks on critical generation, transmission and distribution assets, which are increasingly well defended.

Smart meters change the game. The combination of commands that will cause meters to interrupt the supply, of applets and software upgrades that run in the meters, and of cryptographic keys that are used to authenticate these commands and software changes, create a new strategic vulnerability, which we discuss in this paper.

The two have another paper on the economics of smart meters. Blog post here.


TOPICS: Foreign Affairs; Government
KEYWORDS: electricity; security; smartgrid

1 posted on 07/29/2010 10:46:06 AM PDT by Palter
[ Post Reply | Private Reply | View Replies]

To: Palter

Well, allegedy we can’t continue to keep our thermostats set at 72º. At the last rental residence I had, after smart metering was implemented, I received a notice, asking me if I would be willing to have my air conditioning shut of for 10 minutes out of every half hour, in order to ensure there wasn’t a high demand on the grid during the midday hours. It wasn’t yet mandatory, but if I committed to do so, it would cut out for ten minutes no matter what the inside temp was and that most “would only notice an increase of 2-4 degrees at most, barely noticable to the average user.”

Needless to say, I was displeased. This is unbelievable, and all made possible, through our “advanced” “smart metering.” What a joke! Wake up people, it’s coming...


2 posted on 07/29/2010 10:52:17 AM PDT by JDW11235 (I think I got it now!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Palter

Would it be possible to put a faraday cage around these commie boxes? For those who are unfamiliar with these, they are asimple metal screen that blocks ALL radio signals. Kind of like the screen on a screen door. Could easily disguised as something common around the house or build into something like a shade structure or porch roof.. Just a thought.


3 posted on 07/29/2010 11:03:21 AM PDT by ohiobuckeye1997
[ Post Reply | Private Reply | To 1 | View Replies]

To: JDW11235
Centralized control of home energy systems would likely also be counterproductive.

Take air conditioning for instance. Air-to-air air conditioning is far more efficient, when it's cooler outside, than when it's hot. It makes great sense to run the A/C at night, when it's cool, to pre-cool the house. That way, it's not necessary to run the A/C quite so much during the heat of the day — when the A/C is inefficient, and electricity demand is peaking.

If you were prohibited from cooling your house, beyond some arbitrary point, then you would actually be forced to use a less efficient solution.

4 posted on 07/29/2010 11:05:20 AM PDT by USFRIENDINVICTORIA
[ Post Reply | Private Reply | To 2 | View Replies]

To: Palter
So now we'll have to get these SMART meters so the government can shut off our power whenever they see fit. How much you want to bet that this won't apply to the "ruling class". Do you think Gore's mansion will be subject to rolling blackouts?

I feel bad for the poor senior citizen who can't take the heat or cold during these "power interruptions".

5 posted on 07/29/2010 11:13:16 AM PDT by YankeeReb
[ Post Reply | Private Reply | To 1 | View Replies]

To: Palter

Security on networked systems is always something that demands attention and good controls. I’m not sure it presents much of an increased risk here, though, as an attacker can still kill your power the old fashioned way... by cutting the wire.

One thing I really like about the new meters (I just got one) is that the power utility company can see outages in real time, and they can tell quickly and exactly who still has their power out.


6 posted on 07/29/2010 11:18:32 AM PDT by Ramius (Personally, I give us... one chance in three. More tea?)
[ Post Reply | Private Reply | To 1 | View Replies]

To: YankeeReb
So now we'll have to get these SMART meters so the government can shut off our power whenever they see fit.

They've always been able to do that.

7 posted on 07/29/2010 11:20:33 AM PDT by Ramius (Personally, I give us... one chance in three. More tea?)
[ Post Reply | Private Reply | To 5 | View Replies]

To: YankeeReb
So now we'll have to get these SMART meters so the government can shut off our power whenever they see fit.

Like if you're a registered republican.
8 posted on 07/29/2010 11:47:11 AM PDT by crosshairs (Celebrate diversity. Own a variety of firearms.)
[ Post Reply | Private Reply | To 5 | View Replies]

To: ohiobuckeye1997

Nope, a faraday screen would be useless,because the control signals arrive via the power line itself.Any conductor can simultaneously carry signals at many frequencies.Your AC power is simply a very strong 60hz signal and the control data is likely on a 130-160 khz signal.


9 posted on 07/29/2010 11:47:42 AM PDT by hoosierham (Waddaya mean Freedom isn't free ?;will you take a credit card?)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Ramius

One thing I really like about the new meters (I just got one) is that the power utility company can see outages in real time, and they can tell quickly and exactly who still has their power out.”

I now live in N Nevada.

i have lived in the past with DWP in Los Angeles & P G & E in N Calif.

Power outages in those places resulted in long & ineffective calls to the power company.

Here, in N Nevada, I have NV ENERGY.

They have, without a single doubt, the absolute best call in, button pushing, system of reporting any kind of power problem I have ever experienced.

Never get dropped in the middle of a call.

Never get into a ‘loop’.

Never fails to call me back automatically when the power is restored.

Had an outage here 2 days ago- called in & this time actually got a live person.

Outage was over a mile in each direction. Did not find out the cause, but they are always polite & on top of things.

NV ENERGY has the ONLY automated call center I have ever encountered that I have never had a problem with.


10 posted on 07/29/2010 11:50:48 AM PDT by ridesthemiles
[ Post Reply | Private Reply | To 6 | View Replies]

To: Ramius
Previously,shutting off the power was a lot more difficult and dangerous ,especially just shutting off one home or business.At the simplest ,it needed a trained man with a big fiberglass pole and hook to reach up and phyically move the line fuse.

Now any person who gains access to the utilty computer can shut off the power while remaing safely hidden miles away.

The control freaks and statists tell us of other reasons for everything they do but i am VERY suspicious of these meters,the huge concrete "noise abatement" walls that restrict egress from the highways,the crowd control heat and ultrasonic devices,etc.

The water in the cookpot is getting very warm but the frogs are just relaxing ,thinking it is a sauna.

11 posted on 07/29/2010 11:55:53 AM PDT by hoosierham (Waddaya mean Freedom isn't free ?;will you take a credit card?)
[ Post Reply | Private Reply | To 7 | View Replies]

To: YankeeReb
Our bills just went up to cover the cost of these new smart,energy-saving meters!!!!

The only way these things can save energy is by limiting the customers' use.

Just wait until the smart WATER meters that monitor how many showers,baths,and toilet flushings occur in your home!!!!

These system "improvements" are much more about controlling the people than saving money.

12 posted on 07/29/2010 12:01:20 PM PDT by hoosierham (Waddaya mean Freedom isn't free ?;will you take a credit card?)
[ Post Reply | Private Reply | To 5 | View Replies]

To: hoosierham

They’re going to herd us down the highways?


13 posted on 07/29/2010 12:35:52 PM PDT by Ramius (Personally, I give us... one chance in three. More tea?)
[ Post Reply | Private Reply | To 11 | View Replies]

To: hoosierham
As an engineer at the largest utility-meter manufacturing company in the world, I can tell you a couple of things about this:


14 posted on 07/29/2010 12:43:09 PM PDT by backwoods-engineer (There is no "common good" which minimizes or sacrifices the individual. --Walter Scott Hudson)
[ Post Reply | Private Reply | To 12 | View Replies]

To: YankeeReb

There will be many exemptions and exclusions for having your power turned off. Ultimately only you and I will be the only two people that have our power shut off.

But that is OK for me becuase I just bought a 37KW generator. I’m good. Don’t worry about me.


15 posted on 07/29/2010 1:06:27 PM PDT by super7man
[ Post Reply | Private Reply | To 5 | View Replies]

To: backwoods-engineer
The water company may not care but the radical enviromentalists DO!

If and when they get the power,everyone's "use of scarce resources" will be tightly controlled;well, everyone but the special peoples'.

And the resources are scarce because the "greenies" won't allow sufficient drilling,refining,storage,nuclear plants,etc.,etc.

16 posted on 07/29/2010 2:56:04 PM PDT by hoosierham (Waddaya mean Freedom isn't free ?;will you take a credit card?)
[ Post Reply | Private Reply | To 14 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson