Electric energy systems are undergoing significant changes to improve system reliability and accommodate increasing power demands. The penetration of distributed energy resources (DERs) including roof-top solar panels, energy storage, electric vehicles, etc., enables the on-site generation of economically dispatchable power curtailing operational costs. The effective control of DERs requires communication between utilities and DER system operators. The communication protocols employed for DER management and control lack sophisticated cybersecurity features and can compromise power systems secure operation if malicious control commands are issued to DERs. To overcome authentication-related protocol issues, we present a bolt-on security extension that can be implemented on Distributed Network Protocol v3 (DNP3). We port an authentication framework, DERauth, into DNP3, and utilize real-time measurements from a simulated DER battery energy storage system to enhance communication security. We evaluate our framework in a testbed setup using DNP3 master and outstation devices performing secure authentication by leveraging the entropy of DERs.

中文翻译：

---

利用 DER 的力量在电能系统中实现安全通信

电能系统正在经历重大变革，以提高系统可靠性并适应不断增长的电力需求。分布式能源 (DER) 的渗透，包括屋顶太阳能电池板、储能、电动汽车等，使得现场发电经济地可调度电力成为可能，从而降低运营成本。DER 的有效控制需要公用事业和 DER 系统运营商之间的沟通。用于 DER 管理和控制的通信协议缺乏复杂的网络安全功能，如果向 DER 发出恶意控制命令，可能会危及电力系统的安全运行。为了克服与身份验证相关的协议问题，我们提出了一个可以在分布式网络协议 v3 (DNP3) 上实现的附加安全扩展。我们移植了一个身份验证框架，DERauth，进入 DNP3，并利用来自模拟 DER 电池储能系统的实时测量来增强通信安全性。我们使用 DNP3 主站和外站设备在测试台设置中评估我们的框架，这些设备通过利用 DER 的熵来执行安全身份验证。