Method and apparatus for encryption/authentication of data in energy metering applications

Claim 3

A method in accordance with claim 1 further comprising the step of generating an authentication field using checksum bytes derived from the cipher text.

Claim 4

A method in accordance with claim 1 wherein one byte of cipher text is generated for each byte of message text.

Claim 5

A method in accordance with claim 1 wherein cipher text is communicated between components of a utility communications network.

Claim 6

A method in accordance with claim 1 wherein the round process comprises the steps of: (a) setting a new Frame Byte 1 to Frame Byte 3 EXCLUSIVE-ORed with the original value of Frame Byte 1, and setting the new Frame Byte 2 to Frame Byte 4 EXCLUSIVE-ORed with the original value of Frame Byte 2; (b) EXCLUSIVE-ORing Frame Byte 2 with the next byte of the security key, incrementing a security key index, EXCLUSIVE-ORing Frame Byte 1 with the next byte of security code, and incrementing the security key index; (c) setting Frame Byte 2 to a value determined using the value of Frame Byte 2 as an index, and setting Frame Byte 1 to the value resulting from using the value of Frame Byte 1 as an index; (d) EXCLUSIVE-ORing Frame Byte 2 with the most significant byte of the frame counter, and EXCLUSIVE-ORing Frame Byte 1 with the least significant byte of the frame counter; (e) EXCLUSIVE-ORing Frame Byte 2 with the original value of Frame Byte 4 and EXCLUSIVE-ORing Frame Byte 1 with the original value of Frame Byte 3: and (f) using Frame Bytes 2 and 1 as a single 16 bit value, with Frame Byte 2 being the most significant byte, the 16 bit value being shifted right once, with the least significant bit becoming the most significant bit, and the constant, 5EFC Hex, being added thereto, the new Frame Byte 4 being set to the most significant byte of resulting 16 bit value, and the new Frame Byte 3 being set to the least significant byte of the resulting 16 bit value, and incrementing the round number.

Claim 7

A method in accordance with claim 1 wherein the initialization vector is based on the message time and date.

Claim 8

A method in accordance with claim 1 wherein the initialization vector is based on a four byte sequence.

Claim 11

A method in accordance with claim 8 wherein the cipher text is generated from the message text utilizing an add and shift operation.

Claim 12

A method in accordance with claim 8, wherein the round process comprises the steps of: (a) setting a new Frame Byte 1 to Frame Byte 3 EXCLUSIVE-ORed with the original value of Frame Byte 1, and setting the new Frame Byte 2 to Frame Byte 4 EXCLUSIVE-ORed with the original value of Frame Byte 2; (b) EXCLUSIVE-ORing Frame Byte 2 with the next byte of the security key, incrementing a security key index, EXCLUSIVE-ORing Frame Byte 1 with the next byte of security code, and incrementing the security key index; (c) setting Frame Byte 2 to a value determined using the value of Frame Byte 2 as an index, and setting Frame Byte 1 to the value resulting from using the value of Frame Byte 1 as an index; (d) EXCLUSIVE-ORing Frame Byte 2 with the most significant byte of the frame counter, and EXCLUSIVE-ORing Frame Byte 1 with the least significant byte of the frame counter; (e) EXCLUSIVE-ORing Frame Byte 2 with the original value of Frame Byte 4 and EXCLUSIVE-ORing Frame Byte 1 with the original value of Frame Byte 3; and (f) using Frame Bytes 2 and 1 as a single 16 bit value, with Frame Byte 2 being the most significant byte, the 16 bit value being shifted right once, with the least significant bit becoming the most significant bit, and the constant, 5EFC Hex, being added thereto, the new Frame Byte 4 being set to the most significant byte of resulting 16 bit value, and the new Frame Byte 3 being set to the least significant byte of the resulting 16 bit value, and incrementing the round number.

Claim 13

Apparatus, comprising: computing means; means for inputting information to said computing means; memory means coupled to said computing means; and wherein said computing means is controlled to perform the steps of: generating an authentication field for message bytes using checksum bytes derived from cipher text of the message bytes, generating cipher text from message text comprising the steps of: (a) generating an initialization vector; (b) forming a frame from the initialization vector; (c) providing the frame as input for the round process; (d) generating a key byte from the round process; (e) generating cipher text from the key byte; (f) if cipher text has not been generated for each byte of message text, forming a next frame for processing utilizing the cipher text generated in step (e) and returning to step (e); and transmitting the authentication field with the message bytes.

Claim 14

Apparatus, comprising: computing means; means for inputting information to said computing means; memory means coupled to said computing means; and wherein said computing means is controlled to perform the steps of: generating an authentication field for message bytes using checksum bytes derived from cipher text of the message bytes, generating cipher text from message text comprising the steps of: (a) generating an initialization vector; (b) forming a frame from the initialization vector; (c) providing the frame as input for the round process; (d) generating a key byte from the round process; (e) generating cipher text from the key byte; (f) if cipher text has not been generated for each byte of message text, forming a next frame for processing utilizing the cipher text generated in step (e) and returning to step (e); and transmitting the authentication field with the message bytes.

Claim 15

Apparatus in accordance with claim 11 wherein said computing means generates the cipher text from the message text utilizing an add and shift operation.

Claim 16

Apparatus in accordance with claim 11 wherein said computing means, for the round process, is programmed to perform the steps of: (a) setting a new Frame Byte 1, and setting the new Frame Byte 2 to Frame Byte 4 EXCLUSIVE-ORed with the original value of Frame Byte 2; (b) EXCLUSIVE-ORing Frame Byte 2 with the next byte of the security key, incrementing a security key index, EXCLUSIVE-ORing Frame Byte 1 with the next byte of security code, and incrementing the security key index; (c) setting Frame Byte 2 to a value determined using the value of Frame Byte 2 as an index, and setting Frame Byte 1 to the value resulting from using the value of Frame Byte 1 as an index; (d) EXCLUSIVE-ORing Frame Byte 2 with the most significant byte of the frame counter, and EXCLUSIVE-ORing Frame Byte 1 with the least significant byte of the frame counter; (e) EXCLUSIVE-ORing Frame Byte 2 with the original value of Frame Byte 4 and EXCLUSIVE-ORing Frame Byte 1 with the original value of Frame Byte 3; and (f) using Frame Bytes 2 and 1 as a single 16 bit value, with Frame Byte 2 being the most significant byte, the 16 bit value being shifted right once, with the least significant bit becoming the most significant bit, and the constant, 5EFC Hex, being added thereto, the new Frame Byte 4 being set to the most significant byte of resulting 16 bit value, and the new Frame Byte 3 being set to the least significant byte of the resulting 16 bit value, and incrementing the round number.

Claim 19

A method in accordance with claim 14 further comprising the steps of: generating cipher text from message text utilizing an add and shift operation; replacing at least one bit of the message text with one bit of cipher text; and transmitting the cipher text and the authentication field.

Claim 20

A method in accordance with claim 15 wherein the authentication field is generated using checksum bytes derived from the cipher text.

Claim 21

A method in accordance with claim 15 wherein one byte of cipher text is generated for each byte of message text.

Claim 22

A method in accordance with claim 15 wherein the message includes plain text and cipher text.

Claim 23

A method in accordance with claim 15 wherein each bit of plain text is replaced with cipher text.

Claim 24

Energy meter means, comprising: metering means for measuring energy consumed by an end-user and supplied from a power delivery system; computing means; means for transmitting information to a device external said energy meter means, said transmitting means being coupled to said computing means; memory means coupled to said computing means; and wherein said computing means is controlled to perform the steps of: generating an authentication field for message bytes using checksum bytes derived from cipher text of the message bytes, generating cipher text from message text comprising the steps of: (a) generating an initialization vector; (b) forming a frame from the initialization vector; (c) providing the frame as input for a round process; (d) generating a key byte from the round process; (e) generating cipher text from the key byte; (f) if cipher text has not been generated for each byte of message text, forming a next frame for processing utilizing the cipher text generated in step (e) and returning to step (e); and providing, to said transmitting means, the authentication field with the message bytes.

Claim 25

Energy meter means, comprising: metering means for measuring energy consumed by an end-user and supplied from a power delivery system; computing means; means for transmitting information to a device external said energy meter means, said transmitting means being coupled to said computing means; memory means coupled to said computing means; and wherein said computing means is controlled to perform the steps of: generating an authentication field for message bytes using checksum bytes derived from cipher text of the message bytes, generating cipher text from message text comprising the steps of: (a) generating an initialization vector; (b) forming a frame from the initialization vector; (c) providing the frame as input for a round process; (d) generating a key byte from the round process; (e) generating cipher text from the key byte; (f) if cipher text has not been generated for each byte of message text, forming a next frame for processing utilizing the cipher text generated in step (e) and returning to step (e); and providing, to said transmitting means, the authentication field with the message bytes.

Claim 26

Energy meter means in accordance with claim 20 wherein said computing means generates the cipher text from the message text utilizing an add and shift operation.

Claim 27

Energy meter means in accordance with claim 20 wherein said computing means, for the round process, is programmed to perform the step of: (a) setting a new Frame Byte 1 to Frame Byte 3 EXCLUSIVE-ORed with the original value of Frame Byte 1, and setting the new Frame Byte 2 to Frame Byte 4 EXCLUSIVE-ORed with the original value of Frame Byte 2; (b) EXCLUSIVE-ORing Frame Byte 2 with the next byte of the security key, incrementing a security key index, EXCLUSIVE-ORing Frame Byte 1 with the next byte of security code, and incrementing the security key index; (c) setting Frame Byte 2 to a value determined using the value of Frame Byte 2 as an index, and setting Frame Byte 1 to the value resulting from using the value of Frame Byte 1 as an index; (d) EXCLUSIVE-ORing Frame Byte 2 with the most significant byte of the frame counter, and EXCLUSIVE-ORing Frame Byte 1 with the least significant byte of the frame counter; (e) EXCLUSIVE-ORing Frame Byte 2 with the original value of Frame Byte 4 and EXCLUSIVE-ORing Frame Byte 1 with the original value of Frame Byte 3; and (f) using Frame Bytes 2 and 1 as a single 16 bit value, with Frame Byte 2 being the most significant byte, the 16 bit value being shifted right once, with the least significant bit becoming the most significant bit, and the constant, 5EFC Hex, being added thereto, the new Frame Byte 4 being set to the most significant byte of resulting 16 bit value, and the new Frame Byte 3 being set to the least significant byte of the resulting 16 bit value, and incrementing the round number.

Claim 28

Energy meter means in accordance with claim 20 wherein said transmitting means is coupled to a power line of the power delivery system and wherein information is transmitted on the power line from said meter means to the external device.

Claim 29

Energy meter means in accordance with claim 20 wherein said transmitting means comprises a radio transmitter.

Claim 32

A system in accordance with claim 25 wherein said first and second computing means generate the cipher text from the message text utilizing an add and shift operation.

Claim 33

A system in accordance with claim 25 wherein said computing means, for the round process, is programmed to perform the steps of: (a) setting a new Frame Byte 1 to Frame Byte 3 EXCLUSIVE-ORed with the original value of Frame Byte 1, and setting the new Frame Byte 2 to Frame Byte 4 EXCLUSIVE-ORed with the original value of Frame Bye 2; (b) EXCLUSIVE-ORing Frame Byte 2 with the next byte of the security key, incrementing a security key index, EXCLUSIVE-ORing Frame Byte 1 with the next byte of security code, and incrementing the security key index; (c) setting Frame Byte 2 to a value determined using the value of Frame Byte 2 as an index, and setting Frame Byte 1 to the value resulting from using the value of Frame Byte 1 as an index; (d) EXCLUSIVE-ORing Frame Byte 2 with the most significant byte of the frame counter, and EXCLUSIVE-ORing Frame Byte 1 with the least significant byte of the frame counter; (e) EXCLUSIVE-ORing Frame Byte 2 with the original value of Frame Byte 4 and EXCLUSIVE-ORing Frame Byte 1 with the original value of Frame Byte 3; and (f) using Frame Bytes 2 and 1 as a single 16 bit value, with Frame Byte 2 being the most significant byte, the 16 bit value being shifted right once, with the least significant bit becoming the most significant bit, and the constant, 5EFC Hex, being added thereto, the new Frame Byte 4 being set to the most significant byte of resulting 16 bit value, and the new Frame Byte 3 being set to the least significant byte of the resulting 16 bit value, and incrementing the round number.

Claim 34

A system in accordance with claim 25 wherein said first and second receiving/transmitting means comprise first and second radio transceivers.

Claim 35

A system in accordance with claim 25 further comprising intermediate control means for transforming radio transmitted information to a form compatible for communications on a power line and for transforming information transmitted on a power line to a form compatible for radio communications, and wherein said first receiving/transmitting means comprising a radio transceiver and said second receiving/transmitting means is coupled to a power line of the power delivery system.

Claim 36

Energy meter means, comprising: metering means for measuring energy consumed by an end-user and supplied from a power delivery system; computing means; means for receiving information from a device external said energy meter means, said receiving means being coupled to said computing means; memory means coupled to said computing means; and wherein said computing means is controlled to perform the step of generating message text from cipher text by performing the steps of: (a) generating an initialization vector; (b) forming a frame from the initialization vector; (c) providing the frame as input for a round process; (d) generating a key byte from the round process; (e) generating message text from the key byte; (f) if message text has not been generated for each byte of cipher text, forming a next frame for processing utilizing the message text generated in step (e) and returning to step (e).

Claim 37

Energy meter means, comprising: metering means for measuring energy consumed by an end-user and supplied from a power delivery system; computing means; means for receiving information from a device external said energy meter means, said receiving means being coupled to said computing means; memory means coupled to said computing means; and wherein said computing means is controlled to perform the step of generating message text from cipher text by performing the steps of: (a) generating an initialization vector; (b) forming a frame from the initialization vector; (c) providing the frame as input for a round process; (d) generating a key byte from the round process; (e) generating message text from the key byte; (f) if message text has not been generated for each byte of cipher text, forming a next frame for processing utilizing the message text generated in step (e) and returning to step (e).

Claim 38

Energy meter means in accordance with claim 30 wherein said computing means, for the round process, is programmed to perform the steps of: (a) setting a new Frame Byte 1 to Frame Byte 3 EXCLUSIVE-ORed with the original value of Frame Byte 1, and setting the new Frame Byte 2 to Frame Byte 4 EXCLUSIVE-ORed with the original value of Frame Byte 2; (b) EXCLUSIVE-ORing Frame Byte 2 with the next byte of the security key, incrementing a security key index, EXCLUSIVE-ORing Frame Byte 1 with the next byte of security code, and incrementing the security key index; (c) setting Frame Byte 2 to a value determined using the value of Frame Byte 2 as an index, and setting Frame Byte 1 to the value resulting from using the value of Frame Byte 1 as an index; (d) EXCLUSIVE-ORing Frame Byte 2 with the most significant byte of the frame counter, and EXCLUSIVE-ORing Frame Byte 1 with the least significant byte of the frame counter; (e) EXCLUSIVE-ORing Frame Byte 2 with the original value of Frame Byte 4 and EXCLUSIVE-ORing Frame Byte 1 with the original value of Frame Byte 3; and (f) using Frame Bytes 2 and 1 as a single 16 bit value, with Frame Byte 2 being the most significant byte, the 16 bit value being shifted right once, with the least significant bit becoming the most significant bit, and the constant, 5EFC Hex, being added thereto, the new Frame Byte 4 being set to the most significant byte of resulting 16 bit value, and the new Frame Byte 3 being set to the least significant byte of the resulting 16 bit value, and incrementing the round number.

Claim 39

Energy meter means in accordance with claim 30 wherein said receiving means is coupled to a power line of the power delivery system and wherein information is received on the power line from the external device.

Claim 40

Energy meter means in accordance with claim 30 wherein said receiving means comprises a radio receiver.

Claim 41

Energy meter means in accordance with claim 30 wherein said receiving means is coupled to a telephone line and wherein information is received on the telephone line from the external device.

Claim 42

Receiver means, comprising: computing means; means for receiving information from a device external said energy meter means, said receiving means being coupled to said computing means; memory means coupled to said computing means; and wherein said computing means is controlled to perform the step of generating message text from cipher text by performing the steps of: (a) generating an initialization vector; (b) forming a frame from the initialization vector; (c) providing the frame as input for a round process; (d) generating a key byte from the round process; (e) generating message text from the key byte; (f) if message text has not been generated for each byte of cipher text, forming a next frame for processing utilizing the message text generated in step (e) and returning to step (e).

Claim 43

Receiver means, comprising: computing means; means for receiving information from a device external said energy meter means, said receiving means being coupled to said computing means; memory means coupled to said computing means; and wherein said computing means is controlled to perform the step of generating message text from cipher text by performing the steps of: (a) generating an initialization vector; (b) forming a frame from the initialization vector; (c) providing the frame as input for a round process; (d) generating a key byte from the round process; (e) generating message text from the key byte; (f) if message text has not been generated for each byte of cipher text, forming a next frame for processing utilizing the message text generated in step (e) and returning to step (e).

Claim 44

Receiver means in accordance with claim 35 wherein said computing means, for the round process, is programmed to perform the steps of: (a) setting a new Frame Byte 1 to Frame Byte 3 EXCLUSIVE-ORed with the original value of Frame Byte 1, and setting the new Frame Byte 2 to Frame Byte 4 EXCLUSIVE-ORed with the original value of Frame Byte 2; (b) EXCLUSIVE-ORing Frame Byte 2 with the next byte of the security key, incrementing a security key index, EXCLUSIVE-ORing Frame Byte 1 with the next byte of security code, and incrementing the security key index; (c) setting Frame Byte 2 to a value determined using the value of Frame Byte 2 as an index, and setting Frame Byte 1 to the value resulting from using the value of Frame Byte 1 as an index; (d) EXCLUSIVE-ORing Frame Byte 2 with the most significant byte of the frame counter, and EXCLUSIVE-ORing Frame Byte 1 with the least significant byte of the frame counter; (e) EXCLUSIVE-ORing Frame Byte 2 with the original value of Frame Byte 4 and EXCLUSIVE-ORing Frame Byte 1 with the original value of Frame Byte 3; and (f) using Frame Bytes 2 and 1 as a single 16 bit value, with Frame Byte 2 being the most significant byte, the 16 bit value being shifted right once, with the least significant bit becoming the most significant bit, and the constant, 5EFC Hex, being added thereto, the new Frame Byte 4 being set to the most significant byte of resulting 16 bit value, and the new Frame Byte 3 being set to the least significant byte of the resulting 16 bit value, and incrementing the round number.

Claim 45

Receiver means in accordance with claim 35 wherein said receiving means is coupled to a power line of the power delivery system and wherein information is received on the power line from the external device.

Claim 46

Receiver means in accordance with claim 35 wherein said receiving means comprises a radio receiver.

Claim 47

Receiver means in accordance with claim 35 wherein said receiving means is coupled to a telephone line and wherein information is received on the telephone line from the external device.

Claim 48

Receiver means in accordance with claim 35 wherein said receiving means comprises optical communication means.