PrivacyPreserving Smart Metering George Danezis 1 and Alfredo

Privacy-Preserving Smart Metering George Danezis 1 and Alfredo Rial 1, 2 1 Microsoft Research Cambridge 2 KULeuven ESAT/SCD/COSIC – IBBT, Belgium WPES 17 / 10 / 2011 K. U. Leuven Privacy-preserving Smart Metering 17 October 2011

Index • Introduction to smart metering and privacy • System Model • Our Protocol o Construction o Implementation • Conclusion Privacy-preserving Smart Metering 17 October 2011 2

1 – INTRODUCTION http: //overview. ge-energy. com/energyservices/index. jsp Privacy-preserving Smart Metering 17 October 2011 3

Smart Grid Power generation Industrial Customers Power transmission Power distribution Commercial Customers New communication channels! Electricity trasmission Residential Customers Data communication Privacy-preserving Smart Metering 17 October 2011 4

Smart Meter • Reports fine-grained consumption data • Receives commands: switch-off, change to prepaid mode, etc. • Interaction via a user-friendly interface http: //legalplanet. wordpress. com/2010/08/20/smart-meters-and-smart-regulation/ http: //www. treehugger. com/files/2010/07/ Privacy-preserving Smart Metering 17 October 2011 5

ADVANTAGES • Efficient Delivery • Prevention of Outages • Self-healing grid http: //www. fresnobee. com/2010/02/26/1838492/editorial-cartoon-pges-smart-meters. html Privacy-preserving Smart Metering 17 October 2011 6

ADVANTAGES http: //www. boost-energy. com/boost/davidblog. html Privacy-preserving Smart Metering 17 October 2011 7

ADVANTAGES ELECTRICITY SAVING VIA MATCHING GENERATION AND DEMAND http: //blog. news-record. com/opinion/letters/archives/2007/10/cartoon_took_cheap_shot_at_ove. shtml Privacy-preserving Smart Metering 17 October 2011 8

ADVANTAGES HELP USERS SAVE ENERGY http: //www. greenbang. com/jurdy-hair-raising-energy-consumption_14998. html Privacy-preserving Smart Metering 17 October 2011 9

DEPLOYMENT • USA: Energy Independence and Security Act of 2007 o American Recovery and Reinvestment Act (2009, $4. 5 bn) • EU: Directive 2009/72/EC • UK: deployment of 47 million smart meters by 2020 http: //www. ci. royal-oak. mi. us/portal/book/export/html/1751 http: //www. treehugger. com/files/2010/05/obama-finally-starts-talking-clean-energy-wake-gulf-spill. php Privacy-preserving Smart Metering 17 October 2011 10

2 - PRIVACY THREATS http: //turn. org/article. php? id=875 Privacy-preserving Smart Metering 17 October 2011 11

Fine-Grained Consumption Data Privacy-preserving Smart Metering 17 October 2011 12

Privacy Concerns Personal Information can be inferred: • When you are at home • Which appliances you use • When you eat • Whether you arrive late to work http: //www. zazzle. co. uk/obamas_smart_metre_is_communism_tshirt-235996664492570554 Privacy-preserving Smart Metering 17 October 2011 13

Privacy Concerns http: //forcechange. com/2009/02/10/google-jumps-into -the-smart-meter-industry-and-debate/ Privacy-preserving Smart Metering 17 October 2011 14

Social Pressure http: //www. indybay. org/newsitems/2010/08/26/18656872. php Privacy-preserving Smart Metering 17 October 2011 15

Consequences “The Dutch First Chamber considers the mandatory nature of smart metering as an unacceptable infringement of citizens’ privacy and security” http: //turn. org/article. php? id=1154 Privacy-preserving Smart Metering 17 October 2011 16

3 – SYSTEM MODEL http: //antennagroup. com/transmissions/tag/conferences/ Privacy-preserving Smart Metering 17 October 2011 17

ENTITIES Provider (P) User (U) Meter (M) http: //www. daylife. com/photo/04 SSd 1 bg. HS 0 Tp http: //news. bbc. co. uk/2/hi/8042716. stm Privacy-preserving Smart Metering 17 October 2011 18

SECURITY REQUIREMENTS • P is assured that U reports correct fee http: //www. inkity. com/catalog/product/ 2/2077/Shaking-On-Money-Deal. html • P does not learn (cons, other) http: //apcit. blogspot. com/ • P cannot claim U must pay fee’ http: //www. billboardmama. com/recor ding-connection-scam-p-1017. html Privacy-preserving Smart Metering 17 October 2011 19

ASSUMPTIONS • M should be tamper-resistant http: //www. smartplanet. com/business/blog/smarttakes/report-smart-meters-have-security-holes-thatcould-allow-hackers-access-to-grid/5532/ • No direct uplink from M to P http: //trac. cyberduck. ch/wiki/help/en/howto/googledocs Privacy-preserving Smart Metering 17 October 2011 20

4 – Our Protocol M, U, P interact in five phases: • Setup & Initialization • Consumption Phase • Payment Phase • Policies http: //www. imetertechnology. com/ Privacy-preserving Smart Metering 17 October 2011 21

Setup Phase Privacy-preserving Smart Metering 17 October 2011 22

Initialization Phase Privacy-preserving Smart Metering 17 October 2011 23

Consumption Phase Privacy-preserving Smart Metering 17 October 2011 24

Payment Phase (I) Privacy-preserving Smart Metering 17 October 2011 25

Payment Phase (II) Privacy-preserving Smart Metering 17 October 2011 26

Pricing Policies Linear Policy Price Discrete Policy Consumption Privacy-preserving Smart Metering 17 October 2011 27

Pricing Policies Cumulative Policy Price/Consuption Interval Policy Consumption Privacy-preserving Smart Metering 17 October 2011 28

Price Pricing Policies Consumption Privacy-preserving Smart Metering 17 October 2011 29

Remarks • Privacy-preserving Smart Metering 17 October 2011 30

Advantages http: //www. frikipedia. es/friki/An%C 3%B 3 nimo • It does not require anonymous channels or anonymized databases • It does not require interaction among users • Minimises Trusted Computing Base • It does not require trusted parties • It is efficient enough for practical applications • It supports a wide variety of pricing policies • It permits selective disclosure of private data Privacy-preserving Smart Metering 17 October 2011 31

Evaluation 32 Bit 64 Bit Full-fledged Construction Efficient Construction Consumption Phase 31. 4/s 171. 209/s Compute Payment 1. 5/s 26780. 6/s 20. 1444/s 298295/s Verify Payment 2. 2/s 3711. 02/s 91. 3977/s 16345/s Privacy-preserving Smart Metering 17 October 2011 32

Conclusions • Privacy-Preserving smart metering system: o Allows reporting fee without disclosing consumption o Minimizes TCB o Does not require anonymity or MPC o Supports wide variety of pricing policies o Efficient Implementation • Other applications: o Pay-as-you-drive car insurance o road tolling o cloud computing billing Privacy-preserving Smart Metering 17 October 2011 33

Questions http: //blogs. courant. com/bob_englehart/2008/07/july-10 -2008. html Privacy-preserving Smart Metering 17 October 2011 34