DER-TEE: Secure Distributed Energy Resource Operations Through Trusted Execution Environments

摘要

The high penetration of renewable energy means the grid is increasingly dependent on consumer-owned devices operation, providing a growing nexus between the Internet of Things (IoT) and the smart grid. However, these devices are much more vulnerable as they are connected, through interconnections to utility, manufacturers, third-party operators, and other consumer IoT devices. Therefore, novel security mechanisms are needed to protect these devices, especially ensuring the integrity of critical measurements and control messages. Fortunately, the growing prevalence of hardware-enforced trusted execution environments (TEEs) provides an opportunity to utilize their secure storage and cryptographic functions to provide enhanced security to various IoT platforms. This paper will demonstrate a TEE-based architecture for smart inverters that utilizes hardware and software-based isolation to prevent tampering of inverter telemetry data. Furthermore, it provides an implementation of the proposed architecture on an ARM TrustZone-enabled platform using open portable TEE (OP-TEE) on a Raspberry-Pi. The developed implementation is evaluated under a set of cybersecurity metrics.