Privacy Risk Analysis. Sourya Joyee De
Чтение книги онлайн.
Читать онлайн книгу Privacy Risk Analysis - Sourya Joyee De страница 8
– The Price Determination System computes the fees for the different time periods of the billing cycle.
– The User Interface is used by the consumers to get access to their bills and the energy management suggestions as well as to update or correct any identification or contact information whenever necessary. Table 3.2 defines all the abbreviations for the BEMS sub-systems used in this book.
2. Interfaces. The interactions with the consumer take place through the User Interface component. The Smart Meter collects the energy consumption data from the home appliances. The Payment Application interacts with the bank to receive information about payments.
3. Data flows. The data flows between the main components of the system are depicted in Fig. 3.1. The Smart Meter and the Utility Gateway are located in the consumers’ premises. The User Interface can be accessed by the consumer through the Internet from his PC. All other systems are located with the utility provider and cannot be accessed by the consumer.
Each new consumer registers with the utility provider using the User Registration System by providing his identification and contact details. The User Registration System transfers this information to the Consumer Information System which creates a meter ID and a user portal account number for each new registered user.
Within the consumer premises, energy consumption data from home appliances are collected by the smart meter. This communication is based on the Zigbee standard. The smart meter then transfers this data to the utility gateway, along with the meter ID, every 15 minutes. The utility gateway gathers data from several smart meters. These data are then transferred to the utility provider to be stored and managed by the Meter Data Management System.
During each billing cycle,2 the Payment Management System accesses the energy consumption data for each meter ID from the Meter Data Management System and the tariffs per time period from the Price Determination System. The Billing Application within the Payment Management System computes the bills associated with each meter ID, whereas the Energy Management Application creates the energy management suggestions based on the bills and the energy consumption data during each billing cycle. The Payment Application within the Payment Management System updates the payment status for each meter ID based on the bills and the payment information received from the bank, corresponding to the bank account number obtained from the Consumer Information System. The resulting bill, the energy management suggestions and the payment status per meter ID are transferred to the Consumer Information System for storage.
Table 3.1: Supporting assets
Types of Supporting Assets | Examples |
Hardware | One database server, application server, load balancers, clients (PC, notebook, tablet, mobile phone, printer etc.), storage media (semiconductor, optical, paper), network components (switch, router, bridge, gateway, firewall, modem), smart meter, security module |
Applications | Billing Application, Energy Management Application, Meter Data Management Application, Consumer Information Management Application, Payment Application |
Data stores | Meter Data Store, Consumer Data Store |
Software environment | Standard software, operating systems, device driver, firmware, services (mail, file etc.) |
Table 3.2: List of abbreviations
Abbreviation | Meaning |
URS | User Registration System |
CIS | Consumer Information System |
MDMS | Meter Data Management System |
UG | Utility Gateway |
SM | Smart Meter |
PMS | Payment Management System |
PDS | Price Determination System |
UI | User Interface |
BA | Billing Application |
EMA | Energy Management Application |
MDMA | Meter Data Management Application |
CIMA | Consumer Information Management Application |
PA | Payment Application |
MDS | Meter Data Store |
CDS | Consumer Data Store |
Figure 3.1: BEMS data flow diagram.
Each consumer, using his user portal account number, can access the User Interface. The User Interface fetches from the Consumer Information System the bill and energy management suggestions corresponding to his meter ID. The User Interface also displays the contact and the identification details to the user. The user can request updates or corrections of the identification and the contact details through the User Interface.
All the data are stored and transferred encrypted and signed, with the exception of the transfer of the energy consumption data from the home appliances to the smart meter, which is not fully secure.3
4. Supporting assets. The supporting assets are defined in Table 3.1.
5. Actors. The actors of the BEMS System are the following: consumers, system administrators, service technicians (for installation and maintenance of smart meters and utility gateways), developers, operators and other employees under the utility provider.
1Billing and Energy Management System.
2The billing cycle, which is generally one month, is defined by the utility provider.
3Various security vulnerabilities of the Zigbee standard are documented in [155, 170].
CHAPTER 4
Personal Data
In this chapter, we first discuss the differences between the definitions of personally identifiable information (PII) in the U.S. and personal data in Europe (Section 4.1). We also summarize the ongoing debates on anonymization which is a central issue in this context (Section 4.2). We proceed with a categorization of personal data and a discussion about specific categories of data considered sensitive by certain regulations (Section 4.3).