Smart meters have been installed to report users' real-time electricity consumption data to the utility supplier periodically, which enables fine-grained energy supply, as the utility supplier can adjust its supplement based on users' consumptions. However, these real-time electricity data can also reveal the behaviors of the inhabitants; for example, the real-time electricity consumption data can reveal if the inhabitant is at home, if the television is working, and so on. People are reluctant to disclose these kinds of personal information. In this paper, we come up with a smart meter data aggregation scheme based on the Paillier homomorphic cryptosystem, this aggregation scheme enables a utility supplier to get the total consumption of all the smart meters, while the utility supplier is unable to get the consumption data of a single smart meter. In addition, the proposed scheme enables the smart meter to report multiple types of data in one reporting message, which makes it possible for the supplier to conduct the variance analysis and the one-way analysis of variance on the data. The formal security analysis shows that the proposed scheme is semantically secure. The experiment results show that the proposed scheme can reduce the computation cost both on the smart meter side and on the aggregator side.

Smart meters have been widely applied in smart grid, they enable two-way communication in smart grid. User’s electricity consumption data and other data are transmitted between entities. It is a necessary to ensure the security of this two-way communication. Several authentication schemes have been proposed to solve this problem. Recently, Mahmood et al. proposed an authentication scheme for smart grid. However, we find that their scheme cannot provide the perfect forward secrecy and private key privacy as they have claimed. An improved version by Abbasinezhad is found to be subject to replay attack, too. In this study, a bilinear map pairing based authentication and key establish scheme is proposed, which can withstand the aforementioned attacks and achieves more security features, private key privacy, perfect forward privacy and message integrity etc. We designed a simpler registration scheme, which implements the same functionalities while the computation cost is reduced. We also conducted a formal security analysis of the proposed scheme, the result shows that the proposed scheme is secure. Our simulation results show the proposed scheme has a comparable communication cost and computation cost.

The smart meters in electricity grids enable fine-grained consumption monitoring. Thus, suppliers could adjust their tariffs. However, as smart meters are deployed within the smart grid field, authentication and key establishment between smart grid parties (smart meters, aggregators, and servers) become an urgency. Besides, as privacy is becoming a big concern for smart meters, smart grid parties are reluctant to leak their real identities during the authentication phase. In this paper, we analyze the recent authentication schemes in smart grids and other applied fields, and propose an anonymous authentication and key establishment scheme between smart grid parties: FAuth. The proposed scheme is based on bilinear maps and the computational Diffie–Hellman problem. We changed the way the smart meter parties registered at Key Generation Center, making the proposed scheme robust against various potential attacks that could be launched by the Key Generation Center, as the scheme could avoid the private key of the smart meter parties from leaking to the Key Generation Center. Besides, the proposed scheme reduced the computational load, both at the smart meter side and at the aggregator side, which make it perfectly suitable for computation-constrained devices. Security proof results show the proposed scheme is secure under the BAN logic and random oracle model.

In the smart grid, meters report their real-time electricity consumption data to a utility supplier, and the utility supplier can adjust its supply accordingly. However, adversaries can infer users' privacy behaviors based on publicly transferred real-time electricity consumption data. Data aggregation schemes protect users' privacy from being leaked. We find two major problems are unsolved: 1) meter failure problem and 2) dynamic membership problem. To solve these problems, we designed a dynamic membership group-based multiple-data aggregation scheme. First, a group-based key establishment scheme is proposed, meters are divided into groups, meters in a group build keys to encrypt their data, the meter failure problem is alleviated. If one group has broken meters, the other groups will not be affected. Second, the dynamic join, dynamic leave, and meter replacement techniques are proposed, and the dynamic membership is achieved by allowing meters to update their keys. The simulation results show a meter's computation cost and communication cost are the minima among the related works, which makes the proposed scheme more suitable for the IoT scenario. Besides, we designed a data encoding method and a data retrieve method, we designed two attacks: 1) “bilinear map pairing attack” and 2) “zero attack.”