Smart Meters Privacy Concerns & Solutions - Dissertation Example

? of the institute] Smart Meters Privacy Concerns & Solutions [Consumer Privacy Protection in the new implementation of Smart Meters] [Pick the date] Abstract This report is based on the introduction of Smart Meters, the newest and technologically sophisticated way of recording electricity usage and generating consumer consumption report. We will be exploring the advantages and benefits of Smart Meters and the widespread acceptance of them by various governments and power corporations/ power distribution agencies across the globe. Data will be presented from numerous studies on the Smart Meter and its effectiveness will be showcased. The prime concern of “Compromise of Consumer Privacy” and “Safety Concern” due to the detailed statistical and itemised electricity usage will also be discussed in detail. Ways and means of countering this severe draw back will also be discussed and a practical solution will be proposed. A new idea on making Smart Meters more consumer friendly and robust in terms of protecting consumer privacy will be discussed as well Acknowledgements Table of Contents Abstract 2 Acknowledgements 3 Table of Contents 4 1. Introduction 7 2. A detailed technological assessment on the power and sophistication of the Smart Meter Device 9 3. A detailed exploration of the features, functionalities and modes of the Smart Meter 9 4. A practical point of view at the Smart Meter from the consumer’s stand point and evaluation of the benefits of such Smart Meters e.g.: reduction of hassles, detailed consumption statistics, reduction in the risk of Meter tampering, hooking, and illegal manipulation of meters to register incorrect readings etc. 9 5. A comparison with primitive Electricity usage measuring devices like the analogue disk meters etc. 9 6. An understanding of the “Privacy” issue of consumers. Loss of confidentiality of sensitive information. Unauthorised access of consumer specific information and utilisation in mal practices 9 8. Literature Review 10 9. Research Methodology 13 10. Findings and Analysis 15 11. Discussion 20 12. Conclusions and Recommendations 23 13. Personal Reflection 28 14. Bibliography 30 15. Appendices 31 1. Introduction 1.1. Project Rationale In this project of detailed study of Smart Meters, we will be researching the Smart Meter as a consumer product, analysing its pros and cons, identifying its benefits and also the ethical dilemma surrounding the usage of Smart Meters to register Electricity Consumption in homes in cities and in different countries. We will be studying the issues surrounding the recent release and distribution of Smart Meters, the threats to Privacy and the exposure of Sensitive Personal Data. The Smart Meter will be placed against the back drop of two conflicting scenarios, one promoting and encouraging its usage due to increased consumer convenience and awareness on electricity usage. The other scenario being the generation of statistical data on electricity consumption that has the power and potential to personally identify individuals, intrude into their daily life patterns and over all life style. The Personal Reflection and the conclusion will talk about the Smart Meters over emphasising accuracy and threatening consumer privacy and safety by exposing detailed usage statistics to unauthorised access. We will be concluding with numerous possibilities to reduce the sensitivity of information generated by the smart meter, thereby retaining its advanced technology and caring for the consumer’s privacy by safeguarding consumer interests as well. 1.2. Project Aim and Objectives 1.2.1. Project Aim The aim of the project is as follows is to conduct a thorough research on the features and functionalities of Smart Meters and make an informed and careful decision on dealing with this sophisticated gadget. A thorough risk assessment followed by a detailed discussion of the advantages, disadvantages, risks and threats is the aim of the project. 1.2.2. Project Objectives Objectives of the Project are: 2. A detailed technological assessment on the power and sophistication of the Smart Meter Device 3. A detailed exploration of the features, functionalities and modes of the Smart Meter 4. A practical point of view at the Smart Meter from the consumer’s stand point and evaluation of the benefits of such Smart Meters e.g.: reduction of hassles, detailed consumption statistics, reduction in the risk of Meter tampering, hooking, and illegal manipulation of meters to register incorrect readings etc. 5. A comparison with primitive Electricity usage measuring devices like the analogue disk meters etc. 6. An understanding of the “Privacy” issue of consumers. Loss of confidentiality of sensitive information. Unauthorised access of consumer specific information and utilisation in mal practices 7. 8. Literature Review 8.1. Introduction The usage of Smart Meters is inevitable but on the other hand the Smart Grid and Smart Meter have to be designed in such a way that they protect the interests of the consumer as well. Design and Development of Smart Meter device and the software systems that support the recording and billing process should be such that personal data is suppressed to the maximum extent possible. 8.2. Key Concept 1 Following is the key concept that will help get a comprehensive understanding of the threats a Smart Meter device might expose a consumer to and also the possible work-arounds. Smart Meters due to the very technology on which it is based has the power to represent time based, minute-by-minute electricity consumption statistics. Dur to this real time detailed data gathering it effectively pries into a person’s private life. Starting from sleep habits, health and medical data to entertainment choices it has the power to capture all details even whether the person has a legal battle or is linked with child custody battle. The Smart Meter System design, programming and implementation should follow the following rules: 1. Minimal personal data gathering 2. Calculation of averages wherever possible 3. Representation of in an aggregate form 4. Exclusion of finer and specific data like type and kind of electrical appliances and other specific electrical configuration details 5. Display of specific data only if there is a need 6. Access to personal data to authorised people based on “need to know” condition. 7. Representation of data with codes and identification numbers instead of personal data to avoid disclosure of personal information 8.3. Key Concept 2 Power Grids and Smart Meters can be configured to represent data in an anonymous way until it reaches the terminal point for billing and usage statistics. In this way unauthorised access to personal data can be prevented 9. Research Methodology 9.1. Introduction Here we will be discussing the approach to our research. We will be targeting the basic fact of “need to know”, criticality of information, whether personal data is absolutely necessary and also modification of the usage statistics reporting that is done with smart meters. 9.2. Research Strategy We will be discussing specific cases of consumer privacy compromise, the root cause and possible modification of existing instruments and systems to avoid disclosure of Sensitive Personal information. 9.3. Ethics The ethical question remains the most debatable area that can put researchers and designers in a dilemma on how far and no further they should proceed to sophisticate the Smart Meter Device and Smart Grids. It is the most important area that is linked with legal issues as well 9.4. Limitations The application of modifications to reduce the features and functionalities in compliance with Global data Privacy and Data Protection Policies would mean that the Smart Meter and the support Data Processing system will be capped or restricted to only certain features and functionalities. Minute by Minute usage statistics will have to be stopped and a broad daily usage statistic or weekly or perhaps even fortnightly usage reports would be preferred. 9.5. Conclusions Analysing the threats to privacy and taking corrective actions to curb the access and publication of sensitive consumer data would imply forgoing many features of the Smart Meter and perhaps many value added services. However as suggested in earlier sections the work around for this can be that Personal Information and detailed usage statistics can be provided only on request by the consumer and such information handled by a closed group of operators strictly on the “need to know” basis. 10. Findings and Analysis 10.1. Introduction In this section we will discuss certain findings on the data revealed and its implications on the personal data of the consumer. The data revealed by Smart Meters have manifold impact, such that it reveals life style pattern, habits etc of a consumer. The detailed analysis and explanation will provide concrete evidence of the vulnerability of consumer privacy while using a Smart Meter. 10.2. Analysis Following are the main facts revealed by the detailed statistical electricity consumption report generated by Smart Meters. 1. The away timings from home. this is revealed by a clear electricity usage pattern that would show a clear drop in power consumption and again a sudden rise in power consumption at two specific time instances over a period of 24 hours. The same can be analysed for over a week. 2. Smart Meters would also provide information on any smart alarm, burglar detecting alarm system. This would lead to a serious security breach. It would also reveal the frequency of usage of the alarm and the timings and dates when the alarm was triggered. 3. It would also reveal information on the regular return timings and also help in noticing how many days the consumer returns home after the local bars and entertainment spots close. The readings would reveal how often the consumer has a peaceful sleep and how often he is sleep deprived due to electricity usage at non peak hours which clearly stand out during times of low power consumption. 4. The excess consumption of power and detailed statistical report would also reveal how often does the consumer get late for work. 5. Days and timings around which TV is watched will also be revealed along with the timings and days on which Computer system is accessed. The smart Meter would also reveal average time spent in front of the TV and the computer. 6. Smart Meters would also reveal food patterns. It would reveal the frequency at which one eats out and the frequency at which one eats in. It would also reveal whether the consumer eats hot or cold breakfast and whether he cooks using the microwave or conventional three pot cooking. I t would also reveal how frequently the consumer entertains people by cooking for them and throwing parties etc. 7. It would also reveal whether the electrical appliances are working as expected, and whether the consumer is heavily dependent on laundry services or not.• 8. Whether or not the consumer is having sound sleep or is restless at night would also get revealed by the detailed electricity usage statistics. 9. Smart Meters also go to the extent of revealing whether the consumer is involved in a custody battle and whether or not the child had been left home alone or not . It can also pin point the number of hours the child was left alone at home through electricity usage monitoring and tracking of specific usage patterns. Smart Meters can monitor a person’s physical activity and in the case of a hearing for disabled back it can challenge that how was the consumer able to turn on the TV or a table lam on the first floor in less than a minute after turning off the lights in the ground floor. It can track whether a person has been living a healthy life. In case of the state of Alabama, it can accurately predict whether the obese state employee has not been away from the TV or Computer long enough for an aerobic exercise, making them pay health insurance. Enforcing Privacy: Some Privacy Principles: Following are the best practices to protect consumer privacy and remove personally identifiable information from Smart Meter Electricity Usage Statistics: Remove any personal information from the usage report or the bill when publishing it , or sending it for verification. Use only details like consumer number, meter number etc for identification of the bill in a unique way. Avoid using names, last names etc. Energy data should be associated with individuals only when there is a need to do so and in cases where the data revealed does not compromise privacy. For example personally identifiable information like name and address should only be used during registration, up gradation of plan, maintenance work, while billing and service restoration Information usage data should be de-identified and used in a collective way to store the information of a group or a locality where a single person cannot be identified. Usage details and charges for services should not be displayed against personal information and those used for studies or public usage should be used in a collective or aggregate manner such that no one person can be identified. Personal information and client confidential data must be locked and secured. They should not be made available at any and every transactions. The confidentiality, integrity and secrecy of information should be maintained and the information should be protected against loss, theft, and unintentional usage by anyone. At all costs personal information should be avoided during research activities. 10.3. Conclusions To conclude we can say that personal data should always remain at the customer premises under their direct control. Secondly networks would broadcasts tariff data to meters which would control the appliances Heavily aggregated information should be used for billing and price comparison The central communication provider should act as the mediator and should set inter operability standards but they should store no personal data. 11. Discussion 11.1. Introduction The smart Meters as analysed reveals: 1. Social Parameters 2. Economical Parameters 3. Personal and Sensitive Parameters 4. Educational and Health Parameters 5. Legal Parameters 6. Environment parameters 7. Eating habits and life style Through the detailed data analysis and production of electricity usage statistics as well as through sophisticated real time monitoring it can pry into the private and personal life of consumers. As discussed there are many issues with this and revelation of Sensitive Personal Information is not only a treat to the individual but also a threat to the community. 11.2. Issue 1 There are several issues pertaining to the usage of smart meters of which: Disclosure of life style and personal information including health, psychological and medical information consist of highly confidential and private information 11.3. Issue 2 The second issue that discourages the usage of Smart Meters without proper modifications to protect consumer privacy is the publishing of personal data with service charges and billing statistics. This has multiple implications and has enough information to reveal many characteristics related to the type of power usage by the consumer. 11.4. Conclusion As seen from the problems arising out of installation and mass usage of Smart Meters, the association of personal information and a person’s profile with detailed usage statistics is a big ethical issue. “Detailed Usage Statistics”, a good business practise however proves to be an infringement on Consumer Privacy. Even though it makes aware of the usage pattern and the extent and type of usage, it discloses personal information. The prevailing issue over widespread usage of Smart Meters is the association of personal information with Bill Statistics. This can be curbed by generating and furnishing personal information only in specific cases like: service restoration, plan up gradation, customer enquiry etc. The detailed statistics can be password protected and made available to the customer only by the secure entry of a PIN. 12. Conclusions and Recommendations 12.1. Conclusions 12.1.1. Conclusion 1 Modernization of power systems and grid will increase level of personal information shared over public networks and vulnerable to public access and unauthorised usage. Modernisation will increase instances of collection, use and disclosure of personal information. Instead of billing for long periods of time the smart meters will be providing bills for much shorter intervals. This real time minute by minute recording of data will be enough to reveal a lot of patterns about the family of the consumer. It will reveal the life style pattern, habits, when they are asleep, when they are awake and in short threaten the sanctity of the family. Due to these ethical issues and concerns the usage of Smart Meters are being dealt with utmost precaution. “There are many significant privacy concerns and issues relating to the U.S. Smart Grid according to a high-level privacy impact assessment (PIA) by the Privacy Sub-Group of the Cyber Security Coordination Task Group responsible for addressing privacy on the Smart Grid, particularly in the area of consumer-to-utility information exchanges. The PIA stated that (U.S. Department of Commerce 2009a; U.S. 2009b; U.K. Department of Energy and Climate Change 2009): Department of Commerce”. (Polontesky 10). Concerns to privacy arise when there is a possibility of discovering personal patterns and information like lifestyle, habits, behaviours, lifestyle of individuals etc. the usage if these pieces of confidential information could threaten the security and privacy of the consumer and his family. 12.1.2. Conclusion 2 The overall implications of smart grids are not yet fully understood and there is a lack of firsthand experience on the ramifications o the wide spread usage of such devices There is also a lack of a strong legal system to tackle privacy issues and legal issues arising out of the usage of Smart Meters. A proper system of international and local policy framework has not been set up for reference and direct utilisation by various Smart Meter-using Electric Corporations across the globe. There isn’t much information or guidelines on what consist of personal information. Consistent and comprehensible guidelines have not been put in place for the definition and acceptable usage of Personal Information. This makes the usage of Smart Meters more dangerous due to the loos legal and support systems that are now ill-equipped to handle legal issues arising out of conflict of interest between the provider, consumer or third party. 1. Distributed energy resources and smart meters will reveal information about residential consumers and activities within the house 2. Roaming Smart Grid devices, such as electric vehicles recharging at a friend’s house, could create additional personal information and leave unassuming individuals vulnerable to having their privacy compromised 3. Smart meters and the Smart Grid network will be able to use personal information in unlimited numbers of ways and generate various reports. This might also pave the way for distributors and electricity providers to utilise this information in numerous ways to the advantage of the organisation. 4. “Despite the 2000 resolution adopted by the National Association of Regulatory Utility Commissioners urging the adoption of privacy principles, few state level utility commissions have begun to assess privacy and the Smart Grid & future research is necessary and conducting further PIAs is crucial.” (Polonetsky 10) 12.2. Recommendations 12.2.1. Recommendation 1 Few of the simple propositions and recommendations in using a Smart Meter with rules and regulations enforced have been discussed below: 1. Data generated for billing should contain no personally identifiable information 2. Personally identifiable information should not be published and the same should be made available in a collective and aggregate way such that it does not identify an individual. 3. Business and Electric Supply Corporations and Agencies should innovate and improve on the protection of privacy and personal data from the beginning of the development cycle of such sophisticated consumer goods and meters. 4. From the beginning while designing applications that process personal data, it should be decided how to use the data and to only restrict it to mandatory usage by authorised and statutory bodies. The way the data is used, processed and furnished affected the volume of personal data fed in to the system after the application is built and consumer data is entered for processing 5. “Is it really necessary?” This is the first big question that developer, designers, solution architect in short the whole technical team responsible for the completed part by part development of the Smart Meter Billing System should ask themselves. At various stages this question needs to be asked and information should be restricted only to generic and non-identifiable category. Consumer should be quoted by the consumer number or meter number and personal information should be published as less frequently possible and appear as less as possible on the printed usage report. 6. Data collection should be limited, its usage and processing should be limited 7. Sensitive data like location, address, age etc of consumer should be accessed on a “Need to know” basis and not everyone should have access to it. 8. User must be formally notified of the usage and processing of personal information before entering into a contract with them or applying the smart Meter System in their accounts. A completed risk assessment should be done and consumers made aware of the usage and the risks involved. 12.2.2. Recommendation 2 There are numerous important and necessary uses of personal information in the Smart Grid context. Electricity Providers can use it in the provision of service, price notification, connecting and disconnecting power remotely and detecting the theft devices. Apart from that, the usage of personal information may be applied to offer other beneficial services, such as energy efficiency study and analysis and the monitoring and load management. However usage of customer’s personal information without prior consent may raise various privacy issues and concerns and the entire process could take a legal turn. Without diminishing the benefits of the Smart Grid it is possible to design a Smart Meter and apply privacy directly into it by making it the default in all aspects of the system. . 13. Personal Reflection There are two things that are counteracting one another in this entire report. The first one is Precision. Smart Meters are high Precision instruments and report accurate and exact details to the greatest extent possible. The other opposing force is Threat to Privacy. High Precision instruments are bound to report exact details and represent consumer data exactly in the way it has been produced; in a realistic way and that itself is the serious problem with such instruments. On the other hand Consumer Privacy Protection can be taken up as an entire issue altogether and Smart Meters can be technically re designed or its features modified to conceal Sensitive Personal Information for example, the Energy Usage Pattern, graphs, charts and other statistical information. It could be so done that the electricity usage statistics can be restricted to the energy consumption in blocks without revealing the time stamps i.e., the exact time instant at which a certain wattage starts getting consumed and the instant at which it changes. Electricity usage data can be made more static instead of real time and dynamic. On the whole there are possibilities of concealing personal and user specific information that may have leads into the private life and life style of consumers. The study and analysis of Smart Meters, its advantages, its drawbacks and ethical issue surrounding its usage throws light on the flip side of advancing technology. As with other technological advancements in the area of medicine, pathology, warfare etc, consumer durables and electronic goods have their ethical usage restrictions and certain limits to which the consumer must restrict oneself so as to prevent the boon becoming a source of trouble and disturbance. 14. Bibliography 1. Brown, I. 2010. Privacy by design, Oxford Internet Institute 2. Cavoukian, A., Polonetsky, J. & Wolf, C. 2009. Smart Privacy for the Smart Grid: embedding privacy into the design of electricity conservation. 15. Appendices Read More