3AS: Authentication, Authorization, and Accountability for SDN-Based Smart Grids

Smart grid refers to the advancement of the current electric grid with the help of information and communication technologies. In such scenarios, an efficient and secure smart grid communication system is essential. Accordingly, Software-Defined Networks (SDN) have been gaining more prominence for smart grids in recent years, as this paradigm allows monitoring and managing these communication networks efficiently. An example is the Autonomic and Resilient Framework for Smart Grids (ARES). ARES allows integration between the supervisory system and the SDN controller, allowing for better energy applications. Although ARES emphasizes the need for security as a premise for its implementation, it does not provide a concrete implementation of this aspect. In this work, we provide an extensive review of the related literature about Authentication, Authorization, and Accountability (AAA) for smart grids, classifying approaches according to several relevant characteristics. We further propose 3AS, extending the ARES framework with a security component based on the IEEE 802.1X standard. 3AS has been implemented on the Ryu SDN controller and evaluated in an emulated environment. Results indicate 3AS successfully provides authentication, authorization, and accountability with low control load and delay, thus being suitable for diverse smart grid scenarios.