Detection and response to unauthorized access to a communication device

摘要

A communication gateway consistent with the present disclosure may detect unauthorized physical or electronic access and implement security actions in response thereto. A communication gateway may provide a communication path to an intelligent electronic device (IED) using an IED communications port configured to communicate with the IED. The communication gateway may include a physical intrusion detection port and a network port. The communication gateway may further include control logic configured to evaluate physical intrusion detection signal. The control logic may be configured to determine that the physical intrusion detection signal is indicative of an attempt to obtain unauthorized access to one of the communication gateway, the IED, and a device in communication with the gateway; and take a security action based upon the determination that the indication is indicative of the attempt to gain unauthorized access.

主权项

1. A communication device configured to provide a communication path to a remotely located intelligent electronic device (IED) of an electric power delivery system, the IED in an enclosure with the communication device and configured to detect and remediate unauthorized access, the communication device comprising:
an IED communications port configured to communicate with an IED; a network port configured to transmit information received from the IED via a network and to transmit information received from the network to the IED; and control logic in communication with the IED communications port and the network port, the control logic configured to:
receive an intrusion detection signal;determine that the intrusion detection signal is indicative of an attempt to obtain unauthorized access to one of the communication device, the IED, and a device in communication with the communication device;receive an alternative indication that is indicative of the attempt to obtain unauthorized access; andtake a security action based upon the determination that the intrusion detection signal is indicative of the attempt to gain unauthorized access; wherein the intrusion detection signal is based on input received from a first sensor component, and the alternative indication is generated based on input received from a second sensor component.