July 11, 2012 – Next-generation smart meters for residential and commercial buildings will have computerized operating systems. Yesterday, July 10, the National Institute of Standards & Technology (NIST) in the States published its first-ever draft guidelines to help utilities test their procedures for upgrading meters securely from a remote location.

The draft publication offers a generic set of testing criteria to help any utility determine whether its method of upgrading meters conforms with the security and functionality requirements in the National Electrical Manufacturers Association (NEMA) standard for Smart Grid Upgradeability. NIST and the Smart Grid Interoperability Panel (SGIP) identified the need for meter upgradeability requirements as a high priority calling for immediate attention, and NEMA led the effort to develop a standard set of these requirements on a rapid schedule.

Smart meters enable two-way exchange of data with other grid-connected devices, relaying information such as power prices, outage alerts and grid errors. Power companies likely will have different means of making sure the firmware remain up to date, so the draft guidelines offer a test framework that includes test procedures, detailed steps for conducting the test, reviewing results and producing records to assess and report on these results.

“Companies will be able to tailor these generic test criteria to their own systems,” says Marianne Swanson, senior advisor for information security at NIST. “To make it an effective framework, we made sure that it contains consistent, repeatable tests they can run, producing documentation that contains adequate, accurate information regardless of the individual system.”

Swanson emphasizes that the use of the testing framework is strictly voluntary, and says NIST will work to enhance this framework as comments on the draft come back.

“We will be working with the Department of Energy, including Oak Ridge National Laboratory (ORNL) and also Electrosoft Services Inc., to utilize an existing upgrade management system that ORNL developed, and that now NIST can test,” she said. “We will be using the comments as well as lessons learned during the test implementation to update the guidelines. We will also be sharing all this information with ANSI, which would like to use the NEMA standard and these guidelines as seed documents for a future NEMA-published ANSI standard.”

Swanson adds that while the official comment period for the guidelines will run only for 30 days, the team anticipates that the development of the testing framework will continue up until publication of the document’s final version in April 2013.