Intelligent Electronic Devices Scaled

Improved Role-Based Access Control for Intelligent Electronic Devices

Summary

Arceptive will develop a role-based access control system for intelligent electronic devices (IED) in National Grid’s electricity substations, integrating near-field communication (NFC), biometrics and legacy compatibility. The project will enhance security, operational reliability and compliance, reduce unauthorised access and service disruption risks, and improve efficiency. The solution is interoperable, future-proof and cost-effective, delivering tangible benefits to network operators and customers.

The Challenge

The project addresses security and management of IEDs in electricity substations, which control and automate equipment such as circuit breakers, transformers and capacitor banks.

Historically, ‘set-and-forget’ IEDs have broad, unsophisticated access controls, creating vulnerabilities that could potentially allow unauthorised access, operational disruption, outages and safety risks. Current protections (lockable cabinets, physical keys and basic passwords) are inadequate, as keys can be lost or duplicated and passwords poorly managed.

These weaknesses compromise power system integrity, reliability and customer service. The project aims to develop an advanced role-based access control (RBAC) solution, integrating technologies such as NFC and biometrics to secure and manage IED access, strengthening overall grid security and operational reliability.

Who’s the Innovator?

Arceptive is a pioneering tech firm providing software services including UI/UX design, software development, mobile applications and AI analytics. They specialise in cloud and on-premises infrastructure, internet of things (IoT) and hardware integration. Committed to end-to-end solutions, Arceptive ensures seamless design, development, deployment, operations and maintenance to support optimal business performance.

What’s Next?

The innovation implements a comprehensive RBAC system for secure management of IEDs in electricity substations.

It uses a centralised authentication and authorisation server managing credentials and permissions via protocols such as lightweight directory access protocol (LDAP) or remote authentication dial-in user service (RADIUS), enabling real-time access management and seamless integration. Cutting-edge authentication methods, including NFC tags and biometrics, enhance security, while bridging software ensures compatibility with legacy IEDs.

The holistic approach addresses multifaceted security challenges, combining advanced technology with interoperability across diverse manufacturers to create an adaptable, future-proof model. The solution delivers value for money through reduced unauthorised access, improved operational efficiency and minimised service disruption risks.

By leveraging existing infrastructure and focusing on technology integration, it provides a cost-effective pathway to strengthened security, operational reliability and industry compliance, benefiting both network operators and customers.