BSI-TR-compliant security modules for all market roles and the BDEW Web API

The Metering Point Operator (MSB) operates the smart meter gateway infrastructure and control boxes. It measures, receives meter data via the SMGW’s reporting channel, processes it, and forwards it to authorized market roles via market communication. At the same time, as the “GWA,” the MSB is responsible for secure technical administration in accordance with BSI TR-03109, including certificate management. To do this, the MSB requires specialized software applications such as Gateway Administration (GWA), Meter Data Management (MDM), and CLS management for controllable consumption devices via the CLS channel. The MTG CryptoController (MCC) provides the necessary cryptographic components for this purpose, independent of the manufacturer. These applications can be easily integrated via the MCC API –ensuring secure, encrypted, and BSI TR-03109-compliant communication.

The grid operator is responsible for grid stability, grid-oriented control decisions, redispatch measures, and processes in accordance with Section 14a of the German Energy Economy Act (EnWG). To fulfill these responsibilities, the grid operator requires high-resolution measurement data, schedules, and control-relevant information in order to systematically integrate decentralized generation units and to control the grid dynamically and preventively rather than purely reactively. As a central interface, the grid operator coordinates the exchange of data and schedules with relevant market participants. The MTG CryptoController (MCC pEMT) is available as an on-premises solution. It provides the necessary cryptographic components for secure measurement data reception in accordance with TAF 9 and TAF 10, regardless of the manufacturer. The MTG CryptoController features an open interface (MCC API). This allows for easy integration of grid cockpit and backend applications—enabling scalable, multi-tenant, and compliant grid processes in accordance with BSI TR-03109. The BDEW Web API can also be used via the MCC BDEW API in on-premises operations or through the DARZ energy@Web API service.

Suppliers and direct marketers use the smart metering system in a market-oriented and competitive manner. As the SMGW rollout progresses, new applications for control and metering data are emerging that are built on the SM-PKI-based infrastructure. To receive metering data via the Smart Meter Gateway or to send switching commands, they act as External Market Participants (EMTs) and use the SMGW’s secure, encrypted communication channel. The MTG CryptoController (MCC) establishes the TR-compliant connection between the application and the smart meter infrastructure. It encapsulates the cryptographic complexity of the BSI requirements and enables secure market access as an EMT.

Smart meter gateway manufacturers can use the MTG CryptoController (MCC) and the MTG Metering CA to quickly and flexibly equip their hardware with the required quality seal certificates. Three out of five SMGW manufacturers are already using this technology. As an additional component, the MCC supports the cryptographically secure generation and processing of the Electronic Order Form (eBS) and Delivery Note (eLS).

The MTG CryptoController aEMT (MCC aEMT) secures active access to the active EMT in accordance with BSI TR-03109-1. The MCC software receives the WAN-CLS proxy channel TLS connections from the SMGW and forwards the data sent via this CLS proxy channel (e.g., CLS status messages) to the aEMT application. Conversely, the switching and configuration commands from the aEMT application are forwarded only to and via the SMGW CLS proxy channel assigned to the specific CLS device. This provides a secure, transparent channel between the aEMT application and the CLS device that complies with BSI TR-03109, allowing switching and control commands to be transmitted tamper-proof to the connected control boxes and CLS devices.

The MTG CryptoController GWA (MCC GWA) ensures the management and operation of the SMGW in accordance with the requirements of BSI TR-03109 and TR-03116-3 via the management, admin/service, and NTP channels. The GWA and SMGW mutually authenticate each other cryptographically using their SM-PKI certificates over the encrypted TLS tunnel. The transmitted data is additionally encrypted and signed using CMS, e.g., the configuration profiles for TAF and CLS proxy sent from the GWA to the SMGW, as well as the measurement, status, and log data sent by the SMGW. Furthermore, only the GWA can contact its SMGW using WakeUp packets signed by the MCC GWA. Furthermore, only the GWA can provide a secure channel for downloading firmware updates.

Thanks to the MTG CryptoController, manufacturers of smart meter gateways can equip their hardware with the required quality seal certificates in a scalable and fail-safe manner and manage the key material securely within an HSM.