TMU professors’ cutting-edge research will prepare energy sector for quantum threats

A novel research project led by Toronto Metropolitan University (TMU) is preparing the energy sector for the post-quantum world. Information technology management professor Atefeh (Atty) Mashatan is the principal investigator on a collaborative, three-year research project that will identify potential quantum threats to the cybersecurity of smart grid technology and develop mitigating solutions to protect critical energy infrastructure. 

With the advancement of quantum computers, utility infrastructure protected only with today’s cybersecurity standards is at risk for high-impact attacks, such as total disruption. The implications of a quantum-enabled attack could be catastrophic, said professor Mashatan.

“An attacker who would have access to a capable quantum computer could access sensitive information then use it to operationalize an attack to create a massive disruption, like a blackout,” said professor Mashatan, the Canada Research Chair in Quality of Security Framework for Internet of Things. 

TMU engineering professor and Canada Research Chair in Smart Grid Cyber-Physical Security Reza Arani is also working on the research project, bringing his expertise in physical power systems. Professors Mashatan and Arani will collaborate with industry partners Hydro Quebec, evolutionQ and Crypto4A to create a blueprint for how the energy sector can mitigate the risks of quantum threats and incorporate quantum-resistant cybersecurity into their smart grids.

Current quantum computers are early models not yet capable of breaking cryptographic standards. As quantum computing advances, utility and other critical infrastructure sectors must examine their quantum vulnerability closely and plan accordingly to implement mitigating countermeasures, said professor Mashatan. Power grids are attractive targets for attackers, and utility providers need to make their infrastructure resilient against impending threats. Proper mitigation will reduce the likelihood and impact of a successful quantum-enabled attack and is part of their overall cybersecurity resilience. 

Preparing for the future

Preparing the energy sector to mitigate the risks of quantum-capable cyber threats comes with the additional challenge of needing to protect operational technology – in this case, the physical infrastructure of power grids – as well as information technology. Unlike in the financial sector, where the availability of operation technology like online banking is important but not more important than protecting data, in the energy sector, the availability of electricity is critical.

This multiyear project will start with identifying vulnerabilities in generic power system models and demonstrate how an attack can create disruptions to the smart grid. One scenario involves attacking the system in real-time once cryptographically relevant quantum computers are on the market. Another scenario involves an attacker obtaining encrypted data through a breach today and then waiting to decrypt the information once they have access to quantum computers.

The researchers will then work to improve the security tools available. With evolutionQ, they will investigate the feasibility of quantum key distribution, a secure communication method for establishing keys used to encrypt information, to enhance the security of the existing infrastructure by adding a layer of quantum cryptography. The researchers will also investigate the importance of guaranteeing the availability and integrity of critical infrastructure components. They will work with Crypto4A to explore the use of next generation quantum-safe digital signature technologies to provide low-overhead and quantum-safe integrity services. Crypto4A will provide hardware security modules built to support these next generation technologies that will be used to secure the quantum-safe smart grid. This will be the first time these mechanisms are packaged specifically for the energy sector.

“We are the pioneers of what is happening here,” said professor Arani of the research project. “Our research will open the way for more people to come and do this kind of research on critical infrastructure and quantum security.”

“Professor Mashatan and professor Arani are on the leading edge of quantum-resistant cybersecurity research and innovation for the energy sector,” said Steven N. Liss, TMU’s vice-president, research and innovation. “They are creating the roadmap for preparing and protecting power grid systems and critical energy infrastructure for the quantum age. This work will have an impact here in Canada as well as around the world.”

This research is part of a wider research project in collaboration with the University of Toronto and Xanadu and is funded through a joint NSERC Alliance-Mitacs Accelerate grant. Learn more about the research project. (external link, opens in new window)