Cyber Labeling Research Initiative

Sandia Energy > Programs > Electric Grid > Cyber and Physical Security > Cyber Labeling Research Initiative


What is Cyber Labeling?

The Biden-Harris Administration announced a new “U.S. Cyber Trust Mark” program, led by the Federal Communications Commission (FCC), to help Americans easily choose smart devices that are safe and less vulnerable to cyber attacks. The new “U.S Cyber Trust Mark” program will raise the bar for cybersecurity across common devices, including smart refrigerators, smart microwaves, smart televisions, smart climate control systems, smart fitness trackers, and more.

To build on this initiative, this research investigates labeling for consumer-facing solar inverters and smart meters.

About the Research Initiative

The U.S. Department of Energy’s (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) has initiated research to develop a proof-of-concept label for energy product cybersecurity labeling.

Researchers from six national laboratories are exploring the best methods to present information about energy product security features that may inform consumer decisions when purchasing smart meter and inverter devices.

  • The research initiative period is July 10, 2023 through late 2024.
  • The initial products addressed include consumer-facing solar inverters and smart meters.
  • Phase 1: The participating labs researched standards applicable to a label for consumer-facing energy infrastructure and — with input from participating vendor partners — developed a label concept.
  • Phase 2: Public comment period to collect user feedback and demonstrate proof of concept.
  • Results of the research will inform recommendations that DOE will make to the FCC regarding the U.S. Cyber Trust Mark program.

Research Process and Early Findings

  • Vendor Partnerships: gathering feedback from vendor partners with inverter and smart meters products.
  • Stakeholder Workshops: researched how various industry and consumer stakeholders interpret security and privacy data for IIoT products.
  • Government Coordination: coordinating with key stakeholder offices, including National Institute of Standards and Technology, FCC, and Solar Energy Technologies Office.
  • Many competing standards exist related to privacy and security. 
  • Existing labeling programs primarily focus on Industrial Internet of Things (IIoT) and privacy. Criteria for label programs are similar but not identical. 
  • Vendors emphasize need for reciprocity.
  • Research team independently developed a set of security elements from a review of standards, research efforts, and existing labeling programs. These elements demonstrate strong alignment with NIST IR 8259 A and B.
  • Challenges arise for proposed labeling programs due to the context-dependent and highly variable nature of security, especially in industrial technology applications. 
  • Operational technology equipment typically has multiple stakeholders, not all of which have the same definition of what it means to be secure.

Get Involved: View Cyber Labels and Provide Feedback

If you are a consumer…

View a label mockup demonstrating the types of information that could be included in an Industrial Internet of Things (IIoT) label and how it may be displayed.

It is intended as a starting point for feedback/discussion and does not reflect the final format or content of an actual label. Your feedback will inform this effort’s research and final recommendations for an IIoT label.

Comments, questions, and other feedback can be sent to LabelingPilot@inl.gov.

View a sample label

If you are a vendor…

View and click through our label data entry form. You can get a feel for the label creation process and required information.

Any information input in the sample form will not be stored, the form is for example purposes only.

It is intended as a starting point for feedback/discussion and does not reflect the final format or content of an actual label. Your feedback will inform this effort’s research and final recommendations for an IIoT label.

Comments, questions, and other feedback can be sent to LabelingPilot@inl.gov.

View Label Data Entry Form

Feedback and Contact

Do you have feedback after viewing the sample label? Share your questions and feedback by emailing LabelingPilot@inl.gov.

Participating Laboratories and industry partners include: Idaho National Laboratory, Lawrence Livermore National Laboratories, National Renewable Energy Laboratory, the Nexight Group LLC, Oak Ridge National Laboratory, Pacific Northwest National Laboratory, and Sandia National Laboratories.

Disclaimer

THE CONTENT CONTAINED ON THIS WEBPAGE IS PREDECISIONAL RESEARCH. Content outlined on this page is subject to change as the research develops. Input values, sample layouts, and information is for example purpose only and does not reflect the final decisions. Content on this page should not be used to inform labeling decisions in any way.