EKM Metering

I have a client (a school board) who is asking about network security standards for the PUSH3. I have provided him the standard Spec sheet, and also a printout of the Forum which explains the setup of network parameters on the Gateway User Interface, but he was looking for a little more. Is there a document that outlines the nature of the PUSH3 communication with the AWS database? They are looking for port information, things that they need to set for firewalls to permit the data to flow and configuration to happen, etc.
Thanks

The data from the EKM Push to the cloud is encrypted, then the data from the EKM Push cloud back down the the APIs is also encrypted (https). We use LiquidWeb, which is a similar cloud service to AWS. The connection from the meter to the Push is over RS485 and this hardwired link is not encrypted. Data is protected by the use of EKM Push Account keys, gateway keys, meter keys, and sub-account keys. If you give your key to anyone then they will also have access to your data. On top of this, we have security by obscurity. Your EKM Push meter data will be sent to the cloud along with a meter number and and EKM Push MAC address. But there not be any identifiable information sent with it such as customer names, email addresses, or locations.

If you are concerned about having an EKM Push gateway on your network, then you can use alternate methods to get the data to the internet. You can use cellular modems or satellite internet for example to keep the EKM Push off of your own network.

When you first connect your Push3 gateway to the internet it will use https (port 443) to access the internet. It will need to have access to https://psrv1.ekmmetering.com/ and https://psrv2.ekmmetering.com/
There may be additional servers in the future. It will use these domains to send the real-time meter data and summary data to our servers, as well as access firmware updates and be able to make meter settings.