SRNL EPC Installation Report
During the week of August 25th, 2021, three Electric Phenomenon Cluster (EPC) sensors were installed at the Savannah River Site (SRS) owned, Dominion Energy (DE) operated 504-2G substation.
SEARCH · Engineering Papers
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
During the week of August 25th, 2021, three Electric Phenomenon Cluster (EPC) sensors were installed at the Savannah River Site (SRS) owned, Dominion Energy (DE) operated 504-2G substation.
This report describes a transactive energy coordination scheme designed to integrate into existing day-ahead and real-time wholesale energy markets. This scheme was evaluated in the Distribution System Operator with Transactive (DSO+T) study to assess the engineering and economic performance of the transactive energy coordination of a large-scale deployment of distributed energy resources (DER). Transactive agents were developed for a range of DERs (heating, ventilation, and air conditioning units, water heaters, batteries, and electric vehicles) that optimize flexibility over a 48-hour horizon and adjust their strategy in response to changes in real-time prices. A transactive energy coordination scheme, executed by a DSO retail market operator, aggregates these DER bids from participating customers and clears them against a DSO supply curve using a double auction market mechanism. The process of constructing the price-quantity DSO supply curve includes distribution-level transportation constraints (for example, substation congestion limits) and forecast locational marginal price of the DSO’s connected transmission node. The resulting day-ahead and real-time quantities are then bid into a competitive wholesale market operated by an independent system operator. This report also details additional capabilities for proper marketplace simulation such as wholesale price, weather, and load forecasting. The report concludes with a discussion of lessons learned and key design features required to ensure successful operation.
In March of 2021, the Biden-Harris Administration established a National Offshore Wind Target to install 30 GW by 2030. This ambitious goal was not only intended to help reduce dependencies on fossil fuels, but also represents an opportunity to establish a new and sustainable industry in the United States. The announcement referenced the potential benefits of establishing a domestic supply chain, including the opportunity for existing suppliers to produce thousands of components while creating tens of thousands of jobs over the course of the decade. This vision by the Biden-Harris Administration aligns with the perspective of the offshore wind industry. At a Leadership 100 event hosted by the Business Network for Offshore wind in 2019, offshore wind developers and manufacturers identified the need for a roadmap outlining a pathway to a domestic supply chain as the top priority facing the industry. Building up domestic manufacturing capabilities will not only energize local industries but can potentially de-risk individual project by reducing reliance on importing resources from European or Asian markets. Although establishing a domestic supply chain will require significant investment, it has the potential to create substantial benefits throughout the industry and, by extension, on the decarbonization goals of the United States. This study characterizes the challenges and opportunities facing the growth of a domestic supply chain industry and evaluates the potential benefits that could be achieved through the creation of the supply chain. This report is the first of a two-part series which will describe the full supply chain roadmap and the associated benefits; the current report focuses on the high-level deployment, workforce, and component requirements that need to be met to achieve the National Offshore Wind Target. We will present: 1. A deployment pipeline that demonstrates the pathway to 30 GW, the associated demand for major fixed-bottom and floating offshore wind components (turbines, foundations, cables, substations), and the vessel and port requirements to support these installation activities. 2. A series of sensitivity analyses showing how the demand for components, ports, and vessels changes for different technology pathways and availability of the global supply chain. 3. An estimate of the total number of jobs that would be required to support these deployment scenarios under varying levels of assumed domestic content. 4. A comprehensive list of the Tier 1, 2, and 3 components (finished components, subassemblies, and subcomponents) required to construct fixed-bottom and floating offshore wind projects. 5. A discussion of critical path components that represent a significant challenge, bottleneck, or risk for a future domestic supply chain.
This is the final report for a CEDS-funded project aimed at developing a new quantum technology for securing utility communication networks used to control and monitor electrical grid equipment. Securing these control networks represents a unique challenge as the performance of the security solution has a direct impact on the stability and reliability of the electrical grid. Traditional, software-based solutions - developed for information networks - are not suitable for utility control networks because they introduce latency, require burdensome maintenance and upgrades, are often incompatible with legacy equipment, and introduce operational complexity that reduces grid reliability. Consequently, many U.S. utilities do not use existing solutions and, instead, protect their critical control networks through the careful isolation and obscuration of their networked equipment. With more utilities embracing grid automation, the attack surface that utilities must defend from hackers has grown to an unmanageable size. To address this situation, Qubitekk and its partners proposed and developed a hardware-based solution that can secure critical control networks without negatively impacting grid performance. This new solution is based on quantum key distribution (QKD) techniques that guarantee secure key generation and distribution across a utility control network. Through deployment and field testing of a prototype QKD system, we have shown that this solution delivers long-term network security, is technically feasible to implement and maintain on a utility’s distribution substation network and does not negatively impact grid operations. In addition, the project has identified and solved key challenges associated with generating, transmitting, and measuring coherent photonic quantum states on a real-world fiber optic network. These additional findings are playing a critical role in advancing quantum networks for quantum computing applications. An overview of the QKD prototype development effort, field testing activities and results, and additional findings relevant to emerging quantum networks are presented in this report.
GE Research and its partner Prolec GE have designed, built and deployed in the field the world’s first flexible power transformer. The flexible power transformer is a transmission class 3-phase autotransformer configurable in impedance and in voltage which allows it to serve as a universal spare for multiple units in a given fleet. However, the key innovation in this new concept is the online adjustable leakage impedance which allows the transformer to change its impedance without interrupting the transmission line operation. The flexible power transformer can be designed with up to three low voltage transmission class ratings and up to 12 impedance values changeable both online and offline. This report provides an overview of the design, manufacturing, testing, and commissioning of the 165kV, 60MVA prototype built including the results of the field performance validation tests. The prototype was specified in collaboration with Cooperative Energy, the utility host. It was designed and tested in the factory according to IEEE standard C57.12.00 and followed all protocols for transportation, installation, and commissioning of a power transformer. In addition to the prototype, a flexible protection system capable of automatically adjusting its settings upon the transformer impedance was also developed and deployed in the for testing and validation. On September 3, 2021 the prototype was energized in Cooperative Energy’s substation in Columbia, Mississippi to become the world’s first flexible power transformer in operation. Its performances and impact on the grid operation were demonstrated through different field tests. Results obtained confirm that the impedance of the flexible transformer can be varied under load through its full range, from 4.3% to 9.3%, without adverse impacts on the line operation, the protection system, the transformer stability and health condition. Results also proved that the flexible transformer is very effective in controlling power transfer through the line or load sharing between units operating in parallel. Indeed, it was proven that higher impedances decrease the thruput power of the transformer while lower impedances increase it. Up to 26MW was controllable on a line loading of 45MVA. It was also possible to demonstrate that the variation of the transformer impedance has no effect on the circulating current between units in parallel, except a minor transient during the impedance change. It was also proven that the flexible protection relay can update its protection settings automatically when the impedance change was detected. The prototype has operated continuously for more than 12 months now with a peak load exceeding 50MVA corresponding to >80% of its ONAN power rating. No alarm, trip or sign of failure has been reported by the utility. In addition to the development and deployment of the flexible transformer prototype, investigations were carried out on new nanodielectric fluids to replace the mineral oil used in power transformers with the goal of reducing their footprint and weight. The key parameters that were targeted for improvement included the breakdown voltage to reduce clearances between windings and tank hence the footprint; viscosity and thermal conductivity to increase the cooling efficiency and therefore to reduce the winding material. Several nanodielectric mixtures with mineral oil including with alumina (Al2O3), titania (TiO2) and Borum Nitrate (BN) with different surfactants have been analyzed and tested. Unfortunately, despite encouraging results no nanofluid candidate has been found viable to replace mineral oil. With the formulations tested, breakdown voltages are generally similar to mineral oil at lower particle contents and worse at higher particle contents. Viscosity appreciably increased at particles concertation over 2 wt% and thermal conductivity increased slightly at 5wt% and appears to be 10-15% higher at 10 wt% particle content. It is recommended to continue investigations to find solutions that can help increase the power density of future flexible power transformers. Flexible power transformers can significantly help the future power grid by providing more flexibility and resiliency. Indeed, by providing voltage and impedance flexibility, flexible power transformers reduce the need for multiple spares, hence inventory costs for utilities. With their online controllable impedance, they can provide support to the grid and help manage short-circuit currents, power flow, line congestion, and grid stability which will become more important with higher penetrations of intermittent renewable resources. During the field validation tests, it was demonstrated that up to 26MW was controllable on a line loading of 45MVA when the transformer impedance was varied from its minimum to its maximum range. Also, with the impedance range, the short-circuit currents could be reduced by up to 38% at the load side of the transformer. With its controllable impedance, flexible transformers can be used in future strategies of grid resilience to help better prepare the grid to face forecasted severe events including storms, heat waves and contingencies. The flexible power transformers can also find role in other applications including high voltage transmission cables such as offshore wind farms where solutions for energizing the cables and managing the reactive power are of critical importance. The designed flexible power transformer is now fully validated and ready for commercialization. Further analysis on the benefits of flexible power transformers for grid stability and short-circuit management including current limiting capability, reclosure and line restoration, control of inrush current, sizing of flexible AC components (FACTS) would help its rapid adoption by the industry.
The growing adoption of distributed energy resources (DERs) like battery energy storage systems and roof top solar/PV and the rapid penetration of electric vehicles (EVs), the electric grid is undergoing a major transformation with elevated stress on legacy grid assets. Despite a lot of expenditure to address these challenges, both in dollars and manpower, utilities have not been able to receive the value that was promised. The gains have been most visible at the transmission and substation level, especially where the main objective was improving operational and economic efficiency for the utility. Improving visibility and control at a few select points enhances the existing and established paradigm of centralized command and control. With changing load patterns, load types and the overall transition to an “active grid”, the centralized control and coordination paradigm gets challenged. To address the challenges, a new architecture and mechanism is needed, one that supports decentralized control and decision making, extracting value streams at the grid edge, particularly as the changes are fueled by transitions occurring in the distribution system. To address this, a communications and data processing platform, “GAMMA” was developed and demonstrated through the project. At the heart of the platform, are distributed, intelligent edge nodes with sensing and compute capabilities, that can record and analyze information locally. They are embedded in sensors and actuators specific to different distribution system applications. Phase 1 of the project focused on developing novel sensor technology that can be used for monitoring utility pole top distribution transformers. The sensors were designed with the objective of being low-cost, communicating with the GAMMA cloud using novel “delay-tolerant” networking using Bluetooth and a secure mobile application. They were non-intrusive in nature so that they can be installed quickly in the field, resulting in overall low cost of deployment and operations. Following the successful completion of Phase 1, the team manufactured 100 units for a field demonstration in Phase 2. The field demonstration was carried out on two real feeder systems with the local utility partner. In total, 100 sensors were installed and operated over a period of 6 months in the state of Georgia. The platform is operational end to end, with the cloud infrastructure deployed on a distributed, serverless environment that can serve multiple data streams, an analytics engine and a portal to securely view the data from multiple assets. The data collected through the GAMMA Mobile Phone app showcased the viability of the novel delay tolerant networking architecture, and the data processing algorithms developed through the course of the project, were successful in extracting important information about the overall network, improving the utility’s visibility and situational awareness in the distribution feeder.
Fragility curves provide the vulnerability between hazard intensity and an asset. Federal installations may include many different electricity and water infrastructure types (or assets) such as generators, wind turbines, solar PV, switch yards, substations and power lines as well as water distribution systems that could be affected by different hazards. The vulnerability of each asset is a function of its age, type of materials and maintenance. In addition, the vulnerability changes with the hazards intensity and has a probability distribution function associated with it. The fragility functions are used in conjunction with hazard probability and consequence valuations to determine the values at risk for examination of investment grade analyses of alternative mitigation strategies. This document provides examples of fragility functions and links to their sources for different electricity and water infrastructure assets by hazard type.
Lawrence Livermore National Laboratory's (LLNL’s) Project Management Office (PMO) is planning to install an underground electrical duct bank at the 3200 block of the Livermore Site (project). The proposed project will include a new electrical substation and feeders, demolition and replacement of the U328C utility building with a new structure to the west, re-routing of utilities, and update of the parking lot. This Sampling and Analysis Plan (SAP) outlines the procedures to collect and evaluate environmental samples for disposition of the excavated soil during the project and geotechnical samples for pavement design. This SAP has been prepared and is organized to be consistent with LLNL's Soils Screening and Management Plan (SSMP) (LLNL, 2022), as well as the U.S. Environmental Protection Agency's (EPA) Data Quality Objectives (DQO) process (EPA, 2006). In addition to the environmental samples, geotechnical samples will be collected by Consolidated Engineering Laboratories (CEL) on behalf of PMO. Geotechnical samples will be collected from a dedicated geotechnical boring location or co-located with environmental samples. Collection and evaluation of the geotechnical samples is determined by CEL and is therefore not discussed in this SAP.
Orcas Power & Light Cooperative (OPALCO) is a member-owned, nonprofit cooperative utility that provides energy services to approximately 11,200 customers across 20 islands in San Juan County, Washington. OPALCO’s mostly hydroelectric power is generated by Bonneville Power Administration and delivered to the islands by submarine cables. In 2016, as part of the second round of funding from the Washington state Clean Energy Fund, OPALCO received a $1 million matching grant to support a project that deployed a 504-kW LG community photovoltaic (PV) system in combination with a 1 MW/2 MWh lithium-iron-phosphate battery energy storage system (BESS) on Decatur Island, Washington. The Decatur Island Substation is essential to ensuring reliable energy for the residents of the San Juan Islands as it is the point of interconnection with the mainland transmission system. The BESS, in combination with the community solar array, will deliver an innovative method to both defer the costly upgrade of the transmission system and allow for other high-value applications intended to benefit the utility and its customers. In 2018, Pacific Northwest National Laboratory (PNNL) completed a preliminary economic assessment for several identified use cases in collaboration with OPALCO. Between August 2021 and May 2022, extensive testing was conducted, and the results were used to assess the technical performance of the BESS subjected to actual field operations. Both reference performance and use case tests were performed: (a) Reference performance tests assess the general technical capabilities of the BESS, such as energy capacity, round-trip efficiency (RTE), ramp rate, and signal tracking capability. These are the first tests performed (baseline) and are repeated after use case tests (post cycle). A standardized U.S. Department of Energy (DOE) energy storage performance protocol was used to characterize the BESS, including representative duty cycle profiles, test procedure guidance, and calculation guidance for determining key characteristics. (b) Use case tests examine the performance of the BESS for specific use cases using duty cycles developed by PNNL in collaboration with OPALCO. Four use cases were selected for testing: 1) demand charge reduction, 2) load shaping, 3) outage mitigation, and 4) transmission deferral. The use case duty cycles were developed based on utility and site-specific characteristics in addition to the technical characteristics and physical capabilities of the BESS. Use case tests were performed between the baseline and post cycle tests. This report describes the BESS and its components, presents testing and performance analysis results, and shares key insights and lessons learned from this project. Outcomes of the tests and analyses will help OPALCO understand the performance of the Decatur Island BESS in its current state and design appropriate operational strategies for this and other BESSs over the long term.
In the past, electricity was produced by power plants on the transmission system and distributed to customers through substations. Now, distributed energy resources and dynamic loads are penetrating distribution grids, with their own energy production, resilience, and reliability challenges separate from the traditional model.
Since legacy distribution systems have very limited visibility beyond the substation, high penetration of PV at the grid edge presents some unique operational challenges. One approach to address these challenges is to use information from advanced metering infrastructure (AMI) and µPMUs. However, exploiting this information is impacted by a number of factors, including multi-timescale measurements, volume of data generated, communication network impairments (e.g., information loss and latency) and susceptibility to cyber-attacks. Therefore, one of the critical tasks involved in the management of a distribution grid is to develop complete situational awareness by integrating cyber-security mechanisms with state estimation strategies and leveraging this situational awareness to assure energy services at strategic locations while exploiting AMI/PV inverter/ µPMU data. This CARE-PV project addresses the fundamental challenges in situational awareness and resilience to cyber and physical vectors by exploiting the synergy between innovative modeling, estimation, data analytics, testing and validation using smart PV inverters designed at K-State and facilities at NREL. Specifically, the project involved the development, testing and validation of the following novel enabling technologies: (Thrust 1) Resilience to cyber vectors that impact data integrity was addressed via a two-level defense strategy that combines cyber intrusion detection using self-learning, cooperative smart PV inverters, and a novel moving target defense framework to combat data integrity attacks. (Thrust 2) Resilience to cyber-physical vectors that impact situational awareness by limiting data availability was addressed via novel centralized and decentralized, sparsity-based static and dynamic state estimation approaches that enhance observability even when the underlying system is unobservable. (Thrust 3) Leveraging a unique probabilistic sensitivity analysis approach accompanied by one-of-a-kind dominant influencer set computation, the vulnerability of critical infrastructure at strategic locations was evaluated so that proactive PV-based control strategies can be used to support operations under normal/outage scenarios. These CARE-PV project innovations were demonstrated on both small-scale IEEE and larger utility-scale testbeds (Thrust 4). Feedback from Industry Advisory Board members was used to formulate a commercialization pathway for a subset of CARE-PV technologies. These CARE-PV technologies will ultimately lead to reliable and secure, large-scale integration of renewable energy and mitigate the risk of energy disruption resulting from cyber incidents and other emerging threats within the energy environment.
GridTrust represents a departure from reliance on a single organization or a single person to multiple organizations and therefore multiple people across organizational structures. The motivating idea behind involving multiple organizations is the increase in security due to human factors. More specifically, the requirement that distinct people in different organizations sign off on a change or an update makes a cyberattack much less likely due to the inherent requirement that both organizations be penetrated and fooled. GridTrust focuses on the software update process as the primary exemplar for the research and development work. A novel hardware-based technology referred to as a Physical Unclonable Function (PUF) provides a microchip Root-of-Trust (RoT), i.e., a starting point for verifying that the hardware being communicated with is the hardware the control center believes the hardware to be. As a result, staff at power grid control centers can ensure the accurate and reliable identification of hardware devices from the outset. The GridTrust protocol introduces two key innovations, as detailed in this report. Firstly, the utilization of a PUF as a root-of-trust in the initial phase of a software or firmware update. Secondly, the application of multiple cryptographic signatures from two or more organizations to the update binary. These signatures are verified before implementing the update on a power grid device in the field. In terms of GridTrust hardware design, this report outlines two main components. The first is the GridTrust Native Device, integrating PUF technology intrinsically into the hardware device itself. The second is the GridTrust Interfacing Device, which incorporates PUF technology and multiple cryptographic signatures. These signatures are cross-checked within a separate hardware positioned between the power grid control center and the legacy power grid device, functioning as an intermediary. While the GridTrust Interfacing Device offers the advantage of being applicable to existing power grid equipment, it may have reduced security if the intermediary component is targeted. On the other hand, the GridTrust Native Device boasts increased security due to protocol integration within a unified form factor. The effectiveness of GridTrust technology has been extensively demonstrated, with multiple external red-team attackers unable to breach GridTrust's security measures. This was observed both in controlled laboratory settings during Phase 1 of the project and in real-world conditions within a City of Marietta substation during Phase 2 of the project.
Grid modernization has impeded innovative power grid applications and energy resources that are increasingly distributed. Blockchain/distributed ledger technology (DLT) has the potential to enhance the resilience of the electric infrastructure, particularly in a decentralized and distributed environment. The benefits of blockchain are to ensure asset information and lifecycle events are secure and traceable and identify potential malicious modification of data. Oak Ridge National Laboratory (ORNL) has developed a framework, Cyber Grid Guard (CGG), incorporating blockchain. The system implements a low-energy, fast, and robust enhancement to system trustworthiness within and across electric grid systems, including substations, control centers, and metering infrastructures. Currently, one of the major concerns is supply chain attacks. There have been several recent attacks that have significantly impacted critical infrastructures and organizations around the world. This document focuses on how CGG can be used to address the supply chain issue.
Increased renewables penetration to electrical grid is necessary to reduce overall emissions from the electrical power generation sector. Nonetheless, its integration creates challenges to grid operators who must match the power being generated by intermittent renewables and other traditional energy sources with the demand from consumers, while ensuring the reliability and power quality for the entire system. Energy storage has been proposed as an alternative to natural gas peaking plants and a form to deliver excess renewable energy generation at times of peak demand. For energy storage to provide benefits to end customers (energy consumers), it must be reliable, efficient, and cost effective. The Illinois Sustainable Technology Center (ISTC), one of the surveys that integrate the Prairie Research Institute (PRI), aims to develop a Center for Energy Storage at Existing Assets (CESEA) at UIUC with the participation of Waste Pressure Corp and Ecotek Engineering USA LLC. CESEA will focus on LDES systems that can integrate to existing infrastructure in a manner that reduces the initial capital expenditure and demonstrates the ability to repurpose fossil assets that would otherwise become stranded, to serve the energy transition. CESEA aims to leverage UIUC’s unique facilities to validate LDES systems performance at a relevant operating environment. UIUC’s facilities include a 85-MW combined heat and power (CHP) power plant, two (2) solar PV plants totaling over 18 MWdc of installed capacity, an electrical grid along with a substation at transmission and distribution voltages, a 22-mile gas pipeline network operating at two pressure levels, along with steam and chilled water distribution networks. The new LDES systems will connect to the existing UIUC grid through a new test electrical station, which will have the capacity to accommodate additional connections to test new devices and technologies as part of future CESEA R&D activities. The test electrical station will contain meters, instrumentation, and controls to accurately capture data and allow optimization of control algorithms. CESEA will initially focus on technologies that: i) utilize existing equipment or facilities to perform at least one of the process steps in LDES (charging, storage, or discharging), ii) leverage mature or commercially available components or controls, iii) show potential for cost-leadership in 10+ hour storage at a commercial scale. Initial technologies that were identified to meet these criteria include Compressed Gas Energy Storage (CGES), and TES. CGES stores electricity by raising the pressure of a compressible gas inside a control volume and converting the stored energy to electricity via expansion-generation. CGES is a generalization of CAES that covers any working gas (not just air). A successful CGES demo will help to circumvent many challenges faced by CAES (long development times due to site prospecting, high cost of compression and storage, heat recovery management, etc.) by: 1) utilizing existing infrastructure (compressors, pipelines, underground storage or pressure vessels) used in the transportation and storage of industrial gases for LDES charging and storage; 2) deploying over sites already-developed for industrial applications with minor additional work; 3) leveraging the price structure of commercial industrial gas to cover the costs of electricity used during charging. A previous DOE-sponsored conceptual study (DE-FE-0032018) estimated the levelized cost of energy of a 1.1 MW / 17 MWh CGES system at $0.08/kWh, with a commercial 10x scale system cost estimated at <$0.04/kWh (Giardinella, 2022). The pilot-sized system was estimated to avoid up to 2693 tons of CO2/year.
This report is a solar resource and infrastructure assessment for the town of Wendell, Massachusetts. The assessment was funded through the National Renewable Energy Laboratory, Solar Energy Innovation Network (NREL SEIN) Solar in Rural Communities Program, as part of a project to develop a Community-Informed Proactive Solar Siting and Financing Model. As a first step, the project lead organization, UMass Clean Energy Extension prepared an assessment of existing infrastructure, resources, and potential solar development opportunities in participating municipalities, including Wendell. This assessment was designed to describe relevant bylaws and infrastructure within the town, identify the types of solar facilities that could be developed, and quantify the total space available for each type of facility. In this report, we reviewed existing electricity grid infrastructure, and the potential to interconnect additional solar facilities. At the present time, both distribution lines providing electricity to Wendell are over-saturated with authorized and proposed solar projects, and cannot accommodate additional solar projects to interconnect to the grid. It appears that National Grid is planning an upgrade to the Wendell Depot substation, which might then allow in-process projects are to proceed, and potentially free up additional capacity for new, large projects. Meanwhile, most three-phase lines could likely accommodate additional small-to-medium scale projects (under 200 kW), and most single-phase lines could likely accommodate additional projects under 50 kW in size. This description represents the local grid infrastructure as it is - planning for future scenarios of development could include recommendations for areas of grid infrastructure improvement to allow siting of distributed generation in locations preferred by the community. Future scenarios may also include the addition energy storage and other "non-wires alternatives."
The design of high consequence controllers (in weapons systems, autonomy, etc.) that do what they are supposed to do is a significant challenge. Testing simply does not come close to meeting the requirements for assurance. Today circuit designers at Sandia (and elsewhere) typically capture the core behavior of their components using state models in tools such as STATEFLOW. They then check that their models meet certain requirements (e.g. “The system bus must not deadlock” or “both traffic lights at an intersection must not be green at the same time”) using tools called model checkers. If the model checker returns “yes” then the property is guaranteed to be satisfied by the model. However, there are several drawbacks to this industry practice: (1) there is a lot of detail to get right, this is particularly challenging when there are multiple components requiring complex coordination (2) any errors returned by the model checker have to be traced back through the design and fixed, necessitating rework, (3) there are severe scalability problems with this approach, particularly when dealing with concurrency. All this places high demands on the designers who now face not only an accelerated schedule but also controllers of increasing complexity. This report describes a new and fundamentally different approach to the construction of safety-critical digital controllers. Instead of directly constructing a complete model and then trying to verify it, the designer can start with an initial abstract (think “sketch”) model plus the requirements, from which a correct concrete model is automatically synthesized. There is no need for post-hoc verification of required functional properties. Having tool to carry this out will significantly impact the nation’s ability to ensure the safety of high-consequence digital systems. The approach has been implemented in a prototype tool, along with a suite of examples, including ones that reflect actual problems faced by designers. Our approach operates on a variant of Statecharts developed at Sandia called Qspecs. Statecharts are a widely used formalism for developing concurrent reactive systems, supporting scalability through allowing state models containing composite states, which are the serial or parallel composition of substates which can themselves contain statecharts. Statecharts enable an incremental style of development, in which states are progressively refined to incorporate greater detail in an incremental model of software development. Our approach formulates a set of constraints from the structure of the models and the requirements and propagates these constraints to a fixpoint. The solution to the constraints is an inductive invariant along with guards on the transitions. We also show how our approach extends to implementation refinement, decomposition, composition, and elaboration. We currently handle safety requirements written in LTL (Linear Temporal Logic)
At Quantum Lock Technologies, our mission is to use future-proof hardware and software to bridge the gap between physical access control and cyber security. Physical security includes access to doors, lockboxes/containers, and machinery/robots. Connecting physical access control to the cloud allows for remote detection, fast ledger updates, and mobile or remote access. However, this also opens physical security up to the world of cyber-attacks. At Quantum Lock, we use quantum random number generation to generate completely random and unpredictable digital keys to be used by connected equipment in a facility. This quantum technology is then paired with end-to-end encryption and a one-time-key communication protocol to ensure the highest level of security. Through the Innovation Crossroads program at Oak Ridge National Laboratory, we have developed benchtop prototypes of our technology, connected with utility boards as our first target customers, and prepared for our first pilot with customers (target end of summer 2022). Below is a photograph of myself at an energy substation where we plan to eventually apply our technology.
Hardware in the loop (HIL) testing is crucial for designing and managing electric power grids. These grids are becoming larger and more complex. The importance for students to have safe and intuitive ways to interact with the devices associated with the power grids has never been more crucial. Since most of these tests involve high voltages, this can be a deterrent for instructors and students in undergraduate programs. HIL testing is a solution to these common issues. This method has become one of the most popular methods for testing these power systems. With the use of Western Michigan University’s (WMU) Real-Time Digital Simulator (RTDS) and SEL-421-7 protection relay, a HIL testbed has been created. These devices were interconnected using the communication protocol known as Generic Object-Oriented Substation Event (GOOSE). A simulated transmission line system was modeled in an RTDS software RSCAD as the basis for this testbed. This model simulated different types of faults that could occur in a transmission line while in operation. The SEL-421-7 relay is connected to the RSCAD simulation via GOOSE to protect our simulated transmission line. This testbed was set up to give students a clear understanding of how distance protection works as well as how the SEL-421-7 will react to various kinds of faults, in addition to how useful the RTDS can be when testing different power systems.