Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “grid security”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 541 records · Page 30

Cybersecurity Assessment in DER-rich Distribution Operations: Criticality Levels and Impact Analysis

The integration of distributed energy resources (DERs) in distribution networks has become a pivotal strategy for achieving decarbonization, enhancing grid resilience, and optimizing grid efficiency. Remote monitoring and control op- erations of such resources rely on a network of sensors and communication infrastructure, exposing the system to potential cyber threats. Therefore, as the deployment of DERs increases, ensuring secure monitoring and control becomes an imperative challenge. This paper utilizes real-time feeder models, which are instrumental in developing cybersecurity testbeds tailored for hardware-in-loop (HIL) systems. These models enable users to simulate cyber attacks in a real-world environment and analyze the power distribution operations during vulnerabilities. Furthermore, we discuss several practical sets of grid parameters to identify critical levels of DERs and evaluate various scenarios that simulate cyber threats on sensitive DERs. The modified IEEE 123-bus model is used as the test case for demonstrating the proposed scenarios. The findings from this study provide valuable insights into the vulnerabilities and potential consequences of cyber attacks on DERs, allowing for better mitigation strategies and improved cyber resilience in future distribution networks.

Maharjan, Manisha↗

Fermilab's Transition to Token Authentication

Fermilab is the first High Energy Physics institution to transition from X.509 user certificates to authentication tokens in production systems. All the experiments that Fermilab hosts are now using JSON Web Token (JWT) access tokens in their grid jobs. Many software components have been either updated or created for this transition, and most of the software is available to others as open source. The tokens are defined using the WLCG Common JWT Profile. Token attributes for all the tokens are stored in the Fermilab FERRY system which generates the configuration for the CILogon token issuer. High security-value refresh tokens are stored in Hashicorp Vault configured by htvault-config, and JWT access tokens are requested by the htgettoken client through its integration with HTCondor. The Fermilab job submission system jobsub was redesigned to be a lightweight wrapper around HTCondor. The grid workload management system GlideinWMS which is also based on HTCondor was updated to use tokens for pilot job submission. For automated job submissions a managed tokens service was created to reduce duplication of effort and knowledge of how to securely keep tokens active. The existing Fermilab file transfer tool ifdh was updated to work seamlessly with tokens, as well as the Fermilab POMS (Production Operations Management System) which is used to manage automatic job submission and the RCDS (Rapid Code Distribution System) which is used to distribute analysis code via the CernVM FileSystem. The dCache storage system was reconfigured to accept tokens for authentication in place of X.509 proxy certificates. As some services and sites have not yet implemented token support, proxy certificates are still sent with jobs for backwards compatibility, but some experiments are beginning to transition to stop using them.

Dykstra, Dave [Fermilab] (ORCID:0000000326539015)↗

A Unified Testing Platform to Mature Blockchain Applications for Grid Emulation Environments

Blockchain technology is a relatively novel technology that can be used to develop more decentralized, autonomous and tamper-evident solutions. A feature that can aid Transactive Energy Systems to reach their goals by enabling individual actors to communicate and reach consensus with other participants in a more decentralized fashion. However, technical barriers to evaluate and adopt this type of technology within the electrical domain still exist. To facilitate this task, BLOSEM Unified Testing Platform (UTP), a DOE-sponsored, multi-lab effort intends to accelerate the development of solutions by offering a common set of reusable services that can be used to interconnect existent grid tools with blockchain services. UTP is intended to serve as development platform that can provide application engineers with the technical means to evaluate potential blockchain solutions, by enabling them to concentrate on the actual application functionalities while at the same time abstracting the connectivity and performance measurement tasks. The use of BLOSEM UTP is further demonstrated by implementing two potential use cases that are intended to validate both the feasibility of implementing these applications as blockchain-based solutions while also demonstrating the features provided by UTP.

blockchain co-simulation↗

Cyber-Physical Smart Light Control System Integration with Smart Grid using Zigbee

This paper presents a hardware-in-the-loop cyber-physical system architecture design to monitor and control smart lights connected to the active distribution grid. The architecture uses Zigbee-based (IEEE 802.15.4) wireless sensor networks and publish-subscribe architecture to exchange monitoring and control signals between smart-light actuators (SLAs) and a smart-light central controller (SLCC). Each SLA integrated into a smart light consists of a Zigbee-based endpoint module to send and receive signals to and from the SLCC. The SLCC consists of a Zigbee-based coordinator module, which further exchanges the monitoring and control signals with the active distribution management system over the TCP/IP communication network. The monitoring signals from the SLAs include light status, brightness level, voltage, current, and power data, whereas, the control signals to the SLAs include light intensity, turn ON, turn OFF, standby, and default settings. We have used our existing hardware-in-the-loop (HIL) cyber-physical system (CPS) security SCADA testbed to process signals received from the SLCC and respond suitable control signals based on the smart light schedule requirements, system operation, and active distribution grid dynamic characteristics. We have integrated the proposed cyber-physical smart light control system (CPSLCS) testbed to our existing HIL CPS SCADA testbed. We use the integrated testbed to demonstrate the efficacy of the proposed algorithm by real-time performance and latency between the SLCC and SLAs. The experiments demonstrated significant results by 100% realtime performance and low latency while exchanging data between the SLCC and SLAs.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Verifying the Computational Integrity of Power Grid Controls with Zero-Knowledge Proof

The control of future power grids is migrating from a centralized to a distributed/decentralized scheme to enable a massive penetration of distributed energy resources with rising dependence on communication infrastructure. A common assumption made for most existing distributed/decentralized controllers is that local controllers would faithfully follow the designated controller dynamics based on the data received from communication channels. However, with increased probability of cyberattacks on Operational Technology infrastructure, such an assumption could be risky because proper execution of the controller dynamics is then built on trust in secure communication and computation. In this work, we leverage a cryptography technology known as zero-knowledge scalable transparent arguments of knowledge (zk-STARK) to verify the computational integrity of power grid control algorithms, with projected linear dynamics-based control schemes as the initial proof-of-concept test case. The method presented here converts the cybersecurity challenge of data integrity for grid control into a subset of computational integrity.

computational integrity↗

Recommended Functionalities for Improving Cybersecurity of Distributed Energy Resources: Preprint

The legacy electric grid is transitioning into a 'present' modern grid due to increasing penetration of intermittent renewable generation at the distribution side, also known as distributed energy resources (DERs). Monitoring and control of such DERs requires extensive data-exchange and bidirectional communication networks. This bidirectional communication paves the way to cyber vulnerabilities and risks for new kinds of cyber-attacks that may have destructive impacts on power system operations. Since IEEE Std. 1547-2018 does not discuss cybersecurity measures for DERs, cybersecurity controls should be developed for securing DER systems at all three levels: device level, communications level, and applications level. This paper discusses the current industry's best practices related to DER cybersecurity and proposes recommended functionalities for improving the cybersecurity posture of DERs. These practical recommended functionalities have been discussed and verified with the industry through a DER cybersecurity working group and are meant to improve the device level security of DERs.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Application of Cyber-Informed Engineering for Protecting BESS

This white paper synthesizes an array of crucial grid services provided by BESS technology, assesses its architecture and communications, and presents a case study for analysis against the principles introduced by Cyber-Informed Engineering (CIE). Furthermore, in walking through the analysis, this paper presents a framework to evaluate risks and solutions when considering BESS components. Asset owners and buyers could perform this analysis to assess their BESS product implementations, alternative inverter-based resources (IBR), and energy management systems (EMS). Battery systems fulfill various roles contingent on the unique market demands and the specific challenges presented by regional grid infrastructures. These roles also vary due to the differing utility models for ownership and operation, which are adapted to meet regional and local capabilities and requirements. Concerns have been raised regarding the potential for adversaries to exploit knowledge of battery operational patterns to orchestrate decisive attacks. However, the security of operational data for these systems may not be the primary vulnerability, as much of this information is already well-understood within the community. Applying a modest degree of subject matter expertise can often yield valuable predictions regarding how a battery will respond under certain conditions, such as grid emergencies, high or low-temperature days, Public Safety Power Shutoff (PSPS) events, and outages. The operational characteristics of batteries are well-documented, and their capabilities, including the risks associated with misoperation and the resulting consequences, are published and understood within the industry. CIE practices represent the next step in gaining functional assurance and providing an acceptable level of risk, regardless of whether a battery vendor can support a trusted and validated supply chain. While this issue has exacerbated supply chain challenges, it is not an isolated condition. This foreign supply route is the primary source of BESS for the U.S. market. Significant efforts are underway through the Bipartisan Infrastructure Law (BIL) to change that. Still, strategic short-term operational mitigations are needed to ensure the security of our operational technology (OT) systems, which are enhanced by instilling trust and are separate from vendors implementing CIE principles.

25 ENERGY STORAGE↗

Consequence Based Framework for Deployment of Cloud Solutions in the Digital Energy Transition

This study proposes a framework for evaluating cloud computing deployment in the electric sector, focusing on the digital transition of energy systems. It assesses the implications of cloud technology adoption, particularly in terms of security, operational resilience, and efficiency. The paper introduces a method for consequence-driven risk analysis, enabling utilities to prioritize and mitigate potential threats effectively. It also discusses the shared responsibility model in cloud computing, highlighting the need for collaborative security efforts. The research aims to provide utilities with a strategic assessment tool for cloud adoption, emphasizing the importance of security culture in enhancing cloud computing's role in critical infrastructure.

99 GENERAL AND MISCELLANEOUS↗

Adapting Agrivoltaics for Solar Mini-Grids in Haiti

With less than 2% of the rural population with access to electricity and almost half the population facing acute hunger, Haiti faces interconnected challenges of energy poverty and food insecurity. One solution to help address energy poverty in Haiti has been the development of distributed solar, particularly solar mini-grids. However, often the land best suited for deploying solar generation is also best suited for agriculture by smallholder farmers, thereby creating a potentially complicated tension between energy access and food security. To address this tension, solar developers, agricultural specialists, and researchers are jointly examining a novel solution called "agrivoltaics." Agrivoltaics is a shared land-use solution that is rapidly expanding in established solar markets like the United States, Europe, and Asia that pairs solar with agriculture, producing electricity and providing space for crops and animal grazing under and between panels. As part of the Energy Access Partnership for Haiti with the U.S. Agency for International Development (USAID), the National Renewable Energy Laboratory (NREL) performed an initial feasibility analysis and stakeholder engagement project to evaluate the potential for agrivoltaics in mini-grid contexts in Haiti. The analysis considered typical 100-kW and larger 1-MW mini-grids in towns across Haiti and developed two example agrivoltaic archetypes based on key local inputs, including solar irradiance, production data from the agricultural census, market prices, stakeholder interviews, and existing agrivoltaic research. See NREL/TP-7A40-89399 for the Haitian Creole translation of this document.

14 SOLAR ENERGY↗

Multiscale simulation of integrated energy system and electricity market interactions

Accelerating the deep decarbonization of the world's electric grids requires the coordination of complex energy systems and infrastructures across timescales from seconds to decades. Here, we present a new multiscale simulation framework that integrates process- and grid-centric modeling paradigms to better design, operate, and control integrated energy systems (IESs), which combine multiple technologies, in wholesale energy markets. Traditionally, IESs are analyzed with a process-centric paradigm such as levelized cost of electricity (LCOE) or annualized net revenue, ignoring important interactions with electricity markets. This framework explicitly models the complex interactions between an IES's bidding, scheduling, and control decisions and the energy market's clearing and settlement processes, while incorporating operational uncertainties. Through two case studies, we show the importance of understanding and quantifying complex resource-grid interactions. In case study 1, we demonstrate that optimized bidding from one resource shifts the profit distribution for all energy systems in the market. This result suggests new and more flexible IES technologies can disrupt the economics of all market participants, possibly leading to accelerated retirements of less flexible resources. Interestingly, the optimized bidding has little impact on grid-level aggregate statistics, such as total generation costs and renewable penetration rate. While aggregate modeling strategies may remain valid under some IES adoption scenarios for analysis focused on regional outcomes, direct comparisons of IES technologies at specific locations without considering these interactions may lead to misleading or incorrect conclusions. In case study 2, we consider the design and flexible operation of IESs that hybridize conventional generators with energy storage. Through a sensitivity analysis, we find that as the size of the storage system increases, the total number of start-ups for coal- and natural gas-based IESs reduced by 25% and 33.6%, and the total thermal generator ramping (i.e., mileage) reduced by 86.5% and 62.5%, respectively. This shows the primary benefit of storage may not be reduced operational costs (which do not change significantly) but fewer start-ups and less ramping, which may greatly simplify the design, operation, and control of carbon capture systems. The new modeling and optimization capabilities from this work enable the coupling of rigorous, dynamic process models with grid-level production cost models to quantitatively identify the nuanced interdependencies across these vast timescales that must be addressed to realize clean, safe, and secure energy production. Moreover, the proposed general multiscale simulation framework is applicable to all IES technologies and can be easily extended to consider other energy carriers (e.g., hydrogen, ammonia) and energy infrastructures (e.g., natural gas pipelines).

24 POWER TRANSMISSION AND DISTRIBUTION↗

Open-Source Architecture for Multi-Party Update Verification for Data Acquisition Devices

Power grids are integral parts of modern daily life and are increasingly under cyberattack. Common software update processes for grid control devices rely on only one organization to provide verification. This paper roposes a multi-signature software update process to help better secure data acquisition devices from malicious actions by using standard cryptosystems such as TLS. A prototype system build on Linux and off-the-shelf hardware has shown successful update and attack prevention with our customized multi-party update software.

Newberg, Benjamin↗

Electrical substation grid testbed for DLT applications of electrical fault detection, power quality monitoring, DERs use cases and cyber-events

Electrical utilities continue to deploy more intelligent electronic devices (IEDs) inside and outside electrical substation, and are associated with customer-owned distributed energy resources (DERs). The integrity and confidentiality of data from these IEDs, like power meters and protective relays, is crucial. Blockchain technology could improve the resilience of microgrids by improving the security of data sharing. The penetration of customer-owned DERs (renewable energy sources) and the increasing deployment of IEDs can lead to integrate power system applications with Distributed Ledger Technology (DLT). In this study, we implemented the electrical faulted phase detection and power quality monitoring algorithms with a Cyber Grid Guard (CGG) system using DLT. In addition, the DERs (wind turbine farms) use case and protective relay cyber-event tests were assessed, by using the CGG system with DLT. In the experimental model, the testbed was created by using a real-time simulator and CGG system with power meters/ protective relays in-the-loop. The data collected from the CGG system and IEDs were compared with the same time stamp source. These results had shown the successful assessment of protection, control and monitoring applications using a CGG system with DLT. In the future, the ESGT with DERs and the CGG system will be used in other power system applications, based on implementing smart contracts between electrical utilities with customer-owned DERs.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Providencia Island White Papers: Potential for Increasing the Physical Resilience of Distributed Energy Resources

Using technologies such as solar photovoltaics (PV) to provide power to a site during a large-scale grid outage can be an effective solution for enhancing resilience, if designed appropriately. This paper discusses storm-hardening strategies including wind-loading standards, secure racking systems, balance of electrical systems and pre-storm preparations.

24 POWER TRANSMISSION AND DISTRIBUTION↗

A Clean Energy Korea by 2035

The current global energy crisis has massive implications for the people and economy of South Korea (Korea), where at least 90% of energy use depends on foreign fossil fuels. Clean electricity accounts for only 39% of total generation, with electricity demand expected to increase 30% by 2035. This study shows that Korea can achieve 80% clean electricity by 2035 by capitalizing on rapid technological improvements and decreasing costs of solar, wind, and battery technology. Doing so would slightly lower electricity supply costs, significantly reduce dependence on imported natural gas and coal, and dramatically cut power sector emissions. Further, this study finds that Korea’s power grid under a clean energy scenario will maintain reliability without coal generation or new natural gas plants. To realize these significant economic, environmental, and energy security benefits, policies such as an 80% clean electricity standard by 2035 and corresponding renewable energy deployment goals are required.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗

Cyber100 Compass: Quantification of Cybersecurity Risks for Systems Transitioning to High Levels of Renewables (Final Report)

The shift to high levels of renewable deployment will entail a significant re-engineering of the grid. As investors, utilities, customers, and others prepare for clean energy transitions, there is need to understand how restructuring the grid to accommodate renewables will change the attack surface of the grid and accompanying cyber risk. However, today the cyber-physical risks associated with electric grids incorporating high levels of renewable deployment remain largely unknown. The Cyber100 Compass proof-of-concept application attempts to quantify future cyber-physical security risks by combining risk data gathered from subject matter experts (SMEs) with input from system planners about conditions they expect to be true about their electric systems in the future. Users provide data about their organization’s tolerance for risk; the value they place on avoiding the consequences of different cyber events; and conditions that they expect to be true on their systems at some point in the future. The SMEs provide baseline probabilities for different cyber events; the probability that an event will be low-, moderate-, or high-impact; and the amount by which user-identified conditions on their systems will change the likelihood of the cyber events. The application takes both the user and SME input and performs a series of Monte Carlo simulations to arrive at a quantification of risk.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Architecting the Grid Edge: Ensuring Reliability and Resilience

Changes in technology, customer expectations, and business and regulatory environments are rapidly evolving causing fundamental changes in the nation’s electrical infrastructure. Nowhere is this more apparent that at the “grid edge”, where there is an increasing number of new devices and systems, as well as complex new interactions between them. This is leading to the traditional relationship between the end-use customers and their utilities being expanded by an increasing number of stakeholders, each with their own operational and financial objectives, governed by regulatory policy. While there are concerns about the rapidly increasing complexity negatively impacting reliable and resilience of the electrical infrastructure, these changes are also bringing new resources and opportunities that hold great potential if they can be properly coordinated. This white paper outlines the considerations for the coordination of multi-stakeholder objectives with electric utility requirements using the concept of grid services. Describing a framework that enables new stakeholders to achieve their local technical and economic objectives, while simultaneously delivering operational benefits to the electrical infrastructure. The concepts of grid architecture are presented as a tool to evaluate how stakeholders might participate in, and benefit from, services, and how utilities can make decision on the reliance on services to ensure reliability and resilience, translating abstract concepts into actionable information for utilities and grid edge stakeholders. The end result of proper coordination, informed by grid architecture, will be a range of new devices and systems, operated by new stakeholders, achieving their local objectives while also increasing the reliability, resilience, security, and affordability of the nation’s critical electrical infrastructure.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Architecting the Grid Edge: Ensuring Reliability and Resilience

Changes in technology, customer expectations, and business and regulatory environments are rapidly evolving causing fundamental changes in the nation’s electrical infrastructure. Nowhere is this more apparent that at the “grid edge”, where there is an increasing number of new devices and systems, as well as complex new interactions between them. This is leading to the traditional relationship between the end-use customers and their utilities being expanded by an increasing number of stakeholders, each with their own operational and financial objectives, governed by regulatory policy. While there are concerns about the rapidly increasing complexity negatively impacting reliable and resilience of the electrical infrastructure, these changes are also bringing new resources and opportunities that hold great potential if they can be properly coordinated. This white paper outlines the considerations for the coordination of multi-stakeholder objectives with electric utility requirements using the concept of grid services. Describing a framework that enables new stakeholders to achieve their local technical and economic objectives, while simultaneously delivering operational benefits to the electrical infrastructure. The concepts of grid architecture are presented as a tool to evaluate how stakeholders might participate in, and benefit from, services, and how utilities can make decision on the reliance on services to ensure reliability and resilience, translating abstract concepts into actionable information for utilities and grid edge stakeholders. The end result of proper coordination, informed by grid architecture, will be a range of new devices and systems, operated by new stakeholders, achieving their local objectives while also increasing the reliability, resilience, security, and affordability of the nation’s critical electrical infrastructure.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Securing Flexible Demand [Slides]

This briefing presents some prior work on security needs for virtual power plants (VPPs). This presentation introduces virtual power plants (VPPs) and discusses why they are an emerging participant in our power grid. We will look at several examples where they have been critical for grid reliability. We will then take a dive into some of the risks associated with wide-area digital coordination of VPP assets, and finally conclude with an outlook on what's next.

24 POWER TRANSMISSION AND DISTRIBUTION↗