Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “secure operation”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 775 records · Page 43

Utility-Scale Shared Energy Storage Deployment: Challenges, Research Gaps, and Opportunities

Although community energy storage (CES) and behind-the-meter (BTM) energy storage systems have been widely used to offer homeowners and communities a variety of localized benefits, their scalability and grid support functionalities are limited. On the other hand, utility-scale shared energy storage (USES) systems may offer a number of benefits for grid integration, scalability, and economic viability. When compared to BTM and CES alternatives, these large-scale systems provide more storage capacity, more efficient operations, and more economically viable options. The deployment of USES presents opportunities for optimizing grid performance, integrating renewable energy resources, and improving energy security at the community level. However, significant research gaps exist in optimizing the integration and operation of these systems, especially to allocate energy for consumer use, grid services, and enhancing energy resilience. This paper reviews the literature in this regard, focusing on the opportunities, research gaps, and challenges associated with USES deployment. Firstly, the paper provides an overview of USES systems and emphasizes their benefits. Secondly, the key challenges are identified, and research gaps associated with the operation and integration of these systems are highlighted. Lastly, some potential solutions and opportunities that can be adopted to facilitate the rapid deployment and management of USES are presented. Technological, economic, regulatory, and environmental aspects are also discussed in this paper, providing an overview of the current state and future prospects of this technology.

Gautam, Mukesh [BATTELLE (PACIFIC NW LAB)] (ORCID:↗

User-Focused Tools to Enhance IT/OT Cyber Resilience within the Power Grid

The power grid is undergoing several changes that are increasing its complexity as nexuses between electric-gas, transmission-distribution, and energy-communications continue to become increasingly critical. This system is heavily dependent on communication infrastructure and controls, and it relies on humans in operational technology (OT) and information technology (IT) roles to manage the increasing breadth, depth, and speed of data. Many technical challenges have presented themselves and will need to be addressed to provide reliable grid operations. With increased reliance on distributed controls and communication infrastructure, cybersecurity becomes an inherent requirement. When considering current cyber-physical security solutions for the power grid, one can notice a clear divide between information technology and operation technology networks. However, in real-life applications, these networks are interdependent. This work presents results of interviews with key utility cybersecurity personnel, analyzes the results, and makes recommendations towards solution of existing technical and operational challenges realized. Existing workflows are presented, wireframe interviews are discussed, and tool requirements are described. The existence of easy-to-implement solutions, based on existing energy management systems, highlight the potential for real-life applications.

cybersecurity, resilience, user-centered design, p↗

Software-Defined Networking Traffic Engineering Process for Operational Technology Networks

Network design goals are often functional with little consideration for security. Growth and maintenance of critical infrastructure mission-focused networks can be ad hoc and preclude large-scale technology replacements, reconfigurations, or even patching. These restrictions are contributing factors to increased vulnerabilities. Over 90% of all attacks begin with phishing and include lateral movement (Frinke 2019). Adopting a software-defined networking (SDN) approach is an effective mitigation strategy for many existing vulnerabilities. SDNs deny-by-default approach to networking restricts an adversary’s freedom of movement without impacting an organization’s mission. SDN implementations require a process that identifies an organization’s mission-specific network communications. A well-defined traffic engineering process ensures that only known devices communicate with each other on specific ports.

Software Defined Networking, Situational Awareness↗

Resilient Hierarchical Networked Control Systems: Secure Controls for Critical Locations and at Edge

Integration of information and communication technology (ICT) offers new opportunities in improving the management and operation of critical infrastructures such as power systems as it allows connection of different sensors and control components via a communication network, leading to the so-called networked control systems (NCS). However, the use of open and pervasive ICT such as the Internet or wireless communication technologies comes at a price of making NCS vulnerable to cyber intrusions/attacks which may cause physical damage. Here, this chapter presents control algorithms to ensure resilient and safe operation of NCS under unknown cyberattacks. Specifically, a variant of dynamic watermarking strategies is presented by embedding encoding/decoding components of chaotic signals into the NCS for secure control for critical locations where the measurement/control signals are transmitted to/from the control center via a communication network. In addition, resilient cooperative control algorithms are discussed to ensure safe operation at edge of the NCS which consists of a large number of distributed controllable devices. Several numerical examples are provided to illustrate the proposed control strategies.

96 KNOWLEDGE MANAGEMENT AND PRESERVATION↗

Re-Engineering the Multimission Command System at the Jet Propulsion Laboratory

This paper will discuss the design and implementation of the command software, especially trade-offs and lessons learned from practical operational use in JPL's Advanced Multimission Operations System.The command system provides an advanced multimission environment for secure, concurrent commanding of multiple spacecraft. The lessons learned have resulted in a re-engineering of the command system, especially in its user interface and new automation capabilities. This paper will also discuss new development work including a multimission command database toolkit, a universal command translator for sequencing and real-time commands, and incorporation of telecommand capabilities for new missions.

re-engineering↗

Simulating Secure Data Exchange and Storage for Urban Air Mobility Environments

Urban Air Mobility (UAM) defines an environment for managing operations of vertical takeoff and landing (VTOL) and short takeoff and landing (STOL) vehicles in an urban environment. Within a UAM environment, UAM operators manage fleets of vehicles, relying on Providers of Services for UAM (PSUs) for managing flights in a region of airspace. Flight plan deconfliction is primarily performed by the Discovery and Synchronization Service (DSS), and the Federal Aviation Administration (FAA) maintains control over the UAM space via the FAA-Industry Exchange Protocol (FIDXP). UAM is a federated environment with many different entities owning and operating vehicles, PSUs, and other services. These entities often need to interoperate or access data generated by other organizations. This paper demonstrates the feasibility of using blockchain to facilitate a secure data exchange and storage for this flight information in a UAM environment. In particular, this paper is focused on flight plans and telemetry data. A blockchain network was developed with a set of smart contracts for managing relevant flight data. Hyperledger Fabric was chosen as it is performent, scalable, and allows organizations to reuse existing public key infrastructure (PKI) for identity management. A set of simulated UAM services were also developed. These services propose flight plans and negotiate with other UAM services for airspace access. All interactions between UAM services, as well as vehicle telemetry data, is recorded onto the blockchain. Vehicle telemetry data is generated by a vehicle flight simulation service. This paper successfully demonstrates the feasibility of using blockchain as a secure data exchange and storage mechanism in a UAM environment.

UAM↗

Control and Non-Payload Communications (CNPC) Prototype Radio - Generation 2 Security Flight Test Report

NASA Glenn Research Center (GRC), in cooperation with Rockwell Collins, is working to develop a prototype Control and Non-Payload Communications (CNPC) radio platform as part of NASA Integrated Systems Research Program's (ISRP) Unmanned Aircraft Systems (UAS) Integration in the National Airspace System (NAS) project. A primary focus of the project is to work with the Federal Aviation Administration (FAA) and industry standards bodies to build and demonstrate a safe, secure, and efficient CNPC architecture that can be used by industry to evaluate the feasibility of deploying a system using these technologies in an operational capacity. GRC has been working in conjunction with these groups to assess threats, identify security requirements, and to develop a system of standards-based security controls that can be applied to the GRC prototype CNPC architecture as a demonstration platform. The proposed security controls were integrated into the GRC flight test system aboard our S-3B Viking surrogate aircraft and several network tests were conducted during a flight on November 15th, 2014 to determine whether the controls were working properly within the flight environment. The flight test was also the first to integrate Robust Header Compression (ROHC) as a means of reducing the additional overhead introduced by the security controls and Mobile IPv6. The effort demonstrated the complete end-to-end secure CNPC link in a relevant flight environment.

Communication Networks↗

Immutable Secure Data Exchange and Storage for Urban Air Mobility Environments

The Urban Air Mobility (UAM) environment is derived from the Unmanned Traffic Management (UTM) concept of operations. Within the environment, UAM operators work independently to manage aerial vehicles in the urban environment. Providers of Services (PSU), UAM operators, and Supplemental Data Service Providers provide services to support flight operations within the UAM environment. The intent of this work is to leverage a permissioned blockchain approach, to, simulate secure data exchange and storage for UAM environments. Blockchain technologies can be used for identity management of vehicles, people, and systems.

Blockchain↗

Comparison of Energy Storage and Arbitrage Options for Nuclear Power

Nuclear power is the most reliable source of clean energy and plays a crucial role in decarbonization efforts and national energy security. Achievement of Net-Zero targets depends on the deployment of new Nuclear Power Plants (NPPs) – both advanced reactors and large-scale Light-Water Reactors (LWRs) – as well as continuing operations at existing LWR plants. The Light-Water Reactor Sustainability (LWRS) program seeks to extend the lifetime of existing NPPs and improve their economic performance through research into plant modernization, Flexible Plant Operation and Generation (FPOG), risk-informed systems analysis, materials research, and physical security. The FPOG pathway investigates alternative revenue streams for LWRs. When electricity prices are driven low by an oversupply of renewable energy, steam and electricity from an NPP can be used to make value-added products while taking advantage of the low energy price; alternatively, this cheap energy can be stored chemically, electrically, or thermally, and used to regenerate-generate electricity at a later time when energy demand, and therefore the wholesale price of electricity, is higher in an economic concept called arbitrage. The purpose of this report is to investigate energy storage technologies that can store 500 MW of electricity from an LWR for a wide spectrum of durations.

13 HYDRO ENERGY↗

Recommendations for a service framework to access astronomical archives

There are a large number of astronomical archives and catalogs on-line for network access, with many different user interfaces and features. Some systems are moving towards distributed access, supplying users with client software for their home sites which connects to servers at the archive site. Many of the issues involved in defining a standard framework of services that archive/catalog suppliers can use to achieve a basic level of interoperability are described. Such a framework would simplify the development of client and server programs to access the wide variety of astronomical archive systems. The primary services that are supplied by current systems include: catalog browsing, dataset retrieval, name resolution, and data analysis. The following issues (and probably more) need to be considered in establishing a standard set of client/server interfaces and protocols: Archive Access - dataset retrieval, delivery, file formats, data browsing, analysis, etc.; Catalog Access - database management systems, query languages, data formats, synchronous/asynchronous mode of operation, etc.; Interoperability - transaction/message protocols, distributed processing mechanisms (DCE, ONC/SunRPC, etc), networking protocols, etc.; Security - user registration, authorization/authentication mechanisms, etc.; Service Directory - service registration, lookup, port/task mapping, parameters, etc.; Software - public vs proprietary, client/server software, standard interfaces to client/server functions, software distribution, operating system portability, data portability, etc. Several archive/catalog groups, notably the Astrophysics Data System (ADS), are already working in many of these areas. In the process of developing StarView, which is the user interface to the Space Telescope Data Archive and Distribution Service (ST-DADS), these issues and the work of others were analyzed. A framework of standard interfaces for accessing services on any archive system which would benefit archive user and supplier alike is proposed.

Travisano, J. J.↗

Studying impacts of communication system performance on dynamic stability of networked microgrid

The development of smart grid technologies has resulted in increased interdependence between power and communication systems. Many of the operations in the existing power system rely on a stable and secured communication system. For electrically weak systems and time‐critical applications, this reliance can be even greater, where a small degradation in communication performance can degrade system stability. However, despite inter‐dependencies between power and communication systems, only a few studies have investigated the impacts of communication system performance on power system dynamics. This study investigates the dependencies of power system dynamics operations on a communication system performance. First, a detailed, dynamic networked microgrid model is developed in the GridLAB‐D simulation environment, along with a representative multi‐traffic, multi‐channel, multi‐protocol communication system model, developed in the network simulator (ns‐3). Second, a hierarchical engine for large‐scale infrastructure co‐simulation framework is developed to co‐simulate microgrid dynamics, its communication system, and a microgrid control system. The impact of communication system delays on the dynamic stability of networked microgrids is evaluated for the loss of generation using three use‐cases. While the example use‐cases examine microgrid applications and the impact to resiliency, the framework can be applied to all levels of power system operations.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Total Power Factor Smart Contract with Cyber Grid Guard Using Distributed Ledger Technology for Electrical Utility Grid with Customer-Owned Wind Farm

In modern electrical grids, the numbers of customer-owned distributed energy resources (DERs) have increased, and consequently, so have the numbers of points of common coupling (PCC) between the electrical grid and customer-owned DERs. The disruptive operation of and out-of-tolerance outputs from DERs, especially owned DERs, present a risk to power system operations. A common protective measure is to use relays located at the PCC to isolate poorly behaving or out-of-tolerance DERs from the grid. Ensuring the integrity of the data from these relays at the PCC is vital, and blockchain technology could enhance the security of modern electrical grids by providing an accurate means to translate operational constraints into actions/commands for relays. This study demonstrates an advanced power system application solution using distributed ledger technology (DLT) with smart contracts to manage the relay operation at the PCC. The smart contract defines the allowable total power factor (TPF) of the DER output, and the terms of the smart contract are implemented using DLT with a Cyber Grid Guard (CGG) system for a customer-owned DER (wind farm). This article presents flowcharts for the TPF smart contract implemented by the CGG using DLT. The test scenarios were implemented using a real-time simulator containing a CGG system and relay in-the-loop. The data collected from the CGG system were used to execute the TPF smart contract. The desired TPF limits on the grid-side were between +0.9 and +1.0, and the operation of the breakers in the electrical grid and DER sides was controlled by the relay consistent with the provisions of the smart contract. The events from the real-time simulator, CGG, and relay showed a successful implementation of the TPF smart contract with CGG using DLT, proving the efficacy of this approach in general for implementing electrical grid applications for utilities with connections to customer-owned DERs.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Performance Evaluation of AG-1 FC HEPA Filters and Medium in Nuclear Complex Facilities - 20434

High Efficiency Particulate Air (HEPA) filters are credited as the final barrier against the release of radioactive aerosol contamination in nearly every operating U. S. Department of Energy (DOE) and National Nuclear Security Agency (NNSA) nuclear facility. The Institute for Clean Energy Technology (ICET) at Mississippi State University maintains a research program that studies various aspects of these components of containment systems and seeks to answer key questions from across the industry. This programmatic overview will include results from recent and ongoing studies, including a study on filter design and performance envelope, degradation due to aging or fatigue, fire event impact on HEPA filters, and accelerated aging of medium and component parts. ICET has completed a study helping to define the threshold for combined elevated temperature and relative humidity resistance of separator style and separator-less style HEPA filters that are used in DOE complexes. The study provides experimental data that considers elevated temperature, elevated relative humidity (RH), and target differential pressure (dP) in an attempt to gain a better understanding or more comprehensive insight into the operating envelope of different configurations of ASME (American Society for Mechanical Engineers) AG-1 Section FC filters. Test variables including air temperature ranges of 48.88 deg. C, 54.44 deg. C, or 60 deg. C (120, 130, or 140 deg. F); air RH ranges including 60-70%, 80%, or 90+% with initial filter dP of either 497.68 Pa, 746.52 Pa, or 995.36 Pa (2 inches water column (in. w. c.), 3 in. w. c., or 4 in. w. c.) included for full bracketing of each set of conditions. A study examining the effects of aging and fatigue on nuclear grade HEPA filters and medium elucidates the physical properties of media along with testing of new and aged ASME AG-1 HEPA filters. In addition to performing autopsies of the tested, aged filters to help better understand the service life of their performance, newly designed accelerated aging chambers allow new medium to undergo accelerated aging and exposure treatments. Evaluation of degradation in physical properties and functionality requires a high population of aged filters of different ages, designs, manufacturers, and operational histories. The limited availability of this population and the impropriety of looking solely at formulations and components from past years requires experimental design that will provide foresight into future filter performance. This undertaking therefore involves not only properties analysis of aged medium from different operational histories, ages, designs, and manufacturers, but also prescience in analytical goals via accelerated aging studies of newly manufactured media. A more complete understanding of the mechanisms of degradation from past formulations as well as current and future formulations is possible. Accelerated Aging of newly manufactured media utilizes exposure treatments based on the Arrhenius equation to artificially age medium and therefore glimpse into the future. Evaluation of current media properties This testing allows for the comparison of performance and durability of new filters under upset or design basis conditions with aged filters that were in service under ambient conditions and other aged filters retained in storage. Susceptibility of HEPA filters to the effects of combustion byproducts, heat, and water is also being studied in an attempt to gain understanding on the prevention of filter failures during fire events in nuclear facilities. ICET seeks to determine the effect of filter performance due to smoke loading using characterized smoke from variable fuel compositions, geometries, and loads; the smoke capacity of various filters with different burning conditions, heat release rates and transport, as well as mass transport from the air stream will be studied in low flow containment systems. (authors)

12 MANAGEMENT OF RADIOACTIVE AND NON-RADIOACTIVE W↗

Emergency Management of Tomorrow Research: Emergency Operations Center of the Future Tabletop Exercise Nashua, NH Tabletop Exercise

As part of the Emergency Management (EM) of Tomorrow Research (EMOTR) program, sponsored by the Department of Homeland Security (DHS) Science and Technology (S&T) Directorate, Pacific Northwest National Laboratory (PNNL) developed concepts for the Emergency Operations Center (EOC) of the Future to provide recommendations to assist DHS S&T in future decision-making with regards to research and development (R&D) and investments toward establishing a framework for a national, coordinated approach to EM. PNNL is conducting tabletop exercises (TTXs) designed to assess the impacts and benefits of emerging technologies on EM organizations.

99 GENERAL AND MISCELLANEOUS↗

Enabling Secure Grid Information Sharing through Hash Calendar-based Blockchain Infrastructures

The power grid is becoming increasingly interconnected, as information from grid operations must be accessible to an array of engineers, grid regulators, and market operators. However, there remain challenges ensuring the appropriate integrity and authenticity of the grid information. While traditional cryptographic protocols, like public key infrastructure, provide security for in-transit communication, they come with key exchanges and cost to get public key certificates from a centralized authority. To address these challenges, this paper demonstrates how a hash calendar-based blockchain can be used to provide improved security for communication with the use of distributed ledgers. It demonstrates the security requirements and threats to this communication, and then provides a theoretic definition of the process. Furthermore, it introduces a use-case of the proposed process within the WSU Smart City Testbed DMS with the Guardtime’s Keyless Signature Infrastructure (KSI) architecture.

Kaur, Kudrat J.↗

Cyber Informed Engineering (CIE) Principles Slide Presentation [Slides]

This document describes the concept and application of Cyber-Informed Engineering (CIE), a methodology that integrates cyber threat awareness into all stages of the systems engineering life cycle. It delineates how CIE enhances the security posture of critical infrastructure systems, which are increasingly targeted by sophisticated cyber threats. The exposition proceeds to methodically walk through the twelve foundational principles of CIE, each serving as a strategic guidepost for embedding cybersecurity into the fabric of system design, development, operation, and maintenance. The principles highlight the importance of proactive and comprehensive security measures that span from risk assessment to continuous improvement, ensuring that systems are not only designed with security in mind but are also resilient in the face of evolving cyber threats.

42 ENGINEERING↗

Technology Benefit Estimator (T/BEST): User's Manual

The Technology Benefit Estimator (T/BEST) system is a formal method to assess advanced technologies and quantify the benefit contributions for prioritization. T/BEST may be used to provide guidelines to identify and prioritize high payoff research areas, help manage research and limited resources, show the link between advanced concepts and the bottom line, i.e., accrued benefit and value, and to communicate credibly the benefits of research. The T/BEST software computer program is specifically designed to estimating benefits, and benefit sensitivities, of introducing new technologies into existing propulsion systems. Key engine cycle, structural, fluid, mission and cost analysis modules are used to provide a framework for interfacing with advanced technologies. An open-ended, modular approach is used to allow for modification and addition of both key and advanced technology modules. T/BEST has a hierarchical framework that yields varying levels of benefit estimation accuracy that are dependent on the degree of input detail available. This hierarchical feature permits rapid estimation of technology benefits even when the technology is at the conceptual stage. As knowledge of the technology details increases the accuracy of the benefit analysis increases. Included in T/BEST's framework are correlations developed from a statistical data base that is relied upon if there is insufficient information given in a particular area, e.g., fuel capacity or aircraft landing weight. Statistical predictions are not required if these data are specified in the mission requirements. The engine cycle, structural fluid, cost, noise, and emissions analyses interact with the default or user material and component libraries to yield estimates of specific global benefits: range, speed, thrust, capacity, component life, noise, emissions, specific fuel consumption, component and engine weights, pre-certification test, mission performance engine cost, direct operating cost, life cycle cost, manufacturing cost, development cost, risk, and development time. Currently, T/BEST operates on stand-alone or networked workstations, and uses a UNIX shell or script to control the operation of interfaced FORTRAN based analyses. T/BEST's interface structure works equally well with non-FORTRAN or mixed software analysis. This interface structure is designed to maintain the integrity of the expert's analyses by interfacing with expert's existing input and output files. Parameter input and output data (e.g., number of blades, hub diameters, etc.) are passed via T/BEST's neutral file, while copious data (e.g., finite element models, profiles, etc.) are passed via file pointers that point to the expert's analyses output files. In order to make the communications between the T/BEST's neutral file and attached analyses codes simple, only two software commands, PUT and GET, are required. This simplicity permits easy access to all input and output variables contained within the neutral file. Both public domain and proprietary analyses codes may be attached with a minimal amount of effort, while maintaining full data and analysis integrity, and security. T/BESt's sotware framework, status, beginner-to-expert operation, interface architecture, analysis module addition, and key analysis modules are discussed. Representative examples of T/BEST benefit analyses are shown.

Generazio, Edward R.↗

Toward Synthesis, Analysis, and Certification of Security Protocols

Implemented security protocols are basically pieces of software which are used to (a) authenticate the other communication partners, (b) establish a secure communication channel between them (using insecure communication media), and (c) transfer data between the communication partners in such a way that these data only available to the desired receiver, but not to anyone else. Such an implementation usually consists of the following components: the protocol-engine, which controls in which sequence the messages of the protocol are sent over the network, and which controls the assembly/disassembly and processing (e.g., decryption) of the data. the cryptographic routines to actually encrypt or decrypt the data (using given keys), and t,he interface to the operating system and to the application. For a correct working of such a security protocol, all of these components must work flawlessly. Many formal-methods based techniques for the analysis of a security protocols have been developed. They range from using specific logics (e.g.: BAN-logic [4], or higher order logics [12] to model checking [2] approaches. In each approach, the analysis tries to prove that no (or at least not a modeled intruder) can get access to secret data. Otherwise, a scenario illustrating the &tack may be produced. Despite the seeming simplicity of security protocols ("only" a few messages are sent between the protocol partners in order to ensure a secure communication), many flaws have been detected. Unfortunately, even a perfect protocol engine does not guarantee flawless working of a security protocol, as incidents show. Many break-ins and security vulnerabilities are caused by exploiting errors in the implementation of the protocol engine or the underlying operating system. Attacks using buffer-overflows are a very common class of such attacks. Errors in the implementation of exception or error handling can open up additional vulnerabilities. For example, on a website with a log-in screen: multiple tries with invalid passwords caused the expected error message (too many retries). but let the user nevertheless pass. Finally, security can be compromised by silly implementation bugs or design decisions. In a commercial VPN software, all calls to the encryption routines were incidentally replaced by stubs, probably during factory testing. The product worked nicely. and the error (an open VPN) would have gone undetected, if a team member had not inspected the low-level traffic out of curiosity. Also, the use secret proprietary encryption routines can backfire, because such algorithms often exhibit weaknesses which can be exploited easily (see e.g., DVD encoding). Summarizing, there is large number of possibilities to make errors which can compromise the security of a protocol. In today s world with short time-to-market and the use of security protocols in open and hostile networks for safety-critical applications (e.g., power or air-traffic control), such slips could lead to catastrophic situations. Thus, formal methods and automatic reasoning techniques should not be used just for the formal proof of absence of an attack, but they ought to be used to provide an end-to-end tool-supported framework for security software. With such an approach all required artifacts (code, documentation, test cases) , formal analyses, and reliable certification will be generated automatically, given a single, high level specification. By a combination of program synthesis, formal protocol analysis, certification; and proof-carrying code, this goal is within practical reach, since all the important technologies for such an approach actually exist and only need to be assembled in the right way.

Schumann, Johann↗