Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “Internet”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 847 records · Page 47
All sourcesNASA NTRSDOE OSTI
DOE OSTI2020

Seismology in the Cloud: A New Streaming Workflow

Data-intensive research in seismology is experiencing a recent boom, driven in part by large volumes of available data and advances in the growing field of data science. However, there are significant barriers to processing large data volumes, such as long retrieval times from data repositories, complex data management, and limited computational resources. New tools and platforms have reduced the barriers to entry for scientific cluster computing, including the maturation of the commercial cloud as an accessible instrument for research. Here, we build a customized research cluster in the cloud to test a new workflow for large-scale seismic analysis, in which data are processed as a stream (retrieved on-the-fly and acted upon without storing), with data from the Incorporated Research Institutions for Seismology Data Management Center. We use this workflow to deploy a spectral peak detection algorithm over 5.6 TB of compressed continuous seismic data from 2074 stations of the USArray Transportable Array EarthScope network. Using a 50-node cluster in the cloud, we completed the noise survey in 80 hr, with an average data throughput of 1.7 GB per minute. By varying cluster sizes, we find the scaling of our analysis to be sublinear, due to a combination of algorithmic limitations and data center response times. The cloud-based streaming workflow represents an order-of-magnitude increase in acquisition and processing speed compared to a traditional download-store-process workflow, and offers the additional benefits of employing a flexible, accessible, and widely used computing architecture. It is limited, however, due to its reliance on Internet transfer speeds and data center service capacity, and may not work well for repeated analyses or those for which even higher data throughputs are needed. These research applications will require a new class of cloud-native approaches in which both data and analysis are in the cloud.

58 GEOSCIENCES↗
DOE OSTI2021

Evolution and Trends of Industrial Control System Cyber Incidents since 2017

The industrial control systems (ICSs) that manage our critical infrastructure are increasingly converging with corporate networks and the Internet as technology and businesses prioritize digital connectivity. These connections make them more vulnerable and available to malicious cyber actors who traditionally targeted the companies’ more public-facing information technology (IT) networks. This paper will review select publicly reported cyber incidents to highlight the continued and growing threat to ICS devices and operational technology (OT) environments. It will summarize the incident and when available, will provide information on the cyber actors, the vulnerabilities they exploited, and any publications the U.S. Government (USG) provided in response. Data belonging to the Department of Homeland Security (DHS) will be used to highlight quantitative trends concerning ICS incidents. This paper builds on “History of Industrial Control System Cyber Incidents” (Hemsley & Fisher 2018), a paper that highlighted select noteworthy threats and incidents to ICS systems up to 2017. This paper will similarly review select incidents occurring after the last previously reviewed incident, Triton/HatMan, December 2017, and will note ICS incident trends including IT/OT convergence and advances in cyber-threat actors’ capabilities in observed in the examined incidents.

99 GENERAL AND MISCELLANEOUS↗
DOE OSTI2019

IMHO Fine-Tuning Improves Claim Detection

Claims are the central component of an argument. Detecting claims across different domains or data sets can often be challenging due to their varying conceptualization. We propose to alleviate this problem by fine tuning a language model using a Reddit corpus of 5.5 million opinionated claims. These claims are self-labeled by their authors using the internet acronyms IMO/IMHO (in my (humble) opinion). Empirical results show that using this approach improves the state of art performance across four benchmark argumentation data sets by an average of 4 absolute F1 points in claim detection. As these data sets include diverse domains such as social media and student essays this improvement demonstrates the robustness of fine-tuning on this novel corpus.

Chakrabarty, Tuhin↗
DOE OSTI2022

Communication Requirements for Price-Based Grid Coordination

Meeting ambitious goals for carbon reduction and supporting an electric grid with high levels of renewable energy supply will require significant flexibility from the demand side. This paper outlines a system architecture and communication technology infrastructure to enable dynamic pricing to be used to finely tune coordination between the grid and its customers. Taking a cue from the success of Internet architecture, this system — Price-Based Grid Coordination — emphasizes simplicity and universality. It enables a wide variety of ways for prices and other signals to pass from the grid to individual flexible loads, including multiple possible locations for the intelligence that combines price signals with device functional needs. The paper includes a reference data model to describe how information from the utility level can be conveyed to customer devices, but independent of any particular protocol. The paper also summarizes technology standards development needs, and reviews research needs to address the full spectrum of coordination scenarios.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2022

Cloud-Control of Legacy Building Automation System: A case study

As Internet of Things devices and cloud-based platforms become more mature, Energy Management and Information Systems (EMIS) are increasingly gaining momentum in the building industry. In large commercial buildings, Fault-Detection and Diagnostic (FDD) and energy information systems (EIS) are now established technologies with tens of providers and thousands of deployment sites across North America. The new frontier for the EMIS technology is now represented by control systems that use advanced system optimization (ASO) methods to improve the operations of the HVAC system. Given the complexity of the integration of such systems with the existing building automation systems (BAS) and the higher risk involved with direct control of the HVAC, these systems are still emerging in the market. This paper presents the results of a project in which a start-up company partnered with a research institution to develop a cloud-based software EMIS solution and deployed it in a university campus in California. The software system included advanced sensing, data acquisition, storage and advanced control and analytics applications developed on top of the native BAS. The new platform controls ten buildings on the campus and the FDD and the ASO applications deployed on this platform were able to generate energy savings of up to 35% and 25% in certain buildings for each functionality respectively. Where the platform did not save energy, it improved building service (air quality). Lessons learned include the importance of collaborating with and training the building operators and evaluating whether the legacy system can work reliably with the new technology.

Prakash, Anand Krishnan↗
DOE OSTI2012

Lemnos Interoperable Security Program

The manner in which the control systems are being designed and operated in the energy sector is undergoing some of the most significant changes in history due to the evolution of technology and the increasing number of interconnections to other system. With these changes however come two significant challenges that the energy sector must face; 1) Cyber security is more important than ever before, and 2) Cyber security is more complicated than ever before. A key requirement in helping utilities and vendors alike in meeting these challenges is interoperability. While interoperability has been present in much of the discussions relating to technology utilized within the energy sector and especially the Smart Grid, it has been absent in the context of cyber security. The Lemnos project addresses these challenges by focusing on the interoperability of devices utilized within utility control systems which support critical cyber security functions. In theory, interoperability is possible with many of the cyber security solutions available to utilities today. The reality is that the effort required to achieve cyber security interoperability is often a barrier for utilities. For example, consider IPSec, a widely-used Internet Protocol to define Virtual Private Networks, or tunnels , to communicate securely through untrusted public and private networks. The IPSec protocol suite has a significant number of configuration options and encryption parameters to choose from, which must be agreed upon and adopted by both parties establishing the tunnel. The exercise in getting software or devices from different vendors to interoperate is labor intensive and requires a significant amount of security expertise by the end user. Scale this effort to a significant number of devices operating over a large geographical area and the challenge becomes so overwhelming that it often leads utilities to pursue solutions from a single vendor. These single vendor solutions may inadvertently lock utilities into proprietary and closed systems.

24 POWER TRANSMISSION AND DISTRIBUTION↗
DOE OSTI2012

A National Collaboratory to Advance the Science of High Temperature Plasma Physics for Magnetic Fusion

This report summarizes the work of the National Fusion Collaboratory (NFC) Project to develop a persistent infrastructure to enable scientific collaboration for magnetic fusion research. The original objective of the NFC project was to develop and deploy a national FES Grid (FusionGrid) that would be a system for secure sharing of computation, visualization, and data resources over the Internet. The goal of FusionGrid was to allow scientists at remote sites to participate as fully in experiments and computational activities as if they were working on site thereby creating a unified virtual organization of the geographically dispersed U.S. fusion community. The vision for FusionGrid was that experimental and simulation data, computer codes, analysis routines, visualization tools, and remote collaboration tools are to be thought of as network services. In this model, an application service provider (ASP provides and maintains software resources as well as the necessary hardware resources. The project would create a robust, user-friendly collaborative software environment and make it available to the US FES community. This Grid's resources would be protected by a shared security infrastructure including strong authentication to identify users and authorization to allow stakeholders to control their own resources. In this environment, access to services is stressed rather than data or software portability.

70 PLASMA PHYSICS AND FUSION TECHNOLOGY↗
DOE OSTI2012

TAS::89 0927::TAS RECOVERY - The Lean Green Energy Controller Machine

Achieving efficiency improvements and providing demand-response programs have been identified as key elements of our national energy initiative. The residential market is the largest, yet most difficult, segment to engage in efforts to meet these objectives. This project developed Energy Management System that engages the consumer and enables Smart Grid services, applications, and business processes to address this need. Our innovative solution provides smart controller providing dynamic optimization of energy consumption for the residential energy consumer. Our solution extends the technical platform to include a cloud based Internet of Things (IoT) aggregation of data sensors and actuators the go beyond energy management and extend to life style services provided through compelling mobile and console based user experiences.

32 ENERGY CONSERVATION, CONSUMPTION, AND UTILIZATI↗
DOE OSTI2013

Integrating Multiple Data Views for Improved Malware Analysis [Slides]

Malicious programs continue to be a serious threat within the internet landscape. In 2011, 403 million variants of malware were detected, a 41% increase from 2010. Malware cost consumers $\$$2.3 billion in 2011. Cybercrime cost companies $\$$338 billion in 2011. Given recent trends, and how lucrative the cybercrime industry has become, we can expect malware to be an ongoing threat.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2013

State-of-the-Art of Social Media Analytics Research

Social media consists of the tools, techniques, and technologies that use the internet to facilitate communication in an open environment. Types of social media include social networking sites (Facebook), microblogs (Twitter), blogs (Blogspot), chat (AIM), open-source mapping (Wikimapia), and photo and video sharing (Flikr, Picasa, YouTube). Current research in social media analytics tends to focus around three main domains: content analysis (popular topics, and sentiment/mood), group/network analysis (define users within a group, characterize how group members interact, and identify influential users), and prediction of real-world events or characteristics. Overviews of the most recent capabilities in each area are presented below. A brief explanation of “social media as a sensor” and challenges in future social media analytics research is included at the end.

Social Media Analytics↗
DOE OSTI2013

Southeast Regional CO 2 Sequestration Technology Training Program (SECARB-Ed)

Carbon capture and storage (CCS) technologies have tremendous potential for reducing carbon dioxide (CO 2 ) emissions and mitigating global climate change. These technologies encourage economic growth and have manageable influence on energy use. Deploying these technologies on a commercial scale will require expanding the workforce, including geologists, engineers, scientists and technicians, trained in CCS specialties. In 2009, the U.S. Department of Energy’s (DOE) National Energy Technology Laboratory (NETL) selected seven projects to help develop regional sequestration technology training centers in the United States. The “Southeast Regional CO 2 Sequestration Technology Training Program” (SECARB-Ed) was managed and administered by the Southern States Energy Board (SSEB) from November 16, 2009, to November 15, 2012. During this performance period, the SECARB-Ed partners were successful in achieving their primary objective of developing a self-sustaining regional CO 2 sequestration training program to facilitate the transfer of knowledge and technologies required for site development, operations and monitoring of commercial CCS projects. An experienced team of professionals participated in the SECARB-Ed program, with skills and competencies in geosciences, reservoir engineering and CCS related capture/separation, transportation, legal and regulatory disciplines. The SECARB-Ed Advisory Board included representatives from SSEB, Clemson University, GERALD R HILL PHD, Inc. (HILL), EnTech Strategies, LLC- Research Experience in Carbon Sequestration (RECS), Virginia Tech (VAT), Geological Survey of Alabama (GSA) at The University of Alabama and the Bureau of Economic Geology (BEG) at The University of Texas at Austin. The program encompasses fifteen of SSEB’s member states, including: Alabama, Arkansas, Florida, Georgia, Kentucky, Louisiana, Mississippi, Missouri, North Carolina, Oklahoma, South Carolina, Tennessee, Texas, Virginia and West Virginia. The SECARB-Ed partners implemented an organized sponsorship development program, developed short courses on CCS technologies, participated in regional training and other activities through outreach and networking and performed internet-based and electronic regional/basin technology transfer services. The partners addressed the most promising sequestration options in the region; the mix of industry and power plant sources of CO 2 ; regional transportation infrastructure; and the legal, regulatory, and institutional frameworks that exist in the southeast. As a result, SECARB-Ed fostered the development of a future workforce with disciplines specific to applied engineering and CCS science and technologies and advance the United States in its position as the leader in addressing climate change, near-zero emissions technologies and geologic sequestration technologies. The educational and training opportunities detailed in this Final Report demonstrate an effective means of disseminating a broad base of such knowledge and skills to a variety of students and professionals who are interested in the area of CCS technologies. The efforts of the SECARB-Ed Advisory Board and partners have resulted in a total of 1,951 professional development hours (PDHs) awarded to 1,131 participants.

Baskin, Kathryn A.↗
DOE OSTI2013

Phase II Nevada Water Resources Data, Modeling, and Visualization (DMV) Center (Final Report)

Water is unquestionably a critical resource throughout the United States. In the semi-arid west -- an area stressed by increase in human population and sprawl of the built environment -- water is the most important limiting resource. Crucially, science must understand factors that affect availability and distribution of water. To sustain growing consumptive demand, science needs to translate understanding into reliable and robust predictions of availability under weather conditions that could be average but might be extreme. These predictions are needed to support current and long-term planning. Similar to the role of weather forecast and climate prediction, water prediction over short and long temporal scales can contribute to resource strategy, governmental policy and municipal infrastructure decisions, which are arguably tied to the natural variability and unnatural change to climate. Change in seasonal and annual temperature, precipitation, snowmelt, and runoff affect the distribution of water over large temporal and spatial scales, which impact the risk of flooding and the groundwater recharge. Anthropogenic influences and impacts increase the complexity and urgency of the challenge. The goal of this project has been to develop a decision support framework of data acquisition, digital modeling, and 3D visualization. This integrated framework consists of tools for compiling, discovering and projecting our understanding of processes that control the availability and distribution of water. The framework is intended to support the analysis of the complex interactions between processes that affect water supply, from controlled availability to either scarcity or deluge. The developed framework enables DRI to promote excellence in water resource management, particularly within the Lake Tahoe basin. In principle, this framework could be replicated for other watersheds throughout the United States. Phase II of this project builds upon the research conducted during Phase I, in which the hydrologic framework was investigated and the development initiated. Phase II concentrates on practical implementation of the earlier work but emphasizes applications to the hydrology of the Lake Tahoe basin. Phase 1 efforts have been refined and extended by creating a toolset for geographic information systems (GIS) that is usable for disparate types of geospatial and geo-referenced data. The toolset is intended to serve multiple users for a variety of applications. The web portal for internet access to hydrologic and remotely sensed product data, prototyped in Phase I, has been significantly enhanced. The portal provides high performance access to LANDSAT-derived data using techniques developed during the course of the project. The portal is interactive, and supports the geo-referenced display of hydrologic information derived from remotely sensed data, such as various vegetative indices used to calculate water consumption. The platform can serve both internal and external constituencies using inter-operating infrastructure that spans both sides of the DRI firewall. The platform is intended grow its supported data assets and to serve as a template for replication to other geographic areas. An unanticipated development during the project was the use of ArcGIS software on a new computer system, called the IBM PureSytems, and the parallel use of the systems for faster, more efficient image processing. Additional data, independent of the portal, was collected within the Sagehen basin and provides detailed information regarding the processes that control hydrologic responses within mountain watersheds. The newly collected data include elevation, evapotranspiration, energy balance and remotely sensed snow-pack data. A Lake Tahoe basin hydrologic model has been developed, in part to help predict the hydrologic impacts of climate change. The model couples both the surface and subsurface hydrology, with the two components having been independently calibrated. Results from the coupled simulations involving both surface water and groundwater processes show that it is possible to fairly accurately simulate lake effects and water budget variables over a wide range of dry and wet cycles in the historical record. The Lake Tahoe basin is representative of the hydrology, topography and climate throughout the Sierra Nevada Range, and the entire model development is prototypical of the efforts required to replicate the decision support framework to other locales. The Lake Tahoe model in particular, could allow water managers to evaluate more accurately components of the water budget (ET, runoff, groundwater, etc) and to answer important questions regarding water resources in northern Nevada. This report discusses the geographic scale and the hydrologic complexity of the calibrated model developed as part of this project, as well as simulation results for historical and future climate projects To enable human-driven data exploration and discovery, de novo software for a globalized rendering module that extends the capability of our evolving custom visualization engine from Phase I (called SMEngine) has been developed. The new rendering component, called Horizon, supports terrain rendering capable of displaying and interrogating both remotely sensed and modeled data. The development of Horizon necessitated adaptation of the visualization engine to allow extensible integration of components such as the global rendering module and support for associated features. The resulting software is general in its GIS capability, but a specific Lake Tahoe visualization application suitable for immersive decision support in the DRIVE6 virtual reality facility has been developed. During the development, various features to enhance the value of the visualization experience were explored, including the use of hyperspectral image overlays. An over-arching goal of the visualization aspect of the project has been to develop and demonstrate the CAVE (CAVE Automatic Virtual Environment) as a practical tool for hydrologic research.

54 ENVIRONMENTAL SCIENCES↗
DOE OSTI2013

Final Technical Report for "High Energy Physics at The University of Iowa"

Particle Physics explores the very fundamental building blocks of our universe: the nature of forces, of space and time. By exploring very energetic collisions of sub-nuclear particles with sophisticated detectors at the colliding beam accelerators (as well as others), experimental particle physicists have established the current theory known as the Standard Model (SM), one of the several theoretical postulates to explain our everyday world. It explains all phenomena known up to a very small fraction of a second after the Big Bang to a high precision; the Higgs boson, discovered recently, was the last of the particle predicted by the SM. However, many other phenomena, like existence of dark energy, dark matter, absence of anti-matter, the parameters in the SM, neutrino masses etc. are not explained by the SM. So, in order to find out what lies beyond the SM, i.e., what conditions at the earliest fractions of the first second of the universe gave rise to the SM, we constructed the Large Hadron Collider (LHC) at CERN after the Tevatron collider at Fermi National Accelerator Laboratory. Each of these projects helped us push the boundary further with new insights as we explore a yet higher energy regime. The experiments are extremely complex, and as we push the boundaries of our existing knowledge, it also requires pushing the boundaries of our technical knowhow. So, not only do we pursue humankind’s most basic intellectual pursuit of knowledge, we help develop technology that benefits today’s highly technical society. Our trained Ph.D. students become experts at fast computing, manipulation of large data volumes and databases, developing cloud computing, fast electronics, advanced detector developments, and complex interfaces in several of these areas. Many of the Particle physics Ph.D.s build their careers at various technology and computing facilities, even financial institutions use some of their skills of simulation and statistical prowess. Additionally, last but not least, today’s discoveries make for tomorrow’s practical uses of an improved life style, case in point, internet technology, fiber optics, and many such things. At The University of Iowa we are involved in the LHC experiments, ATLAS and CMS, building equipment, with calibration and maintenance, supporting the infrastructure in hardware, software and analysis as well as participating in various aspects of data analyses. Our theory group works on fundamentals of field theories and on exploration of non-accelerator high energy neutrinos and possible dark matter searches.

72 PHYSICS OF ELEMENTARY PARTICLES AND FIELDS↗
DOE OSTI2013

Transportation Energy Data Book: Edition 32

The Transportation Energy Data Book: Edition 32 is a statistical compendium prepared and published by Oak Ridge National Laboratory (ORNL) under contract with the U.S. Department of Energy, Office of Energy Efficiency and Renewable Energy, Vehicle Technologies Office. Designed for use as a desk-top reference, the Data Book represents an assembly and display of statistics and information that characterize transportation activity, and presents data on other factors that influence transportation energy use. The purpose of this document is to present relevant statistical data in the form of tables and graphs. The latest edition of the Data Book is available to a larger audience via the Internet (cta.ornl.gov/data). This edition of the Data Book has 12 chapters which focus on various aspects of the transportation industry. Chapter 1 focuses on petroleum; Chapter 2 energy; Chapter 3 highway vehicles; Chapter 4 light vehicles; Chapter 5 heavy vehicles; Chapter 6 alternative fuel vehicles; Chapter 7 fleet vehicles; Chapter 8 household vehicles; Chapter 9 nonhighway modes; Chapter 10 transportation and the economy; Chapter 11 greenhouse gas emissions; and Chapter 12 criteria pollutant emissions. The sources used represent the latest available data. There are also three appendices which include detailed source information for some tables, measures of conversion, and the definition of Census divisions and regions. A glossary of terms and a title index are also included for the reader's convenience.

Cars↗
DOE OSTI2014

Establishing MICHCARB, a geological carbon sequestration research and education center for Michigan, implemented through the Michigan Geological Repository for Research and Education, part of the Department of Geosciences at Western Michigan University

The Michigan Geological Repository for Research and Education (MGRRE), part of the Department of Geosciences at Western Michigan University (WMU) at Kalamazoo, Michigan, established MichCarb—a geological carbon sequestration resource center by: • Archiving and maintaining a current reference collection of carbon sequestration published literature • Developing statewide and site-specific digital research databases for Michigan’s deep geological formations relevant to CO2 storage, containment and potential for enhanced oil recovery • Producing maps and tables of physical properties as components of these databases • Compiling all information into a digital atlas • Conducting geologic and fluid flow modeling to address specific predictive uses of CO2 storage and enhanced oil recovery, including compiling data for geological and fluid flow models, formulating models, integrating data, and running the models; applying models to specific predictive uses of CO2 storage and enhanced oil recovery • Conducting technical research on CO2 sequestration and enhanced oil recovery through basic and applied research of characterizing Michigan oil and gas and saline reservoirs for CO2 storage potential volume, injectivity and containment. Based on our research, we have concluded that the Michigan Basin has excellent saline aquifer (residual entrapment) and CO2/Enhanced oil recovery related (CO2/EOR; buoyant entrapment) geological carbon sequestration potential with substantial, associated incremental oil production potential. These storage reservoirs possess at least satisfactory injectivity and reliable, permanent containment resulting from associated, thick, low permeability confining layers. Saline aquifer storage resource estimates in the two major residual entrapment, reservoir target zones (Lower Paleozoic Sandstone and Middle Paleozoic carbonate and sandstone reservoirs) are in excess of 70-80 Gmt (at an overall 10% storage efficiency factor; an approximately P50 probability range for all formations using DOE-NETL, 2010, storage resource estimation methodology). Incremental oil production resulting from successful implementation of CO2/EOR for the highest potential Middle Paleozoic reef reservoirs (Silurian, Northern Niagaran Reef trend) in Michigan is estimated at 130 to over 200 MMBO (22-33 Mm3). In addition, between 200 and 400 Mmt of CO2 could be sequestered in the course of successful deployment of CO2/EOR in the northern reef trend’s largest depleted (primary production) oil fields (those that have produced in excess of 500,000 BO; 80,000 m3of oil). • Effecting technology transfer to members of industry and governmental agencies by establishing an Internet Website at which all data, reports and results are accessible; publishing results in relevant journals; conducting technology transfer workshops as part of our role as the Michigan Center of the Petroleum Technology Transfer Council or any successor organization.

58 GEOSCIENCES↗
DOE OSTI2014

FTP 100: An Ultra-High Speed Data Transfer Service Over Next Generation 100 Gigabit Per Second Network

Data-intensive applications, including high energy and nuclear physics, astrophysics, climate modeling, nano-scale materials science, genomics, and financing, are expected to generate exabytes of data over the coming years, which must be transferred, visualized, and analyzed by geographically distributed teams of users. High-performance network capabilities must be available to these users at the application level in a transparent, virtualized manner. Moreover, the application users must have the capability to move large datasets from local and remote locations across network environments to their home institutions. To solve these challenges, the main goal of our project is to design and evaluate high-performance data transfer software to support various data-intensive applications. First, we have designed a middleware software that provides access to Remote Direct Memory Access (RDMA) functionalities. This middleware integrates network access, memory management and multitasking in its core design. We address a number of issues related to its efficient implementation, for instance, explicit buffer management and memory registration, and parallelization of RDMA operations, which are vital to delivering the benefit of RDMA to the applications. Built on top of this middleware, an implementation and experimental evaluation of the RDMA-based FTP software, RFTP, is described and evaluated. This application has been implemented by our team to exploit the full capabilities of advanced RDMA mechanisms for ultra-high speed bulk data transfer applications on Energy Sciences Network (ESnet). Second, we designed our data transfer software to optimize TCP/IP based data transfer performance such that RFTP can be fully compatible with today’s Internet. Our kernel optimization techniques with Linux system calls sendfile and splice, can reduce data copy cost. In this report, we summarize the technical challenges of our project, the primary software design methods, the major project milestones achieved, as well as the testbed evaluation work and demonstrations during our project life time.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2014

RBAC Driven Least Privilege Architecture For Control Systems

The concept of role based access control (RBAC) within the IT environment has been studied by researchers and was supported by NIST (circa 1992). This earlier work highlighted the benefits of RBAC which include reduced administrative workload and policies which are easier to analyze and apply. The goals of this research were to expand the application of RBAC in the following ways. Apply RBAC to the control systems environment: The typical RBAC model within the IT environment is used to control a user’s access to files. Within the control system environment files are replaced with measurement (e.g., temperature) and control (e.g. valve) points organized as a hierarchy of control assets (e.g. a boiler, compressor, refinery unit). Control points have parameters (e.g., high alarm limit, set point, etc.) associated with them. The RBAC model is extended to support access to points and their parameters based upon roles while at the same time allowing permissions for the points to be defined at the asset level or point level directly. In addition, centralized policy administration with distributed access enforcement mechanisms was developed to support the distributed architecture of distributed control systems and SCADA; Extend the RBAC model to include access control for software and devices: The established RBAC approach is to assign users to roles. This work extends that notion by first breaking the control system down into three layers 1) users, 2) software and 3) devices. An RBAC model is then created for each of these three layers. The result is that RBAC can be used to define machine-to-machine policy enforced via the IP security (IPsec) protocol. This highlights the potential to use RBAC for machine-to-machine connectivity within the internet of things; and Enable dynamic policy based upon the operating mode of the system: The IT environment is generally static with respect to policy. However, large cyber physical systems such as industrial controls have various operating modes (start-up, normal operation, emergency, shut-down and maintenance are typical). The policy enforcement architecture must be able to support changes in access permissions as the mode of the control system changes. For example an operator’s role may not allow the operator to shut down a pump during “normal operation” but that same operator role may be given permission to shut down the pump if the refinery transitions to “emergency” mode. The effectiveness of the approach was validated by applying it to the Experion Process Knowledge System. This is a large commercial industrial control system often used to control oil refineries and other assets within the oil and gas sector. As a by-product, other industries using Experion (Pharmaceuticals, Specialty Chemicals, etc.) also benefit from increased security. Policies representative of those that would be used within an oil refinery were created and validated against the RBAC model as implemented in the underlying SQL database. The administration of policy is simplified which in turn makes it practical for security administrators to specify policies which enforce least privilege. The result is a qualitative reduction in risk. The benefits of the enhanced RBAC model are clear and as a result. Honeywell is incorporating portions of the RBAC research into the 2014 release of Experion.

97 MATHEMATICS AND COMPUTING↗
DOE OSTI2013

Electric Vehicle Communications Standards Testing and Validation - Phase II: SAE J2931/1

Vehicle to grid communication standards enable interoperability among vehicles, charging stations and utility providers and provide the capability to implement charge management. Several standards initiatives by the Society of Automobile Engineers (SAE), International Standards Organization and International Electrotechnical Commission (ISO/IEC), and ZigBee/HomePlug Alliance are developing requirements for communication messages and protocols. Recent work by the Electric Power Research Institute (EPRI) in collaboration with SAE and automobile manufacturers has identified vehicle to grid communication performance requirements and developed a test plan as part of SAE J2931/1 committee work. This laboratory test plan was approved by the SAE J2931/1 committee and included test configurations, test methods, and performance requirements to verify reliability, robustness, repeatability, maximum communication distance, and authentication features of power line carrier (PLC) communication modules at the internet protocol layer level. The goal of the testing effort was to select a communication technology that would enable automobile manufacturers to begin the development and implementation process. The EPRI/Argonne National Laboratory (ANL)/Pacific Northwest National Laboratory (PNNL) testing teams divided the testing so that results for each test could be presented by two teams, performing the tests independently. The PNNL team performed narrowband PLC testing including the Texas Instruments (TI) Concerto, Ariane Controls AC-CPM1, and the MAXIM Tahoe 2 evaluation boards. The scope of testing was limited to measuring the vendor systems communication performance between Electric Vehicle Support Equipment (EVSE) and plug-in electric vehicles (PEV). The testing scope did not address PEV’s CAN bus to PLC or PLC to EVSE (Wi-Fi, cellular, PLC Mains, etc.) communication integration. In particular, no evaluation was performed to delineate the effort needed to translate the IPv6/SEP2.0 messages to PEV’s CAN bus. The J2931/1 laboratory test results were presented to the SAE membership on March 20-22, 2012. The SAE committee decided to select HomePlug GreenPHY (HPGP) as the communication technology to use between the PEV and EVSE. No technology completely met all performance requirements. Both the MAXIM Tahoe 2 and TI Concerto met the 100Kbps throughput requirement, are estimated to meet the latency measurement performance, and met the control pilot impairment requirements. But HPGP demonstrated the potential to provide a data throughput rate of 10x of the requirement and either met or showed the potential to meet the other requirements with further development.

33 ADVANCED PROPULSION SYSTEMS↗