Search NASA⌕ Search

SEARCH · Search NASA

Results for “Resilient control”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

At least 343 records · Page 19

CCE Phase 4: Mitigations and Protections

During the first three phases, the CCE Team identified any instances of unverified trust in the organization’s technologies, processes, and procedures, any or all of which could be used to adversely impact the system. In Phase 4, the primary goal is to remove the possibility of the end effect—that is, to develop means or mechanisms that will ensure an adversary cannot achieve their Objective (identified in Phase 1) via cyber means. Such measures are known as “protections.” In some cases, this may not be possible, or the implementation of protections may not be desirable due to other considerations. In such cases, means and mechanisms should be developed that focus on putting an organization in a better position to identify adversary activities directed against it, increasing the cost of cyber-enabled sabotage for the adversary (including making things more difficult for the adversary and attempting to lower the chances an adversary may succeed), or decreasing the recovery cost of a victim organization. These measures are known as “mitigations.”

99 GENERAL AND MISCELLANEOUS↗

CCE Phase 3: Consequence-based Targeting

While Phase 2 was a data collection effort, Phase 3 is a targeting effort. In Phase 3, organizations systematically identify the necessary steps for adversary success - all from the adversary’s perspective. A key component to this approach is identifying the critical information needs, targets, access, and actions required for the adversary to achieve the desired effect. These Critical Needs are tied to accomplishing the HCE, such as the technical requirements for the payload (Development), or the access required to deliver a payload (Deployment).

99 GENERAL AND MISCELLANEOUS↗

CCE Phase 2: System-of-System Analysis

During Phase 1, Consequence Prioritization, the CCE Team identified High Consequence Events (HCEs) that can be accomplished through cyber means to impact critical functions, services, and processes. During Phase 2, System-of-Systems Analysis (SoS Analysis), the CCE Team will conduct a systematic review and analysis of information related to the equipment, systems, processes, operations, maintenance, testing, and procurement practices based on the HCEs identified in Phase 1.

99 GENERAL AND MISCELLANEOUS↗

CCE Phase 1: Consequence Prioritization

Idaho National Laboratory (INL) developed the Consequence-driven Cyber-informed Engineering (CCE) methodology to provide public and private organizations with steps to work collaboratively and establish a working relationship to protect critical infrastructure and other national assets. This process is a considerable undertaking, iterative in nature, and—as time and resources allow—should become a part of a company’s culture. By focusing on the impact of potentially negative Events, CCE provides a better understanding of how and why adversaries can affect critical functions and services using cyber-enabled sabotage. This document describes Phase 1 of the CCE process.

99 GENERAL AND MISCELLANEOUS↗

Coastal Community Resiliency Enhancement Using Marine Hydrokinetic (MHK) Resources and Networked Microgrids

Enormous challenges are inherent in the operation of modern distribution grids. In particular, distribution feeders can be severely compromised under extreme conditions such as large-scale weather events (e.g., hurricanes, floods, and other types of natural disasters). To combat this problem, they turn to local energy support from distributed energy resources, such as solar and wind, marine hydrolinetic (MHK), and other types of energy. In this report, we investigate the actual characteristics of MHK resources to enhance coastal community resiliency. Two typical types of MHK resources (i.e., wave and tidal resources) illustrate the coastal resilience enhancement framework. By identifying their operational characteristics, such as target time-scales and potential power generation variations, we detail a holistic coastal community resiliency enhancement framework that integrates both optimization and control efforts. The optimization problem is formulated to significantly minimize the power outage time at the critical infrastructures in coastal communities by implementing multiple autonomous and dynamic microgrids around MHK resources. Therefore, during severe power outages caused by natural disasters (e.g., floods, hurricanes), the coastal community load profiles can be satisfied using local MHK resources in each microgrid with limited or no power support from upstream power grids.

16 TIDAL AND WAVE POWER↗

Measuring the Resilience of Advanced Life Support Systems

Despite the central importance of crew safety in designing and operating a life support system, the metric commonly used to evaluate alternative Advanced Life Support (ALS) technologies does not currently provide explicit techniques for measuring safety. The resilience of a system, or the system s ability to meet performance requirements and recover from component-level faults, is fundamentally a dynamic property. This paper motivates the use of computer models as a tool to understand and improve system resilience throughout the design process. Extensive simulation of a hybrid computational model of a water revitalization subsystem (WRS) with probabilistic, component-level faults provides data about off-nominal behavior of the system. The data can then be used to test alternative measures of resilience as predictors of the system s ability to recover from component-level faults. A novel approach to measuring system resilience using a Markov chain model of performance data is also developed. Results emphasize that resilience depends on the complex interaction of faults, controls, and system dynamics, rather than on simple fault probabilities.

Bell, Ann Maria↗

Distributed Wind-Hybrid Microgrids with Autonomous Controls and Forecasting

Distributed wind-hybrid microgrids have the potential to provide key resilience and economic benefits to both the customers they serve and the utility grids they are connected to. Such microgrids will likely be a key part of the grid of the future, whether connected to large utility grids or linked together in multi-microgrid systems. Through the hybridization of distributed wind and solar photovoltaics, autonomous device-level and system-level controls, battery energy storage systems with smart inverters, and forecasting, these microgrids could maintain local stability and provide grid services - all with renewable power. In the literature, these elements have been considered individually. However, they have not been combined and demonstrated at a high fidelity, which is essential to prove the concept's operation before moving to hardware-in-the-loop and physical demonstrations. In this work, we develop a high-fidelity MATLAB-Simulink model of a real distributed wind-hybrid microgrid that includes all these elements. We demonstrate the microgrid maintaining stability and production in a variety of islanded, grid-connected, and transition scenarios. This includes riding through faults and grid transitions, handling resource variability, and providing grid services. The results demonstrate, at a high fidelity, how distributed wind-hybrid microgrids can operate in an economic and resilient fashion. Finally, we provide recommendations for future research to move advanced distributed wind-hybrid microgrids toward deployment.

ancillary services↗

High Value Opportunities to Advance Automation in Electric Grid Control Rooms

Grid operators and electric utilities are increasingly driven to develop automated processes and introduce decision support tools to reduce cognitive demand on System Operations staff and aid in the operational decision-making process. However, System Operation staff are traditionally hesitant to implement and accept new solutions, automation processes, and tools within the control room. This paper explores high-value opportunities to advance automation in electric grid control rooms for the purpose of improving grid safety, reliability, and resiliency during normal and emergency operating conditions.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Networked Microgrid Operations: Supporting a Resilient Electric Power Infrastructure

Modern electric power systems operate using large generating units managed with a centralized control structure. The current systems are the result of over a hundred years of technological development and consolidation to leverage economies of scale. While the existing systems have proven cost effective and reliable, modern systems are experiencing a wide range of operational challenges that are causing a reexamination of the centralized control structure. Despite the nearly universal adoption of centralized control, electric power systems are fractal in their operational requirements. Specifically, the fundamental operational requirements are the same, regardless of the system size. While past technologies have not allowed for exploitation of this fractal behavior, emerging technologies are making it possible; these technologies include grid-forming inverters, modern telecommunications systems, and distributed control architectures. Here we show emerging technologies that allow the fractal operational requirements of electric power systems to be exploited as networked microgrids to increase the resiliency of the world’s critical electrical infrastructure.

Schneider, Kevin P.↗

Design, Deployment, and Characterization of the World’s First Flexible Large Power Transformer

GE Research and its partner Prolec GE have designed, built and deployed in the field the world’s first flexible power transformer. The flexible power transformer is a transmission class 3-phase autotransformer configurable in impedance and in voltage which allows it to serve as a universal spare for multiple units in a given fleet. However, the key innovation in this new concept is the online adjustable leakage impedance which allows the transformer to change its impedance without interrupting the transmission line operation. The flexible power transformer can be designed with up to three low voltage transmission class ratings and up to 12 impedance values changeable both online and offline. This report provides an overview of the design, manufacturing, testing, and commissioning of the 165kV, 60MVA prototype built including the results of the field performance validation tests. The prototype was specified in collaboration with Cooperative Energy, the utility host. It was designed and tested in the factory according to IEEE standard C57.12.00 and followed all protocols for transportation, installation, and commissioning of a power transformer. In addition to the prototype, a flexible protection system capable of automatically adjusting its settings upon the transformer impedance was also developed and deployed in the for testing and validation. On September 3, 2021 the prototype was energized in Cooperative Energy’s substation in Columbia, Mississippi to become the world’s first flexible power transformer in operation. Its performances and impact on the grid operation were demonstrated through different field tests. Results obtained confirm that the impedance of the flexible transformer can be varied under load through its full range, from 4.3% to 9.3%, without adverse impacts on the line operation, the protection system, the transformer stability and health condition. Results also proved that the flexible transformer is very effective in controlling power transfer through the line or load sharing between units operating in parallel. Indeed, it was proven that higher impedances decrease the thruput power of the transformer while lower impedances increase it. Up to 26MW was controllable on a line loading of 45MVA. It was also possible to demonstrate that the variation of the transformer impedance has no effect on the circulating current between units in parallel, except a minor transient during the impedance change. It was also proven that the flexible protection relay can update its protection settings automatically when the impedance change was detected. The prototype has operated continuously for more than 12 months now with a peak load exceeding 50MVA corresponding to >80% of its ONAN power rating. No alarm, trip or sign of failure has been reported by the utility. In addition to the development and deployment of the flexible transformer prototype, investigations were carried out on new nanodielectric fluids to replace the mineral oil used in power transformers with the goal of reducing their footprint and weight. The key parameters that were targeted for improvement included the breakdown voltage to reduce clearances between windings and tank hence the footprint; viscosity and thermal conductivity to increase the cooling efficiency and therefore to reduce the winding material. Several nanodielectric mixtures with mineral oil including with alumina (Al2O3), titania (TiO2) and Borum Nitrate (BN) with different surfactants have been analyzed and tested. Unfortunately, despite encouraging results no nanofluid candidate has been found viable to replace mineral oil. With the formulations tested, breakdown voltages are generally similar to mineral oil at lower particle contents and worse at higher particle contents. Viscosity appreciably increased at particles concertation over 2 wt% and thermal conductivity increased slightly at 5wt% and appears to be 10-15% higher at 10 wt% particle content. It is recommended to continue investigations to find solutions that can help increase the power density of future flexible power transformers. Flexible power transformers can significantly help the future power grid by providing more flexibility and resiliency. Indeed, by providing voltage and impedance flexibility, flexible power transformers reduce the need for multiple spares, hence inventory costs for utilities. With their online controllable impedance, they can provide support to the grid and help manage short-circuit currents, power flow, line congestion, and grid stability which will become more important with higher penetrations of intermittent renewable resources. During the field validation tests, it was demonstrated that up to 26MW was controllable on a line loading of 45MVA when the transformer impedance was varied from its minimum to its maximum range. Also, with the impedance range, the short-circuit currents could be reduced by up to 38% at the load side of the transformer. With its controllable impedance, flexible transformers can be used in future strategies of grid resilience to help better prepare the grid to face forecasted severe events including storms, heat waves and contingencies. The flexible power transformers can also find role in other applications including high voltage transmission cables such as offshore wind farms where solutions for energizing the cables and managing the reactive power are of critical importance. The designed flexible power transformer is now fully validated and ready for commercialization. Further analysis on the benefits of flexible power transformers for grid stability and short-circuit management including current limiting capability, reclosure and line restoration, control of inrush current, sizing of flexible AC components (FACTS) would help its rapid adoption by the industry.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Alternative Metrics for Evaluating the Resilence of Advanced Life Support Systems

Ensuring the safety of the crew is a key performance requirement of a life support system. However, a number of conceptual and practical difficulties arise when devising metrics to concretely measure the ability of a life support system to maintain critical functions in the presence of anticipated and unanticipated faults. Resilience is a dynamic property of a life support system that depends on the complex interactions between faults, controls and system hardware. We review some of the approaches to understanding the robustness or resilience of complex systems being developed in diverse fields such as ecology, software engineering and cell biology and discuss their applicability to regenerative life support systems. We also consider how approaches to measuring resilience vary depending on system design choices such as the definition and choice of the nominal operating regime. Finally, we explore data collection and implementation issues such as the key differences between the instantaneous or conditional and average or overall measures of resilience. Extensive simulation of a hybrid computational model of a water revitalization subsystem (WRS) with probabilistic, component-level faults provides data about off-nominal behavior of the system. The data are used to consider alternative measures of resilience as predictors of the system's ability to recover from component-level faults.

Bell, Ann Maria↗

Vulnerability Studies Under EMP: Impedance and PCI Testing of the Grid Control Devices

Control devices such as inverters and generator controllers are critical for the stable operation of the power grid, especially for power stability control and power dispatch. However, the Electromagnetic Pulse (EMP) is a potential threat to electronic devices in modern power grids, therefore decreasing the power grid resilience and bringing unrecoverable damages to the devices. To reveal the impact mechanism of the EMP, impedance and Pulse Current Injection (PCI) testing is established to study the vulnerability of the grid control devices. The impedance of the grid control devices is accurately measured using impedance analyzers with different frequency ranges. Then the voltage and current responses are tested based on the PCI testing. The vulnerability experiments based on two grid control devices are carried out. And the comparison results reveal that most ports would be damaged under EC8, and some ports can survive under EC5 according to the calculated PCI response and cumulative energy. The results can provide a reference for the future design of control devices and the strategic resilience of power grids.

Qiu, Wei↗

Cyber risk assessment and investment optimization using game theory and ML-based anomaly detection and mitigation for wide-area control in smart grids

The electric power grid is increasingly becoming susceptible to cyber attacks that exploit vulnerabilities in the smart grid control, information, and physical layers. Successful cyber attacks can have catastrophic impacts on the social and economic well-being of any nation all over the globe. It has, thus, become imperative to secure the smart grid against such adversarial actions to ensure stable, secure, and reliable operation of the grid. The existing research and industry practices prove to be inadequate in terms of providing pragmatic and effective defense methodologies and measures for long-term cybersecurity planning and real-time cybersecurity for grid operation. For example, existing works lack models that incorporate uncertain behavior of cyber-attackers and pragmatic defense measures for cyber risk assessment and cybersecurity investment optimization which often provide unreliable and strictly qualitative solutions to these problems. At the same time, with the growing number of cyber incidents in the grid, there still exists a need to develop attack-resilient algorithms for wide-area monitoring, protection, and control (WAMPAC) applications like the wide-area voltage control systems (WAVCS) for Flexible AC Transmissions Systems (FACTS) that lack in scalable and feasible solutions from the cybersecurity perspective. This dissertation proposes novel models and methodologies for: (1) Cybersecurity planning, and (2) Cybersecurity for system operation. The cybersecurity planning is achieved through cyber risk assessment and cybersecurity resource investment optimization for long-term cybersecurity of the grid using game theory and attack-defense trees. Cybersecurity for system operation consists of development of cyber anomaly detection and mitigation algorithms for flexible AC transmission system (FACTS) controller-based wide-area voltage control systems (WAVCS) using machine learning (ML), and software defined networking-based moving target defense network routing for achieving real-time cyber-physical security for grid operations. This is followed by hardware-in-the-loop (HIL) implementation and evaluation of these attack prevention, detection, and mitigation algorithms and methodologies showcasing their feasibility in a close to real-world environment. For cybersecurity planning, a novel approach involving a combination of game theory and attack defense trees (ADT) for optimal cybersecurity resource allocation in the smart grid is proposed. This methodology involves modeling of the cyber-physical smart grid substations as ADTs, defining attacker costs, defense costs, and attack probabilities for attack access points. Using game theoretical formulation, optimal defense strategies for the defender of the system to invest cybersecurity resources in the grid are obtained. Additionally, a game-theoretic framework is developed for quantitative cyber-physical risk assessment of the grid under a dynamically changing cyber threat space and uncertain behavior of cyber attackers which is further used to optimize investments in the smart grid's cybersecurity resources. The attacker, defender, and the smart grid system are modeled while incorporating attacker-stochasticity and federal guidelines for smart grid cybersecurity. This allows quantification of threat, vulnerabilities, and attack impact of the grid for quantitative risk assessment. The defender's budget to invest in the security resources in the grid is optimized based on the strategies leading to minimum system risk. The evaluation of the proposed solutions highlight the feasibility for practical implementation of these methodologies and algorithms in the smart grid, while taking the federal requirements and guidelines for smart grid security into consideration. For achieving cybersecurity for system operation, attack prevention, detection, and mitigation algorithms and methodologies are developed specifically for FACTS-based WAVCS. Anomaly detection and mitigation in the WAVCS are achieved using algorithms based on machine learning which involves offline training and testing of ML models with CPS datasets incorporating physics-based features that allow accurate distinction between system faults and cyber attacks. For attack prevention, a methodology based on software defined network (SDN)-based moving target defense (MTD) network routing is proposed that enables prevention of Denial of Service (DoS) type attacks on the smart grid communication system. Subsequently, these methodologies and algorithms are implemented and evaluated on an HIL testbed that allows for real-time attack prevention, detection, and mitigation of emulated cyber attacks on the WAVCS in a close to real-world environment. The results show highly accurate and efficient performance of the implemented algorithms and methodologies with the smart grid system operating within the NERC's system operation limits even in the presence of DoS and data integrity cyber attacks. This work opens up future research opportunities in other directions such as (1) Expanding cybersecurity planning methodologies to real-time cyber contingency analysis with different game formulations; and (2) Applying the cybersecurity for system operation algorithms to broader categories of wide-area control applications.

24 POWER TRANSMISSION AND DISTRIBUTION↗

Optimization-Based Resiliency Verification in Microgrids via Maximal Adversarial Set Characterization

Critical energy infrastructures are increasingly relying on advanced sensing and control technologies for efficient and optimal utilization of flexible energy resources. Algorithmic procedures are needed to ensure that such systems are designed to be resilient to a wide range of cyber-physical adversarial events. This paper provides a robust optimization framework to quantify the largest adversarial perturbation that a system can accommodate without violating pre-specified resiliency metrics. We formulate the maximal adversarial set characterization as a bi-level optimization problem which is solved via Lagrangian relaxations.We illustrate the proposed algorithm on an islanded microgrid example: a modified IEEE 123-node feeder with distributed energy resources. Simulations are carried out to characterize the tolerable adversarial perturbations for varying levels of available flexibility (energy reserves).

Nazir, Mohammad Nawaf↗

Enhancing the Operational Resilience of Advanced Reactors with Digital Twins by Recurrent Neural Networks

Because of a lack of operational data and uncertainty in evaluation model for abnormal and accident scenarios, the established operating procedures can be biased in characterizing the reactor states and ensuring operational resilience. To reduce uncertainty associated with actual plant conditions, digital twin (DT) technology is suggested to support operator’s decision-making by effectively extracting and using knowledge of the current and future plant states from the knowledge base. This study first builds a knowledge base based on the characterization of issue space and the simulation tool. Next, this study discusses diagnosis and prognosis DTs for enhancing operational resilience by recovering the complete states of reactors and by predicting the future reactor behaviors. Finally, the decision-making module of the control system can determine the optimal control strategy that meets operational goals during loss-of-flow scenarios. To demonstrate and evaluate the DTs capability for supporting the operations of nuclear reactors, this study develops and assesses both the diagnosis and prognosis DTs in a nearly autonomous management and control system for an Experimental Breeder Reactor-II simulator during different loss-of-flow scenarios.

22 GENERAL STUDIES OF NUCLEAR REACTORS↗

Cyber-Informed Engineering (CIE) – Engineered Controls Database and Use

Cyber-Informed Engineering (CIE) addresses the reality that cyber-attacks on engineered systems can have consequences far beyond data loss or disruption of digital networks. When control systems are compromised, safety, reliability, and performance of the physical process itself may be threatened. This database is meant to establish clear examples and guidance for defining and applying engineered controls in CIE. It explains what engineered controls are, how they differ from information security measures, and how they are integrated into system design. The goal is to ensure that resilience is engineered into systems from the outset. Unlike cybersecurity protections that defend the digital layer, engineered controls act directly at the physical and algorithmic levels to guarantee that unacceptable consequences are prevented or limited. CIE keeps the consequences of a cyber attack from impacting the safety, reliability, and performance of engineered systems.

42 - ENGINEERING↗

ARM-IRL: Adaptive Resilience Metric Quantification Using Inverse Reinforcement Learning

The resilience of safety-critical systems is gaining importance due to the rise in cyber and physical threats, especially within critical infrastructure. Traditional static resilience metrics may not capture dynamic system states, leading to inaccurate assessments and ineffective responses to cyber threats. This work aims to develop a data-driven, adaptive method for resilience metric learning. We propose a data-driven approach using inverse reinforcement learning (IRL) to learn a single, adaptive resilience metric. The method infers a reward function from expert control actions. Unlike previous approaches using static weights or fuzzy logic, this work applies adversarial inverse reinforcement learning (AIRL), training a generator and discriminator in parallel to learn the reward structure and derive an optimal policy. The proposed approach is evaluated on multiple scenarios: optimal communication network rerouting, power distribution network reconfiguration, and cyber–physical restoration of critical loads using the IEEE 123-bus system. The adaptive, learned resilience metric enables faster critical load restoration in comparison to conventional RL approaches.

97 MATHEMATICS AND COMPUTING↗

A Cross-Domain Optimization Framework of PMU and Communication Placement for Multidomain Resiliency and Cost Reduction

Phasor measurement units (PMUs) play a crucial role in real-time monitoring and control of power grids. They rely on a communication network to transfer measurement data to the phasor data concentrator (PDC) for further processing and analysis. In this paper, a resilient cross-domain PMU and communication link placement method for minimizing the overall installation cost of the wide-area measurement system (WAMS) is proposed. Here, the main idea is to break down the barrier between the power grid domain and the communication domain, and consider the impact of one when design the other. The PMU placement in the power grid domain takes into account the cost of communication links by generating multiple solutions with equally minimum PMU costs for communication link placement evaluation. On the other hand, the communication link placement problem reduces the cost by customizing the routing policies based on the different roles of PMUs in grid observability. The proposed WAMS design is capable of withstanding any single component failure in the power domain (PMU failure or power branch failure) or in the communication domain (communication link failure or PDC failure). Numerical study on the IEEE 57-bus system reveals that the developed cross-domain optimization framework can significantly reduce the overall installation cost of WAMS while attaining multi-domain resiliency.

24 POWER TRANSMISSION AND DISTRIBUTION↗