1

Philippe BeauchampOPAL-RT Technologies

philippe.beauchamp@opal-rt.com

Real-Time Simulation for Cyber-Security

2

Challenges in 1980

Modern and SMART transmission systems rely on control and protection systems

For performance, security and economical reasons• Fast machine AVR and PSS• SVC and FACTS• HVDC transmission and interconnections• Fast local protection and automatic systems• wide area special control and protection (SPS)

Québec

> 1000 km > 1500 km

AC/DC SMART Power system transmission-

challenges : optimizing controls, protection, FACTS, HVDC to increase performance and reliability at minimum cost

3

Evolution of Integrated Power Systems :from passive to SMART Active distribution systems

Passive loads and distribution systems

AC/DC, FACTS, SPS

Transmission

Distribution

Distribution are becoming as complex and dependent on control performance as transmission network are.

Renewable energy systems (solar, wind, etc) are less preditable Use of power electronics such as HVDCs, FACTS, fast protection system Use of wide area control and protection systems (SPS) Security and performance relies on more complex controls and protection How do you design and test them s an integrated system with the grid

4

• Reliability

• Security

• Efficiency

• Eco Friendly

5

6

7

8

9

Risk = Threat x Vulnerability x Consequence

Threat • Human Error • Hacker• Spy• Weather

Vulnerability• Design flaw• System failure • Cascading event • System complexity

• # of vendors • # of devices

• Testing flaws • Cascading events • Aging components

Consequence• Reduced system reliability• Economic losses• Equipment losses• Human losses • Sensitive data exposure

10

PDC

ePHASORsim

HYPERSIM

eMEGAsim

EMT

311Low Voltage (±5V)

311120V – 5A

Amplifier C37.118

C37.118

Control PrototypingState Estimation

C37.118 C37.118

Telecom Simulation

311

IEC 61850 – (SV)IEC 61850 – (GOOSE)

Control Commands DNP3, OPC, TCP/IP

Virtual Grid

config

11

OPAL-RT Communication Protocols

12

311

311

Denial of Service (DOS)

PDC

Simulated Grid

13

Man in the middle (MiM)

311

311

PDC

Telecom

Simulated Grid

14

GPS spoofing (clock screw)

311

311

Simulated Grid

234d 23h54 00s 0000us

234d 23h54 00s 0100us

15

GPS spoofing (clock screw)

311

311

Simulated Grid

234d 23h54 00s 0000us

234d 23h54 00s 0100us

Simulated GPS Control

16

Detection (State estimation)

311

311

• Delays• Noise• Data Losses• Packet Injection

PDC State Estimation

Validation

Custom C-Code Machine Learning HMMKalman Filters Support vectors Statistics Prbabilities

17

Case 1

Case 2

Case 3

Case 100 000…

18

19

KTH Royal Institute of Technology – WAMPAC Laboratory

SEL421 - PMU

OP5600 eMEGAsim

ABB – Line Distance - PMU

Megger V/I Amplifiers

SEL3373 - PDC

Arbiter Master GPS Subs. Clock

GPS AntennaNetwork Switch

Communication Server

Opnet, Synchrowave

20

• DNP3• IEC60870-5-104• IEC61850• IEC61850-8-1 GOOSE• IEC61850-9-2 SV• Modbus• C37.118

21

powerNETePHASORsim

Cyber Security Test Bed at PNNL

22

• Smart grid and Wide Area Controls (WACS) testing• PMU «Phase Measurment Unit»• PDC «Phasor Data Concentrator»• SSU «Substation Synchronous Unit»

> Local controls & Specific Protection System (SPS) testing• LID, OLD, RPS, SMCT, MB-PSS, Protection relays

Smart grid, Wide-Area Control Systems and Specific Protection System

23

Real-Time Simulated Grid

Up to 20 000 Nodes (Phasor)

OPC Client (ETAP Server)

1 Licence OPAL-RT Simulator Suggested

PMU/Relays Integration

ETAP Clients

OPAL-RT OPC Server

ePHASORsim

24

Microgrid Simulation Combined with OPNET

25

What can be learned from automotive industry

Hardware in the Loop for over 20 years

26

I/O Channels(V and I meas.)

PMUs RT-LABI/O

Manager

SimulatedTelecommunication

Ie: OPNETGUI

(RTDMS, ETAP, RT-LAB)

Wide Area Controller

Simulated GRID(HYPERSIM, ePHASORsim, SPS)

RT-LAB Next Gen