1. 1
Philippe Beauchamp
OPAL-RT Technologies
philippe.beauchamp@opal-rt.com
Real-Time Simulation for Cyber-Security

2. 2
Challenges in 1980
Modern and SMART transmission systems
rely on control and protection systems
For performance, security and economical reasons
• Fast machine AVR and PSS
• SVC and FACTS
• HVDC transmission and interconnections
• Fast local protection and automatic systems
• wide area special control and protection (SPS)
Québec
> 1000 km
> 1500 km
AC/DC SMARTPower system transmission-
challenges : optimizing controls, protection, FACTS, HVDC
to increase performance and reliability at minimum cost

3. 3
Evolution of Integrated Power Systems :
from passive to SMART Active distribution systems
Passive loads and distribution systems
AC/DC, FACTS, SPS
Transmission
Distribution
Distribution are becoming as complex and dependent on control
performance as transmission network are.
 Renewable energy systems (solar, wind, etc) are less preditable
 Use of power electronics such as HVDCs, FACTS, fast protection system
 Use of wide area control and protection systems (SPS)
 Security and performance relies on more complex controls and protection
 How do you design and test them s an integrated system with the grid

4. 4
• Reliability
• Security
• Efficiency
• Eco Friendly

5. 5

6. 6

7. 7

8. 8

9. 9
Risk = Threat x Vulnerability x Consequence
Threat
• Human Error
• Hacker
• Spy
• Weather
Vulnerability
• Design flaw
• System failure
• Cascading event
• System complexity
• # of vendors
• # of devices
• Testing flaws
• Cascading events
• Aging components
Consequence
• Reduced system reliability
• Economic losses
• Equipment losses
• Human losses
• Sensitive data exposure

10. 10
PDC
ePHASORsim
HYPERSIM
eMEGAsim
EMT
311
Low Voltage (±5V)
311
120V – 5A
Amplifier C37.118
C37.118
Control Prototyping
State Estimation
C37.118 C37.118
Telecom Simulation
311
IEC 61850 – (SV)
IEC 61850 – (GOOSE)
Control Commands
DNP3, OPC, TCP/IP
Virtual Grid
config

11. 11
OPAL-RT Communication Protocols

12. 12
311
311
Denial of Service (DOS)
PDC
Simulated Grid

13. 13
Man in the middle (MiM)
311
311
PDC
Telecom
Simulated Grid

14. 14
GPS spoofing (clock screw)
311
311
Simulated Grid
234d 23h54 00s 0000us
234d 23h54 00s 0100us

15. 15
GPS spoofing (clock screw)
311
311
Simulated Grid
234d 23h54 00s 0000us
234d 23h54 00s 0100us
Simulated GPS
Control

16. 16
Detection (State estimation)
311
311
• Delays
• Noise
• Data Losses
• Packet Injection
PDC
State
Estimation
Validation
Custom C-Code
Machine Learning
HMM
Kalman Filters
Support vectors
Statistics
Prbabilities

17. 17
Case 1
Case 2
Case 3
Case 100 000
…

18. 18

19. 19
KTH Royal Institute of Technology – WAMPAC Laboratory
SEL421 - PMU
OP5600
eMEGAsim
ABB – Line Distance
- PMU
Megger V/I
Amplifiers
SEL3373 - PDC
Arbiter Master GPS
Subs. Clock
GPS Antenna
Network Switch
Communication
Server
Opnet, Synchrowave

20. 20
• DNP3
• IEC60870-5-104
• IEC61850
• IEC61850-8-1 GOOSE
• IEC61850-9-2 SV
• Modbus
• C37.118

21. 21
powerNET
ePHASORsim
Cyber Security Test Bed at PNNL

22. 22
• Smart grid and Wide Area Controls (WACS) testing
• PMU «Phase Measurment Unit»
• PDC «Phasor Data Concentrator»
• SSU «Substation Synchronous Unit»
> Local controls & Specific Protection System (SPS) testing
• LID, OLD, RPS, SMCT, MB-PSS, Protection relays
Smart grid, Wide-Area Control Systems and Specific Protection System

23. 23
Real-Time Simulated Grid
Up to 20 000 Nodes (Phasor)
OPC Client
(ETAP Server)
1 Licence
OPAL-RT Simulator
Suggested
PMU/Relays
Integration
ETAP Clients
OPAL-RT
OPC Server
ePHASORsim

24. 24
Microgrid Simulation Combined with OPNET

25. 25
What can be learned from automotive industry
Hardware in the Loop
for over 20 years

26. 26
I/O Channels
(V and I meas.)
PMUs
RT-LAB
I/O
Manager
Simulated
Telecommunication
Ie: OPNET
GUI
(RTDMS, ETAP, RT-LAB)
Wide Area
Controller
Simulated GRID
(HYPERSIM, ePHASORsim, SPS)
RT-LAB Next Gen