Sandia National Laboratories (SNL) performed a high-altitude nuclear electromagnetic pulse (HEMP) critical generation station component vulnerability test campaign with a focus on high-frequency, conducted early-time (E1) HEMP for the Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER). This report provides vulnerability test results to investigate component response and/or damage thresholds to reasonable HEMP threat levels that will help to inform site vulnerability assessments, mitigation planning, and modeling calibrations. This work details testing of North American Electric (NAE) magnetic motor starters to determine the effects of conducted HEMP environments. Motor starters are the control elements that provide power to motors throughout a generating plant; a starter going offline would cause loss of power to critical pumps and compressors, which could lead to component damage or unplanned plant outages. Additionally, failed starters would be unable to support plant startup. Six industrial motor starters were tested: two 2 horsepower (HP) starters with breaker disconnects and typical protection equipment, two 20 HP starters with breaker disconnects, and two 20 HP starters with fused disconnects. Each starter was placed in a circuit with a generator and inductive motor matching the starter rating. The conducted EMP insult was injected on the power cables passing through the motor starter, with separate tests for the generator and motor sides of the starter.
Grid operating security studies are typically employed to establish operating boundaries, ensuring secure and stable operation for a range of operation under NERC guidelines. However, if these boundaries are severely violated, existing system security margins will be largely unknown, as would be a secure incremental dispatch path to higher security margins while continuing to serve load. As an alternative to the use of complex optimizations over dynamic conditions, this work employs the use of machine learning to identify a sequence of secure state transitions which place the grid in a higher degree of operating security with greater static and dynamic stability margins. Several reinforcement learning solution methods were developed using deep learning neural networks, including Deep Q-learning, Mu-Zero, and the continuous algorithms Proximal Reinforcement Learning, and Advantage Actor Critic Learning. The work is demonstrated on a power grid with three control dimensions but can be scaled in size and dimensionality, which is the subject of ongoing research.
Sandia National Laboratories performed tests to address the potential vulnerability concerns of a coupled High-Altitude Electromagnetic Pulse (HEMP) inducing secondary coupling onto critical instrumentation and control cables in a nuclear power plant, with specific focus on early-time HEMP. Three types of receiving cables in nine configurations were tested to determine transfer functions between two electrically separated cables referenced to the common mode input current on the transmitting cable. One type of transfer function related the input short circuit current and resulting open circuit voltage on the receiving cable. The other transfer function related the input short circuit current and the resulting short circuit current on the receiving cable. A 500 A standard HEMP waveform was input into the transfer functions to calculate peak coupling values on the receiving cables. The highest level of coupling using the standard waveform occurred when cables were in direct contact, with a peak short circuit current of 85 A and open circuit voltage of 9.8 kV, while configurations with separated cables predicted coupling levels of less than 5 A or 500 V.
Sandia National Laboratories (SNL) is performing a test campaign for the Department of Energy (DOE) Office of Cybersecurity, Energy Security, and Emergency Response (CESER) to address high-altitude electromagnetic pulse (HEMP) vulnerability of critical components of generation stations, with focus on early-time (E1) HEMP. The campaign seeks to establish response and damage thresholds for these critical elements in response to reasonable HEMP threat levels as a means for determining where vulnerabilities may exist or where mitigations may be needed. This report provides component vulnerability test results that will help to inform site vulnerability assessments and HEMP mitigation planning.
Grid operating security studies are typically employed to establish operating boundaries, ensuring secure and stable operation for a range of operation under NERC guidelines. However, if these boundaries are violated, the existing system security margins will be largely unknown. As an alternative to the use of complex optimizations over dynamic conditions, this work employs the use of Reinforcement-based Machine Learning to identify a sequence of secure state transitions which place the grid in a higher degree of operating security with greater static and dynamic stability margins. The approach requires the training of a Machine Learning Agent to accomplish this task using modeled data and employs it as a decision support tool under severe, near-blackout conditions.
Grid operating security studies are typically employed to establish operating boundaries, ensuring secure and stable operation for a range of operation under NERC guidelines. However, if these boundaries are violated, the existing system security margins will be largely unknown. As an alternative to the use of complex optimizations over dynamic conditions, this work employs the use of Reinforcement-based Machine Learning to identify a sequence of secure state transitions which place the grid in a higher degree of operating security with greater static and dynamic stability margins. The approach requires the training of a Machine Learning Agent to accomplish this task using modeled data and employs it as a decision support tool under severe, near-blackout conditions.
This document summarizes the findings of a review of published literature regarding the potential impacts of electromagnetic pulse (EMP) and geomagnetic disturbance (GMD) phenomena on oil and gas pipeline systems. The impacts of telluric currents on pipelines and their associated cathodic protection systems has been well studied. The existing literature describes implications for corrosion protection system design and monitoring to mitigate these impacts. Effects of an EMP on pipelines is not a thoroughly explored subject. Most directly related articles only present theoretical models and approaches rather than specific analyses and in-field testing. Literature on SCADA components and EMP is similarly sparse and the existing articles show a variety of impacts to control system components that range from upset and damage to no effect. The limited research and the range of observed impacts for the research that has been published suggests the need for additional work on GMD and EMP and natural gas SCADA components.
The electric power grid is one of the most critical national infrastructures, and determining the susceptibility of power grid elements to external factors is of significant importance for ensuring grid resilience. Reliable energy is vital to the safety and security of society. One potential threat to the power grid comes in the form of strong electromagnetic field transients arising from high-altitude nuclear weapon detonation. The radiated EM fields from these can affect the operation of electronic components via direct field exposure or from the conducted transients that arise from coupling onto long cables. Vulnerability to these pulses for many electrical components on the grid is unknown. This research focuses on conducted pulse testing of digital protective relays in a power substation and their associated high-voltage circuit breaker circuit and instrumentation transformer circuits. The relays, yard cables, power supplies, and components representing yard equipment were assembled in a manner consistent with installation in a substation to represent the pulse's propagation in the components and wiring. Equipment was tested using pulsed injection into the yard cable. The results showed no equipment damage or undesired operations for insult levels below 180 kV peak open circuit voltage, which is significantly higher than the anticipated coupling to substation yard cables.
This report presents a framework to evaluate the impact of a high-altitude electromagnetic pulse (HEMP) event on a bulk electric power grid. This report limits itself to modeling the impact of EMP E1 and E3 components. The co-simulation of E1 and E3 is presented in detail, and the focus of the paper is on the framework rather than actual results. This approach is highly conservative as E1 and E3 are not maximized with the same event characteristics and may only slightly overlap. The actual results shown in this report are based on a synthetic grid with synthetic data and a limited exemplary EMP model. The framework presented can be leveraged and used to analyze the impact of other threat scenarios, both manmade and natural disasters. This report d escribes a Monte-Carlo based methodology to probabilistically quantify the transient response of the power grid to a HEMP event. The approach uses multiple fundamental steps to characterize the system response to HEMP events, focused on the E1 and E3 components of the event. 1) Obtain component failure data related to HEMP events testing of components and creating component failure models. Use the component failure model to create component failure conditional probability density function (PDF) that is a function of the HEMP induced terminal voltage. 2) Model HEMP scenarios and calculate the E1 coupled voltage profiles seen by all system components. Model the same HEMP scenarios and calculate the transformer reactive power consumption profiles due to E3. 3) Sample each component failure PDF to determine which grid components will fail, due to the E1 voltage spike, for each scenario. 4) Perform dynamic simulations that incorporate the predicted component failures from E1 and reactive power consumption at each transformer affected by E3. These simulations allow for secondary transients to affect the relays/protection remaining in service which can lead to cascading outages. 5) Identify the locations and amount of load lost for each scenario through grid dynamic simulation. This can be an indication of the immediate grid impacts from a HEMP event. In addition, perform more detailed analysis to determine critical nodes and system trends. 6) To help realize the longer-term impacts, a security constrained alternating current optimal power flow (ACOPF) is run to maximize critical load served. This report describes a modeling framework to assess the systemic grid impacts due to a HEMP event. This stochastic simulation framework generates a large amount of data for each Monte Carlo replication, including HEMP location and characteristics, relay and component failures, E3 GIC profiles, cascading dynamics including voltage and frequency over time, and final system state. This data can then be analyzed to identify trends, e.g., unique system behavior modes or critical components whose failure is more likely to cause serious systemic effects. The proposed analysis process is demonstrated on a representative system. In order to draw realistic conclusions of the impact of a HEMP event on the grid, a significant amount of work remains with respect to modeling the impact on various grid components.
A High-Altitude Electromagnetic Pulse (HEMP) is a potential threat to the power grid. HEMP can couple to transmission lines and cables, causing significant overvoltages which can be harmful to line connected equipment. The effects of overvoltages on various types of power systems components need to be understood. HEMP effects on trip coils were tested and presented in this report. A high voltage pulser was built to replicate the induced voltage waveform from a HEMP. The pulser was used to test breaker trip coils with increasing pulse magnitudes ranging from 20 kV to 80 kV. The State-of-Health of each trip coils was measured via mechanical operation and impedance measurements before and after each insult to identify any damage or degradation to the trip coils. Dielectric breakdown was observed at the conductor leads during testing, causing the HEMP insult to be diverted to the grounded casing. However, the dielectric breakdown did not cause interference with regular device operation.
Wide-area time-synchronized measurements have recently revealed troublesome forced oscillations (FOs) within modern synchronized power grids. In some cases, these FOs represent a dangerous hazard to the system. Recent research has focused on locating the source of FOs to provide operators with knowledge for mitigating their impact locally. This paper presents a complementary mitigation strategy, which is to purposely induce a second oscillation into the grid which cancels the impact of the FO. Such a strategy is complementary in that it may provide valuable time to operators attempting to locate the FOs source and to determine how to rectify it. This paper presents a suppression control strategy which modulates controllable devices to automatically cancel the impact of the FO without the need for locating the source of the original FO. The strategy is based upon tuned feedback control. The approach is demonstrated on a simulation system via modulation of inverter-based generation.
This report describes broadband measurements of transmission-scale transformers typical in the electric power grid. This work was performed as part of the EMP Resilient Grid LDRD project at Sandia National Laboratories to generate circuit models that can be used for high-altitude electromagnetic pulse (HEMP) coupling simulations and response predictions. The objective of the work was to obtain characterization data of substation yard equipment across a frequency range relevant to HEMP. Vector network analyzer measurements up to 100 MHz were performed on two power transformers at ABB-Hitachi and a single ITEC potential transformer. Custom cable breakouts were designed to interface with the transformer terminals and provide ground connections to the chassis at the base of the transformer bushings. The three-phase terminals of the power transformers were measured as a common mode impedance using a parallel resistive splitter, and the single-phase terminals of the potential transformer were measured directly. A vector fitting algorithm was used to empirically fit circuit models to the resulting two-port networks and input impedances of the measured objects. Simplified circuit representations of the input impedances were also generated to assess the degree of precision needed for high-altitude electromagnetic pulse response predictions, which were performed in Sandia's XYCE circuit simulator platform. HEMP coupling simulations using the transformer models showed significant reduction in the voltage peak and broadening in the pulse width seen at the power transformer compared to the traveling wave voltage. This indicated the importance of the load condition when defining the coupled insult in an electric power substation. Simplified circuit models showed a similar voltage at the transformer with a smoothed waveform. The presence of potential transformers in the simulation did not significantly change the simulated voltage at the power transformer. Single-port input impedance models were also developed to define load conditions when transfer characteristics were not necessary.
Sandia National Laboratories sponsored a three-year internally funded Laboratory Directed Research and Development (LDRD) effort to investigate the vulnerabilities and mitigations of a high-altitude electromagnetic pulse (HEMP) on the electric power grid. The research was focused on understanding the vulnerabilities and potential mitigations for components and systems at the high voltage transmission level. Results from the research included a broad array of subtopics, covered in twenty-three reports and papers, and which are highlighted in this executive summary report. These subtopics include high altitude electromagnetic pulse (HEMP) characterization, HEMP coupling analysis, system-wide effects, and mitigating technologies.
Determining the effectiveness of surge and pulse protection devices in the United States power grid against effects of a High-Altitude Electromagnetic Pulse (HEMP) is crucial in determining the present state of grid resilience. Transient Voltage Surge Suppressors (TVSS) are used to protect loads in substations from transient overvoltages. Designed to mitigate the effects of lightning, their response to a HEMP event is unknown and was determined. TVSSs were tested in two unique configurations using a pulser that generates pulses in the tens of nanoseconds scale to determine their protective capability as well as to determine their self-resilience against HEMP pulses. Testing concluded that TVSS devices adequately protect against microsecond scale pulses like lightning but do not protect against pulses resembling HEMP events. It suggests that TVSS devices should not be relied upon to mitigate the effects of HEMP pulses.
There are concerns about the effects of High-Altitude Electromagnetic Pulses (HEMP) on the electric power grid. Activities to date tested and analyzed vulnerability of digital protective relays (DPRs) used in power substations, but the effect of HEMP on the greater substation environment is not well known. This work establishes a method of testing the vulnerability of circuit breaker control and protective relay circuits to the radiated E1 pulse associated with HEMP based on coupling to the cables in a substation yard. Two DPRs from Schweitzer Engineering Laboratories, Inc. were independently tested. The test setup also included a typical cable in a substation yard with return plane to emulate the ground grid and other ground conductors near the yard cable, cabinetry housing the installed DPRs, station battery and battery charger, terminal block elements, and a breaker simulator to emulate a substation yard configuration. The DPRs were powered from the station battery and the transformer inputs energized with a three-phase source to maintain typical operating conditions during the tests. Vulnerability testing consisted of a conducted E1 pulse injected into the center of the yard cable of the DPR circuits. Current measurements on the yard cable and DPR inputs indicated significant attenuation of the conducted pulse arriving at the control house equipment from the emulated substation yard. This reduction was quantified with respect to the equivalent open-circuit voltage on the yard cable. No equipment damage or undesired operation occurred on the tested circuits for values below 180 kV, which is significantly higher than the anticipated coupling to a substation yard cable.
Electromagnetic pulse (EMP) coupling into electronic devices can be destructive to components potentially causing device malfunction or failure. A large electromagnetic field generated from the EMP can induce large voltages and currents in components. As such, the effects of EMP on different devices needs to be understood to elucidate the effect of EMP on potentially vulnerable systems. This report presents test results for small-scale residential DC to AC solar panel microinverters that were subjected to high voltage impulses and currents. The impulses were intended to emulate an EMP coupling event to the AC and DC sides of the microinverter. State-of-health measurements were conducted to characterize device performance before and after each test.
In a transmission line, we evaluate the coupling between a line and a tower above ground when the excitation is an El high-altitude electromagnetic pulse (HEMP). Our model focuses on capturing correctly the effect of the coupling on the peak of the HEMP induced current that propagates along the line. This assessment is necessary to accurately estimate the effect of the excitation on the systems and components of the power grid. This analysis is a step towards a quantitative evaluation of HEMP excitation on the power grid.
Understanding the effect of a high-altitude electromagnetic pulse (HEMP) on the equipment in the United States electrical power grid is important to national security. A present challenge to this understanding is evaluating the vulnerability of transformers to a HEMP. Evaluating vulnerability by direct testing is cost-prohibitive, due to the wide variation in transformers, their high cost, and the large number of tests required to establish vulnerability with confidence. Alternatively, material and component testing can be performed to quantify a model for transformer failure, and the model can be used to assess vulnerability of a wide variety of transformers. This project develops a model of the probability of equipment failure due to effects of a HEMP. Potential failure modes are cataloged, and a model structure is presented which can be quantified by the results of small-scale coupon tests.
High-altitude electromagnetic pulses pose an unknown risk to the electric power grid, and the vulnerabilities will continue to arise as the structure and needs of the grid change. This is especially true with the increasing prevalence of renewable energy sources. This work investigates the vulnerability of photovoltaic modules to E1-like radiated environments with maximum field levels exceeding 100 kV/m. State of health checks via I-V curve trace measurements and physical inspection indicated no readily observable damage or degradation of the module behavior after multiple field exposures. Any variation in I-V curve data was attributable to ambient conditions at the time of measurement and was reflected in similar measurements of the experimental control. Follow-up measurements with a calibrated light source showed that all modules aligned with the experimental control and exceeding the manufacturer ratings for fill factor and efficiency, implying that no damage was incurred from field exposure. Coupled current measurements were also performed over the course of testing, showing a damped sine response in common mode and double exponential response in differential mode. The responses were observed to scale with incident field and were dependent on the module orientation.
High-altitude electromagnetic pulses pose an unknown risk to the electric power grid, and the vulnerabilities will continue to arise as the structure and needs of the grid change. This is especially true with the increasing prevalence of renewable energy sources. This work investigates the vulnerability of photovoltaic modules to E1-like radiated environments with maximum field levels exceeding 100 kV/m. State of health checks via I-V curve trace measurements and physical inspection indicated no readily observable damage or degradation of the module behavior after multiple field exposures. Any variation in I-V curve data was attributable to ambient conditions at the time of measurement and was reflected in similar measurements of the experimental control. Follow-up measurements with a calibrated light source showed that all modules aligned with the experimental control and exceeding the manufacturer ratings for fill factor and efficiency, implying that no damage was incurred from field exposure. Coupled current measurements were also performed over the course of testing, showing a damped sine response in common mode and double exponential response in differential mode. The responses were observed to scale with incident field and were dependent on the module orientation.
Impacts of a high-altitude electromagnetic pulse (HEMP) on the power grid are a growing concern due to the increased reliance on the power grid. A critical area of research is quantifying power system equipment response to HEMP since this is not known in general. Substation site surveys were performed at seven high voltage substations across the United States to gather substation layout and construction details pertinent to HEMP coupling calculations and component vulnerability assessments. The primary objective for the survey was to gather information on cable layouts and cable construction within substations. Additional information was also gathered on equipment present within the substations and control house layouts. This report provides information gathered from the substation surveys.
This report details the test setup, process, and results for radiated susceptibility testing of multicrystalline silicon photovoltaic (PV) modules as part of the EMP-Resilient Electric Grid Grand Challenge Laboratory Directed Research and Development (LDRD) project at Sandia National Laboratories. Testing was conducted over October 10-17, 2019, where 8 photovoltaic modules were exposed to E1 transient pulses with peak field levels up to 100 kV/m. Modules were terminated in a resistive load representing connected components. State of health testing conducted via I-V curve tracing of the photovoltaic modules showed no observable loss of device function due to large electric field transients. Differential mode currents were measured on the order of 10's of amps for up to a microsecond following the radiated field pulse. Common mode currents took the form of a damped sinusoid with a maximum peak of 10's to 100's of amps with a resonance near 60 MHz.
This report explores the reliance on communication systems for bulk grid operations and considers selected options as a supplement to cyber security. The extreme scenario of a complete loss of communications for power grid operation is assessed, presenting a bounded, worst-case perspective. The paper explores grid communications failures and how a system modifications can, at an increased cost, retain a moderate level of preparedness for a loss of communications and control when used in partnership with cyber security protocols. Doing so allows the increased economic and secure operation that communication based controls affords, but also ensures a level of resilient operation if they are lost. The motivation of this paper is due to the proliferation of photovoltaic (PV) resources, and more generally, smart-grid resources within the US grid, which are requiring more and more active and wide-area controls. Though the loss of communication and control can affect nearly any grid control system, the risk of losing load at large scales requires a broad view of system interconnectivity, so it has been evaluated from a transmission perspective in this report.
This project explored coupling modeling and analysis methods from multiple domains to address complex hybrid (cyber and physical) attacks on mission critical infrastructure. Robust methods to integrate these complex systems are necessary to enable large trade-space exploration including dynamic and evolving cyber threats and mitigations. Reinforcement learning employing deep neural networks, as in the AlphaGo Zero solution, was used to identify "best" (or approximately optimal) resilience strategies for operation of a cyber/physical grid model. A prototype platform was developed and the machine learning (ML) algorithm was made to play itself in a game of 'Hurt the Grid'. This proof of concept shows that machine learning optimization can help us understand and control complex, multi-dimensional grid space. A simple, yet high-fidelity model proves that the data have spatial correlation which is necessary for any optimization or control. Our prototype analysis showed that the reinforcement learning successfully improved adversary and defender knowledge to manipulate the grid. When expanded to more representative models, this exact type of machine learning will inform grid operations and defense - supporting mitigation development to defend the grid from complex cyber attacks! This same research can be expanded to similar complex domains.
Power system utilities continue to strive for increased system resiliency. However, quantifying a baseline system resilience, and deciding the optimal investments to improve their resilience is challenging. This paper discusses a method to create scenarios, based on historical data, that represent the threats of severe weather events, their probability of occurrence, and the system wide consequences they generate. This paper also presents a mixed-integer stochastic nonlinear optimization model which uses the scenarios as an input to determine the optimal investments to reduce the system impacts from those scenarios. The optimization model utilizes a DC power flow to determine the loss of load during an event. Loss of load is the consequence that is minimized in this optimization model as the objective function. The results shown in this paper are from the IEEE RTS-96 three area reliability model. The scenario generation and optimization model have also been utilized on full utility models, but those results cannot be published.
This paper discusses the broad use of rotational kinetic energy stored in wind turbine rotors to supply services to the electrical power grid. The grid services are discussed in terms of zero-net-energy, which do not require a reduction in power output via pitch control (spill), but neither do they preclude doing so. The services discussed include zero-net-energy regulation, transient and small signal stability, and other frequency management services. The delivery of this energy requires a trade-off between the frequency and amplitude of power modulation and is limited, in some cases, by equipment ratings and the unresearched long-term mechanical effects on the turbine. As wind displaces synchronous generation, the grid's inertial storage is being reduced, but the amount of accessible kinetic energy in a wind turbine at rated speed is approximately 6 times greater than that of a generator with only a 0.12% loss in efficiency and 75 times greater at 10% loss. The potential flexibility of the wind's kinetic storage is also high. However, the true cost of providing grid services using wind turbines, which includes a potential increase in operations and maintenance costs, have not been compared to the value of the services themselves.
This report documents the use of wind turbine inertial energy for the supply of two specific electric power grid services; system balancing and real power modulation to improve grid stability. Each service is developed to require zero net energy consumption. Grid stability was accomplished by modulating the real power output of the wind turbine at a frequency and phase associated with wide-area modes. System balancing was conducted using a grid frequency signal that was high-pass filtered to ensure zero net energy. Both services used Phasor Measurement Units (PMUs) as their primary source of system data in a feedforward control (for system balancing) and feedback control (for system stability).
This report characterizes communications network latency under various network topologies and qualities of service (QoS). The characterizations are probabilistic in nature, allowing deeper analysis of stability for Internet Protocol (IP) based feedback control systems used in grid applications. The work involves the use of Raspberry Pi computers as a proxy for a controlled resource, and an ns-3 network simulator on a Linux server to create an experimental platform (testbed) that can be used to model wide-area grid control network communications in smart grid. Modbus protocol is used for information transport, and Routing Information Protocol is used for dynamic route selection within the simulated network.
The Energy Surety Design Methodology (ESDM) provides a systematic approach for engineers and researchers to create a preliminary electric grid design, thus establishing a means to preserve and quickly restore customer-specified critical loads. Over a decade ago, Sandia National Laboratories (Sandia) defined Energy Surety for applications with energy systems to include elements of reliability, security, safety, cost, and environmental impact. Since then, Sandia has employed design concepts of energy surety for over 20 military installations and their interaction with utility systems, including the Smart Power Infrastructure Demonstration for Energy Reliability and Security (SPIDERS) Joint Capability Technology Demonstration (JCTD) project. In recent years, resilience has also been added as a key element of energy surety. This methodology document includes both process recommendations and technical guidance, with references to useful tools and analytic approaches at each step of the process.