Fault-Contained Energy Management for Secure Offline Steering

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing energy management systems at end users are less reliable due to complex Internet-connected systems that control energy flow, which are vulnerable to failures and intrusions, especially when using renewable energy sources like photovoltaic systems and wind turbines, and face challenges in maintaining energy supply stability.

Innovation Solution

The system is divided into two fault containment units: a reliable energy steering system without an active Internet connection and a complex energy optimization system with Internet connectivity, using time-triggered messages and a contingency plan to ensure energy distribution even in failure scenarios, with a switch to disconnect from the Internet for added security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a complex Internet-connected energy optimization system is used to control energy flow, then energy optimization capability is improved, but system reliability deteriorates due to vulnerability to failures and intrusions

Engineering Contradiction:
Improveenergy optimization capabilityVSAvoidsystem reliability
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The system is divided into two independent fault containment units: the energy steering system (simple, reliable, offline) and the energy optimization system (complex, adaptive, Internet-connected). This segmentation isolates the reliability-critical functions from Internet connectivity risks while preserving optimization capabilities in the non-critical segment.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

A time-triggered message interface acts as an intermediary between the two fault containment units. This standardized interface enables controlled communication while maintaining isolation, allowing the optimization system to send target data to the steering system without direct Internet access to the critical control functions.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If the energy steering system is connected to the Internet for real-time data exchange, then communication capability is improved, but security against intrusions deteriorates

Engineering Contradiction:
Improvecommunication capabilityVSAvoidsecurity risk from intrusions
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The Internet connection is extracted from the energy steering system and relocated to the energy optimization system. The steering system communicates only through the isolated time-triggered message interface, eliminating direct Internet exposure and associated security risks while maintaining necessary communication capabilities.

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If simple static rules are used for energy flow control, then system reliability is improved, but energy optimization capability deteriorates

Engineering Contradiction:
Improvesystem reliabilityVSAvoidenergy optimization capability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system separates static rule-based control (in the reliable offline steering system) from dynamic optimization algorithms (in the adaptive online optimization system). Each segment performs its designated function optimally without compromising the other's strengths.

Inventive Principle:
Principle #1Segmentation

4Loss of information

If continuous Internet connection is maintained for real-time optimization, then data freshness is improved, but vulnerability to failures and intrusions worsens

Engineering Contradiction:
Improvedata freshnessVSAvoidvulnerability to failures
Core Design Contradiction:
Loss of informationVSReliability

Solution Approach 1:

Internet connectivity is removed from the critical energy steering system and confined to the non-critical optimization system. The steering system operates reliably offline using periodically updated target data, eliminating continuous Internet vulnerability while maintaining adequate data freshness through time-triggered updates.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS20260058468A1Reliable Time-Controlled System and Method for Energy Management
Publication Date: 2026.02.26 TTTECH COMPUTERTECHNIK AG
  • US20260058468A1 patent drawing

AI summary

The invention relates to a reliable system and method for energy management at an end user of electrical energy. The proposed energy management system comprises two substantially independent fault containment units (FCU), an energy steering system (110) and an energy optimization system (150), which exchange data via a well-defined message interface. The energy steering system performs the energy distribution according to the target data (142) periodically received from the energy optimization system. The energy optimization system calculates the optimum use of energy at any given time. Since the energy optimization system has no direct contact with the Internet during normal operation, there can be no intrusion into the energy optimization system. If the energy optimization system fails due to an intrusion, the energy steering system takes over the target data from an contingency/emergency plan stored locally a priori.