Fault-Contained Energy Management for Secure Offline Steering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing energy management systems at end users are less reliable due to complex Internet-connected systems that control energy flow, which are vulnerable to failures and intrusions, especially when using renewable energy sources like photovoltaic systems and wind turbines, and face challenges in maintaining energy supply stability.
Innovation Solution
The system is divided into two fault containment units: a reliable energy steering system without an active Internet connection and a complex energy optimization system with Internet connectivity, using time-triggered messages and a contingency plan to ensure energy distribution even in failure scenarios, with a switch to disconnect from the Internet for added security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a complex Internet-connected energy optimization system is used to control energy flow, then energy optimization capability is improved, but system reliability deteriorates due to vulnerability to failures and intrusions
Solution Approach 1:
The system is divided into two independent fault containment units: the energy steering system (simple, reliable, offline) and the energy optimization system (complex, adaptive, Internet-connected). This segmentation isolates the reliability-critical functions from Internet connectivity risks while preserving optimization capabilities in the non-critical segment.
Solution Approach 2:
A time-triggered message interface acts as an intermediary between the two fault containment units. This standardized interface enables controlled communication while maintaining isolation, allowing the optimization system to send target data to the steering system without direct Internet access to the critical control functions.
2Ease of operation
If the energy steering system is connected to the Internet for real-time data exchange, then communication capability is improved, but security against intrusions deteriorates
Solution Approach 1:
The Internet connection is extracted from the energy steering system and relocated to the energy optimization system. The steering system communicates only through the isolated time-triggered message interface, eliminating direct Internet exposure and associated security risks while maintaining necessary communication capabilities.
3Reliability
If simple static rules are used for energy flow control, then system reliability is improved, but energy optimization capability deteriorates
Solution Approach 1:
The system separates static rule-based control (in the reliable offline steering system) from dynamic optimization algorithms (in the adaptive online optimization system). Each segment performs its designated function optimally without compromising the other's strengths.
4Loss of information
If continuous Internet connection is maintained for real-time optimization, then data freshness is improved, but vulnerability to failures and intrusions worsens
Solution Approach 1:
Internet connectivity is removed from the critical energy steering system and confined to the non-critical optimization system. The steering system operates reliably offline using periodically updated target data, eliminating continuous Internet vulnerability while maintaining adequate data freshness through time-triggered updates.
Data Source
AI summary
The invention relates to a reliable system and method for energy management at an end user of electrical energy. The proposed energy management system comprises two substantially independent fault containment units (FCU), an energy steering system (110) and an energy optimization system (150), which exchange data via a well-defined message interface. The energy steering system performs the energy distribution according to the target data (142) periodically received from the energy optimization system. The energy optimization system calculates the optimum use of energy at any given time. Since the energy optimization system has no direct contact with the Internet during normal operation, there can be no intrusion into the energy optimization system. If the energy optimization system fails due to an intrusion, the energy steering system takes over the target data from an contingency/emergency plan stored locally a priori.
