IED Delay Component for Aurora Attack Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems are vulnerable to 'aurora attacks' where unauthorized individuals can remotely cause out-of-synchronism closing of generators by reprogramming auto-synchronizer and synchrocheck relays, leading to potential damage and power outages, as existing protections like hardware or external synchrochecks and breaker anti-pumping circuits may not prevent precisely timed reclosing.
Innovation Solution
An intelligent electronic device (IED) with a control component and a delay component is used, where the delay component is independent of remote configuration and includes circuitry that delays the breaker close signal long enough for other protection mechanisms to prevent out-of-synchronism closing, thereby preventing aurora attacks without additional devices or complexity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a breaker anti-pumping circuit or external synchrocheck is used to prevent out-of-synchronism closing, then protection against unauthorized reclosing is improved, but precisely timed reclosing attacks can still penetrate these protections
Solution Approach 1:
The patent divides the protection function into two independent parts: (1) the control component that can be remotely configured and monitored, and (2) the delay component that is independent of remote configuration and provides the actual protection. This segmentation ensures that even if the control component is compromised by an aurora attack, the independent delay component remains intact and prevents out-of-synchronism closing.
Solution Approach 2:
The delay component acts as an intermediary between the close signal from the control component and the actual breaker closing action. By introducing this intermediate delay mechanism that is independent of remote configuration, the system ensures that even if unauthorized individuals penetrate the control component, they cannot immediately cause out-of-synchronism closing because the delay component enforces a time buffer for synchronization verification.
2Reliability
If additional protection devices or complexity are added to prevent aurora attacks, then security is improved, but device complexity increases
Solution Approach 1:
The patent merges the delay function directly into the IED's breaker control circuitry rather than using separate external protection devices. The delay component is integrated within the same device as the control component, eliminating the need for additional standalone protection devices while maintaining the security function against aurora attacks.
Solution Approach 2:
The IED is designed to perform multiple functions: normal breaker control, synchronization monitoring, and aurora attack protection through the integrated delay component. This multi-functionality eliminates the need for separate dedicated protection devices, reducing overall system complexity while maintaining comprehensive security.
Data Source
AI summary
The present disclosure provides apparatus, systems, and methods for preventing out-of-synchronism closing between power systems. An intelligent electronic device (IED) apparatus may include a control component and a delay component. The control component is configured to selectively control opening and closing of a breaker. The control component selectively outputs a close signal to cause the breaker to connect a first portion of a power delivery system to another portion of the power delivery system. The delay component is configured to delay output of the close signal to the breaker. The delay component includes circuitry independent from control by the control component and the delay component is inconfigurable from a remote location.