IP in MV/LV: Expanding IP services to the medium and low voltage layers of the power distribution grid

Transcription

1 IP in MV/LV: Expanding IP services to the medium and low voltage layers of the power distribution grid UtiliNet Europe 2018 May 15 th, 2018 Brussels, Belgium Dr. Jürgen Tusch Head of Telecommunications innogy SE, Grid & Infrastructure Segment

2 1 Energy transition and telecommunication 2 The way forward 3 Practical experience 4 Conclusion 2

3 Today s challenges Mega trends in the energy system change our business fundamentally and irreversible Today Future Centralized structures Decentralized structures Low ICT usage High pervasion of ICT Low usage of measurement Detailed measurement required Proprietary solutions Open standards Standard IT security Very high level of ICT security innogy SE 15 th May

4 Energy transition and telecommunication Decentralisation, digitisation and decarbonisation shape the energy system of the future Virtual power plant Distribution System Transport System ICT I ICT II Storage Transit innogy SE 15 th May

5 Energy transition and telecommunication Next generation ICT security solutions are required to securely operate today s interconnected energy system Reporting requirements Weather data Wind Solar radiation Temperature Transparency of information flow Recognition of possible intrusion patterns Advances in IT Security technology Intrusion Detection Analysis of application layer RES (Wind & PV) Control and cut off Generation data Next Generation ICT security solutions Increasing usage of IP technology in the process network Grid control center Backbone + distribution Communication with external parties TSO Municipal utilities Likelihood of threats to energy systems is increasing Utilities increasingly get into the focus of attackers innogy SE 15 th May

6 Energy transition and telecommunication The energy transition takes place in the distribution grid and requires additional telecommunication services specifically in the medium and low voltage layers. Black-out resilience is required for system restart. ~1 GW Available Utility operated Telecommunication services ~16 GW Additional Telecommunication services required Source: BMWi Verteilernetzstudie 2014 innogy SE 15 th May ~45 GW Renewable Generation (Germany 2014)

7 2 The way forward

8 The way forward Each communication technology option for the medium and low voltage levels has its own challenges Grid topology Germany Medium voltage grid (10 kv, 20 kv) ~ 500,000 km Low voltage grid (0,4kV) ~ 1,000,000 km Some Technology options Fiber DSL Power line communication Cellular radio Public (4G, 5G) Private (LTE 450) Directional radio Satellite innogy SE 15 th May

9 The way forward Development of the telecommunication technology mix for the medium and low voltage levels of the smart distribution grid Utility dedicated radio LTE 450 5G Black-out resilient Mobile voice Public mobile 4G LTE 800 Internet fixed line DSL Satellite Power line communication BPLC (complementary) Renewable Energy growth Partial Black-out resilience required Today innogy SE 15 th May

10 3 Practical experience

11 Practical experience The use of a combination of public standard telecommunication services improves service availability at reasonable cost, the use of the NGF delivers state-of-the-art protocol security LAN VPN RTU IEC 104 M2M Router LTE 800 Mobile Operator WAN VPN DSL Fixed Network Operator End-to-end solution: M2M Secure Access Internet (SAI) VPN termination Authentication innogy PDN Grid Control Center Virtual Power Plant WAN VPN innogy SE 15 th May APN NGF Next Generation Firewall (NGF) IEC

12 Practical experience The Next Generation Firewall implementation comprises the whole set of the IEC protocol which can be used to design specific firewall rules for effective filtering Design of an IEC-104 filtering rule Use cases Type identification TypeID Quantity: 127 E.g.: Information, measured value, command ASDU-addresses: Quantity: Unique identifier IEC-104 filtering rule Cause of transmission CoT Quantity: 47 E.g.: spontaneous, periodic Direction inbound, outbound or both M2M UA s Apps Remote access Decentral renewable generation units or loads will be connected via 4G or/and DSL Substation or secondary substation connection Application filtering e.g. https Remote access from service personnel innogy SE 15 th May

13 Practical experience State of the art firewall technology to secure grid control centers IEC Grid Control System Center IEC / TASE.2 (ICCP) Joint development with Fortinet Next Generation Firewall (NGF) IEC Next Generation Firewall (NGF) IEC / TASE.2 Distribution System Operators (DSO) Wind farms innogy Router Virtual Power Plant Transport System Operators (TSO) Municipal Utilities innogy SE 15 th May Industry

14 4 Conclusion

15 Conclusion The availability of power supply increasingly depends on the availability of telecommunication services used to control the grid The scalable IP platform in HV Basis for all future utility TC services Scalable, Real-time and non-real-time Built-in blackout resilience Telecommunication solutions for MV and LV Public cellular radio and fixed line DSL Complementary use of power line Future utility specific PMR solutions Implement state-of-the-art ICT-Security solutions Security certification of DSO s in GER Next Generation Firewalls SCADA network monitoring Specific SIEM for OT environments Keep your teams curious and hungry for innovation Business integrated project teams Show the way not the solution Empowering people innogy SE 15 th May

16 Thank you! Dr. Jürgen Tusch Head of Telecommunications Grid & Infrastructure Segment innogy SE innogy SE 15 th May