Craig L Stiegemeier; Technology Director, ABB Transformer ... - PhysicalSecurit… · © ABB...
-
Upload
nguyentuyen -
Category
Documents
-
view
233 -
download
3
Transcript of Craig L Stiegemeier; Technology Director, ABB Transformer ... - PhysicalSecurit… · © ABB...
© ABBSlide 1October 15, 2015
NERC GridSecCon 2015Transformer vulnerabilities and solutions for hardening & recovery
Craig L Stiegemeier; Technology Director, ABB Transformer Services; October 15, 2015
© ABBSlide 2October 15, 2015
What could happen?
Consider the scenario in a large metropolitan area served by 10 major substations and more than one utility
60% of the peak load is carried by 11 transformers in four of the substations
A coordinated attack could significantly damage those transformers
The resulting outage would be catastrophic for that area both in terms of size and duration
Utilities need practical solutions to harden and recover
© ABBSlide 3October 15, 2015
Protect your substation and minimize downtimeLayered approach
1. Assess the asset risk to extreme weather events, intentional criminal attacks,
geomagnetic disturbances (GMD), and electromagnetic pulses (EMP)
2. Harden substations & power equipment against malevolent attack, and
extreme environments
3. Remote Monitor the asset and surroundings and Automate response to
abnormalities
4. Rapidly Repair lightly damaged power equipment
5. Rapidly Replace severely damaged power equipment
Flexible options based on each unique situation
Assess Risk, Harden, Monitor & Automate, Rapidly Repair or Replace
© ABBSlide 5October 15, 2015
Second step: Equipment hardeningPhysical protection of the transformer
1. *Hardened, ballistic protection system: ABB AssetShield™
2. *Cooling resiliency
3. Dry bushings
4. *External accessory protection
5. *Remote monitoring and Communications
*Patent Pending
1
2
3
4
5
According to a recent survey from Utility Dive, 15-20% of the utility
respondents are planning equipment hardening activities in
their substations
© ABBSlide 6October 15, 2015
UL Level 8 is tested using a 30 caliber, M80 Ball Full Metal Jacket (FMJ) with 166 grains travelling at a velocity of 2750-3025 feet per sec. Five shots are fired into the sample placed 15 feet from the muzzle of the gun
UL Level 9 is tested using a 30 caliber, Armor Piecing (AP), M2 bullet with 166 grains travelling at velocity of 2715-2986 feet per second. One shot is fired into the sample placed 15 feet from the muzzle of the gun
UL Level 10 is tested using a 50 caliber, ball with 708 grains travelling at velocity of 2810-3091 feet per second. One shot is fired into the sample placed 15 feet from the muzzle of the gun
Ballistic test protocolUL 752, Level 8, 9 & 10
© ABBSlide 7October 15, 2015
UL 8• Fail - Common transformer tanks: ⅜”, ½” mild steel - even w/ AssetShield™• Pass – 1) ⅜” armor steel w/ AssetShield™
2) ⅜” armor steel (but with potential collateral damage)
UL 9
• Fail - ⅜” armor steel • Pass - 1) ½” armor steel w/ AssetShield™
2) ½” armor steel w/o AssetShield™ (potential collateral damage)
UL 10• Fail - ⅜” armor steel w/ AssetShield™ • Pass - ½” armor steel w/ AssetShield™
Summary of ballistic testingSolution to meet UL 752, Level 10 requirements
ABB recommendation
© ABBSlide 11October 15, 2015
New transformer applications
UL 10 - 1/2" Armor steel tank + AssetShield™
Retrofit applications for mild steel tank walls transformers
UL 10 - 1/2" Armor steel, with AssetShield™
attached to tank walls
Transformer ballistic resistant offeringsRecommendations
© ABBSlide 12October 15, 2015
Cooling resiliencySensor & automated valve shut off
Install sensor Install automated valve shut off
Requires outage
Close valves, pump oil from radiators into conservator, remove radiators
Install shut off valve directly against old valve
Install back radiators
Oil back into radiators
Lowest cost solution If activated than investigation
and repairs would be done Prevents catastrophic failure /
fire
© ABBSlide 13October 15, 2015
Cooling resiliencyAttaching military grade ballistic steel panels to fully dressed transformer in new or retrofit applications
© ABBSlide 14October 15, 2015
Cooling resiliency exampleRetrofit coolers (or radiators) with ballistic coated protection plate
Metal plate with AssetShield™ is installed around the cooler, except for the air intake edge
Install plate against the blue arrow indicated edge and front of cooler
Add 45° angle baffles to front of fan, deflecting air upwards and bullet down
© ABBSlide 15October 15, 2015
Cooling resiliencyRemote or secondary (redundant) cooling system options
© ABBSlide 16October 15, 2015
It explodes due to internal pressure from an arc and the spring force on the porcelain
Porcelain shards are sent flying 40 yards or more Conductor, lead and the lower porcelain fall into the
transformer Electrical short ignites fire and can cause further
collateral damage within the substation
Equipment hardeningWhat happens when an oil-filled porcelain bushing is compromised?
Repair time and transformer and substation equipment damage can be
significantly minimized with the application of dry bushings.
© ABBSlide 17October 15, 2015
Equipment hardeningDry bushings
Solid (oil free) construction eliminates risk of fire
Non-porcelain shed eliminates possible ballistic damage
To equipment
To personnel
© ABBSlide 18October 15, 2015
Equipment hardeningDry bushings
All voltage and current ratings are available High-seismic zone rated
© ABBSlide 19October 15, 2015
Tap changers
Control cabinet
Buchholz Relay
Oil level indicator
Valves
Entry points
Gas collection relay
External accessory protection
Temperature indicator
Oil expansion system
Nitrogen system
Sudden pressure relay
Gas monitors
Silica gel breathers
Current transformers
Key components available for fortification
© ABBSlide 25October 15, 2015
Third step: Remote monitoring and automationSupervision and monitoring of critical transformers
Incorporate a monitoring system into the transformer control system Standardize solution, custom configuration for different designs Monitor/assess service ready condition during storage Monitoring after placing in service for problem detection and
reliability assurance Supports communication over secure network
ABB ConfidentialSensitive material:
Distribution limited to those with a need to
know
© ABBSlide 26October 15, 2015
Current methodology not enough
Absolute physical security is not practically achievable.
Vulnerabilities hinge on attackers’ intentions and resources.
There is no way to absolutely protect a substation transformer from severe damage from an intentional attack.
It is possible to make the damage less severe, prolong service and restore service more quickly.
Typical physical protection not possible
© ABBSlide 27October 15, 2015
Fourth step: Rapid repairTrained field service personnel
Rapid response teams located in strategic geographic locations
Equipped with rapidly deployable spare parts
Emergency response for storms or disasters with expedited order process
Coordinated training with federal and state first responders
Excellent field safety performance
Familiarization with tools and equipment
Rapid repair strategies including access to knowledgeable service personnel and
availability of spare parts are key to restore service quickly when an incident occurs.
© ABBSlide 28October 15, 2015
Rapid repairTrained field service personnel
Equipment experts can deal with the unique challenges created by an event
Damage will be minimized if dry bushings are already in place
Oil processing may be required
Repair scope can range from component replacement up to the replacement of windings
Testing can assure a smooth energization
Lessons learned can be incorporated into the repair to increase resiliency
When an event occurs, an immediate assessment by equipment experts is needed to
define and obtain material, personnel and equipment needed to repair the damage
© ABBSlide 29October 15, 2015
Fifth step: Rapid replacement
Critical transformers as spares
Rapid assessment and replacement
HV transformer agnostic –universal spare
On the shelf design for critical assets
When damages exceed repair capabilities, rapid replacement
strategies play an important role in recovery
© ABBSlide 30October 15, 2015
Case study: Rapid response exampleRecovery Transformer (RecX) Program
Began before 9/11 with EPRI’s Infrastructure Security Initiative (ISI)
ABB was asked to examine feasibility of a fast-to-install transformer design
DHS became involved after the project created a <1 week storage to transformer energization concept
Prototype 500/230kV and 345/138kV designs were developed, focused on transportation ease & installation speed
Utility host supported a trail deployment Concept demonstration exercise was
completed in March 2012 3-phase, 600MVA bank still providing
reliable service
© ABBSlide 31October 15, 2015
Versatile recovery transformer (RecX) programTransportation
Smaller dimensions and lighter weights allow transformers to be shipped on trucks over US roadways
Transportation via truck: cuts transit time dramatically by creating direct path to site eliminates the need for & risk of heavy hauling from nearest rail
siding reduces cost by decreasing transportation time and offloading
© ABBSlide 32October 15, 2015
Versatile recovery transformer (RecX) program
Transformer mounted on solid steel frame Ability to support fully
erected transformer Allows for easy:
Lifting Transporting Setting
Acts as transformer pad Transformer can be
placed anywhere in the substation
Transportation
© ABBSlide 33October 15, 2015
Versatile recovery transformer (RecX) programRapid deployment – Assembly using pre-configured subassemblies
© ABBSlide 34October 15, 2015
Rapid recovery programStorage to energization 5 days, 10 hours
According to a recent survey by Utility Dive, 26% of utility respondents are developing a modular rapid recovery transformer
standard.
© ABBSlide 35October 15, 2015
SummaryLayered approach
1. Assess the asset risk to extreme weather events, intentional criminal attacks,
geomagnetic disturbances (GMD), and electromagnetic pulses (EMP)
2. Harden substations & power equipment against malevolent attack, and
extreme environmental challenges - in a practical way
3. Remote Monitor the asset and surroundings and Automate response to
abnormalities
4. Rapidly Repair lightly damaged power equipment
5. Rapidly Replace severely damaged power equipment
Flexible options based on each unique situation
Assess Risk, Harden, Monitor & Automate, Rapidly Repair or Replace