Command authentication via faster than real time simulation

This paper presents the use of a distributed dynamic state estimation, executed each cycle, to enable simultaneous cyber security and operational security. The basis of the method is: (a) data verification that detects bad data or byzantine type attacks and (b) command interception and fast authentication from the cyber security point of view (reliable detection of cyber intrusions) and from the operational reliability point of view. To ensure speed, the command authentication is done at the relay level and relay controls. Since all controls in a modern substation are exercised through a relay, this approach provides 100% coverage. The command authentication is performed by capturing each command, performing a simulation of the effects of the command via a faster than real time simulation using the real time model, and if there are no adverse effects, the command is authenticated and is allowed to proceed. This paper focuses on the approach that enables the faster than real time simulation and provides performance metrics of the method. The simulation results demonstrate the high speed-up of distributed DSE and validate the effectiveness of the command authentication and intrusion detection method based on the proposed equivalencing method.