The Sound of Breaking Glass

I love the sound of breaking glass
Deep into the night
I Iove the work on it can do
Oh a change of mind
Oh change of mind, sound of breaking glass
All around, sound of breaking glass
Nothing new, sound of breaking glass

Nick Lowe

Security in the built world is most critical at precisely those times when the demands for performance and interaction are greatest. Buildings may lose their communications with the outside world when partially destroyed. The power grid may require ad hoc reconfiguration when its communication lines are down.

The built world traditionally has found security in isolation. Building Control Systems are isolated in a mechanical room and not plugged to the internet. Fire system annunciators are often limited to one-way communications. Access is often all or nothing, with many systems secured only with the default account and password from the manufacturer.

If a system is all or nothing, then it has little need for nuanced identity management. In traditional building monitoring systems, pretty graphics sell the system, but operators look primarily at tables of values. Without service definitions, the systems rely on operator knowledge to put the pieces together. Without service definitions, monolithic security is the only choice.

Considering the requirements of using building systems for situation awareness during emergency response can lead to the wrong conclusions. The mind leaps to all-out conflagration, wherein all security should be cast aside to allow the fire department unfettered access. Yet emergency response also includes the arrest of the lurker on the third floor, and the minor spill of chemicals in the manufacturing wing, and the ambulance responding to the heart attack in the secured executive suite. In many scenarios, the responder will be granted limited access, for limited times, to only a portion the available sensors and surveillance cameras.

Power systems have different requirements for emergency security. The intelligent grid will both support and require reconfiguration more readily than it does today. Distributed generation raises the real possibility that both sides of a downed power line are hot, increasing safety risks during emergency repairs. Improper interactions with the downstream systems can incur liabilities for equipment damage, equipment not owned by the utility and not professionally monitored.

Infrastructure emergencies often coincide with reduced communications. Reduced communications can disable federated identity management, or even single provider single password checking. Many systems handle this problem with forward caching; user accounts and identity tokens (passwords, biometrics, et al.) at the access point. For example, a campus access control system might forward cache the keys of all residents of a dorm, enabling the door to make mostly correct decisions even when disconnected.

Forward caching fails at precisely those times when the emergency is greatest. During the night with four fires, the fire department from the next county responds to the building. After the great ice storm, line crews from three states away are restoring the substation. During the worst fire, the battery in the incident commander’s PDA fails, and he switches to an unregistered device. The tightest, best security fails when you need it most.

Medical systems define what is called a “Break Glass” incident. Break Glass might rely on a standard account and password, one that might never change. By using the Break Glass password, the system is alerted to log fully every action taken. Break Glass incidents also trigger an audit alert. Post incident audit might require, for example, an explanation of the event, as well as an administrative review of all changes made to the system.

I think both building systems and energy systems, including SCADA for Transmission and Distribution can make use of the practice of Breaking Glass.

An Evolutionary Composite Services Framework for Energy

Future energy systems must not only support interoperability on operational, e-commerce, and security levels, but they must do so against a background of innovation. New technologies will arrive from innovators who are not traditional energy participants; it must be easy for these innovators to introduce their products and easy to integrate these products into the intelligent grid.

New business models, especially support for distributed generation and the hybrid technologies such as the zero net energy building, will demand new interfaces. These business models require symmetry, with each participant both a buyer and a seller of energy. Cost effective local energy storage will create new interaction patterns that we cannot know until we create the incentives that encourage market adoption. One thing is certain, the interface between the intelligent grid and buildings and industry will be different tomorrow, than it is today, and different still in another year.

Electric cars will have a significant position in our society far before we have worked out the market mechanics. The market mechanisms will extend beyond the simplistic “all cars will charge only in the middle of the night” to support on-demand rapid charging and selling stored energy back to the local home, business, or utility. The final market must support social scenarios such as holiday travel and new businesses such as the renewable energy parking deck. Again, we will face rapidly evolving interfaces for the near future.

We can most easily meet these challenges by creating a composite framework that supports diversity. These services will support the different types of business interactions surrounding the intelligent grid. These include but are not limited to:

• E-Commerce services to define the two-way buying and selling of power
• Capability and Capacity services to negotiate how much power is available at what quality irrespective of the underlying technology.
• Weather and similar services provide situation awareness to buildings and grid operators. Weather is critical to predicting energy consumption as well as to predicting renewable energy generation capacity. Situation is awareness is just as important to building and industry participants in new energy as it is to central generation and transmission facilities.
• Tariff and Regulatory interfaces, whether for long transmission, or for carbon negotiations, will guide energy markets beyond mere electrons.
• Security Services to control operations and protect privacy.
• Safety Services to provide situation awareness to linesman responding in emergency and other scenarios.
• Operations Services, supporting either third party operation of site-based generation capacity, or site-generation as a forward deployed utility asset.

Each of these seven interfaces will evolve over time. A user of one service may care little about another. As services become the basis for system-to-system interactions, keeping each service separate simplifies interaction patterns so each can evolve rapidly.

Rapid evolution and deployment are critical to new energy plans, particularly if we are to meet ambitious goals for more renewable energy, more distributed generation, and more electric cars. E-commerce and Security services can be based upon existing IT standards. Operational Services, where appropriate, can be based upon existing standards for substation operations. Weather services can be developed in different venues through the work, perhaps, of NOAA (the National Oceanic and Atmospheric Administration). Composite services will speed the development and deployment of the smart grid.

Composite services will also disconnect the different business processes from changes in other areas. Each business process is concerned with only a single service on its partners. As that service definition evolves over time, newer system will need to interoperate with version-based diversity within domain, rather than in all domains.

Energy systems are big infrastructure. Big infrastructure lasts for a long time and touches many things. Scale introduces diversity if installation. Innovation introduces diversity of interaction. Long life introduces diversity of versions. An Evolutionary Composite Services Framework provides the best platform for providing function and performance despite these three sources of diversity.

Distributed Generation and Lightweight Integration

Distributed generation is a big part of the anticipated new grid. Distributed generation refers to having many small sources of power on the grid. A traditional power company can own distributed generation or someone else, perhaps the building owner, can own it.

Wayne Longcore has described distributed generation today as akin to the early days of personal computing. The big centrally managed power plants have the role of the mainframe, the site where all real power generation occurs. Pocket generation plants, including solar generation on household roofs, are akin to the poorly networked early microcomputers, only able to get on-line with great difficulty, and unable to do much in the big grid. In fact, today, grid operators often cannot tell if some homes are selling power back to the grid. I guess this means that industrial sites with in-house cogeneration are the equivalent of the old minicomputers. Some readers might recall minicomputers and large workstations made up much of the early internet.

Wayne’s point was that users of the sluggish single-purpose computers of the day would have had trouble imagining the internet revolution of the 90’s. They would have had even more trouble imagining a conference like the one Wayne was speaking at, where most people carried several small computers, more powerful than the minicomputers of the day, ones able to play music and videos and surf the web at speeds unimaginable just a little while ago. After all personal computers were toys. Just like micro-generation today.

Pervasive communicating computers required the development of many small light-weight protocols. IP defined inter-computer communication. TCP defined how communications travel a wider network. DNS defined the way to find computers at a distance. Distributed generation will need many small protocols as well. The power of these protocols is that different brands of computers, or even quite different types of systems, can use them, making no distinction between mainframes, personal computers, or, now, even phones.

One protocol we need for distributed generation is a small lightweight pluripotent protocol for connecting small generation to the web. Today, grid operators expect to see a large and complex interface, specific to each type of generation, just as they do on their own substations. While new variants are derived from old, it can take as long to develop a new standard as it does the technology. The sheer number of these standards makes it difficult to integrate new generation points.

Zero Net Energy Buildings will have a mix of generation and storage systems. In most places, any building with storage is not allowed to sell energy back to the grid. Under today’s rules, a building with some solar power, a wind generator, and a diesel generator would need three separate interfaces to sell back to the grid. There is no defined interface for the myriad of low-voltage DC generating systems soon coming to market. These may not sell power to the grid, but may offset other internal needs, and thus influence power sold by “normal” generation. If each of these scenarios needs to be connected to the grid using current approaches, we will not connect many of them.

We need a common lightweight protocol to support agile integration of these new point sources of power to let distributed generation develop. There are some facts that grid operations needs to know about each substation, and it needs to know them about generating buildings as well. The grid needs this information not only for safety, but also for interoperability. But it does not need to know everything about the underlying technology, technology which may change over time. It certainly does not need the information to operate the underlying technology.

I will write about what I see as the requirements of this interface soon.

How to Enable the Energy Revolution

This weekend, I read what may be the most important book yet for those transforming today's grid into the Intelligent Grid, and transforming today's buildings and the systems inside them into Smart Buildings. No, it is not Thomas Friedman's "Hot Flat and Crowded", although that work has set the table nicely for discussions of the importance and opportunity of this effort. It is not and of the chap books from the Department of Energy, or the IEEE, or EPRI. It is not one of the many books on environmental eschatology. Nor is it any of George Gilder's visionary history books that bring perspective to technology.

I recommend that anyone involved in these efforts read "The Future of the Internet--And How to Stop It" (TFOTI) by Jonathan Zittrain. TFOTI is at first glance a sober history of technology and culture and regulation. TFOTI tells how the internet grew from its roots in telephone systems and closed garden communities into the amazing engine for transformation, innovation, and new wealth creation we know today. This happened because of a series of legal decisions and technological choices that let people place any device on the communication on-ramps, and create or install any program on their devices. Zittrain calls the capability of the internet to generate and support new technologies and new capabilities "generative".

Zittrain warns that we may be losing this generative aspect of the internet. The internet is being neutered by the growing deployment of locked-down devices, systems that do only what their manufacturers allow. The glamour and ease of use of the iPhone is afforded by locking down the system to approved programs. Xboxes and PlayStations offer connectivity on locked down computers. The social networks are becoming walled gardens; once again business users are establishing accounts on FaceBook, MySpace, LinkedIn, and Plexus as they once established multiple email accounts on COMPUSERVE, AOL, Prodigy and others.

Zittrain is concerned that we are losing the future opportunity of the Internet. We are recreating the dynamic of the time share system, and loosing the generative features of the internet. The siren song of ease of use can lock in today's internet and forestall future advances. Even the multimedia free-for-all risks turning into one large Cable TV system, with predicable results and one-way communication. Zittrain shares his vision of how to develop new technologies and social structures that allow users to work creatively and collaboratively, participate in solutions, and to thus preserve generativity of the Internet.

When we look at the power grid today, we see ATT way before the breakup, perhaps even before the Carterphone ruling. Today's power grid is essentially closed to the wall outlet, and with walled garden communications to the meter, at best. You can use power with any technology you want, but no technology that generates, or stores, or converts energy is allowed to participate in the wider grid. All access to the energy networks is jealously guarded by the utilities and the utility commissions. The Carterphone lawsuit opened up the old phone network to new technologies such as answering machines and fax machines. We need a similar opening up of energy networks.

The challenge of interoperability, and standards, as we move into the era of energy technology, is if we can create a system for energy creation, distribution, and use that is generative. Solving the most pressing problems of our time, those of energy and its effluents, requires engaging the creative talents of as many as possible. No one knows what the innovations of tomorrow might be. We must learn from the lessons of other large networks and build something that is generative.

Get TFOTI and read it. Send a copy to your utility commissioner as well.

(Full Disclosure: In the mid eighties, I was coding for CitiNet, briefly the largest walled garden BBS in the Northeast. Last spring, I ran into fellow CitiNet alum and star salesman Myron Kassaraba; he was talking up his smart energy venture Outsmart Power Systems. I see former CEO/CTO Tom Considine at Christmas each year. I would love to hear from any of the rest of the gang ...)