<<

Using Protective Relays for Microgrid Controls

William Edwards and Scott Manson, Schweitzer Engineering Laboratories, Inc.

Abstract—This paper explains how microprocessor-based Distributed microgrid controls being performed in protective relays are used to provide both control and protection protective relays is practical because smaller microgrids require functions for small microgrids. Features described in the paper less complicated controls, fewer features, less communication, include automatic islanding, reconnection to the system, dispatch of , compliance to IEEE and less data storage. In smaller microgrids, relays are specifications, load shedding, volt/VAR control, and frequency commonly utilized for control, metering, and protection and power control at the point of interface. functions. In larger microgrids, the functionality of the microgrid controls is predominantly performed in one or more I. INTRODUCTION centralized controllers. Protective relays in larger microgrids This paper elaborates on the most common forms of tend to only be used as metering and protection devices with microgrid control accomplished in modern protective relays for controls being performed in a central device. Centralized grids with less than 10 MW of generation. The control controls dominate in large grids because distributed controls strategies described include islanding, load and generation become impractical to maintain, develop, and test when the shedding, reconnection, dispatch, and load sharing. number of distributed relays grows into the hundreds or Multifunction protective relays are an economical choice for thousands. microgrid controls because the hardware is commonly required at the point of interface (POI) to the III. ISLANDING (EPS) and at each distributed energy resource (DER). The This section describes the automatic islanding functionality relays at the POI and DER provide mandatory protection and required at the POI between a microgrid and the EPS. human safety. The cost, complexity, and commissioning efforts Protection engineers have used these automatic islanding of microgrids are reduced by consolidating more control systems for decades. They are alternatively called decoupling functionality into the relays. or separation schemes [1]. These schemes detect disturbances in the grid and intentionally island the microgrid by opening the II. BACKGROUND POI, which is most commonly a . Fig. 2 shows The plot shown in Fig. 1 was formed by evaluating 40 typical current and voltage wiring for a POI . recently completed microgrid projects commissioned by the Energy Management EPS authors’ team. Microgrid control system (MGCS) functionality, System in this case, is defined by the upcoming IEEE 2030.7 and

IEEE 2030.8 microgrid controller standards. Protection DNP3 POI functions were not considered in this analysis. Multifunction In Fig. 1, the horizontal axis shows the size of the grid in Protective Relay kilowatts and the vertical axis shows the percentage of control IEC 61850 functionality performed by protective relays. The remainder of the functionality, in every job, was completed by a centralized Controls real-time controller. The plot in Fig. 1 shows that smaller microgrids tend to use protective relays for more of the Microgrid microgrid control functions. Microgrid Generation 120

100 Fig. 2. Protective Relay at the Microgrid POI

80 A. Anti-Islanding Anti-islanding protection schemes cause microgrids to 60 island and then quickly trip off all generation, causing a power

Functionality 40 outage (blackout) on the microgrid. Historically, anti-islanding

Percentage of Control schemes were applied because breaking up an EPS into islands 20 was considered undesirable. For example, momentary islanding 0 of a large generation facility can cause generator rotor angles to 1 100 10,000 1,000,000 Size of Islanded Grid (kW) fall out of step with the EPS. Upstream operation could potentially pose a danger to the generator. Large generation Fig. 1. Percentage of MGCS Functionality Achieved in Protective Relays facilities use anti-islanding relays to trip generation offline and

prevent damage, whereas microgrids use islanding relays to One solution to this problem is to use an 81RF element, as keep the lights on in a microgrid. shown in Fig. 4. In this method, the relay sends the trip command in anticipation of crossing the contractual boundary. B. Proactive Islanding Applying 81RF elements improves the probability of a Proactive islanding is when a relay trips the POI breaker microgrid staying online after the POI trips; this is known as under short-circuit, open-circuit, and backfeed conditions or for seamless islanding. contractual requirements. Backfeed conditions are when a microgrid delivers power to a local load. Open-circuit 81RF Microgrid conditions occur as a result of broken conductors or when Survival upstream breakers are opened. Open circuits and backfeed conditions commonly occur when upstream protective relays df/dt (Hz/s) open distant circuit breakers following a faulted circuit. The protective relay must be capable of distinguishing df (Hz) normal power system transients from unacceptable events. A properly configured protective relay will not trip during the Trip voltage and frequency transients associated with load pickup, Region Conventional generator synchronization, recloser operation, inverter tripping, Blackout transformer energization, line energization, remote power system faults, or other similar switching transients. Voltage and frequency ride-through requirements are common parts of utility contracts. Based largely on IEEE 1547 Fig. 4. 81RF Element Assists Microgrid Survival characteristics, the microgrid is required to stay online until it Fig. 4 and Fig. 5 depict the same typical unplanned reaches the trip points. A typical ride-through requirement microgrid islanding event. The solid red line labeled showing frequency over time is shown in Fig. 3. “Conventional” in both figures illustrates what commonly happens when only underfrequency elements are used. The dashed green line labeled “81RF” shows a typical seamless transition with the 81RF element in use.

DER Trip POI POI Trip Relay 81RF Ride Through 60 Trips POI 60 Microgrid Opens POI Trip Survival POI Trip Frequency (Hz) DER Trip DER Trip

57 Frequency (Hz) POI Relay DER Time Conventional Trips Trips Fig. 3. Typical POI Ride-Through Requirement Blackout t Macrogrid POI Legal contracts between microgrid and EPS owners define Disturbance the disturbance ride-through requirements at the POI. Fig. 3 Opens depicts the IEEE 1547 standard frequency ride-through Fig. 5. Proactive Automatic Islanding Before a Microgrid Blackout requirements; similar requirements are often referenced in legal The red lines in Fig. 4 and Fig. 5 depict a typical sequence contracts. These contracts require the POI breaker to stay closed of events for an islanding event with only underfrequency (i.e., prohibit decoupling) while the grid frequency is within a tripping of the POI. In this case, the frequency falls at the rate tolerance (ride-through) band. (df/dt) proportial to the power disparity between generation and The ride-through region of Fig. 3 is designed to support the load consumption [2]. This initial frequency freefall occurs the resiliency of the EPS with no benefit to the microgrid. These same way for both the red and green systems. frequency ride-through requirements extract significant For the red lines in Fig. 4 and Fig. 5, the POI opened some spinning kinetic energy reserves out of the microgrid in an time after the relay element crosses the contractual POI trip effort to save the EPS. In order to avoid a microgrid blackout point. This time delay is the circuit breaker opening time and as a result of these challenging requirements, proactive and the underfrequency element pickup conditioning timer. The seamless islanding techniques are required. time delay results in the frequency falling substantially below It can be very challenging to achieve a seamless island for a the contractual trip point before the circuit breaker opens. microgrid when the POI opens at the POI trip point of Fig. 3. The red lines in Fig. 4 and Fig. 5 show that although the This is because the frequency has fallen so far by the time the power system islanded successfully, the microgrid blacked out POI opens that turning the frequency around may not be because the DER protection tripped off the generation, resulting possible before other relays trip off the DER. in further frequency decay.

The dashed green lines in Fig. 4 and Fig. 5 depict the same 700 600 event as the red lines; however, the green line events use a 500 400 properly configured 81RF element. In these cases, the 300

81RF element detects the high rate-of-change of frequency and IA (rms) 200 100 MGCS starts the circuit breaker tripping process prior to reaching the 0 Fault Starts Sheds contractual POI tripping point. Properly tuned, the POI circuit 20 Load breaker opens at exactly the contractual ride-through boundary, 15 Relay as shown in Fig. 5. Because the frequency was turned around, 10 Trips Load Current Interrupted the microgrid never went to blackout. 5 VAB (kV rms) C. Seamless Islanding 0 Circuit Seamless islanding techniques are used to avoid microgrid 60.2 Breaker 60 Opens power outages when the POI is opened under load current. 59.8 Seamless islanding avoids process outages for industrials, 59.6 59.4 preserves research for universities, and avoids interruption for 59.2 Frequency (Hz) military facilities. While industrials, universities, and military 59 microgrids commonly require a seamless (“no blink”) transition 0 0.2 0.4 0.6 Seconds to islanding, community microgrids are focused on cost Fig. 6. Typical Reverse Fault Detection Scenario Using a POI Relay reduction, revenue growth, and human safety. Therefore, community microgrids do not commonly require seamless IV. LOAD AND GENERATION SHEDDING islanding. Close coordination between relays and microgrid Time lags associated with conventional prime movers controllers, deterministic data, and fast communication (turbines or reciprocating engines) can require load and/or between relays are required for successful seamless islanding. generation shedding to preserve power system frequency [4]. Programmable logic controller-based (PLC-based) microgrid The first law of thermodynamics (conservation of energy) and controllers struggle to achieve seamless islanding transitions, Kirchoff’s current law require that electrical generators and whereas relay-based microgrid control systems achieve it loads are always instantaneously balanced at the speed of light. easily. Prime movers and control loops (governors, exciters, and Once the POI relay opens and separates the microgrid, a inverters) have varying time lags of up to several seconds. The high-speed load-shedding system response may be required to difference between the speed of light and the time lags creates turn around the voltage and/or frequency. If the microgrid has a power disparity that can cause power system blackouts [4]. less generation than load, the system DERs will experience an For example, the sudden disconnection of a generator from overburden condition and a frequency decay. a microgrid can cause adjacent (online) generators to expel Alternatively, if onsite generation exceeds the system kinetic energy into the grid until the remaining connected prime loading, the newly formed islanding system frequency movers and generators catch up to the power disparity. Power increases and high-speed generation runback (curtailment) or system frequency falls when the generators expel kinetic generation shedding are used to rapidly bring down the energy, thus load shedding is required to preserve the power frequency [3]. system. The sudden disconnection of a large block of load can Fig. 6 shows an unplanned island scenario with a fault on the conversely cause the generators to overspeed (overfrequency), EPS, well upstream of the microgrid POI. The data in this plot thus requiring generation shedding. were collected by a POI relay under closed-loop testing with a Generator and inverter overload capabilities can also create real-time, hardware-in-the-loop simulator. The event starts with conditions that require load and/or generation shedding. For a fault, and about 200 ms later, the directional relay element example, the sudden disconnection of a generator from a decides to trip the POI. About 100 ms later, the circuit breaker microgrid can cause adjacent (online) prime movers and opens, followed by fault current termination and microgrid inverters to reach their output limits, creating a frequency free- voltage recovery. Following the POI opening, a load-shedding fall condition that requires load shedding to correct. system opens several sheddable load breakers and the microgrid There are many different types of load- and generation- frequency recovers. shedding systems available. Not all of them are applicable for relay-based microgrid controls. These load-shedding systems are summarized as follows: • Subcycle contingency-based load shedding. These systems operate in less than 1 cycle (16.6 ms for a 60 Hz system) to prevent frequency collapse and out- of-step problems with DERs. These systems can be implemented using protective relays for very simple microgrids; however, most contingency schemes require centralized real-time automation controllers in addition to relays.

• Underfrequency-based load shedding. These systems The A25A relay dispatch functionality sends new dispatch are commonly implemented in relay-based microgrid set points to DERs to bring the frequency, voltage, and angle control schemes regardless of the size of the difference across the POI down to acceptance limits. The relay microgrid. sends a close command to the POI breaker once the frequency, • Undervoltage-based load shedding. These systems are voltage, and angle difference criteria are met. commonly implemented in relay-based microgrid Fig. 8 shows what the angle (Δδ), voltage (ΔV), and slip (δ) control schemes regardless of the size of the signals look like for typical ac waveforms at the POI breaker.

microgrid. POI Breaker • Inertial-compensated and load-tracking load shedding. These systems are underfrequency-based load- shedding schemes that compensate for varying microgrid inertia and load composition [3]. These VEPS VMACROGRID systems are commonly implemented using protective relays for small microgrids. • Slow load shedding. These systems usually operate in the time frame of seconds or minutes. They are used to ∆V prevent overload conditions for DERs and , assist with synchronization, fulfill EPS POI curtailment requests, and avoid demand charges. δ These systems are commonly implemented in relay- ∆δ based microgrid control schemes. VMACROGRID VEPS

V. RECONNECTION Reconnection control systems are also known as autosynchronization systems. The ANSI symbol for manual synchronism-check functionality is 25. A25 is used when the Fig. 8. Synchronism Check in a Relay relay also automatically dispatches generation prior to closing Equipment can be damaged if the POI breaker is closed with the circuit breaker. Relay 25 schemes with dispatch and the voltage out of phase. A proven way to prevent such damage extensive automation are also referred to as advanced automatic is by using breaker close delay logic. This logic compensates synchronizers (A25A) [5]. for the breaker mechanism close delay times by closing the A25A functions are now commonly performed in relays. breaker before it gets to zero degrees, thus ensuring a zero-angle Relay-based A25A systems speed up the reconnection process, close [6]. do not require synchroscopes, eliminate PLCs, and allow the Table I compares the IEEE C50.12 and IEEE C50.13 entire process to be initiated and monitored remotely [5]. synchronous generator synchronization settings with the typical The POI multifunction protective relay shown in Fig. 7 has A25A settings used in a POI relay. both a synchronism-check and a dispatch function. For safety, TABLE I the A25A process is always initiated by a human. Once the TYPICAL A25A RELAY SETTINGS process is initiated, the A25A system operates autonomously to IEEE C50.12 and Typical A25A dispatch the DERs and close the breaker. Setting IEEE C50.13 [7] [8] Acceptance Criteria POI Multifunction Protective Relay Angle ±10° Target 0° Voltage +5% ±5% Synchronism Dispatch Check Breaker close Close POI n/a 3 cycles time Slip ±0.067 Hz ±0.04 Hz

DERs VI. DISPATCH Conventional Wind Solar POI relays configured for A25A can also be used for grid- connected DER dispatch. The POI relay uses the same DER raise and lower controls for both A25A and dispatch controls. Relay Relay Relay When the POI breaker is closed, power and (reactive power) are controlled by the POI relay. The POI relay is dispatched to a particular power and power factor by an upstream energy management system (EMS). These dispatches Fig. 7. Multifunction Protective Relays at the POI and DER Simultaneously Performing POI A25A and DER Dispatch become internal set points for the POI relay control loops.

As shown in Fig. 7, the POI relay sends raise and lower A. Frequency and Voltage Control commands to DER relays to meet the EMS dispatch set point. When the POI opens, the POI relay dispatches DERs to The DER relay then dispatches the DER (generator or inverter- control the frequency of the islanded microgrid. based source) to its commanded active and reactive power set Simultaneously, load balancing is required to keep the DERs points. equally loaded; this is load sharing, as described previously. With the POI open, there are several methods to achieve VII. LOAD SHARING microgrid frequency control while load sharing between DERs Outputs from all DERs must be continuously balanced based [9]. These methods are summarized in the subsections below. on either an optimal economic or optimal stabilty criteria. 1) All DERs in Grid-Forming Mode (Isochronous) Optimal stability and optimal economic criteria cannot be met Parallel-connected DERs in grid-forming mode require a simultaneously. high-speed, isochronous-sharing control system to dispatch the For example, having one generator running at full capacity governors, exciters, and inverters simultaneously and provide while an adjacent generator is idling puts an islanded power electrical oscillation damping between DERs. These schemes system (microgrid) at risk of losing a generator because of are also called isochronous (ISO) parallel controls. The central reverse power or overloaded protection elements. Optimal controller, communications links, and associated power stability criteria are met when adjacent generators are equally supplies, wiring, and communications cabling become single dispatched. On the contrary, optimal economic dispatch for the points of failure. These schemes also have a long history of same scenario is most commonly achieved by running each tuning instabilities as DERs deteriorate with age or load generator close to its optimal efficiency point, which is very compositions change. Therefore, this method is not rarely an equal dispatch condition. Adding intermittent, recommended for use on any microgrid. inverter-based DERs to a microgrid creates further complications to a dispatch scheme. 2) One DER in Grid-Forming (ISO) Mode, Remainder Load sharing is the balancing of conventional prime movers. of DERs in Grid-Supporting (Droop) Mode It is a mechanical engine term and is not associated with electric In this scenario, the ISO unit keeps the power system at a generators or motors. Because of the traditional usage of the constant frequency. The remaining droop units must therefore term “load sharing,” the simultaneous dispatch of intermittent, be dispatched to ensure that all of the units are sharing load inverter-based DERs is also called load sharing. Today, the equally. The logic associated with these schemes, both to term load sharing is used ubiquitously in reference to a variety ensure that only one unit is in ISO mode and to handle potential of methods of balancing DER (conventional and inverter) single points of failure, can become very complex. This is a output. second-choice method for load sharing with protective relays. The term “generator paralleling control” is synonymous 3) All DERs in Grid-Supporting (Droop) Mode with load-sharing controls. The term “paralleling” is most Most power systems throughout the world operate with all commonly used among reciprocating engine suppliers to units in droop mode. In this mode, the POI relay (or a central describe their particular set of controls, which keep the output controller) adjusts the droop set points of all units from parallel-connected generators balanced. simultaneously to keep the power system at nominal frequency. POI relays configured for dispatch are now commonly used This system does not require DER mode changes upon for grid- and island-connected DER dispatch and load sharing. transition to islanded operation. Another advantage with this When the POI breaker is closed, power and power factor are method is that all microgrid DERs provide fast transient controlled by the POI relay. When the POI breaker is open, the frequency support of a failing EPS. Droop mode is the first- islanded frequency and voltage are controlled. In both grid and choice method for load sharing with protective relays. islanded mode, the POI relay works with the DER relays to provide DER load sharing. B. Volt/VAR Control In this load-sharing scheme, relays are placed at each DER. Relay-based volt/VAR control of a DER has a similar The POI relay communicates to the DER relays via serial or solution to that of the active power dispatch descriptions in Ethernet communication. The POI relay sends dispatch Section VI. Putting all DERs in constant voltage mode with requests to each DER relay. The DER relays control the active reactive compensation (reactive droop) terms provides optimal and reactive output of the individual DERs to meet POI relay stability and control under all operating conditions. This dispatch requests. requires the POI relay to send voltage reference signals to all When the complexity of the dispatch schemes becomes too microgrid DERs. Droop mode is the first-choice method for complex for a single POI relay to manage, an additional volt/VAR load sharing with protective relays. microgrid controller is commonly added. This is required when the number of DERs is too great or when the microgrid requires VIII. AUTOMATIC complex frequency and voltage control strategies. Microgrid Automatic black start is a microgrid function that automates controllers are usually not required until there are three or more recovery from a blackout. This functionality includes islanding, DERs under dispatch. load shedding, grid topology reconfiguration, DER starting, and load reacceleration.

Automatic black start functionality is commonly used on X. OPTIONAL CENTRAL CONTROLLER community microgrids, which can withstand a temporary This paper focuses on the microgrid control capabilities when transitioning to islanded operation. provided by microprocessor-based relays. For a variety of Conversely, even temporary outages for critical reasons, some microgrid owners may add a centralized infrastructure—such as military, oil and gas, or data center microgrid controller to augment relay functionality. applications—can be catastrophic. While some community Relay-based controls are a cost-effective solution for smaller microgrids use black start functionality on every island microgrids. The additional cost, complexity, and testing of transition, critical infrastructure microgrids rarely use black centralized controller-based systems are generally only start functionality. warranted on large microgrids with more than 10 MW of When a blackout occurs, relays are configured to generation. These large microgrids can include many DERs, automatically perform switching procedures to island the loads, and complex topologies. For large microgrids, the microgrid (open the POI) and temporarily disconnect the loads process of managing system functionality with distributed (load shed), as discussed in Section VI. relays may be cumbersome. For example, making a change in Reconfiguration of microgrids involves the automatic functionality to a relay-based black start scheme may require opening and closing of circuit breakers, disconnects, , changing the settings on every relay. A centralized controller and other circuit-interruption devices. Multiple islands may be offers the convenience of a single platform for development, present at the moment of blackout; relays automatically testing, and maintenance. synchronize the islands into a single grid. Another common Microgrids with the primary objective of cost savings tend reconfiguration technique is to reconfigure distribution feeders to use centralized controllers. These systems require unit (loads) to prepare for DER re-energization. commitment, which uses forecasts for scheduled economic DER starting varies greatly by technology. Diesel generator dispatch of DERs. Algorithms that account for multivariable sets can be started remotely within seconds or minutes of an cost functions, integrate large numbers of generation assets, outage (depending on the technology). Inverter-based incorporate complex battery-charging strategies, react to generation, such as photovoltaic, most commonly requires market pricing signals, and constantly change forecasted strong voltage sources (e.g., conventional generator sets or weather conditions typically require more processing power battery-based systems) to start. Battery systems with ac than is available in microprocessor-based relays. inverters are commonly the first to be started in a black start Complex visualization systems, remote access requirements, sequence because they can respond within seconds. or interfaces to other control systems may steer designers After the DERs are online and the grids are reconfigured, the toward centralized controllers. While relays have built-in front- relays restore power to the loads. Loads are incrementally re- panel HMIs that are excellent for local monitoring and control, energized while maintaining voltage and frequency stability. a remotely monitored system can be more conveniently The process of reconnecting loads is often referred to as load monitored from a single display point. For example, a single reacceleration. centralized microgrid controller can simultaneously host an Automatic black start is most often entirely performed by HMI, perform economic dispatch, perform data collection from relays. Relays communicate to perform the entire sequence of relays, and act as a protocol gateway for an energy management islanding and re-energization. While community microgrid system. black start schemes commonly initiate automatically, black Modern centralized microgrid controllers do not use start systems for critical infrastructure microgrids are most hardwired signals like legacy PLC systems do. Instead, they use commonly human-initiated. communications networks to extract real-time data from the microprocessor-based relays. A centralized controller using a IX. PRACTICAL IMPLEMENTATION communications network instead of hardwired signals is less Microprocessor-based relays include hardware, firmware, costly, more reliable, easier to test with controller hardware-in- and configurable settings and logic. The hardware and firmware the-loop techniques, and faster to modify for new functionality. are set by the manufacturer, but users can set the configurable settings and logic. XI. CONCLUSION The relay microgrid control functions described in this paper The key takeaways in using microprocessor-based are not available in off-the-shelf firmware from relay protective relays for small microgrids include: manufacturers. They must be programmed into the relay • 81RF islanding prevents microgrid blackouts and settings and logic. simultaneously meets interconnect requirements. Because of the complexity of the microgrid control schemes • A25A functionality is performed in multifunction described in this paper, experienced engineers are protective relays. recommended for implementation. Relays have minimal user- • Although the relays are commercial and off-the-shelf, configurable logic, which must be used judiciously to achieve the functionalities described in this paper must be these features. Should the relays have insufficient capacity to designed and tested by skilled engineers. perform the desired logic, real-time automation controllers can be used to augment the relay logic.

• Control of small microgrids with limited functionality XIII. BIOGRAPHIES requirements can be accomplished entirely within William Edwards, P.E., received his B.S.E.E. from the Georgia Institute of protective relays. Technology in 2011. He joined Schweitzer Engineering Laboratories, Inc. (SEL) in 2011, where he is presently a technology development automation • Capabilities of multifunction protective relays that engineer. Prior to joining SEL, William worked for Concurrent Computer often already exist at the POI can prevent microgrid Corporation, where he ensured quality for video-on-demand solutions. William blackouts, automate grid resynchronization, achieve is a member of the IEEE and a registered professional engineer in Alabama, POI dispatch, and make islanded frequency and Arkansas, Georgia, and Tennessee. voltage control a reality. Scott Manson received his M.S.E.E. in from the • Modern protective relays provide the functionality University of Wisconsin–Madison and his B.S.E.E. in electrical engineering needed to meet many existing and upcoming from Washington State University. Scott is currently the engineering services technology director at Schweitzer Engineering Laboratories, Inc. In this role, IEEE 1547, IEEE 2030.7, and IEEE 2030.8 he provides consulting services for control and protection systems worldwide. specifications. He has experience in and modeling, power • Microprocessor-based relays can provide automatic management systems, remedial action schemes, turbine control, and multiaxis motion control for web lines, robotic assembly, and precision machine tools. black start functions, including islanding, load Scott is a registered professional engineer in Washington, Alaska, North shedding, grid topology reconfiguration, DER starting, Dakota, Idaho, and Louisiana. and load reacceleration. • Centralized controllers can be used to augment a

relay-based solution for larger microgrids, systems with complex economic optimization, or remote visualization.

XII. REFERENCES [1] K. G. Ravikumar, A. Upreti, and A. Nagarajan, “State-of-the-Art Islanding Detection and Decoupling Systems for Utility and Industrial Power Systems,” proceedings of the 69th Annual Georgia Tech Protective

Relaying Conference, Atlanta, Georgia, April 2015.

[2] S. Manson, G. Zweigle, and V. Yedidi, “Case Study: An Adaptive Underfrequency Load-Shedding System,” proceedings of the 60th Annual and Chemical Industry Technical Conference, Chicago, IL, September 2013. [3] K. G. Ravikumar, S. Manson, S. K. Raghupathula, T. Alghamdi, and J. Bugshan, “Complete Power Management System for an Industrial Refinery,” proceedings of the 62nd Annual Petroleum and Chemical Industry Technical Conference, Houston, TX, October 2015.

[4] E. R. Hamilton, J. Undrill, P. S. Hamer, and S. Manson, “Considerations for Generation in an Islanded Operation,” proceedings of the 56th Annual Petroleum and Chemical Industry Conference, Anaheim, CA, September 2009. [5] M. Thompson, “Advancements in Synchronizing Systems for Microgrids and Grid Restoration,” proceedings of the 13th International Conference on Developments in Power System Protection, Edinburgh, United Kingdom, March 2016.

[6] S. M. Manson, A. Upreti, and M. J. Thompson, “Case Study: Smart

Automatic Synchronization in Islanded Power Systems,” proceedings of

the 51st Annual Industrial & Commercial Power Systems Technical

Conference, Calgary, AB, Canada, May 2015. [7] IEEE Standard C50.13-2005, IEEE Standard for Cylindrical-Rotor 50 Hz and 60 Hz Synchronous Generators Rated 10 MVA and Above. [8] IEEE Standard C50.12-2005, IEEE Standard for Salient-Pole 50 Hz and 60 Hz Synchronous Generators and Generator/Motors for Hydraulic Turbine Applications Rated 5 MVA and Above.

[9] S. Manson, A. Khatib, M. Checksfield, and P. Duffield, “Case Study:

Simultaneous Optimization of Stability and Steam Production,” proceedings of the 61st Annual Petroleum and Chemical Industry Technical Conference, San Francisco, CA, September 2014.

20180209 • TP6824