Fault Analysis in Electrical Grids

Summary of Likely Technical Causes for the April 28, 2025 Spain Power Outage The massive blackout that affected Spain and Portugal on April 28, 2025, originated from a cascading sequence of technical failures within the Iberian power grid. The outage was initially triggered by a physical fault—a transmission line damaged by a fire in southwest France—which caused the sudden disconnection of critical cross-border interconnections between Spain and France. This disconnection led to a rapid loss of synchronism between the Iberian and the wider European grid. As Spain and Portugal abruptly became electrically isolated, a severe imbalance between generation and demand occurred, likely due to a sudden loss of significant imported power and possible subsequent generator trips within Iberia. The result was a catastrophic frequency drop, exceeding the capacity of automatic under-frequency load shedding systems designed to protect grid stability. Further complicating the situation was the high reliance on renewable generation sources (wind and solar), which reduced the overall inertia of the system, causing the frequency to fall too quickly for protective measures to effectively counteract the imbalance. Additionally, voltage instability and widespread voltage collapse quickly followed as large portions of the transmission network lost power sources. In summary, the blackout was caused primarily by: Initial line fault and rapid cascading grid separation due to protective relay actions. Severe frequency instability and collapse triggered by substantial power imbalance. Reduced grid inertia from high renewable energy penetration, accelerating frequency decline. Voltage collapse throughout large segments of the transmission grid due to widespread generator and line disconnections. Insufficient interconnection capacity between Spain and the rest of Europe, limiting external support during the crisis. No evidence currently indicates that cyberattacks or operator errors played a significant role. The event was essentially a severe technical failure, illustrating vulnerabilities within the current Iberian grid configuration under extreme conditions.

☀ Distance Protection Challenges in Presence of Grid-Forming Inverters In the paper "Impacts of Grid‐Forming Inverters on Distance Protection" by D. Johansson et al., published in IET Generation, Transmission & Distribution (2025), the authors investigate how the integration of Grid-Forming Inverters (GFMs) introduces new challenges for traditional protection schemes. One significant issue arises in distance protection, particularly due to the fundamentally different fault behavior of GFMs compared to synchronous machines. 🧠 Key Insight from Recent Research: The study reveals that distance relays, designed with the expectation of strong fault current contributions from synchronous generators, may malfunction or underreach when operating in inverter-dominated grids. 📉 What Happens During a Fault? GFMs are designed to limit their fault current output to protect inverter hardware. As a result: The apparent impedance seen by distance relays increases, often exceeding the protection zone. This leads to delayed or failed relay tripping, particularly in areas with high GFM penetration. 📊 Simulation-Based Evidence (Figures 12–15): To visualize these effects, the authors simulate a single-line-to-ground fault scenario. Here's what the key figures demonstrate: Figure 12 – Apparent Impedance at R1: The relay’s measured impedance stays outside Zone 1, despite the fault location being within it. This is a classic underreaching issue caused by current-limited GFM behavior. Figure 13 – Positive Sequence Voltage at Bus 3: The voltage remains relatively stable due to the GFM's control loop, reducing the voltage dip typically used as a fault indicator in traditional schemes. Figure 14 – Positive Sequence Current at R1: Fault current magnitude is significantly lower, causing the impedance calculation to overestimate distance and miss the fault. Figure 15 – GFM Current Injection: The inverter’s fault current saturates quickly, showing a flat and controlled response, protecting the device but undermining impedance-based logic. ⚙️ Implications for Power System Protection: This analysis suggests a strong need to: Develop adaptive or communication-based protection schemes. Reassess relay zone settings and coordination. Investigate hybrid approaches that incorporate non-impedance-based fault detection. Revising protection strategies becomes critical to ensure system security and reliability as we transition toward inverter-dominated, low-inertia grids. 📖 Reference: Johansson, D. et al. “Impacts of Grid‐Forming Inverters on Distance Protection”, IET Generation, Transmission & Distribution, 2025. #PowerProtection #GridForming #InverterControl #DistanceRelay #PowerSystemSecurity #GFM #ProtectionEngineering #RenewableGrid #FutureGrid #RelayCoordination

I reflected on a series of interactions on X around the blackout in Spain and Portugal. I was thinking about root cause analysis and the timing required if I were given the project. I think that 16 weeks is a reasonable timeframe for an assessment with recommended solutions to avoid the issue. 1. Define the Failure Clearly (1–2 weeks) - Insist on clarity of the problem. This means documenting exactly what happened—when, where, and how the grid failed: - Time and geographic extent of the outage - Cascading effects on infrastructure - Which frequency, voltage, or phase parameters deviated - Immediate technical symptoms 2. Gather Raw, Unfiltered Data (1–4 weeks) - Avoid relying on polished managerial summaries and instead ask engineers for: - Real logs and sensor data (frequency, load shedding, transmission trips) - Physical conditions (e.g., grid weather conditions, equipment specs) - People's firsthand accounts, especially from operators and field engineers 3. Probe for Systemic Design and Organizational Flaws (3–6 weeks) - I remember Feynman studying the Space Shuttle O-ring failure. I'd explore: - Structural vulnerabilities (e.g., renewable intermittency, islanding problems) - Control system limits (SCADA failures, PLC/RTU coordination issues) - Organizational behavior — misaligned incentives, regulatory complacency, or "normalization of deviance" Specially question assumptions such as: “The grid is secure under X% renewables” "The grid is secure under Y% rotating equipment" “Our simulations already cover these failure modes” "It couldn't be Z" 4. Simulate and Reconstruct the Sequence (2–3 weeks) - Can we empirically test? Reconstruct grid behavior using load flow, transient stability, or EMT simulations. Inject perturbations to see if the failure recurs. Validate assumptions about what “should have happened” vs. what actually happened? 5. Deliver Honest Conclusions (1–2 weeks) “The first principle is that you must not fool yourself — and you are the easiest person to fool.” - Richard Feynman

Your Inverter Passed All Ride-Through Tests. So Why Did It Still Desynchronise? Most of our engineering effort has gone into making sure that inverters ride through faults, and understandably so. Standards like IEEE 2800, UL 1741(SB), and IEEE P1547.1 require them to remain online during voltage sags, frequency excursions, and even short circuits. But we’ve become so focused on "staying connected" that we’ve overlooked a deeper question: Are they staying synchronised? Too often, we assume that if an inverter doesn't trip, it's doing its job. But riding through a fault isn’t the same as riding with the grid, especially in low-inertia systems dominated by inverters. Subtle Failures: The Real Resilience Challenge Emerging system-wide vulnerabilities aren't just about voltage or frequency, they're about angle. 1. Phase Angle Drift: When an inverter hits its current limit, say, during a fault, the terminal voltage can begin to drift in phase from the grid reference. This is not always silent: advanced grid monitoring and phasor-based diagnostics can detect it. But most protection schemes can’t. The phase error accumulates quietly, eventually leading to loss of synchronism, without ever violating voltage or frequency thresholds. 2. Reactive Surges: Inverters are expected to inject or absorb reactive power to support grid voltage during disturbances. But when many units respond simultaneously, the resulting reactive transients can destabilise inverter control loops or overload weak grid segments. Grid support, under stress, can become grid stress; see it unfold in the graph below. 3. Loss of Synchronism: Inverter-based resources don’t swing. They don’t coast. They don’t ride out angle disturbances like machines with inertia do. During events like islanding or fast reconnection, they can desynchronise rapidly, long before conventional ride-through windows expire. Grid Codes: Progress, but Still Blind Spots Yes, standards are evolving. IEEE P1547.1 and future revisions of UL 1741 are beginning to include phase jump and RoCoF ride-through. But let’s be honest: voltage and frequency compliance remain the primary focus. Synchronism is still treated as implicit, not explicit. A system that passes ride-through tests but slips out of step under stress is not resilient. It’s just untested. So what defines real resilience? It’s not just about “what didn’t trip. It’s about whether the grid decided to hold onto you or let you go. This is where we need to shift our thinking. Modern defence plans must be angle aware. Inverter controls must become synchronism sensitive. And system planners must stop treating “ride-through” as the final destination. Because resilience isn’t just measured by what stays online, It’s measured by what stays in step. Is your system’s resilience measured by what stays online, or what gets cut loose? #LossOfSynchronism #GridFollowing #ProtectionDesign #PowerSystemResilience #RideThrough #AngleStability #Blackout

I didn’t truly understand protection challenges until I started working with systems that had a high share of inverter-based resources. On paper, protection looks simple: fault happens -> current spikes -> relay trips. In reality, that logic was built for synchronous machines. With rotating generators, faults are loud. Current shoots up 5–8 times rated. Voltage collapses clearly. Phase angles swing in a predictable, physics-driven way. Relays see the fault instantly. Now compare that with IBR-dominated systems. Fault current barely reaches 1.1–1.3 pu. Waveforms are shaped by control algorithms. Current limiting, PLL dynamics, and ride-through logic all kick in. What looks like a fault to the network can look like a “normal operating point” to a conventional relay. That’s where protection blinding becomes very real — not a theoretical risk. This is not about IBRs being “bad”. It’s about the fact that we are using protection philosophies designed for a different era. Modern grids dont fail because protection is wrong. They fail because protection assumptions are outdated. The future of protection is not: ❌ higher current thresholds ❌ more aggressive settings It’s: ✅ waveform intelligence ✅ faster measurements ✅ grid-forming behaviour ✅ protection designed with controls, not against them The grid has changed. Protection has to catch up. #PowerSystems #GridProtection #EnergyTransition #InverterBasedResources #PowerEngineering #GridModernization #ElectricalEngineering #FutureGrid #EnergySystems

Most engineers calculate fault current. But few consider what happens in the first few cycles. That’s where DC offset comes in. During a short circuit, fault current is not perfectly symmetrical. A temporary DC component shifts the waveform, creating a higher first peak. Now combine that with a high X/R ratio: • Reactance dominates resistance • DC offset decays slowly • Fault current remains asymmetrical longer Why does this matter? Because it directly impacts: ⚡ Breaker duty → higher making & breaking requirements ⚡ Mechanical stress → equipment sees higher peak forces ⚡ Protection accuracy → CT saturation risk increases ⚡ System cost → higher ratings = higher project cost This is why two systems with the same RMS fault current can behave very differently in reality. In power systems, the first peak matters as much as the RMS value. Understanding concepts like X/R ratio and DC offset is critical for designing reliable and cost-effective protection systems. #PowerSystems #ShortCircuit #ProtectionEngineering #ElectricalEngineering #GridStability #HighVoltage

🔌 Fault-Induced Delayed Voltage Recovery (FIDVR) Have you ever noticed how, after a fault on the grid, voltage sometimes doesn’t immediately recover even after the fault is cleared? That phenomenon — where voltage lingers at abnormally low levels for several seconds — is known as Fault-Induced Delayed Voltage Recovery (FIDVR) ⚡ ⚙️ What Actually Happens During FIDVR When a short-circuit fault occurs near a load center, the system voltage dips sharply. Normally, once the fault is cleared, voltage should bounce back instantly. But in some areas, the voltage recovery is surprisingly slow — not because of transmission weakness, but because of the loads themselves. The primary contributors are induction motors, commonly found in: Residential air conditioners 🏠 Industrial pumps and fans ⚙️ Commercial compressors and drives 🏭 During a fault, these motors lose torque and begin to stall. Once stalled, they demand large amounts of reactive current — just when the grid can least afford it. This triggers a self-reinforcing loop: 1️⃣ Voltage drops → motors stall 2️⃣ Motors stall → reactive current surges 3️⃣ Reactive surge → voltage stays low The result? A slow recovery process where voltages take seconds instead of milliseconds to stabilize. 🌡️ The Hidden Role of Air Conditioners Residential air conditioners play a major role in FIDVR events. Their single-phase induction motors don’t trip immediately when stalled. They rely on thermal protection relays, which take 2 to 8 seconds to act — a long time in grid dynamics. During those seconds, the stalled motors continue drawing high reactive current, suppressing the voltage even after the fault is gone. Once the thermal protection operates, those motors disconnect, causing a sudden drop in reactive demand — and the voltage finally snaps back to normal. That’s why FIDVR voltage traces typically show a two-stage pattern: A slow recovery phase, dominated by stalled motors A sudden rise, once protection relays operate Incident: In the 2003 Florida summer event, a transmission fault near Tampa triggered widespread voltage depression that persisted for several seconds even after the fault cleared. Thousands of residential air conditioners had stalled due to the voltage dip. ⚡ Why It Matters for Grid Stability This few-second delay might not sound dramatic — but in grid terms, it’s significant. Prolonged low voltages can: Trigger undervoltage load shedding Stress generator voltage regulators Disrupt protective relay coordination Even cause wide-area voltage instability In areas with high concentrations of motor-driven loads, a single transmission fault can trigger widespread low-voltage events lasting several seconds — long enough to affect bulk power system stability. ⚡ In essence: FIDVR highlights how load dynamics shape system stability. Even a few seconds of delayed voltage recovery can mean the difference between a stable grid — and a cascading voltage collapse.

Understanding ANSI Short-Circuit Analysis – A Core Pillar of Power System Safety ⚡ Short-circuit studies are not just a regulatory requirement — they are the backbone of electrical system reliability, equipment protection, and personnel safety. Based on ANSI standards and widely implemented through tools like ETAP, these studies help engineers accurately evaluate fault behavior under real-world operating conditions. 🔍 Key Technical Insights from ANSI Short-Circuit Analysis: ✅ Types of Faults Analyzed: 3-Phase Fault (maximum fault current case) Line-to-Ground (L-G) Line-to-Line (L-L) Line-to-Line-to-Ground (L-L-G) ✅ Why Short-Circuit Studies Matter: Verify circuit breaker close & latch capability Confirm interrupting ratings of breakers and fuses Protect equipment from mechanical (kA) and thermal (I²t) stresses Enable accurate relay coordination and protection settings Ensure busbar bracing adequacy ✅ What Contributes to Fault Current: Utility grids Generators (synchronous & induction) Motors Inverters Transformers (including zero-sequence effects) ✅ ANSI Network Time Frames: ½ Cycle Network → Momentary & Close/Latched Duty 1.5–4 Cycle Network → Interrupting Duty 30-Cycle Network → Steady-State & Overcurrent Relay Settings ✅ Critical Device Duties Evaluated: HV Circuit Breaker Making & Interrupting Capability LV Breaker & Fuse Interrupting Ratings Busbar Symmetrical & Asymmetrical Withstand ✅ Advanced Factors Considered: X/R Ratio impact on DC offset Momentary & Interrupting Multiplying Factors Temperature & impedance tolerance corrections Individual branch fault current contributions 📌 Bottom Line: A well-executed ANSI short-circuit study ensures that no protective device is underrated, no bus is under-braced, and no system is left vulnerable during high-fault events. This is what separates compliant systems from truly resilient power networks. 💡 For engineers working in substations, industrial plants, utilities, rail traction systems, and data centers, mastering short-circuit analysis is no longer optional — it’s essential. hashtag #PowerSystems #ShortCircuitStudy #ETAP hashtag #ANSIStandards #ElectricalProtection #HVSwitchgear #RelayCoordination #SubstationEngineering #ElectricalSafety #FaultAnalysis

Why protection works perfectly in studies and fails in the field Your relay settings aren’t wrong. The system model is. In studies, everything looks clean: Ideal CTs Perfect sinusoids RMS-based coordination Then you go to site… and the relay behaves differently. Why? • CT saturation distorts secondary current during real faults • Weak grid impedance changes fault magnitude and angle • EMT effects (DC offset, transient decay) matter in the first few cycles The relay doesn’t misoperate, it responds to a waveform the study never modeled. That gap between study assumptions and field reality is where many commissioning surprises live. This animation is a conceptual illustration, but the problem is very real. If you’ve ever seen “perfect” settings fail during energization or fault testing, you’re not alone. Model CTs properly. Use EMT where needed. Field behavior ≠ study plots. #PowerSystems #ProtectionEngineering #GridReliability #ElectricalEngineering #Commissioning #RelayProtection #InverterBasedResources #EngineeringLife