State / alarm / event model
- Severity taxonomy
- Cause + action hint
- Flood suppression
- Historian export
EMS Interface｜Dispatch coordination
Coordinate upper-level dispatch and field devices within clear authority and state boundaries
Customer EMS / station control integration — schedule targets become device commands with states, alarms, metering, permissions and loss-of-comm fallback.
- Reliable commands ACK · timeout · reject codes
- True states Quality · time · SOE
- Clear boundaries Mode · role · clamp
- Controllable loss Autonomy · safe return
Four interface coordination capabilities
What EMS / station-control integration must prove — not an EMS product feature page Demo data
- Clear authority definition Who may command, override or freeze
- Point list & data model map Canonical tags · units · quality
- Command & state closed loop REQ → ACK → measured feedback
- Loss autonomy & SIT/SAT evidence Predictable fallback with proof
Layered responsibility table · bidirectional control tree
Who owns each layer — and how commands descend while feedback ascends Demo data
Layered RACI
| Layer | Primary duty | Protocol | Owner |
|---|---|---|---|
| Operations dispatch | Schedule / target | Northbound | Owner ops |
| Station control | Mode / interlock | EMS IF | System |
| System EMS | Translate / arbitrate | ICD | Integrator |
| PCS / BMS | Execute / clamp | Field bus | Vendors |
| Metering | M&V values | Modbus | EPC |
| Aux control | HVAC / fire IF | RTU | MEP |
| Surveillance | Alarm / SOE | Historian | O&M |
Bidirectional control tree
↓
- Dispatch target P / Q window
- EMS translate Constraints
- PCS / BMS Execute
↑
- Measured P/Q Feedback
- State / alarm SOE
- Quality / time PTP
- Command down
- Feedback up
- Authority
- Safety
Command translation
Upper targets must be translated into device-executable commands
Seven steps from schedule window to confirmed receipt — with SEQ / timeout / idempotency demo Demo data
- Dispatch target P window demo
- Validate constraints SOP · mode · role
- Allocate limits Per PCS share
- Issue to PCS Setpoint write
- Diagnose response ACK / reject
- Settle / verify Measured vs target
- Confirm receipt Close SEQ
Unified point list & data model · protocol coverage overview
Machine-readable dictionary with coverage and type / quality / time legends Demo data · 89% coverage
Unified point list (excerpt)
| ID | Canonical | Customer tag | Type / unit | R/W | Period | Quality | Time |
|---|---|---|---|---|---|---|---|
| P001 | PCS.P_set | SITE.PCS01.P | float kW | W | On chg | GOOD | PTP |
| P014 | BMS.SOC | SITE.BESS.SOC | float % | R | 1 s | GOOD | PTP |
| A003 | PCS.Fault | SITE.PCS01.FLT | bool | R | Event | GOOD | SOE |
| M010 | Meter.kWh_imp | SITE.MTR.IMP | float kWh | R | 15 m | GOOD | NTP |
| C002 | EMS.Mode | SITE.MODE | enum | W | On chg | GOOD | PTP |
Protocol coverage
89% Mapped vs required (demo)
- Read 612
- Write 98
- Event 132
- Analog 54%
- Digital 28%
- Enum / cmd 18%
- Type = engineering unit locked
- Quality = GOOD / BAD / OLD
- Time = PTP preferred · NTP fallback
Operating mode authority matrix · command handshake mechanism
Who may operate in each mode — and the seven-step handshake with reject codes Demo data
Mode & authority matrix
| Mode | EMS cmd | Local auto | Manual | Emergency |
|---|---|---|---|---|
| REMOTE | Full | Inhibit | Inhibit | Override |
| LOCAL AUTO | Limited | Full | Inhibit | Override |
| MANUAL | Inhibit | Inhibit | Full | Override |
| EMERGENCY | Inhibit | Inhibit | Inhibit | Full |
Command handshake — seven steps
- REQ Command request
- AUTH Role / mode gate
- VALID Range / SOP
- EXEC Device write
- ACK Device ACK
- MEASURE Feedback sample
- CLOSE Measured ACK
- Idempotent command keys
- Timeout → safe reject
- Reject codes logged to EMS
- Evidence retained for SIT/SAT
Power schedule & limit arbitration
Day plan curves · strictest-wins rules · live KPI example Demo data
Day plan (multi-series · HTML spark)
Schedule · clamp · measured overlay
Constraints & arbitration (strictest wins)
- Min(EMS target, BMS SOP, PCS map, thermal floor)
- Mode gate before write
- Rate limit per ICD
- Reject if quality BAD / OLD
- Issue to PCS only after VALID
Live example KPI
- Target P 1.10 MW
- Issued P 1.05 MW
- Measured P 1.04 MW
- Clamp reason SOP demo
Loss-of-comm autonomy
Predictable autonomy and controlled return when the EMS link is lost
Safe, predictable behavior — avoid power cliffs and restart thrash Demo data
- Heartbeat lost Detect
- Data stale Quality OLD
- Time sync lost PTP / NTP
- Command anomaly Reject flood
- Gateway fault Path fail
- Local policy Hold / isolate
- Alarm record SOE
- Align Resync
- Return to run Gated
Goal: safety · predictability · no abrupt power drop · no frequent restart
States · time quality · roles · metering validation
Four equal cards that deepen the coordination surface Demo data
Time sync & data quality
- PTP preferred
- NTP fallback
- Quality bits
- SOE skew ≤ 100 ms demo
Roles & security permissions
- Operator · engineer
- Command gates
- Session log
- VLAN / TLS northbound
Metering & M&V checks
- Import / export kWh
- Demand window
- Cross-check PCS
- Evidence pack
Every command confirmed · every state traceable
Close the EMS interface with a proven command loop and an evidence chain for SIT / SAT — not a public download wall. Demo data · ICD-EMS-2608-121-C
- Authority frozen before wiring
- Ambiguous maps rejected
- Reject codes retained
- Fallback timed & logged
- SAT gated on evidence
SIT / SAT test stages (evidence chain)
- Point-to-point Tag map QA
- Command loop REQ→ACK
- Schedule arbitration Clamp cases
- Loss-of-comm Fallback drill
- Time / quality PTP / SOE
- Role gates Permission matrix
Issued artifacts
- ICD release
- Point list CSV
- Alarm dictionary
- SIT script pack
- SAT checklist