Abstract
This work presents a new approach to establishing the minimum requirements for anti-islanding protection of distributed energy resources (DERs) with focus on bulk power system stability. The proposed approach aims to avoid cascade disconnection of DERs during major disturbances in the transmission network and to compromise as little as possible the detection of real islanding situations. The proposed approach concentrates on the rate-of-change of frequency(RoCoF) protection function and it is based on the assessment of dynamic security regions with the incorporation of a new and straightforward approach to represent the disconnection of DERs when analyzing the bulk power system stability. Initially, the impact of disconnection of DERs on the Brazilian Interconnected Power System (BIPS) stability is analyzed, highlighting the importance of modeling such disconnection in electromechanical stability studies, even considering low penetration levels of DERs. Then, the proposed approach is applied to the BIPS, evidencing its benefits when specifying the minimum requirements of anti-islanding protection, without overestimating them.
THE inertia reduction caused by the increase of inverter-based generation is being observed in several power systems over the world. At the same time, the development of distributed energy resources (DERs) connected at the medium- and low-voltage networks represents the decentralization of significant amounts of generation. In this scenario, the discoordination between DER protection and bulk power system requirements may deteriorate the dynamic performance and directly impact the system stability. One important aspect in this regard is the anti-islanding protection, which is essential to avoid dangerous situations for equipment and people in case of distribution network separation from the main grid [
In order to avoid unintentional islanding, anti-islanding protection is required from DERs. Passive strategies can be adopted such as underfrequency/overfrequency functions (81U/O), rate-of-change of frequency (RoCoF) function (81R), and vector shift function (78V) [
In order to ensure islanding detection, even in the scenarios with low power exchange with the main grid, distribution utilities generally recommend using very sensitive settings for anti-islanding protection [
The impact of massive disconnection of DERs has recently gained more attention due to the significant increase in the penetration level of these devices in distribution networks. As a result, the way these resources respond to disturbances in the transmission grid has changed from minimally consequential to potentially critical.
In [
In this context, technical standards and grid codes are being modified to incorporate supportability requirements in order to avoid cascade disconnection of DERs after the events in the transmission network, as discussed in [
This paper presents a new approach to determining the minimum requirements for anti-islanding protection functions with focus on bulk power system stability. The proposed approach concentrates on the RoCoF and it is based on dynamic security regions (DSRs) with the incorporation of modeling the disconnection of DERs. The anti-islanding function based on the RoCoF has been chosen because, with growing penetration of inverter-based generation and the consequent reduction in the inertia of the power systems, an increase in the RoCoF has been observed. Thus, too sensitive settings for this protection function can increasingly lead to cascade disconnection of DERs, which demands the definition of the minimum requirements not to compromise the bulk power system stability.
The approach is applied to the Brazilian Interconnected Power System (BIPS), which has already experienced unexpected disconnection of DERs, but its grid codes still do not contain any anti-islanding protection requirement.
This paper is organized as follows. Section II presents the background including a brief discussion on anti-islanding protection settings as well as on DER representation in stability analysis. The proposed approach is described in Section III, which also revisits some basic concepts regarding DSRs. Section IV presents the impacts of cascade disconnection of DERs on BIPS stability as well as the results obtained with the proposed approach. The main conclusions and contributions of this work are addressed in Section V.
Islanded operation frequently occurs without prior knowledge or technical support from the distribution operator. As a result, the common practice requires disconnection of DERs either within 2 s after the formation of the island or before the first reclosing attempt [
The database adopted by transmission operators for transient stability analysis traditionally contains detailed models of generators, high-voltage DC (HVDC) systems, and flexible AC transmission system (FACTS) devices. Wide area protection systems and special protection schemes (SPSs) are usually fully represented as well. Besides, the distribution network is typically included as an equivalent load at the boundary substations that connect transmission and distribution systems. Consequently, DERs are not modeled in detail and their effect is indirectly considered in the net load, as illustrated by the equivalent model in

Fig. 1 Equivalent and detailed models of distribution network. (a) Equivalent model. (b) Detailed model.
A detailed model of loads and DERs, as illustrated by
This section presents a new approach to determining the minimum requirements for DER anti-islanding protection with focus on bulk power system stability. Initially, the proposed approach is presented to represent DER anti-islanding protection in transient stability simulations.
In stability analysis, most DERs are incorporated to the load and an equivalent model is adopted, as shown in
In this straightforward approach, the DERs are not modeled in detail, as shown in
To validate this modeling approach, the disconnection of DERs has been simulated in the BIPS considering both the equivalent and detailed models. The results are shown in

Fig. 2 Load behavior at a typical boundary bus after a generation loss for different operation points.
The simulation with detailed DER model, denoted as the DER_A model [
The generation blocks are lost at s and, after a few seconds, the anti-islanding protection is sensitized, thus disconnecting the DERs. As shown in
This straightforward approach is a modeling advance since the disconnection of DERs is usually neglected when performing operation planning analysis. In summary, to assess the impacts of cascade disconnection of DERs, especially originated by maloperation of frequency or RoCoF protections, this proposed approach provides good results when analyzing the global impact in the bulk power system. However, for higher penetration levels of DERs and considering that new DERs are able to provide dynamic supports to the bulk power system, more detailed models should be used such as the DER_A model. Also, the techniques based on co-simulation may be the way forward to have a detailed model of the distribution network [
The approach proposed in this paper to determine the minimum requirements for DER anti-islanding protection is based on DSRs. Security regions allow a graphical visualization of redispatch margins of an electrical system for a given set of criteria, as illustrated in

Fig. 3 Illustration of DSR.
For example, in the direction highlighted in
Starting from an initial operation point and keeping the system load constant, the redispatch is applied to different directions until either a security criterion is violated or a generation limit is reached. Security criteria may include a dynamic performance index, e.g., a stability limit or even the activation of an SPS. The quantity of directions to be considered defines the angle θ shown in
For each dispatch configuration, illustrated by the black dots in
In this subsection, an approach to calculating the minimum requirements for DER anti-islanding protection is presented. The proposed approach is applied to 81R, nonetheless the concepts presented here can be extended to other protection philosophies and stability phenomena.

Fig. 4 Simplified flowchart with main steps of proposed approach.
Another relevant input is the definition of the generation groups that will be considered when calculating DSRs. The appropriate choice of those groups depends on the type of problem one wants to observe and on intrinsic characteristics of the studied power system. When the frequency-based anti-islanding protection is to be analyzed, the low inertia scenarios should guide the selection of generation groups.
Following the flowchart of
After determining the reference DSR, the DER anti-islanding protection is included in the dynamic database and the security region is recalculated. At this stage, both detailed and equivalent modeling approaches discussed in Section III-A can be considered. However, since the focus is on bulk power system, the equivalent model is adopted. Moreover, it is assumed that all DERs in the system have the same and very permissive anti-islanding protection settings, e.g., 3.0 Hz/s (81R).
The secure area of both DSRs computed without and with anti-islanding protection representation, i.e., and , respectively, are then compared using (1).
(1) |
where is the preset threshold, and the parameter stablishes the minimum percentage value with respect to the reference DSR that can be accepted when anti-islanding protection is represented. For example, for , a maximal reduction of 3% in the security region is tolerated.
An adequate choice of should take into account the occurrence probability of a condition that leads to cascade disconnection of DERs during the actual system operation. In extreme cases, where none of security region reduction is accepted, should be equal to 100%. In the simulations presented in this work, a 95% threshold is adopted.
A ratio higher than means that the settings considered for the DER anti-islanding protection do not have substantial impacts on system security. In other words, the disconnection of DERs does not significantly compromise the bulk power system stability and the anti-islanding protection settings can be more sensitive. Therefore, the iterative process continues and more restrictive pickup values are set for anti-islanding protection. This procedure is repeated while (1) is satisfied. After the first iteration no longer satisfies (1), the minimum requirements are considered to be those set in the previous iteration.
The minimum requirements obtained from the proposed approach are highly dependent of the penetration level of DERs. In fact, the exact amount of DERs connected to the power grid may significantly vary along the day and this information is not straightforward to be obtained. Moreover, future DERs should be taken into account in order to define the connection requisites. Whether reliable information regarding the penetration level of DERs is not available, it is recommended to consider the conservative levels while determining the minimum requirements.
When evaluating future scenarios, the proposed approach can be applied for different penetration levels of DERs. Moreover, DERs already installed in the system should have their protection settings fixed as closer as possible to the actual ones.
The approach proposed in Section III is applied to BIPS. Initially, some fundamental characteristics of BIPS are presented in order to contextualize the developed simulations. In addition, the impact of anti-islanding protection on BIPS dynamic performance is discussed.
The Brazilian electrical matrix is mainly composed of hydraulic generation with an important share of thermal, wind, and PV power plants. Its installed capacity is currently 177.1 GW, of which 61.6% is from hydraulic units. In recent years, a relevant development of wind generation has been observed, exceeding natural gas based power (8.7%), with 12.5% of installed capacity. Although PV generation currently represents a small portion of total capacity (3.1%), a significant growth is expected for the next years [

Fig. 5 Main BIPS transmission system.
One particular characteristic of Xingu bipoles is the fact that the rectifier stations at north region are synchronously connected to the rest of BIPS. Consequently, the loss of one bipole may result in severe equipment overload or even stability issues associated to the generators located in the north region.
In order to overcome those potential problems, an SPS has been implemented with two major actions in case of a bipole contingency. The first action is an automatic power run-up on the remaining bipole, and the second one is the generation shed at power plants located in north region. The run-up action increases the power transferred through the remaining bipole, alleviating overloads that may appear in parallel AC lines. On the other hand, the generation cut is important to avoid transient instability and it is mainly performed at Belo Monte, a 11 GW hydro power plant (HPP) located 10-mile away from the rectifier station, which is also highlighted in dark blue in
In the following subsection, the impact of cascade disconnection of DERs on BIPS stability is evaluated. All analyses focus on the loss of one HVDC Xingu bipole. The simulations are developed using the production-grade software Organon [
In order to evaluate the impact of cascade disconnection of DERs on BIPS stability, different penetration levels of DERs have been considered, as indicated in
Penetration level (%) | Total power (MW) | DSR area reduction (%) |
---|---|---|
1 | 570 | 0 |
2 | 1140 | 0 |
3 | 1710 | 15 |
4 | 2280 | 35 |
5 | 2850 | 45 |
Penetration level (%) | Total power (MW) | ANSI 81U settings | |
---|---|---|---|
Pickup (Hz) | Time delay (ms) | ||
0 | 0 | ||
1 | 570 | 59.5 | 100 |
2 | 1140 | 59.5 | 100 |
3 | 1710 | 59.5 | 100 |
4 | 2280 | 59.5 | 100 |
5 | 2850 | 59.5 | 100 |
The DER anti-islanding protection has been modeled using 81U settings with 59.5 Hz of pickup and 100 ms of time delay. In addition, this subsection also aims to illustrate the need to adjust DER protection in a coordinated way to underfrequency load shedding (UFLS) settings. This coordination is relevant to avoiding disconnections of DER before the operation of the
The analyzed scenario consists of a light load condition expected for the summer 2023 with a demand of 57 GW. The simulated operation point is stressed since the power transferred through the HVDC Xingu bipoles is 8 GW (2×4000 MW).
The high generation deficit has caused the operation of the
The frequency performance is presented in

Fig. 6 Loss of Xingu bipole #1: frequency performance for different penetration levels of DERs with sensitive settings (81U: 59.5 Hz, 100 ms).
This loss of synchronism is illustrated in

Fig. 7 Loss of Xingu bipole #1: rotor angle at Belo Monte HPP for different penetration levels of DERs with sensitive settings (81U: 59.5 Hz, 100 ms).
The results show that the cascade disconnection of DERs due to the maloperation of anti-islanding protection can severely impact BIPS stability. The results indicate that, if more than 1140 MW power (penetration level of 2%) is disconnected by the anti-islanding protection, an originally stable scenario turns to be an insecure one, leading to the entire system collapse. In addition, the results clearly show the importance of DER modeling when performing transient stability analysis in the bulk power system, mainly the anti-islanding protection effect. It should be noted that the case of no DER (0%) with sensitive anti-islanding setting corresponds to the usual simulation performed during operation planning studies, since DERs actually exist but their anti-islanding protection is not traditionally considered in the analyses.
In this subsection, the proposed approach to determining the minimum requirements for anti-islanding protection is applied to BIPS. Due to the increase of wind power penetration and the installation of new HVDC links with asynchronous operation at their rectifier stations, BIPS has experienced a global inertia reduction in the past years. In this context, the generation groups for DSR calculation are selected as follows: ① Group 1 (G1): HVDC links; ② Group 2 (G2): wind and solar power plants; ③ Group 3 (G3): HPPs.
The above choice is justified since the power provided by the inverter-based generation and HVDC links replaces the power produced by conventional synchronous machines, which results in a reduced resilience to deal with generation loss. The analyzed scenario consists of the same light load condition evaluated in Section IV-B. However, in the base case, the power transferred through the HVDC Xingu bipoles is 6000 MW.
Aiming at a frequency-stable operation, an important security criterion is the frequency threshold of 58.5 Hz that triggers the
Following

Fig. 8 Reference DSR for BIPS.
As can be observed in
The reference DSR does not take into account disconnection of DERs and the next step is to include this effect in the simulation. Therefore, the modeling approach proposed in Section III-A is considered, assuming the penetration levels of DERs are 1% to 5%, with initial 81R protection set with 3 Hz/s. It should be noted that the approach proposed in Section III is applicable for any penetration level of DERs. The range adopted in the study case reflects the actual characteristics of BIPS.
The DSRs computed for penetration levels of 1% and 2% are identical to the reference DSR, which means that the ratio computed by (1) is 100%. This result indicates that, for those penetration levels, the disconnection of the DERs does not compromise any point inside the reference DSR. For penetration levels equal to or higher than 3%, the effect of disconnection of DERs reduces the DSR area, as summarized by

Fig. 9 Reference DSR and DSR for a DER penetration level of 3%.

Fig. 10 Reference DSR and DSR for a DER penetration level of 4%.

Fig. 11 Reference DSR and DSR for a DER penetration level of 5%.
In all simulated cases, the settings equal to or higher than 0.5 Hz/s can prevent the cascade disconnection of DERs, keeping the safe area equal to the one obtained without any DER representation (reference DSR). In other words, for BIPS, there is no specific need to require RoCoF settings greater than 1 or 2 Hz/s, which can make it difficult to identify real islanding situations in distribution networks.
The results presented in this subsection reinforce that even small penetration levels (3% to 5%) of DERs can significantly impact the stability and the dynamic performance of the bulk power system if the frequency-based protections are extremely sensitive. In this way, the equivalent modeling of cascade disconnection of DERs can be used either to define the minimum requirements for the RoCoF function or to evaluate the impact of this effect on the system behavior. Furthermore, it is evident that modeling the disconnection of DERs is crucial to provide a more accurate diagnosis of the real system behavior after major disturbances that lead to large frequency deviations.
Regarding the 81U, it is also important to avoid disconnection of DERs before any action of load shedding. In this way,

Fig. 12 Frequency of the largest power plant connected in Ilha Solteira considering different penetration levels of DERs in BIPS.
For penetration levels of DERs up to 2%, the system survives without requiring any load shedding. Besides, for penetration levels of DERs equal to and above to 3%, UFLS operation is necessary to guarantee the system stability. In this scenario, the
The inertia reduction caused by the increase of inverted-based generation is observed in several power systems over the world. At the same time, the development of DERs connected at the medium- and low-voltage networks represents the decentralization of significant amounts of generation. In this scenario, the discoordination between the DER protection and the bulk power system requirements may deteriorate the dynamic performance and directly impact the system stability.
One important aspect in this regard is the anti-islanding protection that is essential to avoid dangerous situations for equipment and people in case of distribution network separation from the main grid. The adoption of too sensitive settings for anti-islanding protection functions may cause protection misinterpretation for severe events at the transmission system not related to islanding situation. As a result, cascade disconnection of DERs may occur, worsening the system dynamic conditions.
This paper proposes an approach to calculate the minimum requirements for anti-islanding protection with the focus on the bulk power system security. The proposed approach is based on DSRs that explore low inertia scenarios, which are more susceptible to frequency instability.
In order to include the effect of cascade disconnection of DERs in dynamic simulations of bulk power systems, this paper also proposes a representation inspired on the usual modeling of UFLS protection. However, in the proposed strategy, the DER disconnection is represented by a load increase, corresponding to the penetration level of DERs. Although it is straightforward, this strategy can be considered a modeling advance since DER disconnection is generally neglected by many system operators when performing operation planning analysis, especially for low and moderate penetration levels of DERs.
The impact of anti-islanding protection misinterpretation on the BIPS stability is evaluated. The results show that, depending on the penetration level of DERs, the dynamic performance of BIPS can be severely deteriorated and put the entire system at risk. The impact of DER disconnection can be decisive to assess whether critical contingencies can trigger UFLS. In conclusion, the presence of DERs cannot be neglected when analyzing the bulk power system stability since they can be decisive in the dynamic performance.
The proposed approach to determining the minimum requirements for anti-islanding protection functions has been applied to BIPS. Low inertia scenarios with high inverter-based generation and high power at the HVDC links are explored throughout DSRs. The requirements are obtained for different penetration levels of DERs, matching the dynamic security criteria even under low-inertia situations.
The analyses in this paper are carried out based on the assumption that all DERs have the same adjustments regarding the anti-islanding protection functions. Nevertheless, if DERs in operation do not meet such minimum requirements, they can be disconnected and increase the generation deficit. Therefore, a more precise analysis should require a meticulous survey of the anti-islanding protection adopted in the currently installed DERs since this would impact on future installation requisites as well as on possible retrofit plans.
References
N. Jenkins, J. Ekanayake, and G. Strbac, Distributed Generation. London: Institution of Engineering and Technology, 2010, pp. 1-20. [Baidu Scholar]
R. A. Walling and N. W. Miller, “Distributed generation islanding-implications on power system dynamic performance,” in Proceedings of IEEE PES Summer Meeting, Chicago, USA, Jul. 2022, pp. 92-96. [Baidu Scholar]
R. F. Arritt and R. C. Dugan, “Review of the impacts of distributed generation on distribution protection,” in Proceedings of IEEE REPC, Asheville, USA, May 2015, pp. 69-74. [Baidu Scholar]
J. C. M. Vieira, W. Freitas, W. Xu et al., “Performance of frequency relays for distributed generation protection,” IEEE Transactions on Power Delivery, vol. 21, no. 3, pp. 1120-1127, Jul. 2006. [Baidu Scholar]
S. Dutta, P. K. Sadhu, M. J. B. Reddy et al., “Shifting of research trends in islanding detection method-a comprehensive survey,” Protection and Control Modern Power System, vol. 3, no. 1, pp. 1-20, Jan. 2018. [Baidu Scholar]
W. Freitas, W. Xu, C. M. Affonso et al., “Comparative analysis between ROCOF and vector surge relays for distributed generation applications,” IEEE Transactions on Power Delivery, vol. 20, no. 2, pp. 1315-1324, Apr. 2005. [Baidu Scholar]
IEEE PES, “Impact of IEEE 1547 Standard on smart inverters,” Washington DC, USA, Tech. Rep. PES-TR67, 2018. [Baidu Scholar]
National Grid ESO, “Technical report on the events of 9 August 2019,” Warwick, Tech. Rep. National Grid ESO, 2019. [Baidu Scholar]
R. Quint, L. Dangelmaier, I. Green et al., “Transformation of the grid: the impact of distributed energy resources on bulk power systems,” IEEE Power and Energy Magazine, vol. 17, no. 6, pp. 35-45, Nov.-Dec. 2019. [Baidu Scholar]
R. Bhattarai, A. Levitt, D. Ramasubramanian et al., “Impact of distributed energy resource’s ride-through and trip settings on PJM’s footprint,” in Proceedings of 2020 IEEE PES General Meeting (PESGM), Online Meeting, Aug. 2020, pp. 1-5. [Baidu Scholar]
I. Alvarez-Fernandez, D. Ramasubramanian, W. Sun et al., “Impact analysis of DERs on bulk power system stability through the parameterization of aggregated DER_A model for real feeders,” Electric Power Systems Research, vol. 189, p. 106822, Dec. 2020. [Baidu Scholar]
R. W. Kenyon, B. A. Mather, “Simulating distributed energy resource responses to transmission system-level faults considering IEEE 1547 performance categories on three major WECC transmission paths”, National Renewable Energy Laboratory, Golden, Tech. Rep. NREL/TP-5D00-73071, 2020. [Baidu Scholar]
M. Talha, S. R. S. Raihan, and N. A. Rahim, “A grid-tied PV inverter with sag-severity-independent low-voltage ride through, reactive power support, and islanding protection,” Journal of Modern Power Systems and Clean Energy, vol. 9, no. 6, pp. 1300-1311, Nov. 2021. [Baidu Scholar]
S. Xu, Y. Xue, and L. Chang, “Review of power system support functions for inverter-based distributed energy resources-standards, control algorithms, and trends,” IEEE Open Journal of Power Electronics, vol. 2, pp. 88-105, Feb. 2021. [Baidu Scholar]
IEEE Standard for Interconnection and Interoperability of Distributed Energy Resources with Associated Electric Power Systems Interfaces, IEEE Std 1547-2018, pp. 1-138, Apr. 2018. [Baidu Scholar]
Energy Networks Association. (2020, Mar.). Requirements for the connection of generation equipment in parallel with public distribution networks on or after 27 April 2019, Engineering Recommendation G99. [Online]. Available: https://www.energynetworks.org/assets/images/Resource%20library/ENA_EREC_G99_Issue_1_Amendment_6_(2020).pdf. [Baidu Scholar]
North American Electric Reliability Corporation, “Distribution energy resources: connection modeling and reliability considerations,” NERC, Atlanta, GA,Tech. Rep. 2017. [Baidu Scholar]
P. Dattaray, D. Ramasubramanian, P. Mitra et al., “Bulk system impact of DER and loads using T&D cosimulation and aggregate models,” in Proceedings of 2021 IEEE PES Innovative Smart Grid Technologies Europe (ISGT Europe), Espoo, Finland, Oct. 2021, pp. 1-5, [Baidu Scholar]
C. A. S. Neto, M. A. Quadros, M. G. Santos et al., “Brazilian System Operator online security assessment system,” in Proceedings of IEEE PES General Meeting, Minneapolis, USA, Jul. 2010, pp. 1-7. [Baidu Scholar]
T. M. L. Assis, S. Kuenzel, and B. C. Pal, “Impact of multi-terminal HVDC Grids on enhancing dynamic power transfer capability,” IEEE Transactions on Power Systems, vol. 32, no. 4, pp. 2652-2662, Jul. 2017. [Baidu Scholar]
Brazilian Independent Electric System Operator. (2021, Aug.). The system in numbers. [Online]. Available: https://bit.ly/3bmE6TH [Baidu Scholar]
High Performance Power Systems Applications. (2020, Dec.). Organon User’s Manual: Version 8.0. [Online]. Available: https://www.hppa.com.br/ [Baidu Scholar]