BMWE funding under the 8th Energy Research Programme

Secure and interoperable digitalisation for power grids

CloudEnerChain explores how secondary systems, IoT components, cloud platforms and grid control systems can work together securely, transparently and across system boundaries.

At the core is an end-to-end chain of trust from secondary systems through substation and grid control technology to the control room. The goal is to make digital applications in power grids robust, interoperable and ready for operational use

March 1, 2026 to February 28, 2029 Power grids, interoperability, cybersecurity
Illustration of the CloudEnerChain system landscape from secondary systems and substation control technology to digital applications in grid operations.
From secondary systems and substation control technology through a trusted interoperability layer to digital applications in grid operations.

Project rationale

Digital applications in power grids require interoperability, cybersecurity and a clear operational benefit for grid operations

36 months

funding period

7 partners

research, software, grid operations

03EI4113A

BMWE funding

OT, IT, Cloud

secure interfaces across the stack

Context

Power grids are becoming more digital, more connected and more demanding.

CloudEnerChain addresses the point where growing data volumes, additional interfaces and rising security requirements converge in power-grid operations.

More dynamics in distribution grids

Distributed energy resources, flexible demand and growing data volumes are fundamentally reshaping grid operations

More interfaces between OT, IoT and cloud

New digital connections create opportunities for transparency and automation, but they also increase complexity

More need for trust and traceability

For digital processes to scale, identity, integrity and security need to be safeguarded along the entire chain

Inside the test environments

Test environments across the system chain

These environments represent key levels in power grids, from secondary systems and substation control technology to control rooms and digitally supported operations.

Panoramic view into the Fraunhofer Center for Digital Energy test hall with grid-related experimental setups.

From secondary systems to the control room

The project focuses on making data flows and digital functions secure, reliable and interoperable across these layers

View into a test hall with transformers, testing rigs and further grid-related equipment.

Connecting the field level

Test hall

The test hall represents the physical infrastructure of the power grid. It is where the interaction between digital components and existing assets begins

A central question is how operational data can be captured reliably and prepared for further use

Operator workstations in a control-room environment with multiple screens and a central grid visualisation.

Information where it is needed

Control room

In the control room, system states, warnings and recommendations need to arrive reliably. This is where digital information has to prove its value in day-to-day operations

That requires trustworthy data and digital applications that support grid operations in a meaningful way

Close-up of a hardware-in-the-loop setup with network interfaces and real-time simulation hardware.

Trying out digital functions safely

Hardware-in-the-Loop

Before new digital functions are used in operational contexts, they need to be evaluated in a protected setting. These environments help assess interaction, timing and system behaviour at an early stage

This makes it possible to examine interoperability, security and reliability before later deployment

Open cabinets and digital components in a test environment for local substations.

Visibility at substation level

Digital secondary substations

Digital secondary substations stand for the point where information from the distribution grid is consolidated and transferred into higher-level systems

They stand for the transition from substation data to a shared interoperability layer and operational applications

Image motifs from the testing infrastructures of the Fraunhofer Center for Digital Energy. Source: Fraunhofer Center for Digital Energy, predominantly © Martin Braun. Source: Fraunhofer page

State of the art and novel approach

Connected power grids need interoperability and a resilient chain of trust

Secondary systems, substation and grid control technology, interoperability layers and control-room systems are becoming more tightly connected. This increases the need for secure communication, traceable system states and aligned information models across boundaries.

NETWORKED POWER GRID Trusted connection of secondary systems, grid IT, interoperability layer and control centre The diagram outlines the system boundaries of a digitally networked power grid along a continuous chain of trust. CHAIN OF TRUST Secondary Systems Grid and IT Segments Interop Layer Operations & Control Ctr RTU RTU Secondary tech and substation control IT IT / Access Secure gateway from substation togrid IT IT IT / Aggregation Substation and grid segment level IT IT / Core Verification and integrity check HUB Interoperability layer Cloud-ready connection of data, states and applications FW Firewall Protection boundary for segments and gateways SC Control Centre Monitoring, assistance and response TPM TPM TPM/HSM TPM CORE IDEA It is not the individual component that decides, but the continuous verification of identity, integrity, and authenticity across the entire chain.
The diagram places a connected power grid from secondary systems and substation and grid control technology to the interoperability layer and control-room system, highlighting the planned chain of trust across all relevant nodes.

State of the art

Today’s power grids connect secondary systems, substation and grid control technology, control rooms and increasingly cloud platforms. Communication paths, information models and security mechanisms are often still heterogeneous and only partly aligned

Central gap

Point solutions such as gateways, firewalls or VPN links can secure individual segments, but they do not yet create a consistent level of trust from the endpoint through the network to the operational application

Novelty of the approach

CloudEnerChain combines a cloud-capable interoperability layer with hardware-backed trust anchors, continuous verification, monitoring and attack detection. This brings interoperability and cybersecurity together in one architecture

Illustration of the four perspectives covered by CloudEnerChain: interoperability, cybersecurity, cloud and edge, and digital applications.

What the project is about

Four perspectives shape the technical profile of the project.

The research combines interoperability, security, digital infrastructures and applications for grid operations into one coherent picture.

Interoperability instead of siloed solutions

A shared approach to data and interfaces is meant to connect diverse systems more effectively and strengthen interoperability

Cybersecurity along the full chain

Security is not treated as a point solution, but as a principle spanning secondary systems, communication paths and control-centre integration

Cloud and edge aligned with operational requirements

Digital applications should be placed where they create value while respecting latency, safety and operational requirements

Operational value for grid operations

Monitoring, anomaly detection and new digital applications are intended to support day-to-day utility operations in practical ways

From challenge to solution

CloudEnerChain combines system understanding, security and validation.

Understand

The starting point is real-world requirements from power grids, existing system landscapes and the growing role of digital connectivity

Connect

Building on this, data flows, system boundaries and digital interfaces are framed so that cross-vendor cooperation becomes more feasible

Secure

Cybersecurity is embedded as a guiding principle in architecture, communication, monitoring and digital applications

Validate

The resulting approaches are assessed in practice-oriented environments to evaluate their suitability for future use in grid operations

Expected contribution

Digital connectivity needs to create visible value for grid operations.

More interoperability

A shared perspective on data models and interfaces can reduce integration effort and improve exchange between systems

More resilience

End-to-end protection and improved observability strengthen the handling of disruptions and cyber threats

Better fit for utility operations

CloudEnerChain aligns digital approaches with existing operational processes, systems and responsibilities

Project consortium

Research, industry and grid operations contribute to a shared perspective on secure digitalisation in power grids.

Partners at a glance

A consortium spanning digital energy, platform development, grid operations and cybersecurity

The consortium brings together perspectives from research, industry and grid operations

Partner logos of Bremen University of Applied Sciences, Digimondo, PSI Software SE, SWO Netz, Fraunhofer FIT, Schleswig-Holstein Netz and Rhebo

Research

Academic partners contribute expertise in IT security, simulation, data processing and digitally enabled power-grid operations

Industry

Technology and software partners connect the project to platforms, interfaces, grid control systems and market-relevant solutions

Grid operations

Grid-operator partners provide real operational requirements, operational knowledge and the perspective of transferability

News

Developments, events and milestones from the project.