Section 01
Executive Summary
EnergizeOS™ is a commercial-grade, hardware-software integrated EMS for industrial and commercial BESS, microgrid, and grid-interconnection applications.
Developed by Energize Solutions Inc., EnergizeOS™ integrates a ruggedized ECP control panel, a real-time embedded strategy execution engine, and an OTA management platform into a productized, auditable control framework with defined engineering boundaries at every layer.
⚡
Core principle: Protection responsibility (relay) is permanently separated from control responsibility (EMS). This boundary is immutable — enforced in hardware and software at every deployment.
Core Value Summary
| Dimension | Capability | Validated Outcome |
| Cost Optimization | TOU dispatch + demand charge management + DG fuel coordination | 10–35% electricity or fuel cost reduction |
| Grid Transition | C1–C7 interlock chain; dual-path anti-islanding; sync-check on every close | <2s per IEEE 1547; <160ms typical with relay hardware |
| Diesel Optimization | Smart DG start/stop; light-load shutdown; load-following dispatch | 20–48% diesel reduction (deployment-dependent) |
| Regulatory | IEEE 1547 / UL 1741 SB architecture; utility-accepted documentation | Accepted by SDG&E, Rule 21 territory |
| Auditability | Full event log: trip / close / mode change / parameter change | Utility-grade traceability on every action |
| Deployment Speed | Factory pre-configured and FAT-tested; plug-and-play on arrival | <1 day to first strategy activation |
Section 02
System Architecture
2.1 Five-Layer Architecture
| Layer | Name | Function | Key Component |
| L1 | Strategy Engine | 15 parametric modules; OTA-activated; version-locked | Strategy module library |
| L2 | Control Core (LRE) | Real-time BESS/PCS/DG/breaker dispatch with closed-loop DI feedback | Local Runtime Engine |
| L3 | Communication Layer | Modbus TCP, RS485, hardwired DO/DI, MQTT, WebSocket, REST API | Industrial switch, I/O board |
| L4 | UI & Audit | HMI + remote browser UI; every action logged with timestamp and source | 7"/10" touchscreen or web |
| L5 | Security & OTA | SN-bound licensing; digital signature on every OTA push; tamper-proof logs | License engine, cloud OTA |
2.2 Control Philosophy (Immutable)
Protection Trip = Relay Primary // relay owns protection; EMS observes and logs only
Operational Trip = EMS Optional // controlled disconnection for commissioning/maintenance only
Breaker Close = EMS Exclusive // no blind close; no auto-reclose by default
Close Gate = C1–C7 All Met // all 7 conditions must be satisfied simultaneously
Feedback = Physical 52a/52b // completion confirmed by hardware DI, not by command issuance
Comm Timeout = Safe Frozen State // Modbus loss ≥5s → freeze setpoints, invalidate C1, P1 alarm
PCS Island Mode = Grid-Forming // EMS commands mode-switch before island; verifies confirmation
SOC Threshold = ±2% Hysteresis // deadband prevents charge/discharge oscillation
Priority Order = Safety > Protection > Grid > Storage > Economy
⚠
Responsibility separation is fundamental. Relay settings, coordination studies, and fault-current analysis remain with the site protection engineer. EnergizeOS™ holds control and supervisory responsibility only.
2.3 Grid-Forming vs. Grid-Following
The most commonly misconfigured parameter in BESS/microgrid commissioning. EnergizeOS™ explicitly manages PCS operating mode as part of every island transition.
| PCS Mode | When Active | V/f Reference | EMS Action |
| Grid-Following | Grid-connected | Utility sets V and f; PCS injects current | Normal dispatch via Modbus setpoints |
| Grid-Forming | Islanded | PCS establishes V and f for island bus | Issues mode-switch on island; verifies confirmation within 2s; P1 alarm if fails |
| Grid-Forming + Droop | Multi-PCS island | Each PCS shares load via P-f and Q-V droop | Configures droop parameters; monitors f deviation for instability |
⚠
Critical SAT verification required: Grid-forming mode must be tested under load during SAT. A PCS left in grid-following mode cannot island. This failure is silent during grid-connected operation and only discovered at the first actual outage.
Section 03
Hardware Platform
| Specification | ECP Lite | ECP Pro | OEM Embedded |
| Deployment | Indoor / lab | Outdoor / industrial / container | Embedded in client BESS panel |
| Enclosure | 300×400×150 mm | 800×600×250 mm | Per OEM spec |
| DO / DI | 4× DO · 6× DI | 8× DO · 10× DI | Expandable board |
| Ethernet | 2× Industrial | 4× Industrial | Modbus TCP / CAN / USB |
| RS485 | 1× Channel | 2× Channels | Per OEM spec |
| UPS | Built-in · 7 Ah optional | Dual battery + UVT output | External / client |
| Cooling | Passive (indoor) | Active fan + temp/humidity sensor | Client-controlled |
| Rating | IP20 equiv. | NEMA 4 / IP55 outdoor | Per OEM panel |
💡
Pro Panel is required when: the system controls PCC breaker closing, anti-islanding relay tripping, DG start/stop, or any function requiring UVT output. The Pro's 24 VDC UPS output provides fail-safe supply for UVT circuits and auxiliary relay coils.
Section 04
Strategy Engine
4.1 Module Catalogue
| # | Module | Primary Function | Tier |
| 01 | TOU Arbitrage | Charge off-peak, discharge peak; multi-period tariff schedules | Core |
| 02 | Demand Charge Mgmt | Real-time peak shaving; BESS discharge below billing threshold | Core |
| 03 | PV Self-Consumption | Maximize solar self-use; zero-export or configurable limit | Core |
| 04 | Grid-Tie / Island Transition | Supervised PCC close/open; full C1–C7 interlock on every transition | Core |
| 05 | Anti-Islanding Protection | Dual-path detection (relay + meter); auto-trip; close blocked until both paths recover | Core |
| 06 | SOC Floor Enforcement | Min SOC reserve; ±2% hysteresis on all thresholds | Core |
| 07 | Battery Balancing Control | SOC equalization across parallel strings; prevents degradation | Core |
| 08 | Anti-Backfeed Protection | Prevents reverse power injection to utility at PCC | Core |
| 09 | Overload Protection | Site overload detection; BESS boost or load-shed sequence | Core |
| 10 | Emergency Shutdown (ESD) | Controlled DER shutdown; preserves breaker state and SOC | Core |
| 11 | DG Coordination | DG start/stop; light-load shutdown; load-following fuel optimization | Advanced |
| 12 | Load Following Dispatch | Dynamic BESS tracking island load; prevents frequency deviation | Advanced |
| 13 | AI Power Optimization | ML-based predictive scheduling via load and price forecasting | Advanced |
| 14 | Remote Override / VPP API | External setpoint override; VPP dispatch; ancillary services | Advanced |
| 15 | Flexible Strategy Triggering | User-defined logic; SDK-accessible trigger framework | Advanced |
4.2 Control Priority Hierarchy
| Priority | Class | Examples | Behavior |
| P1 Safety | Emergency — protects personnel and equipment | ESD, thermal runaway, UVT, manual stop | Overrides all lower-priority immediately |
| P2 Protection | Anti-islanding, anti-backfeed, overload | Modules 05, 08, 09; relay response | Overrides grid strategy; blocked only by P1 |
| P3 Grid Compliance | IEEE 1547 operational limits | V/f ride-through, ramp rates, export limits | Overrides economic dispatch; cannot be disabled |
| P4 Storage Mgmt | SOC floor, balancing, thermal limits | Modules 06, 07; BMS alarm response | Limits economic dispatch; SOC floor blocks discharge |
| P5 Economic | Revenue-optimizing strategies | TOU (01), Demand (02), PV (03), AI (13) | Lowest; operates only within P1–P4 constraints |
4.3 C1–C7 Breaker Close Interlock Chain
Code
Condition
Technical Definition
Data Source
C1
V ∈ [210–260 V]; f ∈ [59.5–60.5 Hz] both in range continuously for 60 s
Anti-islanding relay / meter
C2
Active power < ±50 W; no reverse injection to utility PCC
Revenue-grade meter (Modbus)
C3
PCS state = Idle or Charging; no active discharge setpoint
PCS status register
C4
Administrator confirmed via UI; role and session verified
UI role and session module
C5
Phase angle ≤ 5° between island bus and utility; sync relay confirmed
Sync-check relay DI (hardwired)
C6
52b auxiliary contact = OPEN confirmed via hardwired DI
Breaker 52b DI (hardwired)
C7
Active session = Administrator; operator-level close rejected
UI role module
⚠
If any single C1–C7 condition is not satisfied, the Close button is locked, an advisory identifies the blocking condition, and the event is logged with timestamp and state. No close command is issued to the DO output.
4.4 Communication Watchdog & Fallback
| Device | Timeout | Fallback Action | Alarm |
| Revenue Meter | 5 s | Freeze last valid reading; invalidate C1/C2; block any new close | P1 Critical |
| BESS / PCS | 5 s | Freeze last dispatch setpoint; disable new charge/discharge commands | P1 Critical |
| Anti-Islanding Relay | 10 s | Grid status = UNKNOWN; block all close operations | P1 Critical |
| DG Controller | 10 s | Assume DG at last known state; disable remote start/stop | P2 Warning |
| Cloud / OTA Platform | No impact | All local strategies continue unaffected | P3 Info |
4.5 SOC Boundary Hysteresis
| Threshold | Default | Hysteresis | Behavior |
| SOC Floor | 20% | ±2% | Discharge stops at 20%; cannot resume until SOC ≥ 22% |
| SOC Ceiling | 90% | ±2% | Charge stops at 90%; cannot resume until SOC ≤ 88% |
| DG Start Threshold | 30% | ±3% | DG starts at ≤ 30%; stop not permitted until SOC ≥ 33% |
| Island-Enable | 25% | ±2% | Island only when SOC ≥ 25%; disabled if drops below 23% during island |
Section 05
Protection, Redundancy & Fail-Safe
5.1 Dual-Path Anti-Islanding
| Path | Hardware | Detection | Trip Execution |
| Path A (Primary) | Dedicated relay (ABB CM-UFD, SEL-700G) | V deviation; f out-of-range; ROCOF; anti-islanding algorithm | Direct hardwired to breaker trip coil — no EMS software in trip path |
| Path B (Secondary) | Revenue-grade meter (Modbus TCP) | Voltage presence; current direction; active power direction | EMS operational trip via DO — software path, secondary to relay |
5.2 Triple-Redundant Trip Architecture
| Method | Source | Principle | Independence |
| EMS DO Signal | Strategy logic | Condition-verified; full interlock enforced; logged | Powered via UPS; independent of external AC supply |
| UVT (Undervoltage Trip) | UPS DC bus collapse | Passive hardware; trips on UPS voltage drop; zero software required | Pure hardware — safe even if EMS software fails |
| Manual Field Button | Local panel button | Hardwired to trip coil; always available | Independent of all digital control and comms |
5.3 Thermal Runaway Response
| BMS Alarm | Condition | EMS Response | Time |
| Warning | Cell temp > 45°C | Derate dispatch 50%; raise P2 alarm | < 2 s |
| Fault | Cell temp > 55°C or BMS fault flag | Immediate BESS ESD; trip PCC if islanded; P1 alarm | < 500 ms |
| Thermal Runaway | BMS thermal runaway or smoke sensor | Emergency shutdown all DERs; trip all controllable breakers; lock out restart | < 200 ms |
5.4 Abnormal State Handling
| Event | EMS Response | Notification |
| Cloud / Network Loss | All strategies continue locally | "Offline Mode — Local Operation Active" |
| UPS Power Loss | UVT trips PCC; safe-open state | P1 red alert + event log |
| SOC Below Floor | Island disabled; BESS standby; load-shed | Event log + strategy mode switch |
| Breaker Close Failure | DO re-evaluated; 52a/52b vs. meter cross-checked; failure logged | Specific cause displayed; Close locked |
| Stale Measurement | C1/C2 invalidated; close blocked | "Measurement Unavailable — Close Blocked" |
| OTA Signature Failure | Update rejected; current version maintained | "Invalid Signature — Update Rejected" |
| Breaker Position Unknown | Both 52a and 52b indeterminate; close blocked | "Breaker Position Unknown — Manual Verify" |
| Grid Restoration (Black Start) | C1 satisfied → verify SOC → ramp idle → phase-sync → C1–C7 close → PCS to grid-following | "Grid Restored — Reconnect Sequence Active" |
Section 06
Communication & Integration
| Protocol | Interface | Application | Notes |
| Modbus TCP | Ethernet / RJ45 | BESS/PCS, PV inverter, revenue meter, DG controller | Primary; full R/W; setpoint push + state readback |
| Modbus RTU | RS485 (2-wire) | Legacy PCS, BMS, protection relay data | Serial; battery monitoring |
| Hardwired DO/DI | Terminal (24 VDC) | PCC breaker 52a/52b, DG start/stop, UVT relay, relay trip output | Not subject to software or network failure |
| MQTT | Ethernet / Internet | OTA platform, remote console, alarm telemetry | Optional; EMS operates fully without MQTT |
| WebSocket | Ethernet / Internet | Remote browser UI, live strategy status | Optional; real-time updates |
| RESTful API | HTTPS / LAN / WAN | SCADA, VPP, BMS dashboard | Module 14 required for write access |
| CAN Bus | CAN (Pro / OEM) | Advanced BMS, EV charger systems | Optional; Pro and OEM only |
6.2 Compatible Devices
| Category | Validated Models | Interface |
| Revenue Meter | eGauge 4115/4150, ABB B23, Schneider PM5300 | Modbus TCP; CT/PT ratio configurable |
| Anti-Islanding Relay | ABB CM-UFD / PO11, SEL-700G, SEL-735 | DI/DO hardwired; trip contacts to trip coil |
| BESS / PCS | SMA, Sungrow SG, ABB PVS-980, Schneider Conext, generic Modbus | Modbus TCP; charge/discharge setpoint |
| PV Inverter | SMA Sunny Tripower, Fronius Symo, Sungrow SG-RT | Modbus TCP; curtailment setpoint |
| DG Controller | ComAp InteliGen, Deep Sea DSE, Deif AGC | Modbus or hardwired DO; run status via DI |
| Protection Relay | SEL-700G, SEL-351, ABB REF615, GE F650 | DI/DO for trip/close interposing |
Section 07
Licensing & Commercial
| Component | Model | Scope | Included |
| ECP Panel | One-time purchase | Per unit | Factory config + strategy templates + FAT |
| Local Runtime Engine | Annual license / site | Per site SN | OTA rights, logging, access control, watchdog |
| Core Strategies (01–10) | Included | Per site | All 10 core modules active with license |
| Advanced Modules (11–15) | SaaS / module / site | Per module per site | Optional; OTA-activated per subscription |
| OTA Cloud Service | Included | Per site | Strategy push, diagnostics, changelog |
7.2 Indicative Pricing
| Application | Panel | Strategy Bundle | Indicative Price |
| Peak Shaving + Demand Control | Lite | TOU + Demand Limit | USD 8,000–12,000 |
| Rooftop PV + Grid-Tie | Lite | PV + Grid-Tie | USD 9,000–13,000 |
| PV-DG-Storage Co-generation | Pro | PV + DG + TOU + Grid-Tie | USD 15,000–22,000 |
| Campus Islanding + PV | Pro | PV + Load + Grid-Tie + Anti-Islanding | USD 18,000–25,000 |
| Demo / Pilot | Lite or Pro | Single strategy module | From USD 6,000 |
✓
All prices include panel hardware, factory config, FAT documentation, 1-year software license, and OTA update rights. On-site commissioning and custom strategy development quoted separately.
Section 08
Standards & Compliance
✓IEEE 1547-2018
DER Interconnection · US Federal
✓UL 1741 SB
Smart Inverter · Rule 21
✓CPUC Rule 21
California Interconnection
✓IEC 62898
Microgrid Architecture
✓EN 50549-1/2
Anti-Islanding · EU
✓G98 / G99
DNO Connection · UK
✓UL 508A
Industrial Control Panels
✓NFPA 70E / 855
Arc Flash · ESS Fire Safety
✓IEEE 519-2022
Harmonic Limits at PCC
✓NEC 706 / 690 / 705
ESS · PV · Interconnection
✓IEC 62443
Industrial Cybersecurity
⚠
IEEE 1547 / UL 1741 SB site compliance requires utility interconnection study, relay settings by licensed PE, and utility acceptance. These are site engineer and utility responsibilities. EnergizeOS™ provides the control architecture and documentation framework.
Section 09
Deployment & Commissioning
9.1 Factory Acceptance Test (FAT)
| # | Test | Procedure | Pass Criterion |
| T1 | Power-On Self-Test | UPS energize; rails; display boot; watchdog | All rails nominal; HMI < 60 s |
| T2 | 100% I/O Loop Test | Every DO/DI; NO/NC; continuity | All correct; zero false-state |
| T3 | Strategy Upload | OTA push; signature validate; version lock | Active; version confirmed |
| T4 | Comm Poll | Modbus TCP all device maps; RS485; error rate | All registers readable; zero CRC errors |
| T5 | C1–C7 Simulation | Inhibit each condition; verify lock; verify advisory; verify log | Correct lock/unlock per condition |
| T6 | Close Failure | Close attempt with 52b = CLOSED; verify rejection and log | Rejected; log correct |
| T7 | Trip Simulation | Simulate relay trip via DI; verify EMS state; log source = relay | State updated; source correct |
| T8 | UPS Loss / UVT | Remove AC; verify UVT fires; EMS safe state | UVT < 200 ms; state preserved |
| T9 | Log Export | Export log; verify all test events with timestamps | All events; timestamps accurate |
9.2 Site Acceptance Test (SAT)
| # | Test | Procedure | Pass Criterion |
| S1 | Live Modbus | Poll all field devices; verify against device displays | Registers match; zero exceptions |
| S2 | 52a/52b Live Verify | Manually operate breaker; verify DI matches at all positions | DI matches physical position |
| S3 | Relay Integration | Simulate relay trip; verify breaker opens; log attributes to relay | Opens; source = relay; no auto-reclose |
| S4 | Grid-Forming Mode | Island manually; verify PCS → grid-forming; measure V and f under step load | PCS confirms grid-forming; V ∈ [0.95–1.05pu]; f ∈ [59.5–60.5Hz] |
| S5 | SOC Floor + Hysteresis | Discharge to floor; verify stops; verify no resume until floor + hysteresis | Stops at floor; no oscillation |
| S6 | Comm Loss Fallback | Disconnect meter Modbus; verify watchdog, C1 invalid, alarm; verify recovery | Fallback < 5 s; no close during loss |
| S7 | TOU Strategy | Configure test schedule; verify BESS dispatches per schedule; check log | Dispatch matches; no spurious alarms |
| S8 | Demand Control | Set threshold below current load; verify BESS holds demand below threshold | Demand < threshold; response < 2 s |
| S9 | UVT + Manual Trip | Test UVT and manual button independently; verify both trip without EMS | Both trip; EMS software state irrelevant |
| S10 | Handover | Punch list clear; operator trained; remote access confirmed; reports delivered | Zero open items; reports signed |
9.3 Alarm Priority Framework (ISA-18.2)
| Priority | Response | Typical Triggers | Auto-Clear |
| P1 Critical | < 10 min | Comm loss to meter/PCS/relay; thermal fault; UVT trip; grid-forming fail | No — requires acknowledgment |
| P2 Warning | < 1 hour | SOC near floor/ceiling; DG comm loss; V-THD > 8%; demand > 90% of limit | Yes — if clears within 30 min |
| P3 Info | Next business day | Cloud loss; OTA update available; scheduled maintenance due | Yes — on resolution |
Section 10
Case Studies
🇺🇸 PepsiCo EV Depot — San Diego, California
Client / EPCPepsiCo / Black & Veatch
UtilitySDG&E — Rule 21
BESS Scale1,000 kW / 2,000 kWh
EV Chargers56 units (L2 + L3)
EMS ConfigPro + C1–C7 + AIPP
StatusRule 21 accepted · SDG&E
28–35%
Energy bill reduction via TOU + demand control
0
Delivery interruptions during grid outages
<150ms
Island transition (relay hardware)
🏝 Caribbean Off-Grid Microgrid
48%
Max diesel reduction (PV penetration > 60%)
$16,100
Saved per month at $1.40/L fuel
–40%
Generator runtime reduction
🇪🇸 Madrid EV Fast-Charging Station
$130K+
Annual demand penalties avoided
22%
Electricity cost reduction
Section 11
Roadmap & Lifecycle
2024 Q4
Lite/Pro Panel Launch + Core 10 Modules
Factory FAT protocol; initial deployment
✓ Done
2025 Q2
OTA Platform + C1–C7 Chain + Full Logging
Remote commissioning; strategy version management
✓ Done
2025 Q3
Engineering Delivery Package v1.0
FAT/SAT protocols; standardized wiring documentation
✓ Done
2025 Q4
AI Power Optimization Module
ML-based load and price forecasting; adaptive scheduling
● Active
2026 Q1
OAuth2 / Webhook API for VPP + SCADA
Third-party API security framework
◑ Planned
2026 Q2
Multi-Site Console + Multilingual UI
Fleet monitoring; EN/ES/DE/FR
◑ Planned
Lifecycle Commitments
- Minimum 5 years support per major version release
- Minimum 3 years strategy upgrade support for all subscribed modules
- Hardware supports ≥ 3 future major software versions without panel replacement
- Fully standalone local runtime — no cloud dependency for real-time execution
- UPS, CPU, communication modules: 5-year serviceable parts availability
Section 12
Delivery Package
A1
Control Philosophy
EMS control boundary, trip/close philosophy, responsibility separation
PDF / Web
B1
Single-Line Diagram
Power topology; breaker positions; protection device locations
DWG / PDF
B2
Control Circuit Diagram
DO/DI wiring; relay circuits; UVT / UPS trip paths
DWG / PDF
B3
IO Mapping Document
DO/DI channel assignment; Modbus address map; signal descriptions
Excel + PDF
B4
Cabinet Layout Drawing
Panel interior layout; DIN rail; cable entry and routing
DWG / PDF
C1
Terminal Schedule
Full terminal connection list with wire numbers and tags
Excel
D1
FAT Test Report
Signed checklist; results; photos; engineer signature
PDF
D2
User Manual
Strategy config guide; UI reference; alarm descriptions; operating procedures
PDF + Web
D3
Strategy Parameter Registry
All configurable parameters; defaults; valid ranges; engineering notes
PDF + JSON
D4
License & Activation Package
SN-bound license file; activation instructions; OTA credentials
File package
D5
OTA & Update Manual
Strategy update and rollback procedure; version management
PDF
Section 13
Contact & Next Steps
To request a quotation, technical consultation, site-specific documentation, or FAT demonstration, contact our application engineering team. Response within 1 business day.
Sales & Technicalinfo@energizeos.com
Supportinfo@energizeos.com
Product Overviewdocs.energizeos.com/ems
Document ReferenceSPEC-EOS-EMS-001 Rev 1.0
Issued ByEnergize Solutions Inc.
DateMay 2026
→
Ready to proceed? Our application engineers will review your site load profile, DER mix, target utility, and interconnection standard to recommend the correct ECP model, strategy bundle, and compliance documentation package.
info@energizeos.com →