🎓 Lesson 24 D5

Resilience Metrics: RTO, SPOF Exposure, and Redundancy Modeling

Resilience metrics tell us how quickly a mining energy system bounces back after a failure, where its single points of failure are, and how well backup systems protect operations.

🎯 Learning Objectives

  • Calculate RTO for DER-aggregated mine power systems given mission-critical load profiles and safety constraints
  • Analyze SPOF exposure in a multi-source DER architecture using fault tree analysis and dependency mapping
  • Design N+1 and 2N redundancy configurations for battery-inverter clusters serving autonomous haul trucks
  • Explain trade-offs between capital cost, energy efficiency, and resilience level when selecting redundancy strategies

📖 Why This Matters

In remote mining operations—where grid connectivity is absent or unreliable—a single failure in DER aggregation (e.g., a failed microgrid controller or battery string) can halt ore hauling, freeze dewatering pumps, or disable ventilation—endangering lives and costing $500k–$2M/hour in lost production. Resilience metrics aren’t theoretical—they’re contractual requirements in modern mine electrification tenders and embedded in ISO 50001:2018 and IEC 62443-2-4 cybersecurity compliance.

📘 Core Principles

Resilience begins with *functional partitioning*: isolating critical loads (e.g., ventilation, communications) from non-critical ones (e.g., camp lighting). RTO is derived from operational consequence analysis—not IT SLAs—and must align with OSHA/MSHA life-safety thresholds (e.g., <10 min for primary ventilation restart). SPOF exposure is not binary; it’s quantified via component criticality index (CCI), which weights failure probability, impact severity, and detection latency. Redundancy modeling goes beyond duplication: it requires *diverse redundancy* (e.g., lithium iron phosphate + flow batteries) and *asynchronous failover* to avoid common-mode failure—especially under thermal or cyber stress.

📐 RTO-Based Redundancy Sizing

This formula determines minimum redundant capacity needed to meet RTO for a time-sensitive load, accounting for ramp-up delay and state-of-charge recovery. It integrates battery discharge rate, inverter response time, and load inertia—critical for diesel-replacement DERs supporting electric haul trucks.

💡 Worked Example

Problem: A mine’s primary ventilation system (1.8 MW continuous load) must restart within RTO = 90 s after main DER failure. Backup LiFePO₄ battery bank has 92% round-trip efficiency, 0.5 s inverter response, and 120 kW/s discharge ramp rate. Initial SOC = 85%. Calculate MRC.
1. Step 1: Subtract response time → available energy delivery time = 90 s − 0.5 s = 89.5 s
2. Step 2: Account for efficiency loss → required delivered energy = (1.8 MW × 89.5 s) / 0.92 = 175.2 MJ
3. Step 3: Convert to kWh: 175.2 MJ ÷ 3.6 = 48.7 kWh
4. Step 4: Apply SOC buffer: since only 85% usable, MRC = 48.7 kWh ÷ 0.85 = 57.3 kWh
Answer: The minimum redundant capacity is 57.3 kWh, which exceeds the typical 40–65 kWh range for 1.5–2 MW ventilation loads at Tier-2 remote mines.

🏗️ Real-World Application

At Rio Tinto’s Gudai-Darri mine (Pilbara, WA), a 140 MW solar-diesel-battery DER aggregation uses real-time SPOF exposure scoring to dynamically reconfigure control domains. When telemetry identified >95% dependency on a single SCADA gateway (CCI = 0.98), the system auto-deployed a secondary gateway with segregated fiber path and air-gapped firmware updates—reducing SPOF exposure by 73% within 47 minutes. This implementation met Western Australia’s DER Resilience Code §4.2.1 and contributed to 99.992% annual uptime despite 38 lightning-induced faults.

📋 Case Connection

📋 CAISO Pilot: 500-MW Residential DER Aggregation Program

Heterogeneous DER mix (120k rooftop PV, 28k smart thermostats, 15k EVSE) with inconsistent comms, low observability, and...

📋 NYISO Distribution-Aware Aggregation: Brooklyn Microgrid

Feeder thermal limits, reverse power flow risk, and NYISO’s dual-market (energy + distribution services) participation r...

📋 PJM Commercial & Industrial Aggregation: Multi-Tenant VPP Platform

Tenant isolation, multi-utility tariff mapping, real-time tariff switching, and PJM’s complex capacity market eligibilit...

📚 References