Anti-Islanding Protection

Inverters must reliably distinguish between a true grid outage and normal voltage fluctuations. Passive methods monitor for sudden changes in voltage magnitude, frequency, or phase jump without actively perturbing the grid. Active methods inject small, deliberate distortions—such as frequency drift or impedance measurement signals—and observe the grid's response. Communication-based methods rely on direct transfer trip signals from utility reclosers via SCADA or dedicated fiber, providing the most deterministic and fastest detection.

The foundational interconnection standard mandates specific anti-islanding performance. Key requirements include:

• Ride-through capability: Inverters must remain connected during momentary voltage and frequency excursions defined by prescribed curves (e.g., Low Voltage Ride-Through, High Voltage Ride-Through).
• Trip time: Mandatory cessation of energization within 2 seconds of island formation for systems ≤30 kW.
• Frequency limits: Default clearing times of 0.16 seconds for frequencies below 57 Hz or above 62 Hz in 60 Hz systems.
• Voltage limits: Tripping required when voltage deviates outside ANSI C84.1 Range A limits.

The Non-Detection Zone defines the operating region where an inverter fails to identify an islanded condition. This occurs when local generation closely matches local load, resulting in minimal voltage and frequency deviation upon grid disconnection. A smaller NDZ indicates a more robust algorithm. The Sandia Frequency Shift (SFS) active method achieves a near-zero NDZ by applying positive feedback to the inverter's frequency, rapidly destabilizing the islanded system. The load quality factor (Qf) directly impacts NDZ size; resonant circuits with a Qf ≤ 2.5 are standard test conditions per IEEE 1547.1.

After tripping, the inverter must not immediately reconnect upon grid restoration. A mandatory reconnect delay—typically 5 minutes per IEEE 1547—ensures the utility grid has stabilized and prevents repeated cycling. The inverter continuously monitors voltage magnitude and frequency during this countdown. Reconnection only proceeds when both parameters remain within nominal ranges for the entire delay period. This prevents a sudden, synchronized inrush of distributed generation that could destabilize a recovering feeder.

Anti-islanding protection is distinct from intentional islanding used in microgrids. Standard grid-tied inverters must detect and disconnect from an unintentional island to protect line worker safety and prevent equipment damage from unsynchronized reclosure. In contrast, a microgrid controller executes a planned, seamless transition using a static transfer switch and local grid-forming inverters to establish a stable voltage and frequency reference. This intentional island operates autonomously until the utility grid is restored and synchronized.

UL 1741 is the harmonized safety standard for inverters, converters, and charge controllers in North America. Supplement SA (UL 1741 SA) and Supplement SB (UL 1741 SB) align with IEEE 1547-2018, mandating advanced grid support functions. Certification testing verifies:

• Anti-islanding effectiveness using a resonant RLC load tuned to the inverter's output.
• Interoperability with utility-mandated smart inverter profiles (e.g., Volt-VAR, Frequency-Watt).
• Cybersecurity requirements for firmware updates and communication interfaces to prevent unauthorized remote disabling of protection functions.

A grid-following inverter architecture that operates strictly as a current source, requiring an external voltage reference from the utility to function. Unlike grid-forming inverters, a non-islanding inverter cannot independently establish voltage and frequency. Its control logic is intrinsically dependent on the grid's presence; if the grid de-energizes, the phase-locked loop (PLL) loses synchronization, and the inverter ceases operation immediately. This is the standard topology for residential solar installations.

An advanced inverter that operates as a voltage source, capable of independently establishing and regulating voltage magnitude and frequency without an external grid reference. This is the foundational technology for intentional islanding in microgrids. Control strategies include droop control (P-f and Q-V relationships) and virtual synchronous machine (VSM) emulation. These inverters must seamlessly transition between grid-connected and islanded modes, a process requiring sophisticated anti-islanding logic that distinguishes between a grid outage and an intentional disconnection.

A widely implemented active anti-islanding detection algorithm that injects a positive feedback loop into the inverter's current controller. The method applies a small, continuous perturbation to the output frequency. When the grid is present, the stiff grid frequency clamps this perturbation. When the grid is absent, the resonant frequency of the local RLC load causes the perturbation to amplify rapidly, driving the frequency beyond the over/under-frequency protection (OFP/UFP) trip thresholds (typically ±0.5 Hz). This method is effective but introduces minor power quality degradation.

A passive islanding detection method that continuously monitors the derivative of the system frequency (df/dt). In a true grid loss event, the power mismatch between local generation and load causes a rapid, monotonic frequency excursion. ROCOF relays trip when df/dt exceeds a predefined threshold, typically 0.5 to 1.0 Hz/s. While fast, this method is prone to nuisance tripping during non-islanding grid disturbances like large generator trips or transmission line faults, requiring careful coordination with ride-through requirements.

The planned, controlled disconnection of a localized section of the distribution grid to operate autonomously during a utility outage. This is the functional opposite of anti-islanding. A microgrid controller must execute a seamless transition: opening the point of common coupling (PCC) breaker, switching the battery energy storage system (BESS) from grid-following to grid-forming mode, and balancing local generation with critical load. The anti-islanding protection must be disabled or reconfigured via a permissive signal to allow this intentional state.