Optimal Demand-Side Management for Joint Privacy-Cost Optimization with Energy Storage
Giulio Giaconi, Deniz Gunduz, H. Vincent Poor

TL;DR
This paper proposes an optimal strategy for demand-side management that balances user privacy and energy cost using a battery storage system, considering energy selling capabilities and system constraints.
Contribution
It introduces a joint privacy-cost optimization framework that accounts for battery limitations and energy selling, advancing demand-side management techniques.
Findings
The proposed method effectively balances privacy and cost in various scenarios.
Battery capacity and energy selling capabilities significantly impact privacy-cost trade-offs.
Numerical results demonstrate improved privacy-cost performance over baseline strategies.
Abstract
The smart meter (SM) privacy problem is addressed together with the cost of energy for the user. It is assumed that a storage device, e.g., an electrical battery, is available to the user, which can be utilized both to achieve privacy and to reduce the energy cost by modifying the energy consumption profile. Privacy is measured via the mean squared-error between the SM readings, which are reported to the utility provider (UP), and a target load; while time-of-use pricing is considered for energy cost calculation. The optimal trade-off between the achievable privacy and the energy cost is characterized by taking into account the limited capacity of the battery as well as the capability to sell energy to the UP. Extensive numerical simulations are presented to evaluate the performance of the proposed strategy for different system settings.
Click any figure to enlarge with its caption.
Figure 1
Figure 2
Figure 3
Figure 4
Figure 5
Figure 6
Figure 7
Figure 8
Figure 9
Figure 10
Figure 11
Figure 12
Figure 13
Figure 14
Figure 15
Figure 16
Figure 17
Figure 18
Figure 19
Figure 20
Figure 21
Figure 22
Figure 23
Figure 24
Figure 25Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Optimal Demand-Side Management for Joint Privacy-Cost Optimization with Energy Storage
Giulio Giaconi and Deniz Gündüz The first author gratefully acknowledges the Engineering and Physical Sciences Research Council (EPSRC) of the UK for funding his PhD studies (award reference #1507704). This work was also supported in part by the EPSRC through the project COPES (#173605884), by the Miller Institute for Basic Research in Science, University of California, Berkeley, and by the U.S. National Science Foundation under Grant ECCS-1549881. Princeton University, Princeton, NJ, USA
Imperial College London, London, UK
{g.giaconi, d.gunduz}@imperial.ac.uk and H. Vincent Poor
Abstract
The smart meter (SM) privacy problem is addressed together with the cost of energy for the user. It is assumed that a storage device, e.g., an electrical battery, is available to the user, which can be utilized both to achieve privacy and to reduce the energy cost by modifying the energy consumption profile. Privacy is measured via the mean squared-error between the SM readings, which are reported to the utility provider (UP), and a target load; while time-of-use pricing is considered for energy cost calculation. The optimal trade-off between the achievable privacy and the energy cost is characterized by taking into account the limited capacity of the battery as well as the capability to sell energy to the UP. Extensive numerical simulations are presented to evaluate the performance of the proposed strategy for different system settings.
I Introduction
Smart meters (SMs) are the key component of the next generation of power grids, the so-called smart grid, since they enable the monitoring of a user’s power consumption in almost real time. SMs allow a utility provider (UP), i.e., the entity that sells energy to customers, to determine the electricity cost dynamically, and a distribution system operator (DSO), i.e., the entity that manages the power grid, to better manage the grid itself. In addition, SMs allow users to better monitor their electricity consumption, integrate renewable energy sources into the grid, and sell surplus energy to the UP.
However, because of the high accuracy and granularity of the SM readings, SMs also entail serious privacy implications. By using non-intrusive appliance load monitoring techniques it is possible to infer user’s activities and behaviors, and determine, for example, a user’s presence at home, her religious beliefs, disabilities, illnesses, and even which TV channel she is watching [1]. To address these issues, several methods have been proposed so far, including data obfuscation [2], data aggregation [3], and data anonymization [4]. However, a disadvantage of these approaches is that the DSO could potentially embed additional sensors to monitor the energy requested by a user, without fully relying on SM readings. Additionally, data obfuscation methods misreport the real energy consumption, thus preventing the DSO from accurately monitoring the grid states and rapidly reacting to problems such as outages or energy theft. Another approach is to directly modify the user’s energy consumption, called the input load, rather than simply modifying the data reported to the UP, called the output load. Thus, the aim is to make the output load as different from the input load as possible, by, for example, filtering energy via a rechargeable energy storage device, i.e., a battery, as studied in [5, 6, 7, 8, 9, 10].
In this paper, we adopt the latter approach and consider the presence of a battery which can store energy from the grid to partially satisfy a user’s energy demand. Our goal is to minimize the energy cost for the user while keeping the information leakage to the energy provider minimal. While a widely accepted definition of privacy is still elusive, one can suggest that privacy is achieved in a smart metering system when it is not possible to distinguish a specific appliance load from the total power consumption [11]. From this perspective, a high degree of privacy can be achieved by flattening the power consumption around a constant value, as considered in [10]. However, a completely constant consumption may not be practically viable and convenient, since, for example, the cost may vary greatly during the system operation due to time-of-use tariffs. Also, it is not clear what the advantage of such a policy would be, as compared, for example, to the case of having multiple levels of constant consumption.
For these reasons, in this paper we consider a more general and flexible target load profile compared to [10], and jointly minimize the cost of energy and the mean squared-error between the SM readings and the target load. Moreover, we also consider the possibility of selling energy to the UP as a way to further lower the cost and improve the privacy. We impose the target load to remain constant over each price period, since it is reasonable to assume that a user may prefer to draw more energy during off-peak periods (when the price is lower) as compared to the peak price period, and this behavior would not necessarily leak more information about the user.
The remainder of the paper is organized as follows. In Section II we present the system model, while in Section III we analyze the proposed target load analytically. Numerical results are presented in Section IV, while conclusions are drawn in Section V.
II System Model
We consider the discrete time system model depicted in Fig. 1, where each time index represents a time slot (TS) for . For each TS , the input load is and the output load is . We assume the presence of a rechargeable energy storage device, i.e., a battery, of capacity , which is empty at and can be used both to filter the input load to provide privacy to the user, and to shift energy intake from the grid to minimize cost. The energy management unit determines how much energy to draw from the grid, , and how much energy to exchange with the battery, . The time duration between two consecutive measurements is , which is assumed to be constant for the sake of simplicity. The total working time of the system is thus , and is the user’s energy demand occurring in time interval . Let denote the battery state-of-charge (SOC) at the end of TS . The battery is charging if , discharging if , or remains in the same SOC if . We do not allow wasting grid energy; that is, there are no battery overflows, i.e.,
[TABLE]
While additional energy can be stored in the battery for future use, we do not allow energy rescheduling or demand shifting, i.e., user’s energy requests are always satisfied as they occur:
[TABLE]
In particular, (2) is also implicitly verified by the battery SOC evolution equation:
[TABLE]
A further constraint is represented by the maximum amount of power with which the battery can be charged or discharged, denoted by and , respectively. Thus, we have
[TABLE]
Here we assume that the battery has perfect efficiency, i.e., no leakages, to understand the optimal cost-privacy trade-off in an ideal setting. The effects of battery inefficiencies and degradations may be taken into account by introducing a constant rate leakage for the energy stored in the battery, or by imposing a further cost whenever the battery is used, within the framework studied here.
At first we do not consider selling energy to the UP, i.e., the energy drawn from the grid is always non-negative
[TABLE]
Later we will lift this constraint. Given , and the constraints (4)-(6), the set of feasible energy requests at time is
[TABLE]
where if , and [math] otherwise.
When no energy should be left unused in the battery; that is, we impose
[TABLE]
We aim at designing an energy management policy that decides on the amount of energy to request from the UP at each TS while satisfying (2)-(8). We consider an offline setting, in which the input load and the cost of energy are known beforehand and our goal is to jointly minimize the information leaked about the user’s energy consumption as well as the cost the user incurs to purchase energy from the UP. While non-causal knowledge of the price is a realistic assumption in today’s energy networks, non-causal knowledge of power consumption is valid for appliances such as refrigerators, boilers, heating and electric vehicles, whose energy consumption can be accurately predicted over certain finite time frames. Energy management with imperfect input load predictions will be studied in a future work. We also remark that the solution of the offline problem yields meaningful lower bounds on the performance of the more general online setting. In fact, in the offline setting, the knowledge of future energy consumption enables the user to better match the output with the target load, thus leading to the minimum amount of information leaked to the UP.
We measure privacy as the mean squared-error between and a target load over TSs, i.e.,
[TABLE]
according to which, perfect privacy is achieved when , . When energy cannot be sold to the UP, is non-negative, i.e.,
[TABLE]
The average cost incurred by the user during time is
[TABLE]
where is the cost of energy at time , which is determined by the specific time-of-use tariff employed by the UP.
Compared to [10] where the target load is set to be a constant function over time, in the following section we consider a more general target load, specifically a function which assumes a constant value for each price period.
III Target Load as a Piecewise Constant Function
In this section the objective of the optimization problem is to determine both the optimal target and the optimal output load , so that the average squared-distance between them is minimized. The target load is set to be piecewise constant over price periods. We argue that such an output load trades off privacy with cost. Multiple target values for energy intake from the grid intuitively reveal more information about the user’s real energy consumption behavior compared to a single constant target value. However, it also provides more flexibility to reduce the cost and to match the target load, providing a trade-off between cost and privacy.
Let be the cost of the energy purchased from the UP during the -th price period, where and is the total number of price periods during time . The -th price period spans from to , and is the number of TSs contained within price period . Fig. 2 depicts this model. Let be the constant target load for the -th time period. Given the nature of the objective functions and the constraints, pairs of (, ) form a convex region and the optimal points can be characterized by the Pareto boundary of this region. Then, our problem can be cast as a weighted combination of privacy (9) and cost (11), i.e.,
[TABLE]
where is the weighting parameter between privacy and cost, according to which if only cost of energy is minimized, whereas if only information leakage is minimized.
Based on (13) and the constraints (1)-(2), (4)-(6), (8) and (10), we define the Lagrangian function as (12) shown at the top of the page, where for and , for , and are the Lagrange multipliers. The corresponding slackness conditions are imposed on the inequality constraints:
[TABLE]
We then apply the Karush Kuhn Tucker (KKT) conditions and set the gradient of the Lagrangian to zero, i.e.,
[TABLE]
From (20), we obtain the optimal value for as
[TABLE]
where and . From (21), we obtain the optimal value for as
[TABLE]
The optimal solution (22) resembles the classical water-filling algorithm that determines the optimal power allocation for Gaussian parallel channels under a total power constraint [12]. However, differently from the classical water-filling formulation, here the water level, , is not constant, but varies over time due to the instantaneous constraints. The optimal target for price period , (23), is a function of the Lagrange multipliers and of the mean of the optimal output loads in the same price period.
The simple scenario illustrated in Fig. 3 offers some intuition about the optimal solution and its water-filling interpretation. We consider two price periods, and , two batteries of parameters kWh, kW and kWh, kW, respectively, and . The input load is kW. For the sake of simplicity, we consider , so that power and energy can be used interchangeably. Fig. 3a, shows the optimal solution and water levels for . Since , more energy is requested from the grid during the first price period and stored in the battery to partially satisfy the user’s energy consumption during the second price period. However, the energy that can be stored is limited not only by the battery capacity but also by the peak power constraint (4). In the first TS it is indeed that limits the output load. We have and the battery SOC at the end of the TS is . The water level for is given by , where , and is computed jointly with and (23). In the second TS, the output load is limited by both the charging peak power constraint and the battery capacity, i.e., , and . In the third TS, , which does not violate the discharging peak power constraint as , and . In the last TS, and the battery becomes empty. Fig. 3b shows that by increasing , and , it is possible to further reduce the variance of the output load from the target and the cost of energy.
III-A Selling Energy to the Grid
Here we consider the possibility of selling energy to the UP in order to further improve the user’s privacy and save costs. By allowing this, the UP can practically utilize user devices as distributed energy storage. Thus, we lift constraints (6) and (10), and we have
[TABLE]
Without loss of generality, the price of selling energy to the grid is equal to the price of buying energy from it, i.e., we implement the net metering approach, according to which the user only needs a single SM, which can measure bi-directional energy flows [13].
The set of feasible energy requests at time is given by
[TABLE]
The optimization problem is expressed as (13) and the Lagrangian is similar to (12) without considering the constraints corresponding to and . The slackness conditions follow similarly, and by applying the KKT conditions, we obtain the following optimal values for and :
[TABLE]
where .
IV Numerical Results
In this section we evaluate numerically the performance achieved when using the piecewise constant target and compare it with the constant energy consumption target in [10]. We note that we also include the peak power constraints (4)-(5) and the total energy constraint (8). We use real power consumption traces retrieved from the UK Dale dataset [16], which has a time resolution of seconds. For our simulations, we convert the dataset readings to a time resolution of minute to reduce the computational complexity. We adopt two commercial batteries, listed in Table I, in which the charging (discharging) peak power denotes the amount of power that the battery is able to input (output) sustainably over time. We consider a time-of-use tariff currently being offered in the UK [17], according to which the off-peak price is p per kWh during 23:00 to 06:00, the medium price is p per kWh during 06:00 to 16:00 and during 19:00 to 23:00, and the peak price is p per kWh during 16:00 to 19:00.
Fig. 4 shows the input, output and target curves according to the two target loads for in Fig. 4a and Fig. 4b, and in Fig. 4c and Fig. 4d, respectively. These weights are chosen to simulate users that are mainly interested in minimizing their cost and maximizing privacy, respectively. For these figures we adopt a Powervault G200-LI-4KWH battery [14], and we assume that energy cannot be sold to the UP. As the figures show, adopting a piecewise constant target reduces the variance of the output load around the target, thanks to the flexibility introduced by the piecewise constant target function. However, because of the rather small battery capacity, the demand peaks in the input load are mostly revealed in the output load for both strategies. When , since cost is more important than privacy, the battery is charged more during the off-peak price period, and the outputs for the two scenarios are more similar, since reducing the variance from the target assumes less importance.
Fig. 5 shows the output and target loads when selling energy to the UP is allowed, and a piecewise constant target is considered along with a Tesla Powerwall 2 [15] and . The results show that the target in this case can also have negative values, which allow the user to sell energy to the grid during the peak price period. Selling energy to the grid further minimizes the costs and improves the overall trade-off.
Fig. 6 shows the trade-off between privacy and costs for the two strategies by considering the Powervault G200-LI-4KWH [14], and including the setting in which energy can be sold. The figure confirms the results of Fig. 5 by showing that, when energy can be sold, much lower costs are achieved for the same level of privacy. As expected, adopting a piecewise constant target leads to a much better privacy-cost trade-off compared to the constant target, both when selling and not selling energy.
Fig. 7a shows the degree of privacy that can be achieved for different battery capacities for , while Fig. 7b shows the hourly average energy cost with respect to for . For these plots, we set which is a good approximation of the specifications of currently available residential batteries. Fig. 7a shows that the information leakage drops greatly even for relatively small battery sizes, and it saturates at around kWh for all the strategies considered. This shows that, if a user is only interested in her privacy and has a medium-sized battery ( kWh) available, she can achieve almost zero output load variance by using any of the target loads considered. Also, for smaller battery capacities the piecewise constant target achieves better performance. However, we remark here that having multiple energy levels has an inherent information leakage which is not captured solely by the load variance from the target. It is noteworthy that selling energy does not improve privacy when , since selling introduces negative target values which are more difficult to match with the positive output load unless a large battery is used. In the setting of Fig. 7b, as privacy is not relevant, the only difference between the two targets is due to allowing or not to sell energy to the UP. As one would expect, the flexibility to sell energy to the grid can significantly reduce the energy cost, and in principle the user can even make a profit (corresponding to a negative cost in the figure).
V Conclusions
In this paper we have studied the joint optimization of privacy and cost for an SM system with a rechargeable storage device. Privacy is measured via the mean squared-error between the SM measurements and a target load profile, which is set to be a piecewise constant function over price periods. The user is allowed to sell excess energy to the UP. The optimal solution of the corresponding optimization problem has been characterized, highlighting its water-filling interpretation. Detailed numerical simulations have been presented, showing the performance improvement of the proposed piecewise target load as compared to a constant target load. Future work will consider solving the corresponding online optimization problem, including the possibility of load shifting, while another interesting research direction is how to balance this framework with UP’s interest in stabilizing the grid.
The reference list from the paper itself. Each links out to its DOI / PubMed record.
- 1[1] I. Rouf, H. Mustafa, M. Xu, W. Xu, R. Miller, and M. Gruteser, “Neighborhood watch: Security and privacy analysis of automatic meter reading systems,” in Proc. ACM Conf. on Comput. and Commun. Security , Raleigh, NC, USA, Oct. 2012, pp. 462–473.
- 2[2] J.-M. Bohli, C. Sorge, and O. Ugus, “A privacy model for smart metering,” in Proc. IEEE Int. Conf. on Commun. , Cape Town, South Africa, May 2010, pp. 1–5.
- 3[3] F. Li, B. Luo, and P. Liu, “Secure and privacy-preserving information aggregation for smart grids,” Int. J. of Security and Networks , vol. 6, no. 1, pp. 28–39, Apr. 2011.
- 4[4] R. Petrlic, “A privacy-preserving concept for smart grids,” in Proc. Sicherheit in vernetzten Systemen:18. DFN Workshop , 2010, p. B 1–B 14.
- 5[5] G. Kalogridis, Z. Fan, and S. Basutkar, “Affordable privacy for home smart meters,” in Proc. IEEE Int. Symposium on Parallel and Distributed Process. with Applicat. Workshops , Busan, Korea, May 2011, pp. 77–84.
- 6[6] W. Yang, N. Li, Y. Qi, W. Qardaji, S. Mc Laughlin, and P. Mc Daniel, “Minimizing private data disclosures in the smart grid,” in Proc. ACM Conf. on Comput. and Commun. Security , Raleigh, NC, USA, 2012, pp. 415–427.
- 7[7] O. Tan, D. Gündüz, and H. V. Poor, “Increasing smart meter privacy through energy harvesting and storage devices,” IEEE J. Sel. Areas Commun. , vol. 31, no. 7, pp. 1331–1341, Jul. 2013.
- 8[8] S. Li, A. Khisti, and A. Mahajan, “Privacy-optimal strategies for smart metering systems with a rechargeable battery,” ar Xiv:1510.07170 v 3 [cs.IT] , Aug. 2016.
