Electric Metering & AMI45 to 60 minTechnical paper
Understanding AMI: From Meter Reading to Utility Intelligence
A controlled technical paper for electric cooperatives and utilities on the measurements, communications, software, people and controls that turn one meter reading into responsible utility and customer action.
- ORIGINAL METRO POWER PAPER
- Second edition · 30 August 2026 · Review before project use
- INTENDED FOR
- Electric cooperative directors, engineers, ICT teams, commercial teams, field operations and informed consumers

What this paper examines.
This paper explains Advanced Metering Infrastructure as an end-to-end utility operating capability. It traces revenue measurement, identity, field communications, HES, MDMS, enterprise workflows, cybersecurity, customer experience, pilot evidence, economics and procurement controls. Its purpose is to help utility leaders and technical teams distinguish product features from an operable, supportable and accountable AMI program.
- Electric-cooperative and distribution-utility AMI planning
- Meter-to-HES-to-MDMS-to-enterprise architecture
- Pilot, acceptance, customer and governance decisions
- Does not certify a meter, communications network or software release
- Does not replace the controlling TOR, utility rules or professional engineering
- International guidance is contextual until Philippine applicability is verified
What you should be able to explain after reading.
- Distinguish a smart meter, automated meter reading (AMR) and a complete AMI operating system
- Trace information and commands from the service point through the head-end system (HES), the meter data management system (MDMS) and utility workflows
- Define representative pilot evidence, organizational readiness and responsible rollout gates
- Explain utility-side and consumer-side value without promising outcomes that the operating model cannot deliver
At 10:15 a.m., a meter records fifteen minutes of electricity use. What happens next?
The answer explains why advanced metering infrastructure (AMI) is not simply a newer meter. It is a chain of measurement, communications, software, decisions and human responsibility. If one link fails, the reading may be accurate and still fail to become useful.
Imagine a household connected to a Philippine electric cooperative. The refrigerator cycles, a fan runs and a rice cooker is switched on. Electricity flows through the service conductors and the meter measures the resulting electrical quantities. At 10:15, the current interval closes. The meter stores a value, associates it with time and waits for the communications schedule.
Nothing visible happens inside the house. The lights stay on. There is no dramatic “smart grid” moment. Yet a carefully designed chain has begun. The reading may travel through neighboring meters in a radio frequency (RF) mesh network, directly through a cellular connection, or first to a data concentrator. It reaches a head-end system (HES), where the utility can see whether the device communicated successfully. It then moves to a meter data management system (MDMS), where the interval is checked, stored and prepared for an approved business use.
Later, the same information may help produce a bill, answer a consumer question, reveal unusual loading or support an outage investigation. A different path may carry an authorized service command back toward the meter. Each step changes the risk, the required evidence and the person accountable for what happens next.
A smart meter is a device. AMI is the system built around it.
Before studying protocols and platforms, establish the boundary of the thing being designed.
Traditional meter reading creates a periodic snapshot. A person visits the service point, reads the register and brings that value into the utility's billing process. The meter may be accurate, but the utility sees only what was collected on the reading date. If access is blocked, handwriting is unclear or the account record is wrong, the process develops an exception.
Automated Meter Reading, commonly called AMR, reduces some of that collection work. A handheld or vehicle-mounted receiver may collect a reading while passing nearby. AMR can improve safety and productivity, but it usually remains centered on obtaining readings rather than maintaining a continuously available two-way operating environment.
Advanced metering infrastructure, or AMI, extends the boundary. NIST describes AMI as communications hardware and software, together with system and data-management software, that creates a bidirectional network between advanced metering equipment and utility business systems [1]. The important word is not merely “advanced.” It is infrastructure.
Infrastructure implies that meters, networks, software, interfaces, security controls and operating teams must function together over time. Installing a smart meter fleet does not prove that billing receives complete data. Receiving interval data does not prove that the utility can explain it to a consumer. Sending a remote command does not prove that the resulting service state was verified safely. AMI value appears only when the chain ends in a controlled action.
Manual reading, AMR and AMI solve different operating problems
Periodic human collection
One way · on the visit datePrimary question: what was the cumulative reading on the visit date?
Register
Reader
Billing
Automated local collection
One way · while passing nearbyPrimary question: can the reading be collected more efficiently?
Meter
Nearby receiver
Billing
Persistent system interaction
Two way · persistentPrimary question: how can trusted data and authorized commands improve utility service?
Meter
Network
Platforms
Operations
The six layers that must work together
- 01Measurement.The correct meter and configuration convert service conditions into defensible registers, intervals and events.
- 02Communications.The field network moves data and commands with known coverage, latency, availability and lifecycle cost.
- 03Device operations.The HES enrolls devices, schedules collection, receives events and governs supported commands.
- 04Data operations.The MDMS stores intervals, identifies exceptions and prepares accepted information for business use.
- 05Enterprise workflow.Billing, customer service, outage management, engineering and revenue assurance use the information under approved rules.
- 06People and governance.Named owners control access, resolve exceptions, communicate with consumers and preserve evidence.
What does an advanced meter actually know?
A meter observes electrical quantities at one service point. It does not automatically know the cause, intent or business meaning behind them.
An electricity meter sits at the boundary between the utility system and a customer installation. It observes voltage and current and uses its measurement design to calculate quantities such as active energy. Depending on the exact model and configuration, it may also record demand, reactive energy, voltage information, current information, power factor, events, alarms and load-profile intervals.
The distinction between a register and an interval is fundamental. A register is usually cumulative. If a register moves from 12,400 kWh to 12,560 kWh, the difference is 160 kWh, subject to the correct multiplier and register rules. An interval assigns consumption or another quantity to a defined period, such as fifteen, thirty or sixty minutes. Intervals show when use occurred, not only how much accumulated between two reads.
Time therefore becomes part of measurement. A correct value associated with the wrong interval can distort a load profile, a time-based rate or an event sequence. Clock synchronization, time-zone treatment, daylight-saving rules where applicable, interval boundaries and power-loss behavior must be understood and tested. In the Philippine context, the project should state the required time basis rather than inherit a foreign default.
A register and a load profile answer different questions
CUMULATIVE REGISTER12,560.4 kWhHow much has accumulated?
INTERVAL SERIES12 time-stamped valuesWhen did consumption occur?
Events are indications, not verdicts
Advanced meters can record changes or conditions such as cover opening, reverse energy, magnetic influence, loss of voltage, restoration, clock change or relay operation, depending on the supported model. These are often called tamper events, but that label can be misleading. A meter detects a defined technical condition. It does not establish motive, identify a responsible person or replace an authorized investigation.
For example, a reverse-energy event might result from an incorrect installation, a wiring change, distributed generation, a test condition or unauthorized activity. The utility needs the event definition, timestamp, service configuration, installation evidence and investigation procedure before reaching a conclusion.
From physical condition to defensible utility conclusion
01ConditionSomething changes at the service point
02DetectionMeter rule creates an event
03TransmissionEvent reaches the platform
04ContextAsset, service and nearby data are checked
05InvestigationAuthorized field or account review
06DispositionConfirmed cause and recorded action
An accurate reading can still belong to the wrong account
AMI turns asset records into operating infrastructure. The physical meter and the digital identity must describe the same installation.
Before an AMI platform can use a reading, it must know which device produced it and how that device relates to the utility estate. A meter serial number may be associated with a communications identifier, service point, customer account, premise, route, transformer, feeder, meter form, firmware version and configuration record. These relationships are not clerical decoration. They give the reading its business and network context.
Suppose two meters are physically installed at adjacent houses but their account associations are exchanged during migration. Both meters may measure perfectly. Both may communicate at 100 percent. The HES may show healthy devices and the MDMS may receive complete intervals. Yet the customers can receive each other's consumption information. Every technology layer appears successful while the service outcome is wrong.
Commissioning is the controlled process that prevents this kind of failure. It should reconcile the physical serial, communication identity, customer or service-point record, meter configuration, installation location, initial register, clock, interval length and supported functions. Photographs should establish context and readable identity. System records should identify who commissioned the device and when. Exceptions should stop or quarantine the affected account until resolved.
The AMI identity chain
01Physical meter
02Device identifier
03Service point
04Customer account
05Transformer and feeder
06Enterprise records
The pilot with excellent communications and incorrect bills
A 500-meter pilot reports 99.4 percent scheduled-read delivery. During the first billing cycle, seven customers dispute large changes in consumption. Investigation traces five of the seven disputes to meters associated with the wrong service-point records during data migration.
- The network KPI did not detect the problem because the devices communicated correctly.
- The MDMS accepted complete data because the identifiers were valid, although the relationships were wrong.
- The billing interface behaved as designed and therefore propagated the identity error.
- The corrective action must address field-to-system reconciliation, migration controls and exception sampling, not radio performance.
How does a reading travel from thousands of service points?
The best communications architecture is the one that meets the utility's service obligation across its real territory and remains supportable through its lifecycle.
Once the interval is stored, it must reach the utility within the time required by the use case. Billing may tolerate a defined collection window. Outage events may need much lower latency. An on-demand read creates a different interaction from a scheduled batch. Remote service control carries different consequence from passive data collection. “The meter communicates” is therefore not a complete requirement.
RF mesh: communication through a field network
In an RF mesh design, endpoints can communicate through other endpoints or network devices on the way to a collector. A meter that cannot reach the collector directly may use neighboring nodes as a path. The network can recalculate routes when conditions change, but that resilience depends on actual density, radio conditions, device availability and network design.
Mesh is not magic coverage. Sparse rural lines may provide too few alternate paths. Concrete rooms, metal enclosures, terrain, vegetation and interference can weaken links. A dense population can support strong path diversity, while a visually nearby endpoint may still be difficult to reach because of its installation environment.
How an RF mesh route can recover
- Usual route
- Meter A → Meter B → Meter C → collector. The link from B to C is unavailable (×).
- Alternate route
- A → D → E → collector
Cellular: direct reach through a carrier network
A cellular endpoint uses a mobile network to reach the utility platform or an intermediary service. This can simplify field infrastructure for dispersed meters, but it introduces carrier coverage, subscription, SIM management, roaming, data-service continuity and technology-sunset considerations. A signal indication observed during one site visit does not prove sustained data delivery through weather, network congestion and lifecycle changes.
DCU-based and hybrid designs
A data concentrator unit (DCU) collects information from a local group of meters through a supported field technology and forwards aggregated data through backhaul. This can suit clusters where local communication is practical. The design must examine both halves: endpoint-to-DCU performance and DCU-to-platform backhaul. A concentrator can also become a concentrated dependency if its failure affects many endpoints.
A hybrid design accepts that one service territory may contain several communication environments. Dense towns, dispersed rural consumers and hard-to-reach indoor meters may justify different paths under one operating model. The price of flexibility is additional integration, inventory, training and support complexity.
Where each network family stops
Each network family has a physical boundary that the terms of reference should respect. Power line carrier (PLC), which sends data over the low-voltage conductors themselves, stops at the distribution transformer, so the concentrator count follows the transformer count and the design depends on the condition of the low-voltage conductors: noise, poor joints and long tapped branches degrade it. Radio mesh has no wiring dependence but a density dependence: a meter with no neighbor in range has no relay, and every hop adds latency and consumes channel capacity. Cellular per meter has neither boundary and needs no concentrator, but each meter carries a subscription for its working life and depends on the operator’s coverage and technology roadmap; retired 2G and 3G networks have stranded meters elsewhere in the region.
The working rule follows from the three field facts. Dense meter populations on good low-voltage lines push toward power line carrier. Dense populations on long, tapped or storm-patched lines push toward radio mesh. Scattered meters, islands and high-value points push toward cellular. A dual-mode meter carrying both power line and radio modules buys fallback where neither path alone is dependable, at a higher unit cost that only the pilot can justify. Most franchise areas end with a hybrid under one head-end system, and the pilot area should be chosen to include the hard sections rather than to avoid them.
Communication selection starts with service conditions
1PopulationDense, clustered, dispersed or mixed?
2InstallationOutdoor, indoor, metal enclosure or difficult access?
3Use caseBilling reads, events, on-demand interaction or control?
4Service levelRequired delivery, latency, recovery and availability?
5LifecycleInfrastructure, carrier, support, battery and obsolescence?
6EvidenceWhich representative sites and duration will prove it?
What should the utility measure?
A read-success percentage needs a denominator, deadline and exclusion rule. Does success mean a meter responded at least once in three days, every required interval arrived before billing cut-off, or the account produced an accepted billing determinant (the quantity the bill is calculated from) without manual work? These are different measures.
Report performance by geography, installation type, network path and consecutive operating period. An overall average can hide a route that will generate recurring field visits. Also measure latency, retries, communication exceptions, recovery after interruption and the labor required to keep the result within target.
The head-end system is the utility's field-communications control room
The HES does not merely receive files. It maintains the operating relationship between the utility and a large population of devices.
When our household meter is commissioned, the HES needs enough information to recognize it, communicate through the supported network and apply the correct schedules and permissions. Depending on the implementation, enrollment can include the device identity, communication address, security material, model, firmware, supported channels, time settings and relationship to a collector or network group.
The HES then orchestrates routine work. It requests or receives scheduled register and interval data, accepts events, records communication status and makes unsuccessful work visible for retry or investigation. An operator may request an on-demand read when customer service needs a current value. Authorized users may initiate supported commands. Device configurations or firmware may be managed through controlled processes. The exact boundary varies by product. Describe the offered platform from current evidence, and do not assume that every HES behaves the same way.
A day in the life of the HES
- Routine collection
- Exception
- On demand or command
- 00:00Close daily intervals
- 01:00Begin scheduled collection
- 03:00Retry missing devices
- 06:00Publish collection status
- 10:30Answer on-demand read
- 14:00Receive voltage event
- 18:00Process approved command
- 23:00Reconcile device exceptions
A communication failure is a work item, not an empty cell
If a meter does not deliver its scheduled data, the HES should help distinguish a temporary missed interaction from a persistent exception. The cause may be an endpoint, local power, RF path, collector, carrier, backhaul, credential, configuration or platform issue. Retry policy matters: too little retry can leave recoverable data missing; excessive retry can consume network capacity or endpoint energy without solving the root cause.
The operating team needs an exception taxonomy, severity, owner and aging rule. A dashboard showing 98 percent success is not enough if the remaining two percent changes every day and no one knows which failures threaten billing. Useful views segment exceptions by geography, device model, network path, duration and business consequence.
Commands require stronger controls than ordinary reads
Reading data and changing field state carry different consequences. A remote disconnect request should not be treated like a routine collection job. The HES should support the utility's authorization model, validate whether the device and command are eligible, preserve the requesting identity and reason, protect the command in transit, record device acknowledgement and reconcile the final state. Chapter 9 follows this sequence in detail.
The MDMS turns collected meter data into governed utility information
Receiving a value proves that communication occurred. It does not prove that the value is complete, correctly timed or suitable for billing.
The Meter Data Management System, or MDMS, receives meter information from the HES or another controlled interface and maintains the long-term data needed by utility processes. Its job commonly includes interval storage, data-quality status, validation, estimation, editing, aggregation and publication to billing, analytics, customer systems or other authorized consumers.
HES and MDMS boundaries differ between solutions. Some head-end products perform initial validation. Some MDMS products manage selected device relationships. The utility should not resolve this variation by debating generic definitions. It should create an interface responsibility matrix that names the system of record for every important object and the platform responsible for every rule.
HES and MDMS answer different operational questions
Can I operate this device?
- Is it enrolled and reachable?
- Did the schedule complete?
- What event or status arrived?
- Was the command acknowledged?
- Which network exception exists?
THE INTERFACE CARRIESIdentity · timestamp · unitquality · reason · audit
Can the utility use this data?
- Is the interval complete?
- Does it pass approved rules?
- How is a gap handled?
- Which value is billing-ready?
- Who changed what and why?
Validation, estimation and editing
Validation tests data against approved conditions. A rule might check whether every expected interval exists, whether timestamps overlap, whether a register change is plausible or whether a value conflicts with device status. A failed rule should create a quality condition or exception, not silently transform the reading.
Estimation produces a substitute value under an approved method when required information is missing or unusable. The method might use nearby intervals, a historical profile or another rule accepted by the utility. An estimate must remain identifiable as an estimate. It should not be presented as if the meter produced it.
Editing is an authorized change to data or status. It needs a reason, user, time, before-and-after value and approval path appropriate to the consequence. Together these processes are called VEE. Their purpose is not to manufacture clean-looking data. Their purpose is to make uncertainty visible and handle it consistently.
VEE is a controlled decision tree
01Receive interval
02 · TESTIdentity and time valid?YES → check completeness
- NO
Quarantine and investigate
03 · TESTComplete and plausible?YES → retain measured status
- NO
Exception, approved estimate or edit
04Publish value + quality + audit
Four missing intervals in a residential load profile
A meter is configured for fifteen-minute intervals, so 96 intervals are expected in a full day. The MDMS receives 92. Intervals from 14:00 through 14:45 are missing, but the cumulative register before and after the gap is available.
- Validate the context. Confirm device identity, clock, interval schedule, register continuity and whether a power or communication event explains the gap.
- Classify the consequence. Determine whether the data is needed for information only, time-based billing, settlement or another controlled use.
- Apply the authorized rule. If estimation is permitted, use the approved method and ensure the four values reconcile with the known register difference where required.
- Preserve quality. Mark the intervals as estimated, retain the original gap and record method, user or automated process, and time.
- Address the cause. Estimation may complete the business process, but repeated gaps remain a communications or device exception.
AMI creates value only when a department changes what it does
A capability becomes a benefit after trusted information reaches an accountable workflow and improves a measurable outcome.
The US Department of Energy's Smart Grid Investment Grant review found that participating utilities used AMI for remote metering and billing services, customer support, outage management and other operating improvements [3]. Those results are evidence that AMI can create value under suitable conditions. They are not a promise that the same result will appear automatically in another utility or country.
Value should therefore be described as a chain: information → decision → action → measured outcome. “Remote reading” is a capability. Fewer manual visits is a possible operational effect. The financial benefit depends on the baseline route, labor arrangement, remaining exception visits, system cost and actual process change.
How AMI can support six utility functions
| Drawing | Function | AMI data used | Possible benefit | Operating condition |
|---|---|---|---|---|
| Billing | Validated registers and intervals | Fewer estimates, faster exceptions | Requires identity, VEE and billing integration | |
| Customer service | Usage and event history | Clearer investigation | Requires understandable tools and trained staff | |
| Meter operations | Device status and events | Targeted field work | Requires triage rules and closure evidence | |
| Outage response | Loss and restoration indications | Improved situational awareness | Requires event correlation, topology and outage management system (OMS) workflow | |
| Engineering | Interval load and voltage data | Better-informed studies | Requires sufficient coverage, quality and asset mapping | |
| Revenue assurance | Exceptions and technical indications | Prioritized investigation | Requires fair procedures and corroborating evidence |
Outage information needs correlation
A meter may send a last-gasp indication as its supply disappears and a restoration indication when power returns. One event does not define an outage. The utility must correlate events in time and geography, relate them to network topology and distinguish loss of supply from device removal or communications behavior. When integrated well, AMI can help confirm affected areas and restoration. It does not replace protection systems, SCADA (supervisory control and data acquisition) or field safety procedures.
Load information expands engineering visibility
Monthly consumption hides the shape of demand. Interval data can show diversity, coincidence, peak timing and changing service behavior. When meter-to-transformer and feeder relationships are reliable, engineers can study groups of customer profiles against network assets. However, voltage or load information from a revenue meter must be interpreted within the accuracy, sampling and configuration of the exact device. It should not be presented as a replacement for specialized power-quality instrumentation unless evidence supports that use.
Loss localization is an energy balance per transformer
The meters supply the numbers; the network model and the field work supply the result.
Draw a boundary around one distribution transformer. Meter what it delivered on its low-voltage side over a period. Total what every customer meter inside the boundary recorded over the same period. Supply minus consumption is the area loss; divided by supply it is the area loss rate. The remainder holds technical loss (conductor and connection heating, and the transformer’s own losses if the metering point is on the high side) and non-technical loss (bypass, tampering, meter faults and unrecorded connections).
The rate is read over time and across areas. A stable rate is mostly technical. A step change on a date points to a new theft or a failed meter. An area far above its similar neighbors is the first to inspect. The method does not identify a customer; it identifies a transformer, and it ranks transformers so that inspectors go where the evidence is strongest.
Three conditions make the balance trustworthy: every customer meter mapped to the correct transformer in a maintained network model or GIS; supply and consumption reads aligned in time, which interval data provides and register reads provide only if synchronized; and a transformer metering point, usually the data concentrator or a check meter, that is as accurate and tamper-protected as a revenue meter. The water path of this Academy teaches the same method as the district metered area balance, with the same caution that a difference is a screening signal to be decomposed, not a conclusion.
A last-gasp cluster that does not become an outage ticket
Twenty-eight meters on one feeder report loss-of-power events within ninety seconds. The HES receives them, but the customer-information and outage systems are not integrated.
- The network successfully delivered useful field evidence.
- No operating benefit appears because the event has no automated or staffed route to outage assessment.
- A dispatcher who cannot see the cluster may still wait for customer calls.
- The project must define correlation, topology, ownership and escalation before claiming outage-management benefit.
What should AMI mean to the person paying the bill?
Consumers do not experience architecture diagrams. They experience bills, interruptions, explanations, notifications and the fairness of utility decisions.
For a household, AMI can support more reliable remote reads, fewer estimated bills, clearer consumption history, earlier visibility of unusual use and faster resolution of some service concerns. Access to energy-use information can help consumers understand and manage bills, especially when the information is timely and explained in useful units [4].
But interval data does not explain everything. A spike between 18:00 and 19:00 shows that consumption increased in that period. It does not prove which appliance caused it. A voltage event does not independently establish the condition of every circuit inside the house. A remote read does not prove that the account mapping is correct. Good customer communication separates observation, likely explanation and confirmed conclusion.
The consumer journey from question to resolution
01QuestionWhy did my bill change?
02EvidenceValidated reads and interval history
03ExplanationUnits, period, comparison and limitations
04ActionCustomer check or utility investigation
05ResolutionCorrection, confirmation or monitored follow-up
Before AMI and after AMI
A high bill arrives
The consumer sees one billing-period total. Investigation may depend on a field read, prior bills and appliance discussion.
The same question has more evidence
Customer service can review validated intervals, read quality, events and timing, then explain what the data supports and what still requires investigation.
Customer trust also depends on privacy and access. Interval data can reveal patterns of occupancy and activity. The utility should define who may access it, what is shown to third parties, how consent and disclosure are controlled, how long information is retained and how a consumer can challenge an incorrect association. Digital channels should not remove practical service routes for customers who lack reliable internet access.
Prepayment moves the account into the meter
A token is credit in transit; the token log is the evidence.
In a prepaid service the credit balance lives inside the meter and the meter’s relay enforces it. Credit is loaded by a token generated under the Standard Transfer Specification (IEC 62055-41), encrypted with a key unique to that meter and stamped with a time reference, so it works once and on one meter only. The same token mechanism carries key changes, tariff changes and power limits, which makes key management a utility responsibility from the first day.
The token reaches the meter by one of two paths. Locally the customer keys it into the meter or into a customer interface unit, a paired display and keypad that lets the measuring unit itself be sealed out of reach. Remotely the head-end system pushes it over the AMI network. The local path works offline; the remote path only works while the meter is reachable. A program that specifies only the remote path has no fallback.
Customer protection is a policy layer above the meter: staged low-credit warnings, emergency credit recovered from the next purchase, friendly hours during which the meter does not disconnect, and a maximum power limit as an alternative to disconnection. Time-of-use tariffs can apply to prepaid consumption when the meter holds the tariff tables and calendar and its clock survives outages. The regulator’s rules for prepaid retail electric service should be read before any of these parameters are set.
Two-way capability requires deliberate authority
When a system can affect customer service remotely, security and operating governance become part of electrical service quality.
A remote disconnect or reconnect can reduce some field visits and shorten selected service processes, but it also concentrates consequence. An incorrect account association, compromised credential, unsafe site condition or ambiguous final state can affect a consumer directly. The process should begin with an authorized business request, not with a button in the HES.
A controlled remote service-command sequence
1 · UTILITYApproved requestReason, account and authority
2 · UTILITYIdentity checkUser, role, device and service point
3 · UTILITYSafety checkEligibility, site condition and utility rule
4 · UTILITYProtected commandSecure path and anti-replay controls
5 · FIELDDevice responseAcknowledgement, rejection or timeout
6 · UTILITYState verificationRelay and service status reconciled
7 · UTILITYAudit closureCustomer record, exception and evidence
NIST IR 7628 Revision 1 provides a risk-based approach to Smart Grid cybersecurity and recognizes that interconnected grid architectures require controls tailored to the system's characteristics, risks and vulnerabilities [2]. DOE guidance likewise addresses AMI security across planning, procurement, rollout and assessment [5]. These sources are valuable architecture guidance, not automatic Philippine compliance.
Practical controls include unique device and user identities, least privilege, strong authentication, credential lifecycle, protected communications, secure software and firmware updates, logging, monitoring, backup, recovery, incident response and controlled supplier access. The utility should know how certificates or keys are created, provisioned, renewed, revoked and recovered. “Encrypted” is not a complete security architecture if privileged accounts are shared or vendor access is uncontrolled.
Security follows the AMI lifecycle
1 · PROCUREMENTSpecify risks and controls
2 · PROCUREMENTQualify product and supplier
3 · COMMISSIONINGProvision identities and credentials
4 · OPERATIONMonitor operation and changes
5 · OPERATIONRespond and recover
6 · END OF LIFEDecommission and revoke
A pilot should try to discover why rollout could fail
A demonstration proves that selected equipment can work somewhere. A decision pilot tests whether the complete operating model can work across representative conditions.
A credible pilot starts with decisions, not quantities. What uncertainty must be reduced before the utility commits to scale? The answer may involve communication coverage, billing integration, meter fit, customer acceptance, remote operations, field productivity, cybersecurity, support capacity or economic assumptions.
The meter population should represent the conditions that will influence rollout: dense and sparse areas, difficult indoor installations, long rural feeders, different service configurations, known power-quality conditions, varied customer segments and realistic field access. Selecting only convenient locations biases the result toward demonstration success.
A representative 2,000-meter pilot portfolio
Acceptance metrics need operational meaning
Required reads received inside the defined window ÷ scheduled reads. State exclusions and report by segment.
Valid intervals available ÷ intervals expected. Separate late, missing, duplicate and rejected data.
Accounts producing accepted determinants without manual intervention ÷ accounts due for billing.
Open communication, data, device and account exceptions by age, severity and owner.
Authorized commands with reconciled final state ÷ commands initiated, with every failure investigated.
Complaints, repeat contacts, corrected bills and service time compared with a controlled baseline.
Why 98.5 percent network delivery can produce only 96.3 percent billing yield
A 10,000-meter pilot receives 9,850 scheduled reads. Billing requires determinants for 9,900 accounts. Of the received reads, 180 fail identifier mapping, 95 fail validation and 40 arrive after cut-off. The two percentages use different denominators: network delivery counts meters in the pilot, while billing yield counts accounts due for billing. For simplicity, the example assumes each usable read supports one of the 9,900 due accounts. A real acceptance report should state both populations and how they map.
- Network delivery = 9,850 ÷ 10,000 = 98.5 percent.
- Potential on-time usable reads = 9,850 − 180 − 95 − 40 = 9,535.
- End-to-end billing yield = 9,535 ÷ 9,900 = approximately 96.3 percent.
- The gap cannot be solved by radio optimization alone. Identity, validation and cut-off handling require correction.
Scale only what the utility can operate and afford through its lifecycle
The business case must connect verified baselines to achievable operating changes and carry cost, degradation and uncertainty through time.
AMI cost extends beyond meters. It can include communications infrastructure, carrier service, HES, MDMS, integrations, cybersecurity, installation, data migration, customer communication, training, support, software maintenance, hosting, field remediation, spares, replacements and decommissioning. Procurement that compares only meter price conceals the architecture that makes the meter useful.
Benefits also need disciplined treatment. Avoided manual reads may be a cash saving, a redeployment opportunity or an avoided future cost depending on the utility's staffing and contracts. Faster connection can improve service without producing direct revenue. Better loss investigation can create value only when the utility acts and confirms a recoverable condition. These categories should not be mixed.
The AMI value case connects baseline, change and continuing cost
VERIFIED BASELINECurrent quantity × current costReads, visits, exceptions, complaints or losses
ACHIEVABLE CHANGEAdoption × performance × timingSupported by pilot and operating capacity
CONTINUING COSTNetwork + platform + supportIncluding replacements and remediation
NET EFFECTCash, avoided cost and service valueReported separately and sensitivity tested
Avoiding double counting in a 20,000-meter program
The business case claims savings from reduced reading labor, fewer field-crew dispatches, faster billing, lower complaints and improved loss detection.
- Establish the current annual quantity and fully loaded cost for each activity.
- Identify overlap: a reading visit and a field-crew dispatch may describe the same avoided activity.
- Apply the pilot's achievable exception rate, not a claim of eliminating all field work.
- Delay benefits until migration, integration and operating adoption actually occur.
- Subtract recurring communications, platform, support, cybersecurity and replacement costs.
- Separate verified cash impact from service improvement and unproven upside.
The rollout gate
Moving to scale should require sustained technical results, closed critical integration defects, manageable exception workload, trained owners, accepted cybersecurity controls, customer readiness, supplier support, a funded remediation plan and an approved total-cost model. Schedule pressure is not evidence. An unresolved pilot weakness becomes a multiplied rollout weakness.
Procure a supportable operating capability, then prove it end to end
Good terms of reference (TOR) translate desired outcomes into system boundaries, responsibilities, evidence and acceptance tests.
The TOR should begin with the utility's use cases and current environment. It should define the meter population and service configurations, required measurements and events, communications territory and performance, HES and MDMS responsibilities, enterprise interfaces, cybersecurity, data rights, customer processes, implementation, training, warranty, support, obsolescence and exit arrangements.
Each requirement should map to evidence. A physical rating may be supported by a current datasheet and certified test evidence. An interoperability requirement may need documentation plus a witnessed interface test. A territory-wide communications claim requires a representative pilot. A billing outcome requires end-to-end acceptance. Evidence should match the exact offered model, firmware, configuration and system release.
A common data language keeps the next contract open
DLMS/COSEM conformance is a procurement decision.
DLMS/COSEM, published as the IEC 62056 series, defines how a meter organizes its data and how a head-end system exchanges it. The data model is a set of objects (registers, load profiles, the clock, the disconnect control), each addressed by an OBIS (Object Identification System) code; 1-0:1.8.0, for example, is total active energy imported on any conformant meter from any maker. The exchange rules apply over any link, from the optical port to power line, radio or cellular. A head-end system that speaks the standard can therefore manage several makers’ meters with one platform, which is how multi-brand deployments are built.
Conformance is proven by a certificate from the DLMS User Association naming the model and firmware that passed the tested subset. A terms of reference that requires DLMS/COSEM conformance with the certificate scoped to the offered model keeps future meter contracts competitive and lets a pilot on one brand scale on another. A terms of reference that accepts a maker’s own protocol chooses that maker for the life of the system, which is usually longer than the people who wrote the terms of reference will stay in their roles.
Before bidding
Control the current TOR, use cases, population, architecture, interfaces and open evidence.
Before award
Resolve deviations, responsibilities, commercial boundaries, data rights and acceptance method.
Before production
Freeze models, firmware, configurations, accessories, drawings, cybersecurity and test plan.
Before installation
Approve survey, identity migration, field procedure, training and customer communication.
Before go-live
Pass meter, network, HES, MDMS, integration, command, security and workflow tests.
Before scale
Prove sustained KPIs, exception capacity, support readiness and total lifecycle economics.
Before final acceptance
Deliver as-builts, configuration records, credentials governance, warranty, spares and recovery.
Before exit or replacement
Preserve data, revoke access, control disposal and maintain service continuity.
Questions a decision-maker should now be able to ask
- Which utility decisions are expected to improve, and what baseline will prove improvement?
- What exact data and commands travel across every interface?
- Which platform owns device state, data quality, billing determinants and audit records?
- How will difficult territories and installations be represented in the pilot?
- What happens when communications, data, credentials or commands fail?
- What will a household consumer see, understand and be able to challenge?
- Which claims are proven for the exact offered models and which still require principal confirmation?
- What evidence releases the project from pilot to rollout and from rollout to final acceptance?
AMI succeeds when a trustworthy measurement becomes a responsible decision
Return to the household at 10:15 a.m. The meter closes an interval. The field network carries it. The HES operates the device relationship. The MDMS protects data quality. An enterprise workflow turns the accepted information into billing, service or engineering action. People govern access, resolve exceptions and explain the result.
No single component creates that outcome. The purpose of AMI architecture is to make every link explicit, testable and accountable. That is also the purpose of a responsible pilot and a defensible TOR.
Primary sources used in this edition
Show the numbered references
- NIST IR 7628 (2010), Guidelines for Smart Grid Cyber Security, Appendix FNIST. AMI logical architecture and interface definition.
- NIST IR 7628 Revision 1, Guidelines for Smart Grid CybersecurityNIST, 2014. Risk-based cybersecurity guidance for Smart Grid stakeholders.
- Advanced Metering Infrastructure and Customer Systems: Results from the Smart Grid Investment Grant ProgramUS DOE, 2016. Deployment evidence for metering, billing, customer and outage applications.
- Customer Rates and Data AccessUS EPA. Customer access to energy-use information and related implementation considerations.
- Advanced Metering Infrastructure Security ConsiderationsUS DOE. Security planning, procurement, rollout and assessment.
- NIST Framework and Roadmap for Smart Grid Interoperability Standards, Release 4.0NIST, 2021. Interoperability, communication pathways, cybersecurity and testing context.
- AMI System Security RequirementsUS DOE. Platform-independent AMI security requirements.
This is an original Metro Power educational synthesis. Figures and worked examples are original unless otherwise stated. Illustrative data is not a project benchmark. Confirm current Philippine requirements, controlling utility specifications and exact product evidence before project use.
Second-edition evidence review: from data availability to operating value
An AMI program should prove not only that data arrived, but that trusted information reached an accountable workflow and improved a defined decision.
Measure the business boundary
Network read rate, HES ingestion and billing yield answer different questions. Report each boundary separately so a strong subsystem metric cannot hide an end-to-end failure.
Make exceptions observable
Missing intervals, stale device status, unmatched identities, rejected billing determinants and unresolved commands need age, severity, owner and closure evidence.
Tie benefits to adoption
A feature creates value only when a trained team uses it through an approved process. Model adoption timing, exception workload and recurring platform cost alongside technical performance.
Show the table
A benefit claim that survives an evidence review
A utility expects AMI to replace 120,000 manual reads a year. The pilot still requires field work for 4 percent of accounts, deployment reaches 60 percent in Year 1, and the field team redeploys rather than removes all reading labor.
- Calculate addressable reads at each rollout stage, not at final population from day one.
- Apply the observed exception rate and retain field work for unresolved or inaccessible accounts.
- Separate cash reduction, avoided future hiring and staff redeployment.
- Subtract communications, platform, support, cybersecurity and exception-handling costs.
- Report service and operational improvements separately from cash savings.
What to challenge before commitment.
Correct reading assigned to the wrong service point
Evidence: Population reconciliation and exception closureIncorrect demand, load-shape or billing determinant
Evidence: Time-source, timezone and cut-off testsWeak command accountability and elevated cyber consequence
Evidence: Named access, role review and audit logRollout performance is overstated
Evidence: Representative segment results and remediation plan- ERC meter and instrument-transformer rules control relevant testing and maintenance questions
- Republic Act No. 10173 governs personal-data processing in the Philippines
- Controlling smart-meter issuance and utility-specific approval path
- NTC applicability for the exact radio equipment and configuration
- Procurement, franchise, rate-recovery and consumer-process requirements for the project
The authorities this edition relies on, the terms it uses and the record of its publication.
Use the same language at every decision gate.
Show all acronyms
- AMI
- Advanced Metering Infrastructure
- AMR
- Automated Meter Reading
- CIS
- Customer Information System
- DCU
- Data Concentrator Unit
- DLMS/COSEM
- Device Language Message Specification and Companion Specification for Energy Metering
- ERC
- Energy Regulatory Commission
- GIS
- Geographic Information System
- HES
- Head-End System
- MDMS
- Meter Data Management System
- NEA
- National Electrification Administration
- NTC
- National Telecommunications Commission
- OBIS
- Object Identification System
- OMS
- Outage Management System
- PLC
- Power Line Carrier
- RF
- Radio Frequency
- SCADA
- Supervisory Control and Data Acquisition
- STS
- Standard Transfer Specification
- TOR
- Terms of Reference
- VEE
- Validation, Estimation and Editing
A traceable educational edition.
This record separates publication authority from project approval. It identifies what was researched, what remains limited and when the source base must be reviewed again.
Show the publication record
What changed and when.
Show the revision history
Initial public web edition
Research, technical-writing and editorial-control upgrade
Educational publication only. This paper does not certify equipment, establish project compliance, replace professional engineering or guarantee performance, savings, approval or commercial outcome. Confirm the controlling TOR, current regulations, site data, selected configuration and responsible authority before procurement, installation or operation.


