Upgrading From a Successful Emergency Control System to a Complete WAMPAC System for Georgian State Energy System

Transcription

1 Upgrading From a Successful Emergency Control System to a Complete WAMPAC System for Georgian State Energy System Dave Dolezilek International Technical Director Schweitzer Engineering Laboratories SEL 2017

2 Communications Assisted Protection Maintains Stability and Utility of Electric Power System High-speed information exchange and decision making over long distances detect and prevent unwanted grid states

3 Managing Energy Flowing at the Speed of Light Requires Mission Critical Precision Detect, isolate energy system fault Respond, reconfigure alternate path or source Recover, restore energy flow Protect Detect Isolate Calculate Analyze Communicate Control Restore

4 Message Delivery Performance Criteria Defined by International Standards IED performance requirements IEC 61850, IEC 60834, IEC 15802, IEEE Latency specifications IEC 61850, IEC 60834, IEC 15802, IEEE Speed IEC 61850

5 Message Delivery Quality Criteria Defined by International Standards Dependability and security requirements IEC 61850, IEC Availability requirements IEC 61850, IEC 60834, IEEE Reliability metrics IEC 61850, IEEE 1613, IEC 60870

6 IEC References Hardware Quality Measures Described in IEC Reliability class severity (R1, R2, or R3) measured as MTBF Availability class severity (A1, A2, or A3) measured as % availability Maintainability class severity (M1, M2, M3, or M4) measured as MTTR and (RT1, RT2, RT3, or RT4) as MRT

7 International Standards Dictate Speed, Dependability, Reliability, and Performance Protection signals via digital messages Speed < 3 msec Latency < 1 msec Network failover < 15 msec Zero dropped GOOSE per year < 9 unwanted GOOSE per day 99.99% of the time

8 IT, IEEE, and Industry Publications Mask Importance of Network Design IED 1 IED 1 IED 1 IED 2 IED 2 IED 2 Substation HMI Gateway to SCADA Ethernet Network Substation Bus IED IED IED Ethernet Network Process Bus IMU IMU IMU Drawing LANs as clouds, boxes, tubes, or magic buses hides true design and engineering required

9 Traditional Rings Rely on Spanning Tree Algorithm (STA) and RSTP L1 Switch B2 L2 Switch B3 L3 Switch B1 L10 Which switch is in charge (i.e., acts as root bridge)? Which link is put into hot standby to break the loop? Switch B10 Switch B9 Switch B8 L9 L8 L7 Switch B4 Who designs the packet flow? Switch B7 L4 Switch B5 L5 Switch B6 L6

10 IEDs Exchange Peer-to-Peer Communications CB A R1 R2 R3 CB B P2P1 P2P1 P2P1 P2P1

11 Peer-to-Peer Communications Share Topology Change Information Protection Device Trips Breaker CB A R1 R2 R3 CB B P2P2 P2P2 P2P2 P2P2

12 Fault Isolated, Hot Standby Enabled, and Network Reconfigured Protection Device Trips Breaker Distribution Automation System Opens R1 and Closes R2 CB A R1 R2 R3 CB B P2P3 P2P3 P2P3 P2P3

13 Managing Ethernet Packet Flow Requires Mission Critical Precision Detect, isolate Ethernet system fault Respond, reconfigure alternate path Recover, restore packet flow Protect Detect Isolate Calculate Analyze Communicate Control Restore

14 Repairable vs. Reconfigurable Ethernet Repairable Duplicate messages via IEC PRP or HSR No intelligence; human intervention required to repair fault Reconfigurable Redundant paths via IEC RSTA Faults detected and isolated; network traffic rerouted without human interaction

15 Ethernet LAN BPDU Point-to-Point Communications Work Similarly BPDU 1 Root Bridge BPDU 1 BPDU 1 BPDU 1 BPDU 1 Switches exchange Bridge Protocol Data Units (BPDUs) STA puts link in hot standby to break communications loops BPDU 1 BPDU 1 BPDU 1 BPDU 1 Backup Root BPDU 1 Active Network Link Hot Standby (normally open)

16 Point-to-Point BPDUs Share Topology Change Information BPDU 2 Root Bridge BPDU 2 BPDU 2 BPDU 2 BPDU 2 BPDU 2 BPDU 2 BPDU 2 BPDU 2 Backup Root BPDU 2

17 Fault Isolated, Hot Standby Enabled, and Network Reconfigured BPDU 3 Root Bridge BPDU 3 BPDU 3 BPDU 3 Heal time between 100 msec and 3 minutes BPDU 3 BPDU 3 BPDU 3 BPDU 3 BPDU 3 Backup Root BPDU 3

18 Behavior of Each Switch Port Must Be Designed and Configured Port Roles Port State R D A Root Designated / active Alternate / hot standby Blocking Forwarding Learning

19 RSTP Ring Port Designations D D R D R R D R D R D Root R Designated / active D Alternate / hot standby A D R D R D R D A R

20 Role of Each Switch in LAN Must Be Designed and Configured Switch Settings Bridge priority Maximum number of hops to root bridge Port Settings Port priority Path cost

21 Engineered Ethernet Is Resilient, Dependable, and Secure Root Bridge Switch B8 B1 L1 L4 Switch B2 Switch B6 L2 L3 Switch B3 Switch B4 L3 L2 Switch B4 Switch B2 L10 L8 L7 L6 L5 Switch B10 B9 L9 Switch B7 Switch B9 Switch B5 Switch B8 Switch B3 Switch B7 L4 L1 Switch B1 B5 L5 L9 Switch B10 B6 L6 Root Bridge Backup Root

22 Three New Cables, Dramatic Resiliency, and Increased Reconfiguration Options Switch B8 L8 Switch B9 L4 Switch B6 L7 Switch B7 L13 L3 Switch B4 L6 Switch B5 L12 L2 Switch B2 L5 Switch B3 L11 L1 Switch B1 Root Bridge L9 L10 Switch B10 Backup Root

23 Three New Cables, Dramatic Resiliency, Increased Reconfiguration, Four Hot Standby Switch B8 L8 Switch B9 L4 L3 L2 Switch B6 Switch B4 Switch B2 L7 L6 L5 L13 Switch B7 L12 Switch B5 L11 Switch B3 Survive loss of 5 switches and 10 cables Each Failure Mitigated in 7 to 15 msec L1 Switch B1 Root Bridge L9 L10 Switch B10 Backup Root

24 GSE LAN and WAN Communications Design Goals Deterministic Precise time Low latency Fast healing Secure Utility-rated

25 Placeholder for GSE Video

26 Opened 500 kv Backbone, RAS Response <10 ms IEDs Shed Load