IEC Vaasa Seminar 21st October Contents

Transcription

1 Ethernet In The Substation IEC Vaasa Seminar 21st October 2008 Contents IEC Environmental Conditions Communication Requirements Communication Protocols Security Summary

2 Contents IEC Environmental Conditions Communication Requirements Communication Protocols Security Summary Historical Substation Protocols Vendor-based Alstom Courier ABB SPA Siemens Profibus Schneider Modbus Standard DNP3 IEC Problem Proprietary structures Different functionality No interoperability

3 IEC and UCA2 GOAL: One International Standard IEC Why Ethernet? Ethernet chosen as the underlying technology for UCA / IEC Ethernet is the most prevalent local area network technology in the world. Non-proprietary technology with multiple vendors. DNP DNP3 IEC IEC

4 IEC More than just an umbrella standard 14 sections Plus one addendum not yet published Staggered publishing First section published January 2002 Last section published June 2005 More than 1000 pages Only in English 10 years to develop Contents IEC Environmental Conditions Communication Requirements Communication Protocols Security Summary

5 EMI, ESD, and RFI immunity requirements IEC Communications Systems and Networks in Substations (Section 5.7) IEEE IEEE Standard Environmental and Testing Requirements for Communications Networking Devices in Electric Power Substations Contents IEC Environmental Conditions Communication Requirements Communication Protocols Security Summary

6 Communication Vertical Bay to Substation level Control and monitoring Client / Server Low priority Horizontal Time critical data between IEDs Automation High priority Prioritisation In IEC and UCA LAN control applications, it is required that the control message transfers occur within 4 ms. Faults can produce a data message storm. Strict priority.

7 802.1Q VLANs VLAN 2 VLAN 3 Protective IEDs Data Collection IGMP Controls point to multi-point communication Layer 3 protocol Works with TCP/IP (specifically IP)

8 Contents IEC Environmental Conditions Communication Requirements Communication Protocols Security Summary Generic Substation Events Generic Substation Events (GSE) Control model defined in IEC Provides a fast and reliable mechanism of transferring event data over the complete substation networks Multicast GSE subdivided into GOOSE (Generic Object Oriented Substation Events) GSSE (Generic Substation State Events). SV (Sampled Values)

9 The Naming Confusion UCA 2.0 IEC GOOSE GOOSE GSSE Generic Object Oriented Substation Events (GOOSE) Both status and analogue data can be transmitted End to end transmission time is 4 milliseconds To speed up transmission: GOOSE data is directly embedded into Ethernet data packets GOOSE uses VLANs and priority tagging

10 Generic Substation State Events (GSSE) Extension of event transfer mechanism in UCA2.0. Only Status data can be exchanged through GSSE GSSE message is transmitted over MMS OSI-based stack (base stack without using TCP/IP) MMS necessitates more time for transmission & processing in comparison with GOOSE messages. Comparison GOOSE and GSSE Application Presentation GOOSE Generic Object Oriented Substation Event ASN.1, BER (Basic Encoding Rules) GSSE Generic Substation Status Event MMS ISO 9506 ASN.1, BER (Basic Encoding Rules) Session Connectionless session ISO/IEC 9548 Transport GSSE T-Profile ISO/IEC 8602 Network ISO/IEC 9542 Data Priority Tagging/VLAN (IEEE 802.1Q) ISO/IEC LLC Physical Ethernet v2 ISO/IEC

11 Why Multicast? Publisher / Subscriber model Unconfirmed service Same principle as other industrial protocols Multicast Address Ranges Service Starting Address Ending Address GOOSE 01-0C-CD C-CD FF GSSE 01-0C-CD C-CD FF SV 01-0C-CD C-CD FF IGMP GOOSE, GSSE, and SV do not use a TCP/IP stack. So where does IGMP fit in? EACH IED acts as an IGMP Consumer The network uses IGMP Snooping

12 Streaming Transmission GOOSE must replace serial cables Requirements A new device must be able to quickly find the status of other devices A new device must be able to update Subscribers immediately If a Subscriber stops receiving messages, it knows that the Publisher has failed Consequence GOOSE continuously streams data Adaptive Transmission Time Status t sent New status t sent Status t sent 1m <1m 4ms 16ms 100ms 1s 1m Event occurs

13 Time Synchronisation Essential to any event analysis system IEC uses SNTP Subset of NTP Reference time is UTC IEC Now and the Future Now IEC confined to individual substations Near Future IEC in other power generation sectors (wind, hydro-electric, etc.) Future IEC from substation to control centres IEC as a backbone standard for managing the power system

14 Contents IEC Environmental Conditions Communication Requirements Communication Protocols Security Summary Northeast Blackout of 2003 One Day Before

15 Northeast Blackout of 2003 During Enforceable Regulations USA Electricity Modernization Act of 2005 NERC CIP North American Electric Reliability Corporation Critical Infrastructure Protection Increased reliability, and protection from terrorism Regular audit of power companies by NERC Fines of up to $1 million per day for non-compliance European Union Nothing...yet But..

16 CIP002 to CIP-009 Standard CIP CIP CIP CIP CIP CIP CIP CIP Topic Critical Cyber Assets Security Management Controls Personnel and Training Electronic Security Physical Security Systems Security Management Incident Reporting and Response Planning Recovery Plans Two High-Level Requirements for CIP Create an electronic security perimeter that prevents unauthorised users from accessing any Critical Cyber Asset, whether they are outside or inside the corporate network. Ensure that all electronic Cyber Assets are secured via user account management, equipment, password management, and secure networking policies.

17 Contents IEC Environmental Conditions Communication Requirements Communication Protocols Security Summary Summary Substation Requirements Physical IEC or IEEE 1613 Long MTBF / No cooling fans / Extended temperature range Fibre cabling Non-blocking Gigabit Bay Level backbone Functionality Prioritisation VLANs IGMP Snooping Security Password management Access control Management Notification and logging of events

18 Contents IEC Environmental Conditions Communication Requirements Communication Protocols Security Summary Comments or Questions?