SIPROTEC 5 V7.8 Protection, automation and monitoring for digital substations siemens.com/siprotec5
SIPROTEC 5 Table of content Introduction New functions of V7.8 SIPROTEC 5 - the core of Digital Substation 4.0 and IoT Product portfolio Page 2
SIPROTEC Synonym for the world s leading protection technology More than 1.6 Mill. devices installed therein >500,000 with IEC 61850 First use of electromagnetic relays The digital age begins for protection relays Siemens is honored by Frost & Sullivan for the implementation of IEC 61850 More than one million SIPROTEC devices in operation SIPROTEC 5 integrated End-to-End Cyber Security SIPROTEC 5 IoT connectivity to MindSphere 1910 1977 1980 1998 2006 2008 2010 2011 2012 2015 2017 2018 First digital application in Wuerzburg, Germany SIPROTEC 4 multifunctional relay series SIPROTEC Compact compact and outstanding functionality SIPROTEC 5 benchmark for protection, automation and monitoring SIPROTEC 5 process bus and digital substation Cloud based applications for SIPROTEC Page 3
SIPROTEC 5 is the answer to trends and customers challenges + Individually configurable devices Cost-efficient solution over the entire life cycle + Trendsetting system architecture Flexibility and security for highly meshed systems + Multilayered security mechanisms Maximum possible security and availability + Consistent engineering for system and devices Efficient operation concepts, flexible engineering SIPROTEC 5 The benchmark for protection, automation and monitoring in changing environments Page 4
SIPROTEC 5 Table of content Introduction New functions of V7.8 SIPROTEC 5 - the core of Digital Substation 4.0 and IoT Product portfolio Page 5
Highlights V7.8 Cyber Security: Role-based Access Control (RBAC) with central user management Usability: SIPROTEC 5 Web Browser New Device: Paralleling Device SIPROTEC 7VE85
New Features for SIPROTEC 5 Release 7.80 Cyber Security Role-based Access Control (RBAC) with central user management Assign write/read permissions at IP-port level Communication DNP TCP dual master on the same Ethernet module Download of Operational log and fault log as files according IEEE C37.239 COMFEDE via a Web- Browser New Hardware Paralleling device SIPROTEC 7VE85 Binary input board IO233 with a specific binary input type, 48 binary inputs, only one specific binary input threshold of DC 105 V Web Browser Web browser for easy access to process & device information DIGSI 5 User definable Application Templates Display editor: new symbols SCD file stored as backup in DIGSI 5 project for recovery of IEC 61850 project Support of SITIPE engineering workflows CFC-Blocks to process ENC (Enumerated Controllables) Page 7
New Features for SIPROTEC 5 Release 7.80 Paralleling Device 7VE85 Dual channel design: Two different algorithms Redundant hardware (necessary components are duplicated) Multiple supervision functions ----------------- Balancing commands Up to 8 breakers with 1 device without external switches Closing supervision: Fast trip in case of high current Supporting protection functions Transformer Protection 7UT8 Power swing blocking (impedance protection) Machine Protection 7UM8 SIL 2 reverse power protection Thermal protection for gas turbines (cold gas influence) Power swing blocking (impedance protection) Page 8
New Features for SIPROTEC 5 Release 7.80 Feeder Protection Current transformer connection type for applications resonant-grounded or isolated networks with 2 phasecurrent transformers Additionals Frequency tracking groups Test report acc. IEC 60255-127 for voltage protection Busbar Protection 7SS85 Global or selective blocking Overcurrent release of busbar protection trip Blocking of busbar protection trip Maximum number of bus zones for significant property C, D and E increased to 6 Fault Recording and SIGRA Support of COMTRADE 2013 Station name in COMTRADE files Visualization of harmonics via heat map SIGRA supports DIGSI 5 float license Fault Recorder 7KE85 Harmonic measurement according IEC 61000-4-7 Total Harmonic Distortion (THD) measurement according IEC 61000-4-7 Total Demand Distortion (TDD) measurement Page 9
SIPROTEC 5 Integrated Cyber Security Overview Mutually authenticated and encrypted communication line between DIGSI 5 and the SIPROTEC 5 device Device-side support for role-based access control including central user management and emergency access Recording of security-relevant events and alarms over Syslog and in non-volatile security log in device Confirmation codes for safety-critical operations SIPROTEC 5 Secure development Patch management Antivirus compatibility Product hardening Independent testing Crypto-chip for secure information storage and transmission Device uses key stored in crypto-chip to allow only firmware signed by Siemens to load Bay level Separation of process- and management communication Page 10 Secured access for HMI interactions and web-based device monitoring
SIPROTEC 5 Integrated Cyber Security Role-based Access Control (RBAC) with central user management DIGSI 5 All user logon attempts are logged as security events inside the device and via the Syslog protocol Page 11 5 1 2 4 3 RADIUS (NPS) Roles Users User 1 User 2 Role Engineer Admin 1 User requests access to IED with username and password 2 Authentication request with username, password via RADIUS 3 Authentication & Authorization (Role) response from RADIUS 4 Success/Fail Response from device to user 5 Role-based user session initiated/denied Active Directory Access Control Operation A Operation B Operation C Operation Roles Mapping Role 1 x x Role 2 x x Use (your existing) centrally managed user accounts and passwords for secured SIPROTEC 5 access Works with existing RADIUS servers e.g. Microsoft Active Directory Network Policy Server (NPS) Roles and rights adhere to standards and guidelines e.g. IEC 62443, IEC 62351, IEEE 1686, BDEW Whitepaper Access control even when RADIUS server connectivity is disrupted Feature supported for all forms of interaction: DIGSI 5, Web browser and on-site operation panel Audit trail of security-relevant user actions
SIPROTEC 5 Integrated Cyber Security Central logging of security-relevant events Digitally signed firmware Device-firmware is protected against manipulation Only firmware digitally signed by Siemens can be loaded and processed This is ensured via an integrated crypto-chip with secured key storage and signature technology Page 12
SIPROTEC 5 Web Browser Easy, fast and secure access to device data Page 13 Monitoring of: Measurements Logs Settings Device information Download of: Logs as CSV or COMFEDE file (log dependent) Secure: https connection Access defined per port Controlled by RBAC
SIPROTEC 5 Paralleling device SIPROTEC 7VE85 1 1 / 2 and 2 channel synchronization Up to 8 breakers with 1 device without external switches Generator balancing commands Closing supervision Supporting protection function Synchronization and protection in one device SIPROTEC 7VE85 device functions Modular hardware support various application and reduces external wiring Synchronous- and Asynchronous switching Automatic and fast synchronization of generator due to the new stabilizer method Current, voltage and frequency protection functions instantiated via DIGSI 5 library Paralleling device 7VE85 suitabel for protection and grid coupling applications Page 14
SIPROTEC 5 Paralleling device SIPROTEC 7VE85 Modular hardware support various unit sizes suggested HW variants Small and medium units Basis hardware (e.g. 4 I and 4 V) SIPROTEC 7VE85 Larger units Standard hardware (e.g. 8 I and 8 V) SIPROTEC 7VE85 * Hardware expandable Page 15
Frequency tracking groups Increased measuring accuracy by individual sampling frequencies Ensuring a maximum degree of flexibility and measuring accuracy - in substations with galvanic network separations and different frequencies Measuring points can be assigned to different frequency tracking groups. Each frequency tracking group determines its individual sampling frequency. Page 16
Frequency tracking groups Application example for use of frequency tracking groups Page 17
DIGSI 5 User defined application templates Time saving and higher engineering quality Re-Use of your typical configurations in devices which are not hardware identical DIGSI 5 checks consistency: significant feature number of IOs communication modules protocols function points Page 18
DIGSI 5 Display Editor Faster engineering New symbols: Three-way switch Withdrawable circuit breaker Load break switch Transformer tap Capacitor Disconnector Three way switch formed by 4 individual symbols Page 19
IEC 61850 GOOSE Supervision Less engineering effort and higher system monitoring GOOSE or Created automatically during GOOSE subscription in new and older projects Replaces manually configured GOOSE alarms in CFC Native IEC 61850 Ed2 support via Logical Node LGOS For individual GOOSE subscription supervision, as well as sum alarm for all GOOSE subscriptions within one IED A new dedicated communication log in device Page 20
IEC 61850 Support of GOOSE Simulation Online Testing with simulated GOOSE telegrams makes testing easier and focused Makes testing easier and focused on a minimum number of involved IEDs GOOSE isolation to distinguish between real and simulated GOOSE telegrams The real GOOSE publisher device remains in normal operation mode Selected GOOSE telegrams can be simulated, others used from the real IED Support of IEC 61850 Edition 2 Data Object LPHD.Sim Page 21 Source: IEC 61850 7-1 Fig. 40
IEC 61850 Flexible Engineering Enhancements to exactly meet customer SSD specifications From IEC 61850 interoperability to IED exchangeability with SIPROTEC 5 / DIGSI 5 Control Center HMI Further increase of flexibility to support exchangeability requirements IEC 61850 Station Bus Report Goose Report Unused IEC 61850 elements (LD, LN, DO, and even data attributes) are automatically hidden from device data model via SSD import IEDs Automatic reporting of differences between existing SSD file and SIPROTEC 5 data model during import Optional data objects can be moved between logical nodes Field tested with several customers and 3 rd party gateways Page 22
Fault Recording and SIGRA Heatmap View Visualization of all recorded harmonic or interharmonic signals in one diagram Representation of up to 50 harmonics in one diagram instead of single tracks Colors from yellow to red indicate the proportion of each harmonic in a selected time frame Page 23
SIPROTEC 7KE85 50 harmonics of voltages and currents Meets the power quality standard IEC 61000-4-30 Harmonic (inter-harmonics and sub-harmonics) measurements according IEC 61000-4-7 Total Harmonic Distortion (THD) measurements according IEC 61000-4-7 Total Demand Distortion (TDD) measurements Page 24
SIPROTEC 5 Table of content Introduction New functions of V7.8 SIPROTEC 5 - the core of Digital Substation 4.0 and IoT Product portfolio Page 25
Evolution in Substation Automation SIPROTEC 5 - the core of Digital Substation 4.0 1 st generation Standard cabling 2 nd generation Point- to-point connections since 1985 3 rd generation Digital Station bus since 2004 Digital Substation 4.0 - Process bus and IoT Connectivity Mimic board Control Center Control Center IEC 61850 Control Center Apps and Data Analytics HMI HMI Substation controller Substation controller Substation controller HMI RTU Parallel wiring Bay Fault recorder Protection Other bays Serial connection Bay Switch Switch Bay Station bus IEC 61850 Station bus Process bus 3 rd Party IoT Interface CT VT Parallel wiring Parallel wiring Parallel wiring Parallel wiring Digital and analog Merging Unit Digital Merging Unit Page 26
SIPROTEC 5 Table of content Introduction New functions of V7.8 SIPROTEC 5 - the core of Digital Substation 4.0 and IoT Product portfolio Page 27
SIPROTEC 5 Devices and Fields of Application Overcurrent and feeder protection 7SJ8 7SS85 Busbar protection Distance protection 7SA8 7SK8 Motor protection Line differential protection 7SD8 7VK8 Breaker management Combined line differential & distance protection 7SL8 7UM85 Generator protection Transformer differential protection 7UT8 6MD8 Bay controller Paralleling device 7VE85 7KE85 Fault recorder Easy engineering and evaluation with DIGSI and SIGRA Page 28