Дисертації з теми "Protokol IEC 61850"

This thesis report, focuses on the automation process of Electrical Substations, with the main objective of integration into SCADA systems for electrical equipment responsible for the operation within substations, these devices have different communication protocols, after concentration information substation SCADA system, the next step to realize is sending data to the regulatory body that is in a remote location away from the substation, this is achieved using communication protocols designed for this function. All this process requires an optimization for the response times to any event that may happen in the substations and with this an optimization in operation of generation, distribution and transformation of electrical energy

Les systèmes de contrôle et d'automatisation industriels (IACS - Industrial Control and Automation Systems) reposent largement et de plus en plus sur les Technologies de l'Information et de la Communication. A l'origine, les IACS utilisaient des protocoles propriétaires sur des réseaux fermés, assurant ainsi une sécurité par obscurité et isolement. Mais les technologies et les usages ont évolué et cette sécurité intrinsèque n'existe plus désormais. Cette évolution concerne entre autre le domaine électrique : le réseau électrique devenant le "smart grid".Le standard IEC 61850 est un pilier pour le développement du smart grid. Il a pour objectif de rendre possible l'interopérabilité dans les "Systèmes et réseaux de communication pour l'automatisation des services de distribution d'énergie". Pour cela, la norme définit un modèle de données commun ainsi qu'une pile de protocoles répondant à divers besoins de communication.Le standard IEC 61850 n'aborde pas la question de la cyber sécurité malgré une prise de conscience générale qu'un risque cyber pèse sur les IACS.Ces travaux de recherche proposent de répondre à cette question de la cyber sécurité par de la détection d'intrusion dans les réseaux IEC 61850, et plus précisément dans les communications temps-réel GOOSE. L'idée est d'exploiter au maximum les sources d'informations que sont les spécifications du protocole et la configuration du système pour développer un système de détection d'intrusion réseau (NIDS - Network Intrusion Detection System) sur mesure. Cette approche comportementale déterministe est un gage de précision de détection.Ce manuscrit compte quatre chapitres. Les deux premiers consistent en un état de l'art détaillé sur les NIDS pour les IACS d'une part, et l'analyse du risque cyber d'autre part. Les deux autres chapitres présentent les contributions proprement dites de ces travaux de thèse. Le chapitre 3 explore tout d'abord le risque cyber pesant sur un poste électrique et pouvant compromettre la sûreté de fonctionnement du système. Dans un deuxième temps, est proposée une extension du modèle de données IEC 61850 dédiées à la détection d'intrusion dans les communication GOOSE. Le chapitre 4 commence avec la démonstration expérimentale de la faisabilité d'une attaque de type injection de données sur le protocole GOOSE, puis explique comment utiliser les fichiers de configuration du système pour spécifier les règles de détection. Un analyseur syntaxique pour le protocole GOOSE a été intégré à l'analyseur de trafic open source Bro, permettant l'implémentation d'un algorithme de détection<br>Information and Communication Technologies have been pervading Industrial Automation and Control Systems (IACS) for a few decades now. Initially, IACS ran proprietary protocols on closed networks, thus ensuring some level of security through obscurity and isolation. Technologies and usages have evolved and today this intrinsic security does not exist any longer, though. This transition is in progress in the electricity domain, the power infrastructure turning into the "smart grid".The IEC 61850 standard is key to the smart grid development. It is aimed at making interoperability possible in ``Communication networks and systems for power utility automation''. It thus defines a common data object model and a stack of protocols answering different purposes.Although the cyber risk in IACS is now widely acknowledged, IEC 61850 does not address cyber security in any way whatsoever.This work tackles the question of cyber security through network intrusion detection in IEC 61850 networks, and more specifically in real-time GOOSE communications. The idea is to get the most out of the protocol specifications and system configuration while developing a tailored NIDS. This enables detection accuracy

O protocolo International Electrotechnical Commission (IEC)-61850 tornou possível integrar os equipamentos das subestações de energia elétrica, através de uma rede de comunicação de dados Ethernet de alta velocidade. A utilização deste protocolo tem como objetivo principal a interligação dos Intelligent Electronic Devices (IEDs) para a automatização dos processos no sistema elétrico. As contribuições deste protocolo para a integração do controle e supervisão do sistema elétrico são diversas, porém, o fato de utilizar uma rede de comunicação de dados Ethernet integrada expõe o sistema elétrico à ataques cibernéticos. A norma IEC-62351 estabelece uma série de recomendações para prover segurança à rede de comunicação do sistema elétrico, dentre elas, o gerenciamento da rede de comunicação, a análise dos campos da mensagem Generic Object Oriented Substation Event (GOOSE) e a utilização de sistemas de detecção de intrusão. O presente trabalho descreve o desenvolvimento de um Intrusion Detection System (IDS) que atende os requisitos de segurança propostos pelo protocolo IEC-62351, para a identificação de ataques à comunicação realizada por mensagens GOOSE do protocolo IEC-61850, e entre equipamentos do sistema elétrico. Para o desenvolvimento desta aplicação, foram identificados os campos que compõem as mensagens GOOSE, de forma a reconhecer os valores esperados em diferentes situações de operação do sistema elétrico. Determinaram-se padrões de comportamento a serem utilizados para discernir mensagens falsas na rede de comunicação. Instalou-se e configurou-se um sistema operacional de tempo real embarcado na plataforma de desenvolvimento Zynq Board (ZYBO), juntamente com o controlador Open-Mul, para gerenciar a rede de comunicação da subestação, através do protocolo OpenFlow, realizando otimizações para o tráfego multicast. Foi desenvolvido um sistema de detecção e bloqueio de mensagens GOOSE falsas que utiliza o protocolo OpenFlow para controle da rede de comunicação do Sistema Elétrico. Desenvolveu-se ainda um sistema inteligente, utilizando-se uma Rede Neural Artificial (RNA) Nonlinear Autoregressive Model with Exogenous Input (NARX), para predição do tráfego realizado por mensagens GOOSE e detecção de ataques Distributed Deny of Service (DDOS). Os resultados obtidos demonstraram que o protocolo OpenFlow pode ser uma ferramenta interessante para controle da rede, porém, os fabricantes necessitam amadurecer sua implementação nos switches, para que sejam utilizados em produção nas redes de comunicação das subestações. O sistema de predição do tráfego gerado por mensagens GOOSE apresentou benefícios interessantes para a segurança da rede de comunicação, demonstrando potencial para compor um sistema de detecção de ataques DDOS realizado por mensagens GOOSE, na rede de comunicação das subestações de energia elétrica.<br>The IEC-61850 made it possible to integrate equipments of electric power system substations to a high-speed Ethernet data communication network. Its main goal is the interconnection of IEDs for the automation of processes in an electrical system. The contributions of this protocol for the integration of the control and supervision of the electrical system are diverse, although an Ethernet network exposes the electrical system for cyber attacks. The IEC-62351 states a series of recommendations to provide security to the communication network of the electrical system, such as the communication network management, the analysis of GOOSE messages and the use of intrusion detection systems. This study describes the development of an IDS that meets the security requirements proposed by the IEC-62351 standard to identify attacks on communication between GOOSE messages exchanged by electrical equipment using IEC-61850. For the development of this application, fields of the GOOSE messages were identified, in order to recognize the expected values in different power system operating conditions. Behaviour patterns were determined to detect false messages on the communication network. A real-time embedded operating system on ZYBO was installed and configured, as well as the OpenMul controller to manage the communication network of the substation through the OpenFlow protocol, performing optimizations for multicast traffic. A detection system and block tamper GOOSE messages, using the OpenFlow protocol for control of the electrical system communication network, were developed. In addition, an intelligent system using an Artificial Neural Network (ANN) Nonlinear Autoregressive Model with Exogenous Input (NARX) for predicting of the GOOSE messages traffic and the detection of Distributed Deny of Service attack (DDOS) were also developed. The results obtained show that the OpenFlow protocol may be a valuable tool for network control, however, manufacturers should maturely carry on with its implementation in the switches, so that it be used in substation communication networks. The traffic prediction system of the GOOSE messages presented interesting benefits for the security of the communication network, demonstrating potential to built a DDOS attack detection system performed by GOOSE messages on the communication network of electric power substations.

The introduction of smart grid technology has changed the way traditional power grid network function. It made the grid structure more dynamic by enhancing electrical usage management capability. Also, it has increased the scope to enhance communication infrastructure in a smart grid structure. The current smart grid solution is based on IEC 61850 architecture where the exchange of information between the electrical utilities is over the fast Ethernet LAN connection. This communication mechanism is fast, efficient but lacks scalability, flexibility and less susceptible to failure. Also, earlier technical paper from IEC 61850 standard was for communication within a substation. Wide Area Monitoring Protection and Control implementation which utilizes coherent real time synchrophasor information would play a vital role in realizing the utility physical status. IEC 61850-90-5, a new technical report from International Electrotechnical Commission provides the mechanism to transmit and receive the synchrophasor information using the advance IP protocol over a wireless communication infrastructure for WAMPAC application. IEC 61850-90-5 provide a way to exchange routable synchrophasor information over public IP network such as LTE, WiMax, WLAN, etc. Out of all the available wireless solution, LTE provides high flexibility, distance coverage, data rate with low latency and hence can play an important role in replacing the existing communication structure in a smart grid. The thesis work evaluates the performance and applicability of LTE for smart grid communication. An IEC 61850-90-5 communication model utilizing UDP/IP protocol to transmit and receive data over the LTE network was developed from the open source project. The modified model was used to benchmark the performance of LTE. Different communication metrics such as reliability, availability, latency, and throughput was evaluated to benchmark the performance of LTE for time critical smart grid application. The metrics were measured for different packet sizes and transmission rates combination. The result shares some interesting findings on the readiness of LTE for smart grid solution. It is concluded that cellular network can play an important role in realizing communication infrastructure in a smart grid application.

碩士<br>高苑科技大學<br>電機工程研究所<br>99<br>The purpose of the thesis is to establish the prototyping platform for IEC 61850 communication protocol-based substation automation system(SAS). In terms of Elipse Software’s E3, the prototyping platform can provide human machine interface(HMI) that monitors all intelligent electronic devices (IEDs) within bay levels via Ethernet network and it can also implement Generic Object Oriented Substation Event (GOOSE) interoperability tests between IEDs from the same vender or multi- vendors. (In this study, the IEC61850 compliant IEDs that are available from VAMP’s, SIEMENS’s and ABB’s digital protective relays.) The IEC 61850-based prototyping platform has been completed, it can really provide the IEC 61850-based Supervision Control and Data Acquisition (SCADA) and implement GOOSE interoperability tests of multi- vendors. The proposed platform will provide further applications and solutions for satisfying the requirements of enterprise’s and academic communities in the future.

碩士<br>中原大學<br>電機工程研究所<br>102<br>The purpose of this thesis is to establish of conformance test platform based on IEC 61850 communication protocol for intelligent electronic device (IED) among different manufacturers. Due to the IEC 61850 standard is not strictly regulated, although manufacturers all declare that their equipment meet the IEC 61850 standard but there still are some problems in the consistency. In this thesis we perform the conformance test network of Generic Object Oriented Substation Event (GOOSE) transmitting time for the IEDs within bay levels via Ethernet. GOOSE ping-pong method is also used for the test of different manufacturer’s IED whether its GOOSE input and output time meets the IEC 61850-10 standard or not. The IEC 61850-based conformance test pilot platform has been established. Based on this platform, a comprehensive IEC 61850 conformance test platform can be built to meet the industrial and academic requirements in the future.

碩士<br>國立臺灣科技大學<br>電機工程系<br>104<br>Development of smart grid requires substitution of traditional electromagnetic current transformers by electronic current transformers. However, output formats of electronic current transformers and traditional electromagnetic transformers are very different. Therefore, the selection and design of the interfaces of the station level, the process level and the bay level become a key issue. According to IEC 61850-9-2 standard, a digital communication interface for electronic current transformer is designed and implemented in this research. The main contents are the integration of processing and encoding signal modules in process level, as well as data records and packet analysis in station level. MSP-430 F47187 is used as the central processor of the process and bay level interface module. It is the bridge from high-speed data sampling system in the process level to measurement and control device in bay level. It collects data from coreless Hall current transformers, then processes and encodes the data after packing total frame based on the standard. Finally, these data are transmitted to bay level using optical fiber. The packet format is analyzed by Wireshark and the results are recorded by LabVIEW. In the course of the experiment, the induced current input of the cable is rated at rms 600A, measuring the range 100, 120, 20 and 5% of rms current, sample value waveform recovery, automatic measurement system test and packet format analysis. The final experimental results prove that there are no communication problems between MSP-430 and the module. All packets used in the experiment comform with the IEC 61850-9-2 specification format.

碩士<br>中原大學<br>電機工程研究所<br>102<br>We are facing the big change on the communication structure of electricity system along with the progress of communication thchnology. On top of the traditional relationship between electric power supplier and end users, which would be electricity generation, transmission, distribution and consumption, with smart grid, real time pricing and distributed energy resources being applied into electricity system, we will find that communication skill is the key factor. It will have great impact on electricity system with the advent of massive distributed energy resources. We need to make sure that the amount of the electricity generating and the demands from users are well being under control, and insure that it takes order from energy management system in time by the movements such as electricity dispatch, trip and malfunction isolation etc. According to the definition, standard and demand from IEC61850, this thesis try to simulate the communication between electricity dispatch center and distributed energy resources from different aspects, including communication topology, bandwidth demand and the installation of the control center, for insuring it’s following the standard, and insuring the operation and the reliability of electricity system.

A thesis which models the DNP3 and IEC 61850 protocol in OPNET<br>Supervisory Control and Data Acquisition (SCADA) is a critical part of monitoring and controlling of the electrical substation. The aim of this dissertation is to investigate the performance of the Distributed Network Protocol Version 3.3 (DNP3) protocol and to compare its performance to that of International Electro-technical Commission (IEC) 61850 protocol in an electrical substation communication network environment. Building an electrical substation control room and installing the network equipment was going to be expensive and take a lot of time. The better option was to build a model of the electrical substation communication network and run simulations. Riverbend modeller academic edition known as Optimized Network Engineering Tool (OPNET) was chosen as a software package to model substation communication network, DNP3 protocol and IEC 61850 Protocol stack. Modelling the IEC 61850 protocol stack on OPNET involved building the used Open System Interconnection (OSI) layers of the IEC 61850 protocol stack onto the application definitions of OPNET. The Transmission Control Protocol/Internet Protocol (TCP/IP) configuration settings of DNP3 protocol were also modelled on the OPNET application definitions. The aim is to compare the two protocols and determine which protocol is the best performing one in terms of throughput, data delay and latency. The substation communication model consists of 10 ethernet nodes which simulate protection Intelligent Electronic Devices (IEDs), 13 ethernet switches, a server which simulates the substation Remote Terminal Unit (RTU) and the DNP3 Protocol over TCP/IP simulated on the model. DNP3 is a protocol that can be used in a power utility computer network to provide communication service for the grid components. DNP3 protocol is currently used at Eskom as the communication protocol because it is widely used by equipment vendors in the energy sector. DNP3 protocol will be modelled before being compared to the new recent robust protocol IEC 61850 in the same model and determine which protocol is the best for Eskom on the network of the power grid. The network load and packet delay parameters were sampled when 10%, 50%, 90% and 100% of devices are online. The IEC 61850 protocol model has three scenarios and they are normal operation of a Substation, maintenance in a Substation and Buszone operation at a Substation. In these scenarios packet end to end delay of Generic Object Oriented Substation Event (GOOSE), vi © University of South Africa 2020 Generic Substation Status Event (GSSE), Sampled Values (SV) and Manufacturing Messaging Specification (MMS) messages are monitored. The throughput from the IED under maintenance and the throughput at the Substation RTU end is monitored in the model. Analysis of the results of the DNP3 protocol simulation showed that with an increase in number of nodes there was an increase in packet delay as well as the network load. The load on the network should be taken into consideration when designing a substation communication network that requires a quick response such as a smart gird. GOOSE, GSSE, SV results on the IEC 61850 model met all the requirements of the IEC 61850 standard and the MMS did not meet all the requirements of the IEC standard. The design of the substation communication network using IEC 61850 will assist when trying to predict the behavior of the network with regards to this specific protocol during maintenance and when there are faults in the communication network or IED’s. After the simulation of the DNP3 protocol and the IEC 61850 the throughput of DNP3 protocol was determined to be in the range (20 – 450) kbps and the throughput of IEC61850 protocol was determined to be in the range (1.6 – 16) Mbps.<br>College of Engineering, Science and Technology<br>M. Tech. (Electrical Engineering)