Challenges - Infoteam · Benefits of Infoteam solution : Robust, solid, handling of big data...
2
Project of remote gateway “Fernwirkgateway” Provisioning of more than 60 high availability XPG protocol gateways. Data engineering and training. 2015-2018 Sector : Power Transmission System Customer need : Reliable interconnection to a new control system (SCADA) Benefits of Infoteam solution : Robust, solid, handling of big data volume, qualified by Swissgrid. Cost reduction thanks to high-level and comprehensive data engineering tools. Challenges Connection of more than 30 substations with control technology from different manufacturers, variable age and with a diversity of data models and interfaces to the new standardized control system of Swissgrid. This project implies a very high IT-Security standard. It is why one of the first phase of this project was to qualify the XPG gateways with respect to Swissgrid security requirements. For this process a high flexibility of the system was necessary. Support within 8 hours during office hours is required. Infoteam solution Procedure for security Use of secure protocols (see on next page) for gateway monitoring Remote security updates of the gateway via a secure and reliable process Consistent firmware version on each substation Deactivation of non-used interfaces (USB/LAN) Specific user training Storage encryption and UEFI secure boot HOT-HOT Redundancy of the Control System and Substation Continuous supervision of partner gateway, over different networks Hot-Hot mode enabled on both gateways. That means, no matter if the gateway is Standby or Up, the protocol is active Each gateway has an active connection with the substation RTU The commands can be send over both gateways
Transcript of Challenges - Infoteam · Benefits of Infoteam solution : Robust, solid, handling of big data...
Project of remote gateway “Fernwirkgateway”
Provisioning of more than 60 high availability XPG protocol gateways. Data engineering and training.
2015-2018
Sector : Power Transmission System
Customer need : Reliable interconnection to a new control system (SCADA)
Benefits of Infoteam solution : Robust, solid, handling of big data volume, qualified by Swissgrid. Cost reduction thanks to high-level and comprehensive data engineering tools.
Challenges
Connection of more than 30 substations with control technology from different manufacturers, variable age and with a diversity of data models and interfaces to the new standardized control system of Swissgrid.
This project implies a very high IT-Security standard. It is why one of the first phase of this project was to qualify the XPG gateways with respect to Swissgrid security requirements. For this process a high flexibility of the system was necessary. Support within 8 hours during office hours is required.
Infoteam solution
Procedure for security � Use of secure protocols (see on next page) for gateway monitoring
� Remote security updates of the gateway via a secure and reliable process
� Consistent firmware version on each substation
� Deactivation of non-used interfaces (USB/LAN)
� Specific user training
� Storage encryption and UEFI secure boot
HOT-HOT Redundancy of the Control System and Substation � Continuous supervision of partner gateway, over different networks
� Hot-Hot mode enabled on both gateways. That means, no matter if the gateway is Standby or Up, the protocol is active
� Each gateway has an active connection with the substation RTU
� The commands can be send over both gateways
Standards
Communication � IEC 60870-5-104
� IEC 60870-5-101
� IEC 61850
� TG 800
Management � SNMP V3 (Client & Agent)
� NTP
� Syslog Client
� LDAP-S Client
� SSH
Schematic Hardware and software
The gateways XPG used in each substation are composed with:
� Robust 19” dedicated IEC-61850 hardware with redundant power supply
� Secured OS Linux ISOS (Infoteam Secure Operating System)
� StreamBridge applicative module for
protocole conversion
StreamTools
The engineering tool, has been deployed on customer premises in compliance with strict security policy, comprising secured access for users. StreamTools includes mechanisms of uniqueness, versioning, locking and rights management to handle simultaneous user access.
StreamConsole
The management console is the real companion of the commissioning engineer. Providing an efficient way to execute configuration, tests and maintenance tasks. It can be securely executed from remote and therefore has been approved for the highly secured Swissgrid environment
The Tools StreamTools and StreamConsole are provided in a high secured zone in the Swissgrid environment. To reach this Tools multiple secure zones had to be passed. The gateways management are allowed only from the Swissgrid secure management network.
Infoteam Energy Solutions
Route André Piller 19
CH-1762 Givisiez | Switzerland
energy.infoteam.ch [email protected]
+41 58 411 50 00
Info
team
© 2
018
- V
1.6
Central Control Systems
Centralized Configuration Tool
Centralized Management Tool
Gateways Gateways Gateways
StreamTools
StreamConsole
XPG XPG XPG XPG XPG XPG
