RED ELÉCTRICA DE ESPAÑA

Management System forRemote Substation

Secondary EquipmentKEMA SEMINAR June 17, 2003 Amsterdam

2SIGRES

AGENDAWho is Red EléctricaCurrent situationNew Project

ObjectivesCharacteristics

Control Centre configuration SIGRES-CCSecuritySubstation equipment SIGRES-NTProject milestonesConclusions

SIGRES

3SIGRES

Who is Red Electrica ?Leading Power Transmission Company in SpainResponsible for the management of the whole SpanishTransmission GridSpanish System OperatorOwns most of the Spanish Transmission Grid:

27.000 Km of 400 kV, 220 kV and 132 kV Transmission Network1746 Positions in more than 500 HV Substations26.966 MVA Transformation

Operates the Ancillary Services MarketNon regulated activities:

Consulting Services and Foreign Investment REITelecommunication Services ALBURA

4SIGRES

Current Remote Maintenance SystemArchitecture ALEF

PABX

DIAL-UPMODEM

ISDN

M M M M

IED IED IED IED

PABX

DIAL-UPMODEM

DIAL-UPMODEM

ALEFALEF

5SIGRES

Project ObjectivesImplement an Integrated Environment for SubstationSecondary Equipment Management and Maintenance usingand extending the IEC 61850

First step:Protection relaysLocal Control SystemsBattery Chargers

Further steps:Any device with communication capabilitiesGracefully integration of “native” IEC 61850 IEDs

Integrate the requirements of the New Substation of REENSR, based on the same technologies

The IEC 61850 standardIP protocol with Ethernet LAN access interfaces

6SIGRES

Project CharacteristicsStandardised Services for maintenance and management ofsubstation equipment:

Data and Operation consistency checkUser’s contention when accessing system resourcesActive and passive security controlOperation traceability

What has been done?Who did it?

User-friendly working environmentOpen and secure working environment

Ubiquity ServicesUse mainstream technologies:

Java, Web Services, XML/SVG Graphics

7SIGRES

System Architecture

REE Corporate LAN

IP WAN(Serv IP)

UserUser

SIGRES-CC

Substations

SIGRES-NT

RTB/ADSL/ISDN

RemoteUser

900 xxx xxx/ VPNInternet

REE HeadquartersMadrid

8SIGRES

Web Services https/HTML/XML

IEC 61850

SIGRES Working Environment

SIGRES CC-Control CentreSIGRES CC-Control Centre

EMS/SCADA APPLICATIONS

ALEF IED IED IED

Legacy Protocols

SIGRES NT-Terminal Node

USERS

IED 61850

9SIGRES

SIGRES-CC CharacteristicsFault-tolerant systemNative management of 61850 IEDsThree-layer ArchitectureOracle Data BaseCommunication with existing Management Centre (ALEF)

Integration of existing data in SIGRES-CC data baseStandardised information model for data interchange (XML)Web Services “interface” with Applications ( SCADA/EMS..)Web Browser based MMI InterfaceSpecific Graphic Interfaces

Fault-recorders and PMUsSubstation Configuration Tool based on IEC 61850 (Draft) SCLIntrinsic security based on international standards

10SIGRES

Design & Project PrinciplesScalability and ModularityHardware independence (Platform migration)IEC 61850 architecture adoptionBased on existing or ongoing standards

No proprietary solutions whether HW or SWREE Ownership of the Design and CodeProcedures to install the whole System from scratchREE has to be able to carry out the System Maintenanceafter Commissioning

11SIGRES

ServicesSubstation Remote supervision using RTUs or SACRTUs and SAC Data Base DownloadSystem ManagementHistorian and data logs

User’s reports:Protection relay configuration and settingsTrips and commandsChronological registerOperator’s commands and system utilization time

Process AutomationIndividual or Block Relay setting Configuration

SecuritySubstation equipment configuration

12SIGRES

IEC-61850. A New Set of PossibilitiesIEC 61850 defines three basic aspects:

Communication protocolsIP and MMS

Substation devices modellingServices

IEC 61850 a unique working environmentServices and object models are harmonisedServices and object models are unique whether inside thesubstation or from the substation to the control centreObject models and services are independent fromcommunication protocols

13SIGRES

SIGRES map to IEC 61850 Architecture

L0

L1

L2

L3

BAY

PROT.PROT. CONTROLCONTROL

CCSCCSAUXILIARYFUNCTIONS

AUXILIARYFUNCTIONS

Technical Services

BAY

PROT.PROT. CONTROLCONTROL

1,6 1,6

7

8

Bay/Unit Level

Station Level

Process Level

SIG

RES

BAY

PROT.PROT. CONTROLCONTROL

14SIGRES

SIGRES map to IEC 61850 Model (I)

Model 61850 Sample

15SIGRES

SIGRES map to IEC 61850 Model (II)

LINK with SIGRES-CC Sample

16SIGRES

IEC 61850 Logic architecture

LN1

LN2

LN5

LN4

LN3

LN6

LN7

PC23

PC13

PC12

LC12

FUNCTION 1

FUNCTION 2

PD1

PD2

PD3

17SIGRES

IEC 61850. A New Paradigm

CIM

CONTROLCENTRE

LOCAL CONTROL(SCI)

IEDPRIMARY

EQUIPMENT

LN (OBJ)

SERVICES

MAPPING

COMMUNIC.

IEC 61850

Mapping

EthernetIP+ MMSIP+MMS (OTHERS)

18SIGRES

Logical Node StructureLOGICAL NODE

Common informationIndependent from

the function of the LN

Status, process orfunction

information

SettingsInformation neededto configure the LN

Measured Values

Controls

19SIGRES

61850 Management and Maintenance FunctionsFULLY INTEGRATED

Management and maintenance services are built into the objectmodelsImplemented using the services built into protection and controlfunctions

Management and maintenance functions cannot be isolatedfrom 61850 services.

SIGRES has to be integrated in a 61850 environment

20SIGRES

Migration from Legacy to 61850

SIGRES-NTSIGRES-NTIEDIED

SIGRES-CCSIGRES-CC IPWAN

IEDIED

LEGACY PROTOCOLS

61850MODELS

&SERVICES

Management of61850 Devices

21SIGRES

SIGRES. A Step ForwardIEC 61850 services become integrated in an open executionenvironmentSIGRES evolves 61850 services

61850 services will be available outside the substation61850 services can be used from a Web environment

Global view of the systemDirect control of IEDs without loosing the global view

SIGRES complements 61850 servicesStandardised user’s interfaceDistributed servicesAuxiliary services configured from 61850 services

22SIGRES

SIGRES. A Distributed Application EnvironmentUsers can be distributed

An IP network provides connectivityApplications can be distributed

An IP network provides communication between applicationsThe internal process can be distributed

A network provides connectivity between objectsEVERYTHING CAN BE DISTRIBUTED

A Middleware architecture provides an access environment to theservices

23SIGRES

Web ServicesA Web service is a software application identified by a URI,whose interfaces and bindings are capable of being defined,described, and discovered as XML artifacts. A Web servicesupports direct interactions with other software agents usingXML based messages exchanged via internet-based protocols.Based on Agents

Service requestorService providerDiscovery agency

Service publishing

Service finding

24SIGRES

25SIGRES

Protocol Architecture

UML

WSDL

XML

DESCRIPTION

SOAP

HTTP

TCP/IP

TRANSPORT

UDDI

LDAP

26SIGRES

Three-Layered Architecture

Application Server

Web Server

Client 1

Data

Client n

ALEF

Internal Data

Integrated systems

Server LayerClient Layer

SIGRES-NT

IED

IED 61850

IED

Data layer

27SIGRES

User’s Interface

28SIGRES

29SIGRES

Hardware Architecture (I)Fault-tolerant environment designed to support the Three-Layered architectureData base Server

Redundant clusterApplication Server

Redundant clusterPrinter ServerDevelopment platform

Small size version of DB and application serversSystem management terminalsSecurity

Redundant FirewallsRedundant RADIUS servers for remote access control

30SIGRES

Hardware Architecture (II)

app2-sgapp1-sg

Red Datos SIGRES

Red Servicios

adm2-sg

bdo1-sg bdo2-sg

ServidorBase deDatos

ServidorBase deDatos

Servidor deAplicaciones+ Servidor

Web

PuestoAdmin

ServIP

Servidor deAplicaciones+ Servidor

Web

Red DMZ SIGRES

gps1

GPS& ntp

dev2-sg

Desarrollo

dev1-sg

Desarrollo

ClusterBase Datos

Cluster Servidorde Aplicaciones

dnsi2

NIS /DNS

Red fw12

fw2fw2b

fw2fw2a

Desarrollo SIGRES

dnsi1

NIS /DNS

Servidor de Nombres

ldap2

LDAP

ldap1

LDAP

Servidor LDAP

SIGRESProducción yDesarrollo

rad1

RadiusRadiusrad2

Radius

(Común a otros sistemas)

adm1-sg

PuestoAdmin

simp1

Servidor deimpresión

Red de acceso a Equipos de Subestación

iec1-sg

GestorIEC61850

iec2-sg

GestorIEC61850

ppp1-sg

ServidorPPP

ppp2-sg

ServidorPPP

bdd1-sgServidor

Desarrollo /Pruebas

iecp2-sg

GestorIEC61850pruebas

RTC

Subestación 1

Equipo61850

Sigres-NT

Protección

Subestación M

Equipo61850

Sigres-NT

Protección

31SIGRES

Security ArchitectureSecure Zone. Access through a Firewall

No access allowed for usersData base ServerManagement sitesPrinter Server

DMZ. Access through a FirewallAccess to enabled users

Application ServerDevelopment platformRemote users authentication server

32SIGRES

SECURITYKey Issues in a Secure System

Authentication Who is the user?Authorization What can the user do?Auditing What has the user done?

33SIGRES

SIGRES Security PerformancePrevention form internal or external attacksStandardised public key architecture (PKI)

ITU-T X.509 rec.Every data interchange is carry out in secure mode

Authentication and CipheringSecurity is applied to every kind of access

Corporate LANServIP (Corporate IP WAN)Remote access through public network using a dedicatedRADIUS server

Wide variety of user profile configurationsSecurity auditing

34SIGRES

SUBSTATION EQUIPMENT SIGRES-NTInterfaces legacy substation equipment with the new 61850environmentSupports the services offered by SIGRES-CCAutomatic configuration from SIGRES-CC

Application SoftwareObject models

Rugged design able to work in hazardous environment like baycontrol cabinets

Equipped to fulfil bay requirements1 Ethernet port6 serial ports

Helps in the integration of legacy devices into the newsubstation architecture

35SIGRES

Specific CharacteristicsRemote supervision and BD download functions supportedAuto-checkingEvent time-stamping with 1 mseg resolution

GPS SynchronizationBuilt-in IEC 61850 Server

Communication with SIGRES-CC using 61850Conversion of legacy IEDs to 61850 objects

Supports all the maintenance and management protocolsused by REEChronological registers acquisitionOpen Software. Hardware platform independent

IEC 61850 KEMA certification required

36SIGRES

Substation Communication Architecture

IPWAN Router

SIGRES-NT

F.O. IED 61850

HUB

SUBSTATION

IED 61850

IED 61850

IED

IED

IED

IED

SIGRES-NTIED 61850

HUB

IED

Switch

37SIGRES

PROJECT MILESTONESThe selected supplier is a Spanish company named ELIOPwith international projection and experience in SubstationAutomation and Control Centres development , and alsostrongly committed to the IEC 61850.

MS 1. Functional specification November 2002MS 2. System Supplier Selection May 2002MS 2. Project Start June 2003MS 3. Project Development & FAT December 2003 MS 3. Project SAT February 2004MS 4. System Deployment. 2004/2006

38SIGRES

CONCLUSIONSPowerful complement of the new substation architecture NSRSingle working environment for all the servicesStandard working platform

UnifiedFlexibleSecureUbiquityIntegrated in the new standard IEC 61850

Operational cost reductionLower number of equipment requiredWiring simplifiedMaintenance simplified

39SIGRES

Questions ?