Download Controler for MV/LV substation

Specification for Tender
Distribution_Substation_Unit_spec_EN_V3.docx
Specifications for the Distribution Substation
Control Unit
This specification includes:






Last update: 2016-01
General requirements
Functions
Communication
Power supply
Configuration and maintenance
General characteristics
-1-
Specification for Tender
1.
2.
3.
4.
5.
Distribution_Substation_Unit_spec_EN_V3.docx
General requirements ................................................................................................................................. 4
1.1
RTU arrangement. ............................................................................................................................... 4
1.2
Configuration and maintenance .......................................................................................................... 4
1.3
Extension............................................................................................................................................. 4
Functions.................................................................................................................................................... 4
2.1
Monitoring and control of medium voltage switchgears. ................................................................... 4
2.2
Fault current detection ........................................................................................................................ 5
2.3
Measurement ....................................................................................................................................... 5
2.4
Power quality ...................................................................................................................................... 6
2.5
Archives .............................................................................................................................................. 6
2.6
Automation.......................................................................................................................................... 6
2.7
Local MMI .......................................................................................................................................... 6
Communication.......................................................................................................................................... 7
3.1
Communication with SCADA ............................................................................................................ 7
3.2
Protocol ............................................................................................................................................... 7
3.3
Transmission ....................................................................................................................................... 7
3.4
Transmitted data .................................................................................................................................. 7
3.5
WiFi .................................................................................................................................................... 7
3.6
Communication LAN for other devices .............................................................................................. 7
Power supply ............................................................................................................................................. 7
4.1
Power supply input.............................................................................................................................. 8
4.2
Battery ................................................................................................................................................. 8
4.3
Monitoring .......................................................................................................................................... 8
Cyber Security ........................................................................................................................................... 8
5.1
Future proof design ............................................................................................................................. 8
Remote firmware update............................................................................................................................ 8
Centralised RBAC management ................................................................................................................ 8
5.2
Hardening ............................................................................................................................................ 8
Device hardening ....................................................................................................................................... 8
Interface minimization ............................................................................................................................... 9
Account hardening ..................................................................................................................................... 9
5.3
Communication ................................................................................................................................... 9
Compliance to security standards .............................................................................................................. 9
Communication security ............................................................................................................................ 9
5.4
Configuration ...................................................................................................................................... 9
5.5
Acces control....................................................................................................................................... 9
RBAC ........................................................................................................................................................ 9
Last update: 2016-01
-2-
Specification for Tender
Distribution_Substation_Unit_spec_EN_V3.docx
Management of Security passwords ........................................................................................................ 10
User Authentication ................................................................................................................................. 10
Central management of user account ....................................................................................................... 10
5.6
Security Log ...................................................................................................................................... 10
5.7
Security testing .................................................................................................................................. 10
5.8
Documentation .................................................................................................................................. 10
Secured Versioning .................................................................................................................................. 10
Design Documentation ............................................................................................................................ 10
6.
General characteristics ............................................................................................................................. 10
Last update: 2016-01
-3-
Specification for Tender
Distribution_Substation_Unit_spec_EN_V3.docx
1. General requirements
RTU is microprocessor-based electronic device that interface power equipment to a control system. It
includes all the functions required to monitor and control MV switchgears in the MV/LV and MV/MV
substations.
1.1
RTU arrangement.
RTU being installed in various types of substation it shall be built on a modular flexible architecture.
The RTU shall be organised with :
- a main communication unit that supports communication with the SCADA, communication with
devices located in the substations and communication with interfaces with the switchgears.
- One interface and treatment unit per Load break switch in the substation.
- A power supply which integrates a 12Vdc battery charger and provides 24Vdc 48Vdc for the
motorisation, 12Vdc for the electronic devices and 12Vdc for the transmission systems.
- The RTU shall be expandable by adding modules, the number of modules shall not be limited and
not based on a rack design.
- The RTU consumption shall be limited to 10W per substation
1.2
Configuration and maintenance
The RTU shall be configurable locally or/and remotely.
A configuration tool, based on PC, shall be provided for configuration of the RTU. This tool shall be
connected localy or remotely to download and upload the configuration into the DSUs.
A webserver shall be integrated into the RTU communication unit and shall provide facilities for
maintenance, settings including cybersecurity settings, and historical logs display. This Webserver shall be
accessible localy and remotely, by mean of a standard laptop PC. Locally the maintenance tool shall be
connected to the RTU by a WiFi or Ethernet communication port.
The firmware shall be updated either locally or from the central system.
1.3
Extension
Optionally the RTU shall be able to provide future extension such as additional I/O, monitoring and control
of LV feeders. Wireless links with these extensions shall be considered as preferable.
2. Functions
2.1
Monitoring and control of medium voltage switchgears.
Each medium voltage switchgear in the substation shall be monitored and controlled by an interface and
treatment unit. It shall be possible to extend the number of monitored and controlled switchgears by adding
one interface modules per switchgear.
The interface with the RMU shall provide at least :
- Switch position (Dual input)
- Earth switch position (single or dual input)
- Interlocking status (optional input)
- Voltage presence ( direct input or calculated by the RTU)
- 2 spare inputs
- Switch position control (Dual output)
In addition to these direct interfaces with the RMU, the number of operations shall be transmitted to the
Scada
Last update: 2016-01
-4-
Specification for Tender
Distribution_Substation_Unit_spec_EN_V3.docx
The interface shall control the switch motorisation through a dual output which provides the 24Vdc 48Vdc
voltage to the interface relay located into the switchgear.
The control operation shall be secured by a select before execute procedure. The 24Vdc 48Vdc power
supply to the motor shall be activated only during the execute phase.
2.2
Fault current detection
Each of the interface and treatment unit shall integrate a fault detection.
Fault current shall be detected according to ANSI standard detection curves:
- ANSI 50/51 for phase overcurrent fault detection
- ANSI 50N/51N for phase to earth fault detection
- ANSI 67 for directional phase overcurrent fault detection
- ANSI 67N for directional phase to earth overcurrent fault detection
- ANSI 47 for negative sequence overvoltage used to detect broken conductors.
For each detection 2 groups of settings shall be provided.
Permanent, semi-permanent and transient type of fault shall be discrimated and transmitted to SCADA.
The fault detection shall be validated by the absence of voltage on the MV network.
Settings range:
- 2 settings shall be possible in each group of settings
- Overcurrent from 0,02In to 4 In (DT)
- Earth fault : from 0,02In to 1,6 In (DT)
- Sensing time : from 50ms to 300s
- Setting curves shall comply with DT and IDMT.
The inrush current shall be detected by evaluating the ratio of second harmonic. A delay applied on the
detection sensing time on power recovery is not acceptable.
The fault detector shall be reset by various configurable means:
- By a timer delay
- On voltage recovery
- Manually either from the RTU front panel or from the SCADA
When a fault is detected and validated, it shall be indicated simultaneously by a LED on the RTU front
panel, showing clearly the corresponding feeder, by an event sent to the SADA and on an external lamp
connected to a dedicated relay output of the RTU
2.3
Measurement
The RTU shall provide phase current and voltage measurement.
3 phase current sensors and one residual current sensor shall be connected to the RTU interface and
treatment unit.
3 LPVT VT voltage sensors shall be connected to the RTU interface and treatment unit.
All measurement including the calculated active power, reactive power and energy, in the four quadrants,
per feeder shall be compliant with IEC 61557-12.
Accuracy shall be 0.5% for Current and voltage inputs and 1% for power and energy calculated
measurement.
Last update: 2016-01
-5-
Specification for Tender
Distribution_Substation_Unit_spec_EN_V3.docx
The power shall be delivered as signed value.
The RTU shall be able to memorise the value of current and voltage before fault detection or a switch
opening.
A 3 wires PT100 sensor input shall be provided in order to measure temperatures such as ambient air, or
transformer oil temperatures.
2.4
Power quality
The RTU shall monitor , according to IEC 61000-4-30 class S, harmonics, voltage dip and swell, voltage
interruption and voltage unbalance.
2.5
Archives
Events and measurement shall be archived in logs.
Events shall be stored in the archive logs with a time resolution of 1ms, and a discrimination of 10ms.
The capacity of the logs shall be up to 500 000 events and measurement
All the logs shall be available from a maintenance tool connected to the RTU or sent on request to the
SCADA. The contain of the logs shall be configurable and the name of the logs sent to the SCADA shall be
configurable. It shall be formatted as a .csv file.
2.6
Automation
For each feeder a sectionaliser automated function shall be provided. It shall open automatically the switch
during the absence of voltage during recloser cycles. The number of faults and the cycle duration shall be
configurable
In addition , a general purpose automation language shall be integrated and shall be compliant with IEC
61131-3 standard
2.7
Local MMI
Front panel MMI
On the front panel of RTU, Leds and push buttons shall provide the following statuses and controls:
- Status of all communication ports
- Switch position status
- Switch position control. The switch position control shall be validated by pressing
simultaneously 2 buttons in order to avoid unexpected manual control orders.
- Earth switch position
- Fault current detection
- Battery and power supplies status
- Local remote status
- Local remote control push button
- Automation status and control push button
- Fault detection reset control push button
The control and status related to each of the switchgear shall be presented in a clear and ergonomic way,
assuming that for each switchgear a clear area is dedicated to each switchgear on the front panel.
Last update: 2016-01
-6-
Specification for Tender
Distribution_Substation_Unit_spec_EN_V3.docx
Other local MMI
Locally, a WebServer interface shall be provided for connection of a laptop PC, a tablet or a Smartphone in
order to access to more details data such as alarms log, statuses and position, and measurement.
3. Communication
3.1
Communication with SCADA
The RTU shall be able to communicate with the SCADA on 2 channels. In case of redundancy the SCADA
will activate the backup communication channel. The RTU shall be able to initiate also a communication on
the backup channel in case of detection of inactivity on the main channel.
The RTU shall accept communication with 2 SCADA simultaneously.
3.2
Protocol
The RTU shall comply with IEC 870-5-104 IEC 870-5-101 DNP3.0 standard protocol. The RTU shall
support Secure Authentication according to IEC 62351-5.
3.3
Transmission
The communication system is based on GPRS Radio optical fiber. The RTU power supply shall be sized to
supply the communication modem.
3.4
Transmitted data
The RTU shall transmit to the SCADA all the status and measurement. Each data shall be individually
configurable to be sent or not to the SCADA.
The measurement shall be spontaneously sent to SCADA according to configuration of :
- Threshold
- Dead band
3.5
WiFi
A WiFi communication port shall be offered to access locally to the RTU. It shall be secured by means of
- Activation/deactivation from the Scada
- SSID visibility configurable
- Passphrase
- Automatic disconnection by timeout
3.6
Communication LAN for other devices
In order to ensure that future needs should be covered, the RTU shall be able to provide additional
communication ports:
- Ethernet port
- RS232/RS485 port
4. Power supply
The RTU shall include a power supply which integrates a 12Vdc battery charger
The battery charger shall be compensated in temperature and protected against deep discharge and
overvoltage. A single 12Vdc battery is mandatory in order to limit the maintenance constraints.
In case of absence of the battery, the power supply shall be able to supply at least the RTU.
Last update: 2016-01
-7-
Specification for Tender
Distribution_Substation_Unit_spec_EN_V3.docx
The power supply, from the battery voltage, provides the following :
- 24Vdc 48Vdc± 10% for the motorisation. This voltage shall be connected only in execute phase.
- 12Vdc for thetransmission devices.
- 12Vdc for the RTU modules.
4.1
Power supply input
Input voltage: 110Vac 230Vac ± 10%
The power supply shall be insulated to 10kV and surge protected up to 20kV , in compliance with
IEC60255-5.
4.2
Battery
The battery capacity shall maintain a backup time of 10 hours for all the voltage outputs and shall permit 10
Open/Close cycles of the switchgear.
The single 12Vdc battery shall be periodically checked, and a battery fault shall be transmitted to the
SCADA.
The maximum battery charging time shall be 24hours
4.3
Monitoring
The power supply shall deliver the following statuses to the SCADA
- End of life detection
- Battery disconnected
- Absence of power input
- Voltage output faults
- Battery fault
Any other data should be available through a serial link communication.
5. Cyber Security
In order to secure all controls and data acquisition, the RTU shall be designed to be compliant with NERC
and IEC62351 requirements. The RTU shall support secure access based on RBAC, with the possibility to
configure the roles.
Local and remote access connection shall be secured for maintenance (locally and remotely) with HTTPS,
SFTP, IPSEC and SSH protocols.
Authentication shall be based on a Radius server.
5.1
Future proof design
Remote firmware update
- The RTU shall support remote firmware updates
Centralised RBAC management
- The RTU shall be evolutive in order to be compatible with a full centralised RBAC management
in compliance with IEC 62351-8
5.2
Hardening
Device hardening
- Disabled or unused functionality shall not compromise security.
Last update: 2016-01
-8-
Specification for Tender
-
Distribution_Substation_Unit_spec_EN_V3.docx
Unnecessary services and programs shall be removed. If removal is not possible, the unnecessary
services and programs shall be disabled.
Interface minimization
- Each interface shall support only the data types and protocols needed to meet the functional
requirements.
- Unused interfaces and ports shall be removed. If removal is not possible, the unused interfaces
and ports shall be disabled.
- A complete list of supported data types and supported communication protocols per interface
shall be provided.
- All hardware interfaces that are used for programming or debugging shall be completely removed
after production.
Account hardening
- The RTU shall not contain active default, guest and anonymous accounts.
- All remote access to root accounts on the RTU shall be disabled.
- All Vendor-owned accounts where feasible shall be removed.
- The list of all accounts on the RTU shall be provided.
5.3
Communication
Compliance to security standards
The RTU shall follow the IEC 62351 standards and at least:
- IEC 62351-5 : 2013
- IEC 62351-3
Communication security
The RTU shall support network and transport layer encryption using IPsec.
5.4
Configuration
- Access to the RTU by configuration tool shall be possible only through secured connection:
HTTPS for Webserver and SSH for console and configuration tool.
5.5
Acces control
RBAC
- The RTU shall support the implementation of Role-based Access Control in compliance with IEC
62351-8.
- It must be possible to configure the privileges of individual roles. It must be possible to carry out
changes by configuration files through a secure way.
- It must be possible to define more roles for future applications.
- It shall be possible to assign each role individual security credentials.
- It shall be possible to bind roles to individual user accounts on the RTU.
The minimum following function and data shall be controlled through RBAC:
-
Configuration files
Software update
User management
Executing program or shell command
I/O on local maintenance access
A specific tool shall permit to configure the security policy, role and password.
Last update: 2016-01
-9-
Specification for Tender
Distribution_Substation_Unit_spec_EN_V3.docx
Management of Security passwords
- The RTU service application shall support individual user passwords.
- Passwords shall be stored together with a salt using an allowed cryptographic hash function.
- The RTU service application shall enforce a high complexity of passwords.
- The RTU shall lock the access after several password error.
User Authentication
- The RTU shall authenticate the communication parties on the WAN interface using a challengeresponse protocol based on message authentication codes The RTU shall terminate the
connection if the user authentication fails.
- The RTU shall authenticate the communication parties on the Local Maintenance interface.
- It shall be possible to configure the RTU so that it blocks authentication requests, either
temporarily or permanently, from an account after a number of failed login attempts. The number
of failed login attempts and the time the account is blocked shall be configurable.
Central management of user account
- The RTU should allow to manage user authentication through a Radius server.
5.6
Security Log
- The RTU shall provide a local audit trail for all security events that occur.
- Log files shall be produced in Syslog format.
- Security events shall be logged locally in a dedicated security log or/and on a SYSLOG server.
5.7
Security testing
- The RTU shall comply with ACHILLE Level1
5.8
Documentation
Secured Versioning
- All released versions (hardware, firmware, software) of a device or product shall be uniquely
identifiable.
- Exchangeable hardware modules shall be versioned separately.
Design Documentation
- The Protocol Implementation Conformance Statement as in IEC 62351 and IEC 60870-5-7 shall
be provided on request.
6. General characteristics
Dielectric compatibility :
Electrostatic discharge:
RF fields :
Fast transient:
Surge :
Conducted RF disturbance :
Power frequency magnetic field :
Pulse magnetic field :
Damped oscillatory wave :
Last update: 2016-01
IEC60255-5
IEC6100-4-2
IEC61000-4-3
IEC 61000-4-4
IEC61000-4-5
IEC61000-4-6
IEC61000-4-8
IEC61000-4-9
IEC61000-4-12
Insulation : 10kV , surge : 20kV
level 4 : 15kV in air ; 8kV at contact
Level 4 : 30V/m
Level 3 : ±2kV (5kHz to 100kHz)
Level 3 (CM) : 2kV
Level 3 : 10V (150kHz to 80MHz)
Level 5 : 100 A/m
Level 5 : 1000 A/m
Level 3 (CM) : ±2.5 kV
- 10 -
Specification for Tender
Distribution_Substation_Unit_spec_EN_V3.docx
Operating temperature:
Damp heat steady state :
Damp heat cycles :
Salt spray test :
IEC610068
IEC610068-2-78
IEC60068-2-30
IEC60068-2-11
-40°, to +70°C
93% , 56 days
95% , 144h
168h
Protection :
Robustness :
IEC60529
IEC62262
IP3x (cabinet)
IK07 (Cabinet)
Last update: 2016-01
- 11 -