Abstract:
The invention relates to the field of a security framework for transmitting communication messages between a Substation LAN and packet-switched WAN, in particular, a network interface for transmitting protection data in a power network. The present invention provides a network interface for transmitting communication data including protection data of a power communication network, between a Substation Ethernet LAN and a packet-switched WAN usually in Layer 2. The network interface comprises: a firewall and a Layer 3 router being connected with each other and adapted to transmit the communication data excluding the protection data; and a Layer 2 bypass being in parallel with the firewall and the Layer 3 router, and adapted to transmit the protection data. According to a further aspect, the present invention also provides a method for transmitting such communication data.
Abstract:
The invention relates to the field of a security framework for transmitting communication messages between a Substation LAN and packet-switched WAN, in particular, a network interface for transmitting protection data in a power network. The present invention provides a network interface for transmitting communication data including protection data of a power communication network, between a Substation Ethernet LAN and a packet-switched WAN usually in Layer 2. The network interface comprises: a firewall and a Layer 3 router being connected with each other and adapted to transmit the communication data excluding the protection data; and a Layer 2 bypass being in parallel with the firewall and the Layer 3 router, and adapted to transmit the protection data. According to a further aspect, the present invention also provides a method for transmitting such communication data.
Abstract:
A network interface is disclosed for redundant coupling of a substation communication network and a packet-switched WAN of a power network. The interface device can include: a first redundancy module having: two LAN ports connectable with the Substation communication network, and a first interface port; a second redundancy module having: two WAN ports connectable with the WAN, and a second interface port; and a first interworking module connecting the first with the second redundancy module via the first and the second interface port, and adapted to forward protection data between the first and the second redundancy module.
Abstract:
An exemplary method and system of the present disclosure use the Parallel Redundancy Protocol PRP (IEC 62439-3) for traffic duplication and redundant transport of the duplicated traffic in a single packet-switched wide-area communication network including a plurality of nodes interconnected via inter-node links in a meshed topology. The method involves identifying, between a send and receive node, two distinct communication paths with no link or node in common except for the send and receive node, and configuring the send and receive nodes to operate according to the Parallel Redundancy Protocol PRP. At any time during regular operation, and for any critical message to be transmitted from the send to the receive node, two redundant packets can be generated, and each of the redundant packets is sent via one of the two communication paths, resulting in an increased availability of the communication network without incurring the cost of full network duplication.
Abstract:
Exemplary embodiments are directed to use of transparent transmission of teleprotection commands in the form of GOOSE or GSSE messages, as defined by the Generic Substation Event class model by the standard IEC 61850, between substations combined with Channel Supervision and Monitoring equivalent to CSM offered by known teleprotection equipment. This approach avoids the disadvantage of non-transparent transmission when using the gateway approach and of the lack of the CSM functionality when using the tunnelling approach.
Abstract:
A method for transmitting measurement data includes receiving measurement data in a first communication module, time stamping the measurement data in the first module with a time tag, transmitting the measurement data to a second communication module via a packet switched data network, and outputting the transmitted measurement data after a predefined delay time ΔtD after the time stamping of the measurement data.