Abstract:
Various examples of systems and methods are described herein in which multiple intelligent electronic devices (IEDs) are connected in a network. A software-defined network (SDN) controller may include a rule subsystem, a test mode subsystem, a packet inspection subsystem, and a validation subsystem. The rule subsystem may define a plurality of flow rules. A test mode subsystem may operate the SDN in a testing mode. A packet insertion subsystem may insert test packets within the SDN while the SDN is in the testing mode. The validation subsystem may validate or fail each flow rule depending on how the various test packets are handled.
Abstract:
Systems and methods to send or receive redundant Generic Object Oriented Substation Event (GOOSE) messages are described. An intelligent electronic device may obtain power system data from a power system. The TED may publish the power system data in a first GOOSE message and publish the same power system data in a second GOOSE message. The second GOOSE message may have different header information than the first GOOSE message to allow the subscriber to determine that the redundant GOOSE messages are both received. If the first and second GOOSE message are duplicates with identical header information but unique trailer information methods allow the subscriber to determine that the duplicate GOOSE messages are both received.
Abstract:
A network communication system may include intelligent electronic devices (IEDs) in a ring communication network. A software-defined networking device may be programmed by a removable or disconnectable software-defined network (SDN) controller to control the flow path of data packets to the IEDs in the ring network. The software-defined networking device may inspect a data packet intended for a first IED to determine that the inspected data packet requests a responsive data packet from the first IED. A flow path failure may be identified based on a failure to detect a responsive data packet from the first IED within an expected response time.
Abstract:
Mitigation of gratuitous conditions on an electric power delivery system is disclosed herein. Intelligent electronic devices (IEDs) may take actions on the electric power delivery system based on commands received via communications channels and based on detected electrical conditions. When a gratuitous condition (such as a cyber attack) is detected, a block command is provided to the IEDs such that the IEDs do not effect actions corresponding with commands received over a communications system. Communications may pass through a condition monitor of a communications device to detect insecurity and either block the communications or command the IED to enter interlock mode.
Abstract:
The present disclosure pertains to systems and methods for publishing time-synchronized information. In one embodiment, a system may include a time interface configured to receive a common time signal and a network interface configured to transmit a plurality of data packets using a network. A publishing subsystem may be configured to cause the system to publish at least one data value according to a schedule and the common time signal. A processing sequence number subsystem may be configured to generate a processing sequence number to be included in the plurality of data packets and to reset the processing sequence number at a fixed interval based on the common time signal. A data packet subsystem may be configured to generate a plurality of data packets comprising a respective processing sequence number and the at least one data value.
Abstract:
Systems and methods are presented for managing communication between devices in an electric power generation and delivery system. In certain embodiments, a method for managing communication messages performed by a network device included in an electric power generation and delivery system may include receiving a message including an identifier and data state information via a communications interface. A determination may be made that that the message represents a data state change associated with the identifier. The message may be stored in a message buffer associated with the identifier. Finally, the stored message may be transmitted from the message buffer to an intelligent electronic device.
Abstract:
Systems and methods are presented for visualizing various devices in an electric power generation and delivery system. In certain embodiments, a method for visualizing communication may include receiving configuration information from an electric power generation and delivery system. Based on the configuration information, a plurality of devices included in the electric power generation and delivery system may be identified. Further, a plurality of communication pathways may be identified. Based on the identified plurality of devices and communication pathways, a visual topology of the electric power generation and delivery system may be generated and displayed.
Abstract:
Systems and methods are presented for facilitating mixed-mode communication between stations in an electric power generation and delivery system. In certain embodiments, a method for facilitating mixed-mode communication between a first device configured to communicate according to a first communication protocol and a second device configured to communicate according to a second communication protocol is presented The method may include installing a network device in a communication channel between the first device and the second device. A communications interface of the network device may be configured to receive messages from the first device and the second device. A message reconfiguration system of the network device may be configured to reconfigure messages received by the network device from the first device to reconfigured messages for transmission to the second device.
Abstract:
This disclosure pertains to systems and methods to detect network errors in a parallel redundant protocol (PRP) network. A node-level redundancy error subsystem of an intelligent electronic device (IED) maintains records (e.g., counts) of information associated with missing duplicate frames expected from node devices on the PRP network via redundant first and second local area networks (LANs). Non-zero counts of missing duplicate frames may be identified as network errors.
Abstract:
Embodiments herein include an intelligent electronic device (IED) by employing a multi-factor authentication process. In some embodiments, to change the access level of the IED, the user may use the password and additional inputs such as an off-site operator sending a command, or the user engaging a push button or switch local to the IED.