Vit220 ST Cal 08 Ed0 Statcom Control System Design

Download as pdf or txt
Download as pdf or txt
You are on page 1of 41

RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08

ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 1 de 41

VITORIA SUBESTATION
STATCOM 150 Mvar
J-0024-S0104

STATCOM Control System Design


DOC. Nº 08
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 2 de 41

Revision table

Revision Contents Page

0 Initial submission
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 3 de 41

Contents
Abbreviation................................................................................................................. 4
1. Introduction ........................................................................................................... 6
2. STATCOM Control System Configuration ........................................................ 9
Summary for Controller functions ...................................................................................... 9
Station Controller – Control Functions ............................................................................. 10
Station Controller – Protection Functions ......................................................................... 11
Unit Controller – Control Functions ................................................................................. 12
Unit Controller – Protection Functions ............................................................................. 13
Phase Controller – Control Functions ............................................................................... 13
Phase Controller – Protections Functions ......................................................................... 13
Bay Control Unit ............................................................................................................... 14
Redundancy Operation ...................................................................................................... 14
Failure mode analysis..................................................................................................... 16
3. Network Configuration ....................................................................................... 17
Overview of Communication System ............................................................................... 17
Communication between Remote Level and Level 2 ....................................................... 19
Communication between Level 2 and Level 1 .................................................................. 20
Communication in Level 1 ................................................................................................ 23
Communication in Level 0 ................................................................................................ 25
HMI (OWS) ....................................................................................................................... 25
Cyber Security ................................................................................................................... 38
Maintenance Control Center ............................................................................................. 39
Control Authority .............................................................................................................. 40
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 4 de 41

Abbreviation

STATCOM STATic synchronous COMpensator


MMC Modular Multilevel Converter
H-PAC Station controller and Unit controller platform of HYOSUNG
H-SPC Phase controller platform of HYOSUNG
SRIO Serial Rapid IO
HV High Voltage
MV Medium Voltage
LV Low Voltage
NO Normal Open
NC Normal Close
DSP Digital Signal Processor
CT Current Transformer
PT Potential Transformer
POD Power Oscillation Damping
CPU Central Processing Unit
PQ P (Active power) & Q (Reactive power)
FPGA Field Programmable Gate Array
SFP Sub-module Firing Pulse
SM Sub-Module
GOOSE Generic Object Oriented Substation Event
SFP Small Form-factor Pluggable
RTD Resistance Temperature Detector
PDA Process Data Acquisition
C&P Control and Protection
OWS Operator WorkStation
CB Circuit Breaker
DS Disconnect Switch
ES Earthing Switch
GS Grounding Switch
PLC Programmable Logic Controller
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 5 de 41

HMI Human Machine Interface


SCADA Supervisory Control And Data Acquisition
IED Intelligent Electronic Device
TFR Transient Fault Recorder
LAN Local Area Network
GPS Global Positioning System
SNTP Simple Network Time Protocol
BC Bay Controller
BCU Bay Control Unit
MMS Manufacturing Message Specification
TCP/IP Transmission Control Protocol / Internet Protocol
GOOSE Generic Object Oriented Substation Events
LED Light Emitting Diode
IGBT Insulated Gate Bipolar Transistor
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 6 de 41

1. Introduction

The configuration of STATCOM control system is as shown in Figure 1.

Server/ Server/
Gateway A Gateway B
EWS TFR OWS A OWS B Time Server-1 Time Server-2
(GPS/GLONAS) (GPS/GLONAS)

PTP /
SNTP

Ethernet
IEC 61850 / Modbus IEC 61850
Modbus Modbus
Station Station
Controller(A) Controller(B)

...
TFR Data
Serial Acquisition Units
RapidIO

Protection Relays
Unit Unit
Controller(A) Controller(B)

Serial
RapidIO ...

Bay Control Units

Phase Controller
(VBE) Cooling
PLC

Hyosung's
Own
Protocol

...

±150Mvar MMC Valve Cooling System

< Figure 1 - Overview of the Control System for the STATCOM Station >

The main objective for the control system is to generate control pulses for the MMC valves in such a way that
the reactive output of the STATCOM can be continuously controlled over the available range. However, it
must also perform other functions such as self-diagnostics, metering, event handling and much more.
The control system of STATCOM station performs the following functions.
- Close loop control for the steady state control and the transient/dynamic control
- Switching control of the MMC valve
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 7 de 41

- Protection and supervising of facilities in STATCOM station


- Recording of disturbance and event
- Other functions such as self-diagnostics, metering, event handling and etc.

The STATCOM control system mainly consists of followings


- Operator Workstation and Server/Gateway
- Station Controller and Unit Controller
- Phase Controller
- Bay Controller
- Transient Fault Recorder

STATCOM controllers, which are station controller, unit controller and phase controller, have hierarchical
structure. The station controller is responsible for starting/stopping and switching between the various modes
of operation for STATCOM station as well as to define the correct reactive power orders. And it also has a role
to control and supervise all subsystems. The unit controller is responsible for the control of each STATCOM
unit. The unit controller generates the reference wave based on the reactive power order from the station
controller. Based on the reference wave from the unit controller, the phase controller has the role to generate
control pulses for the connected sub-modules in the MMC valve. The station controller and the unit controller
have redundant feature, active and hot-standby. The control system is based on the H-PAC and H-SPC concept,
which are specifically developed for MMC STATCOM application. The station controller and unit controller
are implemented by using H-PAC, and the phase controller is implemented by H-SPC.
The bay controllers are used to control and observe status of switchgears such as circuit breakers, isolators and
earth switches and to measure temperatures of transformer windings, valve halls, ambient and etc. The TFR is
used to record currents, voltages, status of circuit breakers and signals/variables gathering from STATCOM
controllers.

The measuring points of voltage and current used in control system are shown in Figure 2.
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 8 de 41

220kV
Control
& Metering
245kV VT

245kV CT
Control &
Station Controller(A)
Metering
ATP- PT Ch.
220kV/42kV/150 CT Ch.
MVA
Z=8% at 1.0 pu
Station Controller(B)
ONAN/ONAF
PT Ch.
CT Ch.
Metering only

72.5kV VT
72.5kV BUS

Unit Controller(A)
PT Ch.
AI Ch.

Unit Controller(B)
PT Ch.
DC CT AI Ch.
4000/1.6 Control &
Metering
STATCOM
Converter
(±150MVar)

< Figure 2 f– Measuring point of STATCOM Control system >


RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 9 de 41

2. STATCOM Control System Configuration

Summary for Controller functions

The below table is summary of control & protection functions in each controller. Each primary and backup
controller has the same functionality.

Device Function

< Control >


Manual Reactive Power Control
Automatic Voltage Control
Negative Seq. Voltage Control
Station Controller

<Protection>
Under/Over Voltage Protection
Under/Over Frequency Protection

< Control >


Positive Seq. Current Control
Negative Seq. Current Control
DC Current Control
Unit Controller Circulating Current Control

< Protection >


Valve Overcurrent Protection
Tripping by Cooling System
< Control >
Switching Control of each Sub-Module
Capacitor Voltage Balancing Control
Phase Controller

<Protection>
Loss of Sub-Module Redundancy

Control for CB, DS, ES and etc.


Bay Control Unit
Interlock logic for CB, DS and ES control
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 10 de 41

Station Controller – Control Functions

The main object of station controller is to decide the current reference which means current magnitude to be
flowed between PCC and STATOM to achieve the order from operator.

There are two basic control mode which is selected by operator


- Manual Reactive Power Control: STATCOM makes constant reactive power output which is set from
operator. The set value for this mode is generally called Q reference. Manual reactive power controller controls
only the positive sequence reactive power output of STATCOM and calculate the positive sequence q-
axis(reactive) current reference signal by dividing the Q reference by the rated PCC voltage.
- Automatic Voltage Control: STATCOM output will vary based on the PCC voltage and AC voltage
reference which is set from operator. The automatic voltage controller is generally called voltage regulator.
The controller calculates the positive sequence q-axis(reactive) current reference signal with PI (proportional
integral) controller.

Negative Sequence Voltage Control is function to deal with unbalanced PCC voltage. STATCOM is basically
designed to supply symmetrical current. But, if PCC voltage is unbalanced (e.g. unbalance fault or unbalanced
load condition), STATCOM may generate unsymmetrical current and it cause unstable operation of STATCOM.
Negative sequence voltage control function controls negative sequence voltage to make zero negative sequence
current on STATCOM output. It means the negative sequence d- and q-axis current references will be zero.

There is auxiliary control function which is sub-function of automatic voltage control function.
- Power Oscillation Damping
- Sub-Synchronous Oscillation Damping
- Adaptive Gain Control
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 11 de 41

Station Controller – Protection Functions

- Under/Over Frequency Protection


The STATCOM operation is not limited by the system frequency variations 48.5Hz~51.0Hz in continuous,
up to 51.5Hz for 30min, and down to 47.5Hz for 30 min.
Although more severe under-frequency or over-frequency appears, the STATCOM is not tripped by the
under- frequency or over-frequency protection scheme. The STATCOM continues its normal operation under
the abnormal system frequency condition and then it is tripped when it cannot maintain normal condition any
more.

- Over-Voltage Protection
The STATCOM is designed to be capable of continuous unrestricted operation from 0.2pu (44kV) to 1.15pu
(253kV) power system voltage. However, above 1.15pu (253kV) voltage, it goes into the time-limited
operation mode.
The STATCOM can supply rated inductive current output under the overvoltage conditions which is called the
temporary overvoltage operations.
- for 15.0 sec between 1.15pu (253kV) and 1.2pu (264kV) PCC voltage
- for 1.0 sec between 1.2pu (264kV) and 1.4pu (308kV) PCC voltage
- immediately trip above 1.4pu (308kV) PCC voltage
If the overvoltage condition is continued for more than the specified durations mentioned above, the
STATCOM unit is blocked (stopping IGBT gating). If the overvoltage condition is continued for more than 15
sec, the STATCOM will be tripped. If power system voltage becomes below 1.15pu (=253kV) before
generating trip signal, the STATCOM will resumes its normal operation.
However, if power system voltage becomes above 1.4pu (=308kV), the STATCOM will be immediately tripped.

- Under-Voltage Protection
The STATCOM is designed to be capable of continuous unrestricted operation until 0.2pu (=44kV) under
voltage condition at PCC. However, below 0.2pu voltage, it goes into the time-limited operation mode.
If power system voltage becomes less than 0.2pu, the STATCOM will be immediately blocked. If the
undervoltage condition exceeds 5 sec, the STATCOM will be tripped. However, if power system voltage is
recovered above 0.2pu within the block condition for 5 sec, the STATCOM station resumes its normal
operation.
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 12 de 41

Unit Controller – Control Functions

The main object of unit controller is to generate the voltage reference signal which has to be generated by
STATCOM unit to achieve the current reference from the station controller. The voltage reference signal is
calculated by sum of all current controller outputs.

- Positive sequence decoupled current controller


The positive sequence decoupled current controller is basic function of unit controller.
The positive sequence d-axis(active) current control is concerned with the DC capacitor voltages of 3-ph MMC
Valves. The active power flow for STATCOM unit is controlled so that the average of all sub-module DC
capacitor voltages is maintained precisely at the level of the rated voltage.

The positive sequence q-axis(reactive) current control is concerned with reactive power output of STATCOM
unit and related with positive sequence q-axis(reactive) current reference provided from station controller. The
reactive power output of STATCOM unit is controlled so that the q-axis current (which corresponds to the
reactive current drawn from the power system) follows the current reference (which is provided from the
station controller).
The positive active(d-axis) current and reactive(q-axis) current signals are converted into the desired positive
sequence 3-phase voltage signals which should be generated by STATCOM unit to achieve the order form
operator.

- Negative sequence decoupled current controller


The negative sequence d- and q-axis controls are concerned only with the negative sequence voltage and
current outputs. The negative sequence output of STATCOM unit is controlled so that the d- and q-axis
negative sequence current follows the negative sequence current reference provided from the station
controller. If the negative sequence d- and q-axis current references from the station controller are zero, the
STATCOM unit generates only symmetrical current output, regardless of the unbalance of PCC voltage.

There are additional auxiliary control functions in the unit controller for stabile operation of STATCOM unit.
- Direct current control is to suppress the DC components which is caused by the 2nd harmonic component
voltages on the transformer primary side or by the unequal AC current in the 3-ph MMC valves.
- Circulating current control is to suppress the 3rd harmonic component which is circulated in the delta
connected 3-ph MMC valves.
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 13 de 41

Unit Controller – Protection Functions

- Valve overcurrent protection


The current in the each phase of MMC valve is limited by control function up to the rated current. But the
instantaneous current value in the valve is higher than the setting value caused by short-circuit fault or control
fail, STATCOM unit will be immediately blocked. After 100 msec, STATCOM unit is de-blocked and try to
normal operation. If the instantaneous current value in the valve is still higher than the setting value,
STATCOM unit will be blocked again. This block sequence will be repeated 10 times and then the STATCOM
unit will be finally tripped. But if the valve current is recovered below the setting value during 10 times
repeating, the STATCIM unit will restart normal operation.

- Tripping by cooling system


The cooling system for STATCOM unit shall be under running when the STATCOM unit is running. The
STATCOM unit will be tripped by its cooling system status below which is connected by hard-wring.
- Loss of cooling system running signal
- Received the stop request or trip signal from cooling system

Phase Controller – Control Functions

- Sub-Module switching control


The main object of phase controller is to generate the control pulse for each sub-module to make the AC
voltage waveform by the STATCOM unit based on the voltage reference signal provided from the unit
controller.
- Capacitor voltage balancing control
The DC capacitor in each sub-module is not ideal voltage source, so the DC capacitor voltage will be charged
or dis-charged based on the current direction. The capacitor voltage balancing control is to maintain the DC
capacitor voltage within a certain range from the rated voltage (2.5kV)

Phase Controller – Protections Functions

- Loss of redundancy
Each phase of MMC valve is designed to have 40 full-bridge sub-modules including 6 redundancies. The phase
controller monitors each sub-module status and STATCOM unit will be tripped by the phase controller if the
sub-module in each phase is tripped more than 2 no. of sub-modules.
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 14 de 41

Bay Control Unit The main object of BCU(Bay Control Unit) is to


- control and monitor the status of yard breaker such as CBs, isolators, earthing-switches
- implement the software interlock logic for yard breaker control
- monitor the discrete alarm signals for equipment.

Bay Control Unit

The main object of BCU(Bay Control Unit) is to


- control and monitor the status of yard breaker such as CBs, isolators, earthing-switches
- implement the software interlock logic for yard breaker control
- monitor the discrete alarm signals for equipment.

Redundancy Operation

STATCOM control system has a redundant feature. One of the main and backup controllers operates in active
mode and the other controller operates in hot-standby mode. Only the reference signal from the active
controller is used in the low-level controller. The main and backup controllers have the same functionality, i.e.
each controller can operate as active or as hot-standby. On failure of the active controller, the hot-standby
controller immediately takes over to replace the failed active controller. For this redundancy operation, the
control parameters should be mirrored in real-time and both controllers have identical data. The necessary
control parameters are sent from the active controller to the hot-standby controller in real-time via sRIO
communication.
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 15 de 41

Parameter tracking
for hot-standby controller
Station Controller Station Controller
(A) sRIO (B)

Current Reference Current Reference


(active) (hot-standby)
sRIO

Parameter tracking
for hot-standby controller
Unit Controller Unit Controller
(A) sRIO (B)

Voltage Reference Voltage Reference


(active) (hot-standby)
sRIO sRIO

1SV Phase Controller

Control Pluse

A Phase B Phase C Phase


SM #01
SM #01

SM #01

SM #N
SM #N

SM #N

... ... ...

MMC Valve

< Figure 3 - Redundancy Operation >

The active controller can be selected via HMI which is called manual change over. The active/hot-standby
controller will be automatically changed over, based on the following strategies.
The remaining hot-standby controller becomes active at the below events:
- Fault in the active controller
- Shut-down of the active controller
- sRIO Communication fail of active controller with other controllers.
In case of failure or shut-down of the active control and remaining controller is not ready (shut-down, failure
or etc.), the automatic change-over or the manual change-over will not be executed. As described above, a
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 16 de 41

shut-down of the active controller will cause an automatic change-over. Nevertheless, it is recommended to
execute a manual change-over before shutting down of the active controller.

Failure mode analysis

By default, control systems and protection systems are configured independently, so failure of one system does
not affect the other. And, the control system, protection system, measurement circuit, power supply and
communication system are completely redundant, so failure of one system does not affect operation.
Also, loss of power to one system for maintenance does not affect availability.

Control Device Stop Sequence and


Remain in operation
Station Controller A Station Controller B 220kV CB Trip

Fail X
Fail X
Fail Fail X

Control Device Stop Sequence and


Remain in operation
Unit Controller A Unit Controller B 220kV CB Trip

Fail X
Fail X
Fail Fail X
Cooling Pump A Cooling Pump B
Fail X
Fail X
Fail Fail X

Control Device Stop Sequence and


Remain in operation
Server A Server B 220kV CB Trip

Fail X
Fail X
Fail Fail X
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 17 de 41

3. Network Configuration

Overview of Communication System

The network topology of the STATCOM Communication system is a fault tolerant Ring network in redundant
mode, excluding the links between individual IEDs to Ethernet switch wherein the redundant connections are
not envisaged, so that the failure of one communication port on the control and protection equipment will not
affect the operation of STATCOM system. The STATCOM system is structured into three main levels. Figure
4 shows the components of each level and the communication connection between the equipment.

< Figure 4 - Overview of the STATCOM Network System >


RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 18 de 41

The system in Level 2 will consist of following equipment


- redundant operator workstations and an engineering workstation
- redundant server/gateways
- remote access terminal
- TFR System and redundant time servers
The following interfaces will be implemented by the redundant server/gateway system
- interface with SCI of Vitoria 220kV and SCI of Vitoria 400kV via IEC 101
- interface with two REE control centers via IEC 101 and IEC 104
- interface with remote substations
The STATCOM HMI system provides a local operator with a graphical user interface for the control and
monitoring of all devices in the STATCOM station.

The equipment in Level 1 comprises followings


- redundant STATCOM controllers
- protection relays and bay control units
- TFR data acquisition units
The wired interface with Vitoria 220kV and Vitoria 400kV to opening and closing switchgears will be
implemented with bay control units.

The equipment in Level 0 mainly consists of followings


- MMC valve and controller which is generally called VBE (Valve Based Electronics)
- water cooling system and cooling PLC
- AC Switchyard equipment
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 19 de 41

Communication between Remote Level and Level 2

HYOSUNG Maintenance Center

Remote Maintenance Center


REE Control
TCP/IP Center

1
REE
Remote Communication Network
IEC 101/104

LEVEL Remote Access REE Control


Communication Network Center

Communication Communication
Interface Interface
IEC 101 IEC 104

LEVEL 2
Vitoria 220kV
SCI
3
IEC 101 / DNP 3.0 /Modbus
Remote Access
EWS TFR OWS A OWS B Terminal
Time Server-1 Time Server-2 Vitoria 400kV
(GPS/GLONAS) (GPS/GLONAS) SCI

Server/ Server/
PTP / Gateway A Gateway B
SNTP

Ethernet

<Figure 5 – Communication between Remote level and level 2>

3.2.1. Interface with Maintenance centers (CMII)

The communication between maintenance centers and level 2 is as shown in Figure 5(No 1). It supports remote
desktop to the remote access terminal of the STACOM control room, but only monitoring and management
are possible from this interface. This interface incorporate the exchange of information required by the
maintenance centers. The control and protection system be connected to maintenance center, the monitoring
and signaling of the STATCOM fundamental parameters.
- Alarms, events and records.
- Information of monitoring equipment
- Records of failures of protective equipment (TFR)
- Remote management of transformer AC protection IEDs

This interface is supports the following secure connections.


- All users shall be authenticated
- Allow access for a certain period of time (default 10 minutes)
- Traceability of remote access operations

Remote Terminal Access is workstation type. Window Server(Latest Version) supported by Microsoft is
installed on this workstation, and an antivirus policy is included.
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 20 de 41

3.2.2. Interface with REE Control Center

The communication between REE Control centers and level 2 is as shown in Figure 5(No 2). This redundant
interface be connection to REE control centers. The STATCOM be controllable from the two REE operation
offices. This interface is redundant and uses IEC60870-5-101, IEC60870-5-104 uses. Also, this interface
exchange the following information:
- Operate and Control STATCOM
- Mon,itor the main STATCOM parameters necessary for its remote operation.
- Continuous and real-time information
- Database: information, alarm, digital / analog values, etc.

3.2.3. Interface with the SCI of Vitoria

The communication between SCI of Vitoria and level 2 is as shown in Figure 5(No 3). This interface between
the STATCOM control system and the substation Integrated Control System(SCI). This interface is redundant
and uses IEC 60870-5-101 uses. The SCI incorporates a local HMI and a redundant substation control
center(CCS) as indicated. Its functions are the control of the different element of the substation.

Communication between Level 2 and Level 1

3.3.1. Communication between HMI and equipment

The data exchange between the HMI System and the electronic devices on bay level is to be realized using
IEC61850 protocol with a redundant managed switched Ethernet communication infrastructure and the data
flow is shown in Figure 6.

< Figure 6 - Data Flow of Communication between HMI and the equipment on bay level >
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 21 de 41

3.3.2. Communication between Server System and Cooling System

STATCOM unit shall have its own Valve Cooling System with redundant pumps. For the detail monitoring of
the Cooling System status, it is connected with HMI System via Modbus TCP/IP protocol.

The protection system of cooling cycle shall have minimum following alarms:
- Depleted deionizing cell
- Low water resistivity
- High water temperature
- Primary pump stopped
- Fan stopped
- Primary pump or fan interlock circuits faulty
- Primary cycle (Make-up water) tank level low
- Failure of control supply

The following shutdown alarms/Trip shall be provided with cooling system protection:
- Excessive low water resistivity
- Excessive high water temperature, complete loss of auxiliary supply to primary pumps, low flow, Low
Pressure etc.

3.3.3. MMS/Reports between the server and electronic devices (Protection Relays/BCUs/Controllers)

① Protection Relays
- Operating status of protection functions
- Alarm signal connected to protection relays
- Measured data and etc.

② Bay Control Units


- Status of yard equipment such as coupling transformer, CB, DS and ES.
- Control for yard equipment such as CB, DS and ES.
- Alarm signal connected to bay control units
- Measured data and etc.

③ Station Controllers
- Status of station controllers
- Protective alarm/trip signal of STATCOM station
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 22 de 41

- Measured data such as P, Q, voltage and frequency of PCC, primary side current of coupling
transformer and etc.
- Control parameters which can be changed during STATCOM operation such as control mode, Q
reference, AC voltage reference and etc.

④ Unit Controllers
- Operation status of controller
- Protective alarm/trip signal of each STATCOM Unit
- Measured data such as Q of STATCOM unit, MV busbar voltage, MMC valve current and etc.

3.3.4. Modbus-TCP

Modbus-TCP/IP protocol is additionally used for cooling system PLC and station/unit/phase controllers to
decrease the data traffic in the Ethernet network.
The following information is exchanged between server and cooling system PLC/controllers through Modbus-
TCP/IP protocol.

① Station / Unit Controllers


- Parameters for control / protection function and calibration of analog measuring channels

② Phase Controllers
- Information of each sub-modules such as event, capacitor voltage and temperature

③ Cooling System PLC


- Operation status of cooling system such as fan/pump running status
- Alarm/trip signal of cooling system
- Measured data

3.3.5. Time Synchronization

The redundant time servers compatible with different satellite constellations such as GPS and GLONASS will
be configured and the time servers will provide following ways for transmitting synchronization signal
- IEEE 1588 PTP V2
- IRIG-B
All devices in the STATCOM system such as workstations, STATCOM controllers, protection relays, bay
controllers and TFR will be synchronized the time via IEEE 1588 PTP. But the cooling PLC will be time
synchronized via IRIG-B.
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 23 de 41

Communication in Level 1

3.4.1. Communication between IEDs/BCs/Controllers

The data flow of Bay Level Communication is as shown in Figure 7.All the IEC61850 Server devices will
publish and subscribe a GOOSE (Generic Object Oriented Substation Events) Message to communicate each
other for the status or event data. And the STATCOM Controllers shall support redundant Ethernet ports to
switch a LAN port without interrupting communications when a failure happens on any communication wire.

< Figure 7 - Data Flow of Bay Level Communication >

GOOSE message between bay controllers and Controllers

① Bay Control Units to Controllers


- Status of yard equipment such as CB, DS and ES for interlock logic in STATCOM start sequence

② Controllers to Bay control Units


- Status of STATCOM operation(running/stop) for interlock logic to control of yard equipment
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 24 de 41

3.4.2. Communication between Station Controller and Unit Controller

The major roles of the Station Controller are to control and monitor the sub systems by the reference values
from HMI. So the Station Controller consists of a main controller, analog input board, digital I/O board and
three types of communication boards. One is for IEC61850 Server module via Ethernet communication
networks. And another is for the redundancy of Station Controllers and the other is for the communication with
the Unit Controller, which is designed for a high-speed interface via fiber optic cable on a SRIO (Serial Rapid
I/O) protocol. One Station Controller shall communicate with two unit controllers (one redundant Converter
Controllers).
The following information is exchanged between controllers through sRIO protocol:

① Primary and Backup controllers


- Control parameters of active controllers
- Status information such active/hot-standby, failure and etc.

② Station controller and Unit controller


- Current reference signal generated by station controller
- Status information such active/hot-standby, failure and etc.

③ Unit controller and Phase controller


- Voltage reference signal generated by unit controller
- Status information such active/hot-standby, failure and etc.

3.4.3. Communication between Unit Controller and Phase Controller

The base platform of Unit Controller is the same with Station Controller. With the high-speed serial interface,
SRIO protocol, via fiber optic cable, the Unit Controller shall get a status, alarm information of the Phase
Controller and capacitor values, temperature values of Converter Sub-modules and send a reference values for
the Converter by the Station Controller’s reference.

< Figure 8 - Devices Using sRIO Protocol >


RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 25 de 41

3.4.4. Redundancy Check Communication

Each STATCOM Controller has a dedicated communication channel for a redundancy checking of the other
controller. The communication line is using a high-speed serial interface, SRIO protocol, via fiber optic cable.
With the communication channel, a hot-standby controller can synchronize data with an active controller in
normal case and get a control authority as soon as a failure on an active controller is detected.

Communication in Level 0

The phase controller should control all of the sub-module in the 3-ph MMC valve fast enough to follow the
reference voltage provided from the unit controller. So private protocol is specifically designed to send the
control pulse to each sub-module with few micro-seconds period and the following information is exchanged
between the phase controller and each sub-module:
- Control pulses generated by phase controller
- Sub-module information such as event capacitor voltage and temperature

< Figure 9 - Picture of Phase Controller and Communication with Converter Sub-Module >

HMI (OWS)

OWS is the operator’s HMI to control STATCOM station. Two OWS will install in STATCOM station. One
will install in customer’s control room and another will install in STATCOM control room. The functions of
these OWS are totally same.
OWS runs Microsoft Windows-based PC and is implemented through SIEMENS’s WinCC software. The
OWS minimum specifications are shown as follows.
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 26 de 41

HMI Technical Specification


Software
OS Windows Server 2019 (Changeable)
SIEMENS WinCC v7.x
OWS
SICAM SCC v8.x
SICAM PAS/PQS
IEC61850 Client
Modbus Master
Server/Gateway Automation
SCC Interface
Archive (Optional)
Comtrade Export (Optional)
Workstation (Changeable)
Processor Intel Xeon E3
Memory 16GB RAM
Hard Disk SSD 512GB / 256 x 2EA
Network Interface 4 SFP Fiber (100Base-FX Multimode)
Monitor (Changeable)
Size/Type 68.5 cm (27")
Resolution 2560 * 1440 @ 144Hz

3.6.1. Screen layout

The basic layout of STATCOM OWS is shown in the Figure 10 as follows.


RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 27 de 41

< Figure 10 - OWS field overview >

- MAIN MENU : By pressing on the MAIN MENU button it is possible to display the Sub-system status,
Trend, Alarm list, Event list, AC/DC distribution PNL status and System architecture in the DISPLAY field.

< Figure 11 - Main menu >

- TIME & LOGIN : Time and login information are always displayed in this field. Operator must log in to
the OWS to operate STATCOM. Operator can log in/out to OWS by pressing the Login/Logout button.
-

< Figure 12 - Time and Login field >

- DISPLAY : In the display field it is shown the selected display as per main menu.
- ALARM LIST : The recent alarms and events are shown in this field.

< Figure 13 - Alarm list >


RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 28 de 41

- ACK. BUTTON : This is button to acknowledge alarm. Operator can acknowledge occurred alarm by
pressing this button.

< Figure 14 - Acknowledge / Horn Stop button >

3.6.2. Overview

Figure 15 shows an OWS Overview. “Overview” is main display of OWS and gives an overall inspection of
STATCOM station, such as :
- Monitoring and control for CB, DS, ES and GS.
- Start and stop the STATCOM operation
- Monitoring and control for MSR/MSC (If needed)
- STATCOM control mode change
- Monitoring the bus voltage and frequency
- Monitoring the STATCOM reactive power output
- Monitoring the BCU control mode (Remote/Local)

< Figure 15 - OWS Overview >


RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 29 de 41

3.6.3. Sub-system

The operator can monitor each detailed STATCOM branch status and cooling system status through Sub-
system menu. Sub-system is consisted of following screens:
- Coupling transformer branch status
- High-side branch status
- STATCOM unit branch status
- Zig-zag transformer branch status (if applied)
- Cooling system status
- Auxiliary power system status (Low voltage AC/DC System) (if required)

3.6.3.1. Coupling transformer branch status

The coupling transformer branch status screen (See Figure 16) gives an overall inspection of the coupling
transformer branch, such as :
- Control and monitoring of DS/ES of transformer branch
- Show the WTI and OTI status of coupling transformer
- Show the deluge system operation of coupling transformer (If need)
- Monitoring IVT SF6 gas status (If need)

< Figure 16 - Coupling transformer branch status screen >


The coupling transformer branch status screen is consisted of transformer bay three lines diagram and
transformer status indicator. The transformer bay three lines diagram allows control and monitoring of DS/ES
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 30 de 41

in the transformer bay as shown in the Figure 15. The transformer status indicator allows to monitor each phase
transformer status, such as trip/alarm signal, cooling fan status, etc.

3.6.3.2. High-side branch status

An high-side branch status screen is shown in the Figure 17. The High-side voltage branch status gives an
overall inspection of the HV/LV side of coupling transformer bay, station controller, protection system, such
as :
- Show the status of High-side CB and DS.
- Station controller status
- Coupling transformer and bus protection relays status

< Figure 17 - High-side branch status screen >

3.6.3.3. STATCOM unit branch status

A STATCOM unit branch status screen is shown in the Figure 18. STATCOM unit branch status gives an
overall inspection of the STATCOM unit branch, unit controller and protection system, such as :
- Show the CB, DS, ES and GS status of STATCOM unit branch.
- Show the status of unit controller and protection system.
- Show the status of STATCOM sub-module.
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 31 de 41

< Figure 18 - STATCOM unit status screen >

By pressing the “Module Status” button, operator can check each sub-module status as shown in the Figure
19. It is however possible to see the sub-modules status when the STATCOM is energized. Sub-module status
is shown in three ways, such as :
- Standby : When the sub-module is charged normally, “Standby” LED is indicating orange color. If the sub-
module operates normally, “Standby” LED becomes green.
- Run : When the sub-module operating normally, “Run” LED is indicting green color.
- Trip : When the sub-module is faulty, “Trip” LED is indicting red color.
Operator can also check DC voltage and IGBT heat-sink temperature of each sub-module in this view.
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 32 de 41

< Figure 19 - Sub-module status screen >

By pressing the “LED Status” button in Figure 19, operator can also check the more detail status of sub-module
as shown in the Figure 20, such as :
- SM RUN : Green indicates that the sub-module is normally operating.
- SM Standby : Green indicates that the sub-module is charged normally.
- SM Ready : Green indicates that control board of Bypass switches is ready to service.
- SM Trip : Red indicates that the sub-module has tripped.
- SM Alarm : Red indicates that the sub-module has an alarm event.
- RX Alarm : Red indicates that the there is a communication error between sub-module controller and phase
controller.
- GDU 1 Fault : Red indicates that GDU 1 in the sub-module is faulty.
- GDU 2 Fault : Red indicates that GDU 2 in the sub-module is faulty.
- GDU 3 Fault : Red indicates that GDU 3 in the sub-module is faulty.
- GDU 4 Fault : Red indicates that GDU 4 in the sub-module is faulty.
- By Pass S/W : Red indicates that the sub-module is bypassed. (Note : Only bypassed sub-module during
STATCOM operation is displayed in red. That is, the bypassed sub-module before the STATCOM
operation is not displayed.)
- VI Ready : Green indicates that Vacuum interpret is ready to service.
- CAP OV : Red indicates that the DC capacitor voltage in the sub-module has exceeded overvoltage level.
- CAP LV : Red indicates that the DC capacitor voltage in the sub-module has below low-voltage level.
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 33 de 41

- CAP OP : Red indicates that pressure of DC capacitor in the sub-module has exceeded normal pressure
level.
- H/S OT : Red indicates that heat-sink in the sub-module has exceeded over-temperature level.

< Figure 20 - Detailed Sub-module LED status screen >

3.6.3.4. Aux. transformer branch

An Auxiliary transformer branch screen is shown in the Figure 21. auxiliary transformer branch screen gives
an overall inspection of the auxiliary transformer branch and protection system, such as :
- Control and show the status of DS/ES
- Show the status of zig-zag transformer.
- Show the status of auxiliary transformer.
- Show the status protection system.
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 34 de 41

< Figure 21 - Auxiliary transformer branch screen >

3.6.3.5. Cooling system

A cooling system screen is shown in the Figure 22. Cooling system screen gives an overall inspection of the
cooling system, such as :
- Control of cooling system (Start/Stop)
- Show the temperature / conductivity of coolant.
- Show the pressure and flow of cooling system.
- Show the status of cooling system controller.
- Show the operating condition of heat exchanger.
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 35 de 41

< Figure 22 - Cooling system status screen >

3.6.4. Trend

A trend screen is shown in the Figure 23. Trend screen can display the following information.
- High-side voltage, frequency, active power and reactive power
- STATCOM MV bus voltage, frequency, active power and reactive power
- Temperature, conductivity and flow of coolant

< Figure 23 - Trend screen >


RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 36 de 41

3.6.5. Alarm/Event list

The alarm/event list displays alarm message which are defined by alarm on the STATCOM station. When an
alarm/event occurs, the alarm/event message is displayed in red. Once the alarm/event is cleared, the alarm
message is displayed once again in green.

Sequential events monitoring shall have the following features:


- Event description
- Accurate time-tagging of all trip and alarm events with resolution to 1 millisecond, with appropriate de-
bounce filtering
- Time synchronization to GPS time signal
- Secure and nonvolatile storage of event records
- Sorting features of event historical database by time, date, equipment groups, etc.

< Figure 24 - Alarm list screen >


RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 37 de 41

< Figure 25 - Event list screen >

3.6.6. System Architecture

System architecture provides a quick overview of status of STATCOM C&P system. If any of these C&P
system failed or disconnected, the green LED will become red to alarm failing part of the system. The status
of printers and Ethernet switches are not monitored in the system architecture.

< Figure 26 - System architecture >


RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 38 de 41

Cyber Security

3.7.1. Substation Automation security

3.7.1.1. Secure default settings

- Deactivation of unused ports (hardening)


- Whitelisting interface to 3rd party networks
- Available with IEC 104 and IEC 101
- Defined set of classified data
- Fixed set of rules

3.7.1.2. Limitation of data transfer rate

- Integrated switch  by hardware


- By parameter setting  by software

3.7.1.3. Integrated crypto chip

- Certificates loaded in factory


- Secured communication (TLS)
- Random generator for cyclic exchange of session key

3.7.2. Stataion level security

Increased security for local operating system on station level with SICAM SCC:
- Link to Active Directory (User Management)
- Access attempts are securely logged
- Signed software installation packages
- Verified monthly reports available on software patch compatibility and antivirus (signatures) pattern
compatibility (e.g. Microsoft Security patches)
- Application-Whitelisting supported (McAfee)
- Installed base monitoring with Ruggedcom CrossBow
- Manual for secure implementation (Defense-in-Depth)
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 39 de 41

3.7.3. Field level security

3.7.3.1. Access Control in SIPROTEC 5

- Connection password as per NERC-CIP and BDEW White Paper complexity requirements
- Transfer of connection password from DIGSI5 to device over secured SSL/TLS connection
- Secured storage of password hash in device
- Optional: Centralized management of password complexity, lifetime and access control for thousands of
SIPROTEC 5 devices with Ruggedcom CrossBow
- Confirmation codes for safety-critical operations with the device
- All access attempts are logged securely in device and protected from being manipulated – optionally also
transmitted over Syslog UDP to a central Syslog server

3.7.3.2. Secured Communication in SIPROTEC 5

- Protection against sniffing and manipulation of settings / passwords: SSL/TLS encryption of the
communication between DIGSI 5 and the SIPROTEC 5 device
- Cryptographic, two-way authentication between DIGSI 5 und SIPROTEC 5 means:
Protection against usage of disallowed tools
Protection against usage of SIPROTEC 5 like relays that have not been manufactured by Siemens

3.7.3.3. Operational Security with SIPROTEC 5

- SIPROTEC 5 uses key stored in onboard crypto-chip to allow only firmware signed by Siemens to load
- Separation of process communication from management communication in device thanks to modular
communication units
- Transparent vulnerability handling over Siemens ProductCERT(Cyber Emergency Response Team)
- DIGSI 5 is compatible with Application Whitelisting
- Monthly validation of DIGSI 5 compatibility with the latest Microsoft Windows operating system security
patches and Trend Micro OfficeScan antivirus patterns
- DIGSI 5 compatible for remote/VPN connectivity

Maintenance Control Center

Hyosung plans to set up and operate a remote maintenance control center. This center performs the following
functions:
1) Monitoring the STATCOM system healthiness
RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 40 de 41

- Yard equipment, control system, protection system and etc.


2) Monitoring the STATOCM system operation information
- Alarms, events, logs
3) Quickly response in the event of a system failures
4) Change the configuration of the STATCOM system
- Control system parameter, control logic, protection system settings
5) Control system and protection software upgrade (if necessary)
- DSP Board (Unit controller)
- Sub-module interface board (Phase controller)
6) Analyze data related to STATCOM system
- Power system data (Trend Function of HMI and TFR)
- Internal variable of control system

Control Authority

The control authority selection will be performed based-on the following strategies
- monitoring at any points is continuously enabled, whichever control authority is selected
- local/remote selection at the lower level always has the priority regardless of the control authority selection
at the higher level.

The below figure shows the concept of control authority hierarchy.

Control Center

R
L Local Operation Level
S/W key selection (SCADA)
R
L Protection and Control
H/W key selection Level
R
L
H/W key selection Field Level

Equipment to control

< Figure 27 - control authority hierarchy >


RED VITORIA SUBESTATION-STATCOM 150 Mvar DOCUMENT Nº 08
ELECTRICA Edición 0
D E E S PA Ñ A DOCUMENT FOR CONSTRUCTION Fecha: 30/08/2022

DIRECCIÓN DE INGENIERÍA Y
CONSTRUCCIÓN Ref.: VIT220-ST-TECH
Página 41 de 41

The control authority between local SCADA(OWS) in STATCOM and remote control centers will be selected
at the local SCADA(OWS) and this function will be implemented on the HMI screen.
If local SCADA(OWS) is selected as a control point, the control command at only local SCADA will be
performed and the control command from the remote control center will not be performed and vice versa.
The control authority selection at protection/control level or field level will be implemented by hardware key
switch.
The status of control authority selection will be displayed on local SCADA(OWS) in STATCOM and remote
control centers.

You might also like