PACWorld Europe Wroclaw, Poland 26-29 June 2017
Paper OP39
SOFTWARE DEFINED SUBSTATIONS AUTOMATION BASED ON
CENTRALIZED PROTECTION AND CONTROL ARCHITECTURE
Bastian FISCHER Bo ALMER
Locamation – The Netherlands Protrol – Sweden
Bastian.fischer@locamation.com ba@protrol.se
ABSTRACT
Today’s power systems are built based on a hierarchical
design with large centralized generation placed close to
the load of urban and industrial centers. The increase of
distributed and more intermittent generation requires a
new and more dynamic electric grid, which requires new
automation-, control- and protection schemes. Adding the
need to manage the infrastructure, the different lifecycles,
different speed of functional evolution along with the daily
changing cybersecurity threats make clear that a new
systemic approach is needed, with “separation of
concern” being an intrinsic design principle along with
future proofing functionality. This paper describes the
rational, the initial pilots and the roll-out into business as
usual along with the lessons learned from over 4.5million
operating hours in various network topologies.
INTRODUCTION
The fundamental difference in lifetime of existing primary
equipment and secondary technology along with the
increased rate of innovation has triggered several utilities
to rethink their business case, their strategy by adopting
the design thinking of “Separation of Concerns”. This IT
principle simplifies development and maintenance by
splitting the overall functionality into individual sections,
which can be reused, as well as developed and updated
independently. One of the key benefits is the ability to
improve or modify without having to know the details of
other sections, and without having to make corresponding
changes to those sections.
Only by applying this “design thinking” will it be possible
to transition the existing grids towards connecting
distributed energy resources at scale while upgrading
faster than ever before the functionality of secondary
control systems needed for safe and reliable operation.
SOFTWARE DEFINED ARCHITECTURE
Together with several major European Network Operators
a radical simplified architecture was conceived to cope
with the increase of complexity and faster obsolescence of
digital secondary systems since their introduction in the
90’s. The concept of the SASensor system is based on the
“Software Defined” principle a solution with a minimal
number of discrete “boxes” to cover the complete
substation functions. This reduction automatically
decreases the initial cost of the hardware, but moreover it
results in a reduction of engineering, installation, wiring
PACWorld Europe 2017
Bengt ALMGREN
Ellevio - Sweden
bengt.almgren@ellevio.se
and testing. The capital expenditure (CAPEX) is
substantial lower than currently offered functional
equivalent solutions. Mounting and testing of the sensors
is simple, therefore requiring short primary outage times
and reducing power system availability constraints.
Although the perception is sometimes different the
reliability of the system increases by minimizing the
number of components. Advanced software functions
make it possible to maintain a high level of availability due
to the complementary and even redundant nature of
available data in the system. Checking the plausibility of
the total data set of a substation is a major step in
improving the quality of information and simultaneously
decreasing the number of components.
SOFTWARE DEFINED FUNCTIONALITY
The primary process interface modules purely digitized the
voltage and current measurements as well as the digital I/O
positions. The processing of the data is performed in the
central control unit. This makes the implementation,
testing and release of new digital signal processing
algorithm for protection scheme or asset analysis merely
as simple as applying an upgrade without new engineering,
without new wiring and without any circuit intervention.
Thus, such an upgrade of software can be done at a
marginal cost compared to commissioning a new fit for
purpose dedicated box. Since all of the substation
functionality is defined in software an adjusted lifecycle
management process has to be implement and supported
with tools which are typically deployed and tested for the
ICT asset and configuration management. This life cycle
management includes next to the physical hardware the
1/5
 PACWorld Europe
installed versions, configurations, authorization, files,
users, security, and logs of the deployment and must be
documented, tracked and managed. Furthermore, regular
backup-, restoration-, disaster recovery and cyber security
test can be integrated to implement stringent IT/OT
compliance with industry norms and best practices.
CENTRALIZED PROTECTION & CONTROL
There is no formal definition of centralized protection and
control (CPC) in IEEE based upon the working group’s
survey of IEEE publications. The IEEE PES PSRC WG
K15 working group on Centralized Substation Protection
and Control defines a CPC as a system comprised of a
high-performance computing platform. Within SASensor
the Central Control Unit (CCU) is setup as a master-master
architecture to provide redundancy. CCU A and CCU B
are independently capable of providing protection, control,
monitoring, communication and asset management
functions by collecting and analyzing in real-time the data
those functions require. SASensor is using high-speed,
high-fidelity, time synchronized measurement data within
a substation. The optical isolation between the Current
Interface Module (CIM), the Voltage Interface Module
(VIM) and the Breaker/Binary Interface Modul (BIM) and
the Central Control Unit (CCU) ensures EMC-isolation
and follows the “separation of concerns” principle. One of
the main advantage of separating the Interface Modules
from Computing and Communication is the efficient end-
of-life management of those three different types of
equipment. The Interface Modules are designed to remain
for very long 30+ years in place, whereas the Central
Control Unit and Versatile Communication Unit might be
replaced sooner when more CPU or RAM resources are
needed to perform new protection schemes, new
algorithms, new asset health analysis, new control and
automation, new HMI or advanced cyber security threat
assessments.
CPC relies on a secure, resilient, redundant and time
synchronized communication architecture. The dedicated
versatile communication unit distributes station time and
controls access for the local HMI, SCADA and encrypts
the communication to the corporate IT/OT network.
PACWorld Europe 2017
Wroclaw, Poland 26-29 June 2017
Paper OP39
FUTURE PROOF FUNCTIONALITY
The CPC approach of SASensor provides a platform on
which all substation functions such as protection, control,
automation, logging, alarming and eventing as well as
storage and analysis of the high resolution, high precision
time synchronized data is performed within ruggedized
industrial computer and communication equipment. The
separation of hardware from functionality and from data
makes the hardware agnostic to its future use in the
substation. Thus, only at design time during the
engineering the configuration and parametrization of the
SASensor software determines the functions of the system.
It can be configured to perform a wide range of todays
known and required substation functions but its generic
design allows the implementation of new algorithms and
features in the future. Today, SASensor can be configured
to perform functions, such as protections, automation and
control, data-, alarm-, protocol and communication, high
fidelity measurement monitoring power quality and assets
signatures as well as operational functions such as time
synchronization, user- and access management, network
security, versioning of firmware or configuration.
SASensor requires only three device types to perform all
todays substation functions and provide maximum
flexibility to implement new functions and algorithms.
IMPLEMENTED PLATFORM
The platform concept consists of a layered integrated
hardware, firmware, software and data services
architecture engineered to work together.
Such a platform in the substations secondary system
provides benefits like:
• Maximum flexibility with future proof functionality
• Shorter cycle from design, development and roll-out
• Faster innovation cycles for functions and algorithms
• Faster maturation of hardware and software functions
• Increased productivity with less obsolescence
• Invoke and valorize developed applications of
knowledge institutes or specialized third party
software development companies
• Enablement of data-driven, on premise, hybrid or
cloud based machine learning algorithm
• Optimizing the Total Cost of Ownership for the
distribution system owner
2/5
 PACWorld Europe Wroclaw, Poland 26-29 June 2017

Paper OP39

IMPLEMENTED FUNCTIONALITY USER INTERFACE AND OPERATION

The deployment of the SASensor Platform in over 130+ The user interface of the system is completely web-based
installations at 275kV to 6kV levels has performed by now and supports the full lifecycle from design, to engineering,
over 4.5+ million operating hours in very different setups, deployment, operation, diagnostics, change and system
different applications and in different network- and management and all steps are integrated within the same
substation-types. This variety can only be accomplished framework and toolset.
with a rich set of generic functions capable to be combined
and configured as well as continuously extended to In the substation, the operation is performed on a robust
provide applications such as: industrialized PC or laptop. If enabled the same user
• Basic control and data acquisition functions, like interface can also be accessed from remote through a
alarm/event recording, telecontrol protocol support, secure and encrypted virtual private network connection.
graphical user interface for monitoring and control
• High fidelity, high speed data enabling a large
portfolio of different protections algorithm
• Software- and configuration version, release
management and deployment tools
• Embedded cyber security framework including
authentication, authorization and encryption
• Configuration of Substation Automation Applications
out of a repository of Function Blocks,
• Graphical application builder with Function Blocks
• Applications and/or Function Blocks can be
encapsulated in ‘encrypted containers' to ease version
& release management and protect the intellectual
property and the integrity of the system.

INHERENTLY BUILT-IN REDUNDANCY

Because all functionality is implemented in the Central
Control Unit only, redundancy is achieved by doubling the
CCU into two independent fully autonomous systems. TESTING
Application testing of a CPC system can almost
Although the interface modules for voltage (VIM), for
completely be done in the office. The data streams coming
current (CIM) and for breakers (BIM) are typically only
from the Interface Modules are massif but simple and well
single devices N-1 can be achieved either by duplicating
known and a defect interface module will be identified and
the most critical interface modules and/or by calculating a
directly replaced. The message going to the BIM are the
stream of sample-by-sample values based on the Kirchhoff
trip and close commands, extended with security and
law. In general, the calculated stream of voltage and
protocol data to enhance reliability of the interface.
current values from the Kirchhoff law are used to replace
one missing stream from one CIM or one VIM. The
Live recorded data streams or software generated data can
accuracy of the individual measurements is high enough to
be replayed in the CCU to test application software in a
replace a missing sample stream by the calculated one.
virtual live situation. This testing can be performed in an
This N-1 criterion is improving availability of data and
office environment. On site only a few peer-to-peer tests
functions without extra investments in hardware.
are performed to check overall configuration and settings.
The system design is inherent robust. In case that an
internal failure occurs, self-diagnostic functions will detect
PROTECTIONS
the failure, log the incident and if needed inform SCADA. The Current Interface Module CIM is equipped with
To minimize the incident by short maintenance times. double AD/converters to obtain a large measurement
Reliability and availability are maximized, not only by range, which is suitable to measure from 1% In up to 100
design but also with intelligent decision-making functions. x In short circuit currents. The digital signal is streamed
over fiber to the central processing unit where the signal is
In future, application functions can check on consistency processed and analyzed against the commissioned
of data to give information on the quality of the protection schemes such as PTOC, PAEF, PDEF, PDIS,
measurements and indications. The overall system quality PTOF, PTUF etc... and when exceeding the set points of
can be improved with knowledge rules interpreting the the bay the breaker is tripped by the BIM.
consistency of data.

PACWorld Europe 2017 3/5

 PACWorld Europe
CONTROL AND AUTOMATION
The centralized protection and control driven substation
architecture pre-integrates the data, logic, signals, control,
automation and communication functions into a single
real-time framework and thus significantly simplifies not
only the configuration, test, commissioning and operation,
but furthermore provides cross-bay logic, station wide
function and time synchronization and tooling for
improved situational awareness, for diagnostics and root-
cause analysis of any fault and tripping situation.
Some of the key control and automation functions:
• Local and remote control of the station
• Automatic switching sequences / Interlocking
• Voltage regulation and Tap Changer Control
• Operational data recording, metering and trending
• Alarm, exception and event recording
• Power Quality monitoring and recording
• Disturbance recording / historian
DIGITAL FAULT RECORDING
The Digital Fault Recording (DFR) continuously monitors
the operation of the electric power system, detects the
abnormal conditions in outgoing feeders, and
automatically records detailed voltage, current, contact
status and other related information during the abnormal
condition. Next the DFR provides data for the post fault
analysis. Automatic monitoring of process disturbances
across the entire station enables the possibility for better
process diagnostics. Digital Fault Recording can be started
by user definable events and stores sampled data streams
and half cycle RMS values of all relevant process
variables.
The DFR captures a snapshot that includes trigger info,
prefault state, DFR profile and P, Q, Vrms info. SASensor
stores the snapshot in a file and sends the file automatically
to the Remote Control Centre (RCC) where the fault
location can be calculated based on network topology.
PACWorld Europe 2017
Wroclaw, Poland 26-29 June 2017
Paper OP39
DATA DRIVEN TEST AUTOMATION
The CPC concept does not change the general need for
testing protection and control systems, but this concept can
change the specific requirements for, or methods of,
testing. The biggest change is that first the CPC separates
the central control unit from the physical interface modules
and second allows for data driven test automation of all
bay and station level functionality.
Elements to Test
Under the CPC concept, there are only three elements – the
CCU, the interface modules (BIM, CIM, BIM) and the
communications network between the CPC and interface
modules. All three elements have different testing
requirements and can be tested independently. The CCU
must be verified as working correctly. Since the CCU is a
generic industrial single board computer, the goal is to
ensure the CCU is configured correctly for the specific
application, and that it communicates correctly to the
interface modules. Testing must ensure that protections
and critical substation functions are executed correctly,
timely and deterministically. Therefore, massively
scalable and highly automated data driven testing are
applied to verify correct functional operation under normal
as well as under exception unnormal operating conditions.
The CPC approach allows continuous testing, verification
and simulation of abnormal operating conditions providing
a significant improvement to assess the behavior against a
defined outcome. Since these processes and techniques are
part of the development, engineering, acceptance and
commissioning processes the correctness of the
implemented applications and configurations is
significantly increased. Any collateral impact of a
configuration or software change can be vetted against an
established desired baseline.
Acceptance Testing
CPC has little impact on the general requirements for
acceptance testing, other than the requirements for tools
and procedures. It is necessary to verify that the CPC will
perform protection functions as desired, even with the
maximum number of functions enabled. This will require
verifying the performance of individual protection
elements, along with verifying the performance of the
entire CPC including the communication.
Commissioning Testing
Commissioning testing of a CPC is highly simplified as
virtual nature of the CPC allows commissioning checks to
be done in a laboratory/office environment. Interface
devices require on-site commissioning to prove the
physical parts of the hardware are operating correctly. The
communications network must be proven to operate within
performance parameters during commissioning. Final
commissioning is limited to verify connections without
completely retesting the entire system.
4/5
 PACWorld Europe
Maintenance Testing
The data centric CPC architecture simplifies maintenance
testing significantly as the continuous collection and
supervisions of Self-Monitoring Analysis and Reporting
Technology (S.M.A.R.T) data is providing real-time
condition based health information. Furthermore, the data
collected from multiple interface modules allows for
continuous self-testing and supervision of correct
operation. The communications network also requires
little to no maintenance testing due to self-testing and
built-in diagnostics. Mainly the physical BIM output
contacts, must be verified to be operating correctly during
normal primary equipment maintenance outages.
INHERENT CPC-BENEFITS
The CPC-Architecture provides inherent operational,
economical, technological and strategic benefits which
have been documented in large variety of different projects
and in different network topologies and configurations. As
outlined throughout this paper as well as in the table below
the CPC approach is transforming the way of designing
and operating substation into an intelligent, data driven
actively asset providing insight into the health of the CPC
architecture as well as into the entire electrical distribution
network assets such as cables, transformers and breakers.
The simplification and reduction of the number of device
types is reducing the lifecycle, warehousing and spare
parts along with supply chain and avoided obsolescence.
The Software Defined Substation functionality paired with
the agnostic generic hardware allows to futureproof
investments for the entire duration of the primary
equipment and thus provide best total cost of ownership to
the network operator. The ability to deploy new
functionalities by merely upgrading and automatically
testing the new application is an invaluable benefit to
operators. The business benefits are proven and valid but
quantify savings requires an individual assessment.
The below IEEE table summarizes the differences and
benefits of CPC compared to conventional IED’s.
PACWorld Europe 2017
Wroclaw, Poland 26-29 June 2017
Paper OP39
CONCLUSION
The software defined Centralized Substation Protection
and Control architecture of SASensor implementing the
functionality in Software and separating the physical
devices (hardware) into on the one hand into the fast
ageing components (computers) and the long unalterable
interface modules with the primary process (sensors /
interface modules) on the other hand.
The deployment of the SASensor Platform in over 130+
installations at 275kV to 6kV levels has performed by now
over 4.5+ million operating hours in very different setups,
different applications and in different network- and
substation-types and covering the full life cycle from
design, to implementation, operation, maintenance and
continuous improvement.
The challenges of the energy transition require the
replacement of old secondary systems with a new
substation platform able to cope with today’s
requirements, today’s best total cost of ownership while
being able to address future functionalities, new
operational procedure and a new data driven network,
asset and commodity management leveraging deep and
massively scalable machine learning.
The capital expenditure of the CPC architecture is
substantial lower than currently offered functional
equivalent solutions. Mounting and testing of the sensors
is simple and fast requiring short primary outage times and
reducing power system availability constraints while
providing one of the best TCO for greenfield and retrofits.
The effort to maintain and/or functionally upgrade the
system during its live is done by remote communication
by the grid company engineers from their office. Scarce
resources are deployed efficiently. The operational
expenditure is optimized and ew protection and control
schemes, like wide area protections and phasor
measurement functionality are possible with limited
implementation cost.
Multi-skilled teams will be assigned to engineer, install
and test the system for an efficient rollout. The newly
developed and adopted working procedures must have a
seamless connection to reach maximum scalability and
efficiency in continuous best practices improvement loops.
REFERENCES
[1] Ratan DAS, Mital KANABAR, 2015, IEEE PES
PSRC WG K15 Report "Centralized Substation and
Control"
[5] Adam THOMPSON, 2016, Master Thesis Virginia
State University “The Future of Substations:
Centralized Protection and Control”
5/5