US20220131366A1 - Primary and system protection for an electric power delivery system - Google Patents

Abstract

Primary protection relays and an integrator disclosed for providing primary protection and secondary applications for an electric power delivery system. The primary protection relays obtain signals from, and provide primary protection operations for the power system, and may operate independently from the integrator. An integrator receives signals and status communications from the primary protection relays to perform secondary applications for the electric power delivery system. The secondary applications may include backup protection, system protection, interconnected protection, and automation functions.

Description

RELATED APPLICATION
• This application claims the benefit of priority under 35 U.S.C. § 119 as a divisional application of U.S. patent application Ser. No. 17/034,142, filed on 28 Sep. 2020, and entitled “Primary and System Protection for an Electric Power Delivery System,” which claims the benefit of priority under 35 U.S.C. § 119(e) to U.S. Provisional Patent Application No. 62/914,451, filed on Oct. 12, 2019, and entitled “Primary and System Protection for an Electric Power Delivery System,” the contents of each are hereby incorporated by reference.
TECHNICAL FIELD
• This disclosure relates to primary and system protection for an electric power delivery system. More particularly, this disclosure relates to protection of an electric power delivery system using primary protection relays and an integrator for secondary applications.
BRIEF DESCRIPTION OF THE DRAWINGS
• Non-limiting and non-exhaustive embodiments of the disclosure are described, including various embodiments of the disclosure with reference to the figures, in which:
• FIG. 1 illustrates a simplified one-line diagram of an electric power delivery system for providing electric power to loads including a system for protection and automation.
• FIG. 2 illustrates a simplified block diagram of a typical intelligent electronic device (IED) used for electric power system protection.
• FIG. 3 illustrates a simplified one-line diagram of an electric power delivery system for providing electric power to loads including a backup protection.
• FIG. 4 illustrates a simplified block diagram of a primary protection device for maintaining protection of the electric power delivery system.
• FIG. 5 illustrates a simplified block diagram of an integrator for backup protection and automation of an electric power delivery system.
• FIG. 6 illustrates a simplified one-line diagram of an electric power delivery system with associated primary and backup protection system.
• FIG. 7 illustrates a simplified protection element diagram for an electric power delivery system.
• FIG. 8 illustrates a simplified one-line diagram of an electric power delivery system with associated primary and backup protection system.
DETAILED DESCRIPTION
• Electric power delivery systems are widely used to generate, transmit, and distribute electric power to loads, and serve as an important part of the critical infrastructure. Power systems and components are often monitored and protected by intelligent electronic devices (IEDs) and systems of IEDs that obtain electric power system information from the equipment and provide protective actions, monitor, and automate the power system. Several IEDs may be in communication to facilitate sharing of information for station-wide, area-wide, or even system-wide protection.
• Due to the critical nature of electric power systems, it is imperative to monitor and ensure that the equipment is operating within safe parameters even in the event of an anomaly such as a fault or cyber attack. Modern protection systems of IEDs have become increasingly complex and reliant on communications. Further, modern IEDs include hardware and firmware that is ancillary to secure and reliable protection of the power system. Communication systems are often necessary for present-day distributed protection, but often vulnerable to cyber attacks. What is needed is a protection system that provides reliable and secure primary protection and system protection for power systems without reliance on ancillary processes and communication.
• Presented herein are several embodiments of systems and methods to provide primary power system protection independent of communication, as well as interconnected protection that is secure and reliable.
• The embodiments of the disclosure will be best understood by reference to the drawings, wherein like parts are designated by like numerals throughout. It will be readily understood that the components of the disclosed embodiments, as generally described and illustrated in the figures herein, could be arranged and designed in a wide variety of different configurations. Thus, the following detailed description of the embodiments of the systems and methods of the disclosure is not intended to limit the scope of the disclosure, as claimed, but is merely representative of possible embodiments of the disclosure. In addition, the steps of a method do not necessarily need to be executed in any specific order, or even sequentially, nor need the steps be executed only once, unless otherwise specified. In some cases, well-known features, structures or operations are not shown or described in detail. Furthermore, the described features, structures, or operations may be combined in any suitable manner in one or more embodiments. It will also be readily understood that the components of the embodiments as generally described and illustrated in the figures herein could be arranged and designed in a wide variety of different configurations.
• Several aspects of the embodiments described may be implemented as software modules or components. As used herein, a software module or component may include any type of computer instruction or computer executable code located within a memory device and/or transmitted as electronic signals over a system bus or wired or wireless network. In addition, data being tied or rendered together in a database record may be resident in the same memory device, or across several memory devices, and may be linked together in fields of a record in a database across a network. Embodiments may be provided as a computer program product including a non-transitory computer and/or machine-readable medium having stored thereon instructions that may be used to program a computer (or other electronic device) to perform processes described herein.
• FIG. 1 illustrates a simplified one-line diagram of an electric power delivery system. It should be noted that the system may include multiple phases and additional equipment and complexity. Also illustrated is a system of IEDs that obtain electric power system information from merging units (MUs), and effect control actions on the electric power system using MUs to provide protection and automation to the electric power delivery system. The power system includes various equipment such as a bus102 (illustrated as a transmission bus) providing electric power to a second bus104 (illustrated as a distribution bus) via atransformer106 for stepping down the power from a high (transmission) voltage to a lower (distribution) voltage. Various feeders extend from thesecond bus104 for delivering electric power to distributed loads.Circuit breakers122,124,182,184,186,188 may be used to selectively connect and disconnect portions of the power system for various purposes such as reconfiguration, protection in the event of a fault, or the like.
• Abus protection relay140 may be an IED configured to determine operating conditions on a zone that includes thesecond bus104 and provide signals to effect a protection operation upon determination of an adverse condition. IED140 may obtain current signals related to electric power entering thebus104 fromMU130, voltages frombus104 usingMU132, and current signals related to electricpower leaving bus104 on the feeders fromMUs172,174,176, and178. IED140 may be configured to provide differential protection, overvoltage protection, and various other protection for zone including thebus104.
• Feeder protection relay150 may be an IED that obtains bus voltage signals fromMU132 and current signals related to the feeders fromMUs162,164,166, and168. IED150 may provide overcurrent, directional, distance, overfrequency, underfrequency, and other protection to the feeders.
• Transformer protection relay120 may be an IED configured to provide protection to thetransformer106. IED120 may obtain current signals from both sides of thetransformer106 from MUs or even directly fromCTs112 and116. IED120 may further provide information to IED140. IED120 may be configured to provide differential protection overcurrent protection, over frequency protection, underfrequency protection, and other various protection for thetransformer106.
• MUs may be in communication withvarious circuit breakers122,124,182,184,186, and188 to provide signals to the circuit breakers and receive status information from the circuit breakers. Upon receiving an “open” signal from an IED, the MUs may be configured to signal related circuit breakers to open. For example, upon detection of an overcurrent condition on the first feeder, IED150 may be configured to signalMU162 to openbreaker182 to remove current from the faulted feeder.
• In various embodiments, the IEDs may be in communication with a monitoring, automation, or other supervisory system ordevice190, such as a SCADA system. Although common, such a system for protection provides many opportunities for failure and attack. For example, primary protection is undertaken by devices that perform many ancillary functions. If any of the ancillary functions (such as communications) fails, the entire device may become unavailable for protection purposes, leaving equipment unprotected. Furthermore, all of the devices that rely on vulnerable communications may become subject to cyber attack at any point on the communication network.
• FIG. 2 illustrates a simplified block diagram of an IED200 such as thetransformer relay120,bus protection relay140, orfeeder protection relay150. The IED200 receives power system information such as currents and/or voltages from the power system. As illustrated, the IED200 obtains analog current and voltage signals from CTs and PTs. In other embodiments, IED200 may receive digitized analog signals from MUs. IED200 may includesampling circuitry210 includingcurrent input202 andvoltage input214.Such inputs202,214 may include various transformers, filters, and other hardware to condition the analog signals for sampling and digitizing by one or more analog-to-digital converters A/D218. The digitizedanalog signals222 may be provided to aprocessor224.
• IED200 may include various inputs and interfaces such as atime input212 to obtain a common time signal from a common time source. The common time signal may be used in various protection and monitoring functions. Acommunications interface216 may be provided to facilitate communications with SCADA, other IEDs, MUs, or the like. A monitoredequipment interface208 may be in communication with monitored equipment such as circuit breakers, transformers, capacitor banks, voltage regulators, reclosers, MUs, or the like to send command signals to the equipment and/or receive status information from the equipment. A computerreadable storage medium230 may be a repository of computer instructions for execution on theprocessor224. Although illustrated as a separate component, thestorage medium230 may be packaged with theprocessor224. In various other embodiments, the processor may be embodied as a dedicated processing device such as a field-programmable gate array (FPGA) operating various protection instructions. Various components may be in communication via acommunications bus242.
• The computer-readable storage medium230 may include instructions for execution of various operations of the IED. For example, a module ofcommunications instructions232 may be executed by the processor such that theIED200 performs communication functions with other devices. Thecommunications instructions232 may include instructions for formatting communications, receiving communications, addresses for communicating, settings related to compliance with IEC 61850 communications standards, and the like.Signal processing instructions240 may include instructions for processing current, voltage, and other signals for use by other protection and monitoring functions. For example,signal processing240 may include various digital filters, resampling, and the like.Protection actions instructions252 may include instructions for performing various protection functions such as overcurrent, differential, directional, distance, undervoltage, voltage regulation, bus protection, overfrequency, underfrequency, traveling wave, and other protection operations.
• It should be noted that typical IEDs perform many operations in addition to the primary protection operations required for safe and reliable operation of an electric power delivery system. In many installations, IEDs include orders of magnitude more lines of code dedicated to non-primary protection functions than to protection operations. For example, in a system of IEDs in communication under the IEC 61850 standard, each IED includes modules to execute communications and settings related to the communications to receive according with a Configured IED Description (CID) file.
• Should such IEDs fall victim to cyberattack or suffer other failure, the primary protective functions of the device may be compromised. For example, if such an IED or system of devices undergoes a cyber attack and is compromised, the attacker could take control of the IED and control primary equipment of the power system. Similarly, if an error occurs in one of the operations of the IED, it may perform a restart, during which time the protective functions of the IED are not operational. As the complexity of the functions (many of which are not directly responsible for protection) increases, the likelihood of error and need for restart also increases. Furthermore, it has been observed that the time for restart also increases as the complexity of the IED increases; thus increasing the time that the IED does not perform protective functions during the restart.
• In accordance with several embodiments herein, primary protection operations are physically separated from various other functions performed by IEDs and supervisory systems. Communication between primary protection relays and supervisory devices is not needed for primary protection operations. In various embodiments, the protection system includes primary protection relays in communication with the electric power delivery system to obtain signals therefrom (either directly or using a merging unit) and effect primary protective actions by sending commands to primary equipment (either directly or using a merging unit). Further, the primary protective relays may communicate with various other devices such as integrators, automation systems, monitoring systems, supervisory (SCADA) systems and other IEDs. However, the primary protective relays may continue to provide monitoring and protection functions even if such communications become unavailable. Furthermore, backup protection and interconnected protection is provided by a dedicated integrator that receives simple communications from the primary protection relays.
• FIG. 3 illustrates a simplified one-line diagram of an electric power delivery system such as the system illustrated inFIG. 1, including a protection system in accordance with the present disclosure. In particular, the protection system includes various primary protection relays320,340,362,364,366,368, that do not depend on communication with an automation, monitoring, or supervisory system to continue providing reliable primary protection to the electric power delivery system equipment. Primary protection relays may be configured to continue to provide primary protection functions when communications to other devices (for example, integrators, bus-protection relays, and other primary protection relays) is unavailable. Primary protection relays may further be configured to continue to provide primary protection functions during a loss of a communications network. Such primary protection relays may be used to separate primary protection functions from other functions traditionally performed by IEDs.
• One or more of the primary protection relays may be atransformer relay320 for providing protection totransformer106. Thetransformer relay320 may obtain current signals fromCT112 on the high voltage side of thetransformer106 andCT116 on the low voltage side of thetransformer106. As illustrated, thetransformer relay320 may obtain current signals directly fromCTs112,116. In various embodiments, thetransformer relay320 may obtain digitized analog signals from merging units in communication withCTs112,116 such as, for example,TMU330. In certain embodiments, thetransformer relay320 may also obtain voltage signals from the high voltage and/or low voltage sides of thetransformer106 using PTs or merging units in communication with PTs.
• Thetransformer relay320 may determine protective actions using the current and/or voltage signals from high and/or low sides of thetransformer106. For example, thetransformer relay320 may determine overcurrent conditions on the high and/or low sides of thetransformer106; time-overcurrent conditions on the high and/or low sides of thetransformer106; current differential conditions through thetransformer106; neutral overcurrent conditions; restricted earth fault conditions; directional power conditions; and the like. In certain embodiments, thetransformer relay320 may obtain temperature inputs from the transformer and determine temperature conditions of thetransformer106. More, different, or fewer protective elements may be performed by thetransformer relay320.
• Thetransformer relay320 may be in communication with one or more circuit breakers such asbreakers122 and124. Such communication may be direct communication with thecircuit breakers122,124 or via a merging unit such asTMU330. Upon detection of a condition outside of predetermined operating conditions, thetransformer relay320 may send an open or trip command to one or bothcircuit breakers122,124, thus effecting a trip protective action. Accordingly, thetransformer relay320 may provide protective functions to equipment of the electric power system.
• Similarly, feeders frombus104 may be protected usingfeeder relays362,364,366,368. Feeder relays362-368 may obtain current signals from respective feeders using CTs and/or merging units such asTMUs372,374,376,378. Feeder relays362-368 may further obtain voltage signals from the bus using a PT and/or a merging unit such asTMU332. Using the current and/or voltage signals, the feeder relays362-368 may determine operating conditions on the respective feeders including, for example: phase overcurrent; ground overcurrent; neutral overcurrent; negative sequence overcurrent; arc flash; overvoltage, undervoltage; directional power; overfrequency; underfrequency; rate-of-change-of-frequency; fault direction; fault distance; and the like. In the event of a condition determined outside of predetermined operating conditions, the feeder relay362-368 may be configured to send an open or trip command to an associated circuit breaker, thus effecting a protective action on the electric power delivery system.
• Feeder relays362-368 may be in communication withrespective circuit breakers182,184,186,188 as illustrated. In various embodiments, the feeder relays362-368 may be in direct communication with the circuit breakers182-188 as illustrated. In various other embodiments, the feeder relays362-368 may be in communication with the circuit breakers182-188 via merging units such as TMUs372-378. Accordingly, feeder relays362-368 may provide protection to the feeders using measurements from the power system, using the measurements in one or more protective elements and effecting a protective action by commanding a circuit breaker to open.
• Various other primary protection relays may be used to provide primary protection functions for different equipment of an electric power delivery system. For example, generator relays may be configured to provide primary protection for generators; motor relays may be configured to provide primary protection for motors; and so forth. Generator relays may provide primary protective functions for a generator such as, for example, overvoltage, undervoltage, overcurrent, current differential, frequency protection, stator ground, restricted earth fault, thermal, directional, out-of-step, loss-of-field, breaker failure, field ground, and the like. Motor relays similarly provide primary protective functions for a motor including, for example, undervoltage, overvoltage, loss-of-potential, arc-flash, overcurrent, out-of-step, frequency protection, broken rotor bar, current differential, thermal, and the like.
• The protective system may include anintegrator350 in communication with various devices and equipment in the electric power delivery system. Theintegrator350 may perform system functions such as monitoring, automation, supervisory, communication, backup protection, interconnected protection, and other functions. As illustrated, the primary protective relays (such as, for example, thetransformer relay320 and the feeder relays362-368) may be in communication with theintegrator350. According to various embodiments, the primary protective relays may transmit information to the integrator useful for its functions. The primary protective relays may sample electric power system signals and use the samples for primary protection functions. The primary protection relays may transmit the samples to the integrator. The primary protective relays may transmit other communications to the integrator, such as indications of protective actions taken by the primary protective relays upon taking such protective actions. The integrator may receive and resample all streams of electric power system samples (from all connected primary protection relays). The integrator may time align the resampled signals for use in secondary applications. The secondary applications may determine electric power delivery system conditions using information from the primary protective relays, and assert a command based on the determined conditions. That is, if the electric power delivery system conditions are outside of predetermined operating conditions, the secondary applications may determine a control signal and produce a control command for the electric power delivery system. The secondary applications may generally be backup protection, system protection, automation, and the like. One such secondary application is to provide centralized protection functions for a portion of the electric power system. Primary and/or backup protection can be provided using the integrator for several applications including, for example, fast bus/zone interlock scheme for bus protection, breaker failure protection, cable differential protection, and the like. Additional description of the secondary applications performed by the integrator is provided hereafter.
• The primary protective relays may communicate calculations such as results of protection operations to theintegrator350. For example, afeeder relay362 may detect a fault and calculate the magnitude of the fault. Thefeeder relay362 may be configured to communicate to theintegrator350 the occurrence of the fault, a time, the distance to the fault, the current, and the protective action that was taken.
• Furthermore, the primary protective relays may be configured to communicate to theintegrator350 when thresholds are crossed by power system conditions even if a protective action is not taken. For example, thetransformer relay320 may determine that a temperature of thetransformer106 is elevated above a high threshold, but has not yet reached a trip threshold. In such an instance, thetransformer relay320 may send the temperature information to theintegrator350.
• The protection system may also include a primary protection relay in the form of abus protection relay340 configured to provide protective functions to thebus104.Bus protection relay340 may be a primary protection relay, as it is capable of obtaining power system measurements and providing protective functions without communication with any monitoring or other supervisory system.Bus protection relay340 may obtain electric power system measurements related to electric power entering and leaving the protectedbus104 using CTs, PTs and the like and/or merging units. As illustrated,bus protection relay340 obtains currentmeasurement entering bus104 from mergingunit330 which obtains currentsignals using CT114. Voltage measurements may be obtained from mergingunit332 which obtains voltage signals from thebus104 using a PT. Measurements of current leaving thebus104 may be obtained from mergingunits372,374,376,378, which obtain current signals from the feeders using CTs. Thebus protection relay340 may use the currents and/or voltages to perform various protection functions such as, for example: overcurrent (phase, ground, neutral); breaker failure; time-overcurrent; current differential; undervoltage; overvoltage; and the like. Thebus protection relay340 may be configured to protect a zone of the electric power delivery system such as, for example, betweencircuit breaker114 and breakers182-188. Thebus protection relay340 may be configured to detect an event using the currents and/or voltages, and send a trip command to one or more circuit breakers to remove power from a portion of the power system affected by the event. For example, thebus protection relay340 may determine that a fault is present onbus104 using current differential protection principles, andcommand breaker124 to open (either via direct communication or via merging unit330) to remove electric power from the faultedbus104. Thebus protection relay340 may further command breakers182-188 to open (either via direct communication or via merging units372-378) to limit potential backfeed from the feeders into the faultedbus104.
• Similar to the primary protection relays320 and362-368, the bus relay is configured to continue providing protective functions to the power system regardless of availability of any integrator, monitoring, automation, or supervisory systems or devices. In various embodiments described herein, the primary protection relays320,340,362-368 may be configured to primarily perform protective functions, with secondary functions being removed to a separate device such as theintegrator350. For example, calculating, time stamping, and time aligning synchrophasors may be unnecessary for protective functions, and thus removed to the integrator. Similarly, many communications functions such as formatting communications to correspond with supervisory protocols may be removed to the integrator.
• Some primary protection functions may be performed by a combination of primary protective relays. For this, the system may include some communication between primary protection relays. As illustrated, adedicated communication pathway370 is configured betweenfeeder relay368 andbus relay340. Although a single communication pathway between one feeder relay and the bus relay is illustrated, several primary protection relays may be in similar communication. The communication may be peer-to-peer, high speed, and operate on optical or electrical media. The communication may operate in accordance with the MirroredBits® protocol available from Schweitzer Engineering Laboratories, Inc. of Pullman, Wash. In certain embodiments, the communication may facilitate primary protection functions such as, for example, transfer trip, blocking, interlocking, permissive schemes, direct control, relay-to-relay communications, or the like. In the illustrated example, thecommunication370 may be useful for direct transfer tripping by thebus relay340 in the event of breaker failure detection by thefeeder relay368. Thus, the bus relay may clear a fault by openingbreaker124 and/or122 in the event thatbreaker188 does not trip.
• FIG. 4 illustrates a simplified block diagram of a primaryprotective relay400 in accordance with several embodiments herein. The primaryprotective relay400 may be configured as a transformer relay, bus relay, feeder relay, motor relay, generator relay, or the like. The primaryprotective relay400 may be configured to perform dedicated protective functions available even without communication with any monitoring, automation, or supervisory system. As illustrated, the primaryprotective relay400 may include asignal input410 for obtaining electric signals from the electric power delivery system either from primary equipment or from MUs. In the illustrated embodiment,current signals422 may be obtained from an instrument transformer such as a CT; andvoltage signals424 may be obtained from an instrument transformer such as a PT. Various other equipment may be used to obtain currents and/or voltages. The current andvoltage signals422,424 may be sampled and digitized by one or more analog-to-digital (A/D)converters418. The signal input may include various other filters and the like to condition the signal for use by the protective functions. Although a single set of current and voltage signals are illustrated, the primaryprotective relay400 may be configured to obtain multiple current signals and/or multiple voltage signals.
• Furthermore, although the illustrated embodiment includes a primaryprotective relay400 configured to obtain current and voltage signals directly using thesignal processing410, in several embodiments digitized current and/or voltage signals may be obtained using a MU. In such embodiments, the primaryprotective relay400 may be configured with appropriate communication media for receiving digitized analog signals from one or more MUs. Further still, the primaryprotective relay400 may be configured to provide a sample timing signal to the MU(s) to control sample timing.
• The primaryprotective relay400 may also include input/output for signaling to and receiving information from primary equipment. The input/output may be in direct communication with the primary equipment or may be in communication with a merging unit for transmitting commands to primary equipment and receiving information from primary equipment. For example, the primary equipment may be a circuit breaker or a recloser configured to open and/or close on command and provide a status signal indicating a state of open or closed. In other embodiments, the primary equipment may be a switch, voltage regulator, motor, generator (generator governor, inverter, or the like), capacitor bank, reactor, transformer, or the like, depending on the configuration of the primaryprotective relay400.
• The primaryprotective relay400 may include an alarm output configured to provide an alarm signal upon occurrence of predetermined conditions such as taking a protective action, fault detection, or the like. The alarm signal may be provided as closing a contact output, a visual alarm, an audible alarm, a digital communication, or the like.
• The primaryprotective relay400 may also include one ormore communications ports416. In some embodiments, thecommunications ports416 may be electrical. In various embodiments, thecommunications ports416 may be optical to electrically isolate the primaryprotective relay400 from the integrator, monitoring, automation, supervisory, or other systems and devices. The communications fromcommunications ports416 may be synchronous or asynchronous, and used for various predetermined purposes such as, for example, setting the primaryprotective device400, communication with monitoring, automation, supervisory or other systems or devices, communication with one or more integrators, communication with one or more primary protection devices, testing, or the like.
• The primaryprotective relay400 may include a processing unit for executing the functions of the primaryprotective relay400. As illustrated, the processing unit may be embodied as a field-programmable gate array (FPGA)430 including instructions that when executed cause the primaryprotective relay400 to perform functions in accordance with the instructions. In various embodiments, the processing unit is embodied as an FPGA; whereas in various other embodiments, the processing unit may be any hardware capable of executing computer instructions such as a microprocessor, application-specific integrated circuit (ASIC), or the like, or even combinations of different varieties of processing units (e.g. portions of instructions executed by a processor and portions of the instructions executed by an FPGA). The functions may includesignal processing440 andprotection actions452.Signal processing440 may include instructions useful for conditioning the digitizedanalog signals426 into useful quantities for protection actions. For example, if the protective function includes an overcurrent element, thesignal processing440 may calculate current magnitudes for the protected phases. Similarly, another protection element may require a negative sequence of the electrical signal, and thesignal processing440 may be configured to calculate the negative sequence of the three-phase signal.
• Theprotective actions452 may include instructions for the use of the signals fromsignal processing440 to perform the selected protective functions. The available protective functions will depend on the settings and the type of primaryprotective relay400. For example, if the primaryprotective relay400 is a transformer relay, theprotective actions452 may include: overcurrent elements (phase, high side, low side, neutral, ground); time overcurrent; current differential; restricted earth fault; directional power; and so forth. Settings may be applied to theprotective actions452 depending on the specific protected equipment and system. In operation, theFPGA430 may execute theprotective actions452 using the settings and the obtained electrical signals to determine a condition of the protected primary equipment or power system. Upon detection of predetermined conditions, theFPGA430 sends a control signal to the protected equipment, such as a trip/open command to a circuit breaker. Furthermore, theFPGA430 may operate instructions for communicating using port(s)416 to signal to one or more integrators the power system conditions, actions taken, or the like. Even in the failure or unavailability of thecommunications416, however, the primary protective relay402 may be configured to continue executing theprotective actions452, maintaining protection to the primary equipment and power system.
• Thus, according to several embodiments herein, the primary protection relays are configured to receive electric power delivery system signals, determine a status of the electric power delivery system using those signals, and assert a protective action command when the status is outside of a predetermined operating parameter. The primary protection relays may further be configured to transmit the electric power delivery system signals (or a subset thereof) and the status to a supervisory device such as an integrator. The integrator, as set forth in more detail below, may be configured to use the electric power delivery system signals and status information to perform secondary applications. In general, the secondary applications may include determining an electric power delivery system condition and asserting a command based on the electric power delivery system condition.
• FIG. 5 illustrates a simplified block diagram of an integrator in accordance with several embodiments of this disclosure. An integrator facilitates the physical separation of protection functions (performed by the primary protective relays) from non-protective functions (performed by the integrator). The function of the integrator is to provide non-primary protective functions such assecondary applications580, integration with other integrators, as well as communication with monitoring, automation, and supervisory applications. Certain functions previously performed by IEDs protecting electric power systems that are not directly required for primary protection may be removed from the primary protective devices in accordance with the present disclosure, and performed by anintegrator350. Each integrator may be in communication with one or more primary protective devices, one or more other integrators, as well as other monitoring, automation, and supervisory systems.
• As discussed above, the primary protective devices are configured to continue to provide protective functions to the electric power delivery system even when the integrator or other monitoring, automation, and/or supervisory systems and devices are unavailable. Thus, protection of the electric power delivery system continues through times of disruption or unavailability of the integrator (e.g. during testing procedures, restart, upgrade, settings changes, hardware malfunction, software error, bit flip errors, physical attack, cyber attack, or the like). The integrator may be configured to stop its communication with primary protective devices in the event of a disruption or period of unavailability of the integrator so that such integrator disruption or unavailability cannot affect the protective functions of the primary protective devices.
• As illustrated inFIG. 5, theintegrator350 includes aprocessing device510 for executing instructions related to such functions. Theprocessing device510 may be any processor capable of executing computer instructions including, for example, a computer processor, a microprocessor, an FPGA, or the like, and may be packaged with or be in communication with computer memory for storing computer instructions to be executed by theprocessing device510. The various operations that may be stored as computer instructions and when executed by theprocessing device510 performed by the integrator include, for example, event reporting512, communications switching514, resampling andtime alignment524,communications526,security528, and the like, as well assecondary applications580 that include backup protection and system protection functions. Theintegrator350 may include event recording532 functions where power system conditions, time, and actions taken are recorded for later retrieval, and/or transmission using theevent report function512. Theintegrator350 may performmetering operations534. The integrator may also perform settings and/orfirmware management operations536 such as, maintaining current records of settings and firmware versions for each of the connected primary relays; updating settings on primary relays; updating firmware of primary relays; and the like.
• Theintegrator350 may be in communication with, and even facilitate communication among several different devices and systems including, for example: one or more feeder protection relays400 (such as feeder protection relays362,364,366,368);transformer protection relay320;bus protection relay340; motor relay, generator relay; and the like. Theintegrator350 may be in communication with other integrator(s), monitoring, automation, or supervisory systems such as, for example,SCADA570. As suggested above, theintegrator350 may perform communication functions and may function as a communication switch among the various connected devices.
• Theintegrator350 may include one or more disconnect switches552,554,556,558,560,562 for selectively making and breaking communication paths with the various connected devices. Any configuration of switches capable of selectively breaking the communication pathways to the various device may be used. The switches552-562 may be in the form of electromagnetic relays capable of rapid disconnection. The switches552-562 may be optical switches when communication with the devices uses optical media. In any case, the switches552-562 may be configured to disconnect communication between the various devices and theintegrator350.
• The switches552-562 may be operated by akill switch502. When activated, thekill switch502 may signal the switches to open (e.g. an electrical signal to a relay, an electrical signal to an optical switch, a physical action on physical contacts, or the like), thus disconnecting communications between the integrator and the various devices, including the primary protection relays. Thekill switch502 may be operated by various actions. In one embodiment, theintegrator350 includes a dedicated physical input (pushbutton, membrane button, switch, or the like) that may be activated by a human operator to activate thekill switch502. Accordingly, an operator may activate thekill switch502 using the physical input to immediately open the switches, disrupting communications between theintegrator350 and connected devices. The physical input may be situated on a front panel of theintegrator350, near a human-machine interface of theintegrator350, or on other such face of theintegrator350 so as to be accessible by an operator.
• As mentioned above, the various primary protection devices and/or merging units in communication with theintegrator350 may provide a stream of samples to theintegrator350. Theintegrator350 may operate resampling andtime alignment524 instructions to resample the various streams of samples and time align the resampled values. The primary protection devices may also transmit status messages to the integrator relating to the status of the monitored equipment and/or status of the various operations of the primary protection relays. For example, status of equipment may include open/closed status of breakers or switches, temperature, and the like. Status of protection operations may include indication of when a threshold is crossed, protection commands (e.g. trip), and the like. The resampled and time-aligned samples as well as the status of equipment and status of protection operations may be made available for varioussecondary applications580. The secondary applications may include several backup protection applications and centralized protection functions, even while the primary protection relays continue to provide primary protection to the various equipment associated therewith.
• Some examples of backup protection functions includebus backup protection518,feeder backup protection520, andtransformer backup protection522. The backup protection functions may operate similarly protection applications as the primary protection relays performing similar protection operations. In other embodiments, the backup protection functions may use samples from multiple primary protection relays to perform the backup protection functions. The backup protection may be redundant to the primary protection of the primary protection relays. The backup protection may include a time delay configured to allow the primary protection to operate before the backup protection performs an action.
• Theintegrator350 may be configured to performbreaker failure538 protection, in which theintegrator350 determines whether a breaker has operated after a signal has been sent to open the breaker. If the breaker has not opened, theintegrator350 may send a signal to the merging unit and/or to the primary protective relay to attempt to open the breaker.Breaker failure538 may use the resampled and time-aligned samples and other communications from various primary protection relays to determine that the open signal has been sent and that the breaker has not opened. For example, a primary protection relay in the form of afeeder relay362 ofFIG. 3 may detect an overcurrent condition on the feeder, transmit an open command tobreaker182, and transmit the overcurrent condition and the command to theintegrator350. Indeed, theintegrator350 may signal a second breaker to open, where the second breaker is positioned to also remove power from the effected portion of the electric power delivery system. For example, upon detection of a fault on its feeder, primaryfeeder protection relay362 may signalbreaker182 to open (via merging unit372), and transmit the open signal to theintegrator350. On failure of the breaker to open, theintegrator350 may continue to receive current signals from the primaryfeeder protection relay362 and from the primarybus protection relay340 indicating that an overcurrent condition continues to persist. Furthermore, mergingunit372 may provide a “closed” signal status of thebreaker182 to primaryfeeder protection relay362; which signal the primaryfeeder protection relay362 sends to theintegrator350. Thus, upon detection of the failure of thebreaker182 to open (using the continued overcurrent signal and/or the “closed” status of breaker182), theintegrator350 may signal forbreaker122 and/or124 to open, removing power from thebus104 and related feeders.
• In relation to thefast bus516 protection,FIG. 6 illustrates a simplified one-line example of a power system protected in accordance with several embodiments described herein. The system includes asource line690 withbreaker692,bus602, andfeeders632,634,636, and638 that includebreakers642,644,646, and648. Each feeder is protected by a primaryfeeder protection relay662,664,666,668 that obtain signals and signal breakers using mergingunits652,654,656, and658. Source is protected using primarysource protection relay696 that obtains signals and controlsbreaker692 via mergingunit694. Anintegrator350 in accordance with the several embodiments herein obtains signals and other communications from the various primary protection relays, and sends commands and other communications to the various primary protection relays.
• Afault614 on the source line is only detected by the primarysource protection relay696 due to an overcurrent detection. Proper primary protection for this fault is for the primary source protection relay to openbreaker692 upon detection of the overcurrent condition. In another example, afault612 is detected by both the primaryfeeder protection relay668 by an overcurrent onfeeder638, and by the primarysource protection relay696 by an overcurrent through the source, to the bus, tofeeder638 to thefault612. Proper primary protection forfault612 is to openbreaker648 and notopen breaker692, even though bothrelays668 and696 detected the fault. This removes power from only onefeeder638 instead of from all four feeders. Such coordination may be accomplished by coordinating action of the primarysource protection relay696 and the feeder protection relays668. This coordination may be performed in theintegrator350.
• FIG. 7 illustrates an example of a contact output arrangement that may be logically applied by thefast bus application516 of theintegrator350. The contact output arrangement for the primarysource protection relay696 may include normally closedcontacts704,706,708 for the feeder relays, a normallyopen contact710 for the primarysource protection relay696, and atimer712 for instigating a signal to the breaker trip coil (or signal the mergingunit694 to open the source breaker692). If no feeder detects an overcurrent condition (e.g.fault614 on source),contacts704,706, and708 remain closed, and contact710 closes upon detection of the overcurrent condition. A short (5 cycle as illustrated)coordination timer712 is initiated providing time for the feeder protection relays to detect and signal a fault by opening the associatedcontacts704,706,708. If none of the feeder protection relay contacts open, then the trip signal is sent to the source merging unit694 (via the primary source protection relay696) to openbreaker692. However, if a primary feeder protection relay detects a fault, such asrelay668 detectingfault612, then the signal is sent to theintegrator350, and the associatedlogical contact704 is opened such that no signal is sent to open thesource breaker692. Accordingly, fast bus protection is implemented using an integrator without communications or wiring trip contacts between multiple primary protection relays in a protection system.
• FIG. 8 illustrates a simplified one-line diagram of a portion of an electric power distribution system in a looped-feeder configuration, that includes anintegrator350 for secondary applications. It should be noted that the simplified diagram does not specifically illustrate source or transformer protection, which would likely be included in a complete protection system for such a distribution system. The distribution system includes twosources816,818 providing electric power to loads onfeeders804,806,808, and810 viabus802. Thebus802 is selectively connected usingbreaker824. It should be noted that the illustrated protection system does not include merging units for simplicity, however merging units may be used to sample and provide digitized analog signals to the primary protection relays, as well as provide status and commands to equipment such as circuit breakers. Primary protection relays852,854,856,858,860,862, and864 may be used to provide primary protection to the sources, bus, and feeders. It should be noted that the primary protection relays852-864 are all labeled as primary feeder protection relays, but may be configured as other types of primary protection relays.
• Theintegrator350 may be in communication with the primary protection relays852-864 and configured to provide several secondary applications including, for example, bus protection, sectionalization, breaker failure protection, remote breaker control, local breaker control, and status indication for the non-radial power system. Each feeder shown may be looped or have a remote source.
• The primary protection relays852-864 may be associated with thebreakers820,822,824,826,828,830, and832. The primary protection relays852-864 may include directional elements that operate in both forward and reverse directions. Directional elements of the primary protection relays may determine the direction to the fault.FIG. 8 illustrates the relative forward direction. In addition to protecting the associated line, each primary protection relay transmits the status of its directional overcurrent elements to theintegrator350. The integrator may combine directional decisions and send signals to trip the appropriate breakers in the event of a bus fault (fast bus application516 and/or bus backup application518) or a failed breaker (breaker failure application538).
• Theintegrator350 may declare a bus fault if any of the primary protection relays detects a fault in the direction of a bus section and no relay connected to that section detects a fault in the direction away from the bus. This logic recognizes that a remote breaker might be open, or a line might be radial, eliminating any directional decision from the line relay. When theintegrator350 detects a bus fault, it issues trip commands to each relay on the faulted bus section. Theintegrator350 allows any relay to be taken out of service with the associated breaker open without impacting bus protection. Should any relay fail without being taken out of service, or in the event a relay loses a potential transformer connection (directly or via an associated merging unit), theintegrator350 disables bus protection, and sends a signal to all relays on the affected bus section. The relays then revert to coordinated time overcurrent protection to protect the bus and breakers.
• In some embodiments, thesecondary applications580 of integrator305 may includecable differential protection540. Thecable differential540 may obtain current signals at two points on any protected zone, such as two ends of a power cable, and apply differential protection to the zone. Thecable differential protection540 may compare the currents (re-sampled and time aligned) at each point on the protected zone. The current differential may be segregated phase or composite. Symmetrical components of the current signals may be used. Upon detection of a current differential, the integrator305 may signal to open circuit breakers to isolate the faulted section. In some embodiment, the protected zone may be an underground portion of an electrical line. In some embodiments, the protected zone may be a section of line between two buses.
• While specific embodiments and applications of the disclosure have been illustrated and described, it is to be understood that the disclosure is not limited to the precise configurations and components disclosed herein. Accordingly, many changes may be made to the details of the above-described embodiments without departing from the underlying principles of this disclosure. The scope of the present invention should, therefore, be determined only by the following claims.

Claims (14)

What is claimed is:

1. A system for providing primary and system electric power delivery system protection, comprising:

a first primary protection relay and a second primary protection relay to provide primary protection to the electric power delivery system, each of the first and second primary protection relays comprising:

a power system signal input for receiving electric power delivery system signals;

a protection element to determine a status of the electric power delivery system using the electric power delivery system signals and assert a protective action command when the status is outside of a predetermined operating parameter;

a protective action output for transmitting a protective action command to be performed by primary equipment of the electric power delivery system; and,

a communications output to transmit the power delivery system signals and status;

an integrator in communication with the first and second primary protection relays to receive the power delivery system signals and status from the first and second primary protection relays, comprising:

a processor executing computer instructions for electric power system monitoring, the instructions comprising secondary applications using the power delivery system signals and status to determine an electric power delivery system condition and assert a command based on the electric power delivery system condition.

2. The system ofclaim 1, wherein the secondary applications comprise a backup application.

3. The system ofclaim 2, wherein the backup application is redundant to the protection element.

4. The system ofclaim 3, wherein the backup application comprises a time delay to allow the protection element to operate before the backup application asserts the command.

5. The system ofclaim 2, wherein the backup application comprises a bus backup application.

6. The system ofclaim 2, wherein the backup application comprises a feeder backup application.

7. The system ofclaim 2, wherein the backup application comprises a transformer backup application.

8. The system ofclaim 1, wherein the secondary application comprises a fast bus transfer application, and the command comprises opening a breaker of the electric power delivery system, and closing a switch of the electric power delivery system.

9. The system ofclaim 1, wherein the secondary application comprises a breaker failure application, and the command comprises opening a specified breaker of the electric power delivery system to remove power from a faulted feeder that includes a failed breaker.

10. The system ofclaim 1, wherein the secondary application comprises a cable differential application, the condition comprises determination of a current differential, and the command comprises opening a breaker to remove power from a section of the electric power delivery system.

11. The system ofclaim 1, wherein the secondary application comprises electric power delivery system automation.

12. The system ofclaim 1, wherein the integrator comprises computer instructions for resampling and time aligning the electric power delivery system signals from the first and second primary protection relays, and using the resampled and time-aligned electric power delivery system signals in the secondary applications.

13. The system ofclaim 1, wherein the integrator is configured to perform the secondary applications in parallel with operation of the protection element of the first and second primary protection relays.

14. The system ofclaim 1, wherein the first and second primary protection relays are configured to maintain operation of the protection element upon loss of communication with the integrator.

Images