As digitization progresses, operators of energy supply networks are confronted with the IEC 61850 standard. It includes data models and communication protocols for electrical substations. Since these protocols are integral to the critical infrastructure, ensuring fault- free operation is the highest priority. In this work, the communication protocols of the standard were tested for their robustness and safety. Protocol fuzzing was used for this, a procedure in which manipulated packets are sent to a system under test in order to uncover any vulnerabilities. To do this, an original packet was captured and mutated millions of times and sent back into the network. The network was set up in a laboratory specially for these tests. It consists of three intelligent electronic devices, which represent part of a substation system. The devices were configured according to the standard. The standard-compliant functioning of the communication protocols was ensured using proprietary software. The developed fuzzing tool is based on another well-known paper. This was extended with methods of error detection and thus adapted to a black-box approach. No vulnerabilities were found in the analysed intelligent electronic devices.:Abkürzungsverzeichnis VI Abbildungsverzeichnis VIII Tabellenverzeichnis IX Listings X 1 Einleitung 1 1.1 Motivation der Norm IEC 61850 1 2 Grundlagen 3 2.1 Netzwerksicherheit 3 2.1.1 Protokoll-Fuzzing 4 2.2 Energieversorgungsnetz 5 2.2.1 Schaltanlage 6 3 Norm IEC 61850 9 3.1 Datenmodell 10 3.2 Kommunikationsdienste 12 3.2.1 Generic Object Oriented Substation Event (GOOSE) 14 3.2.2 Manufacturing Message Specification (MMS) 15 3.3 System Configuration description Language (SCL) 16 4 Stand der Foschung 17 4.1 Literaturrecherche 17 4.2 Literaturanalyse 18 5 Testanlage 21 5.1 Software 21 5.2 Aufbau 23 5.3 Konfiguration 24 5.4 Testkonzept f¨ur die Funktionspr¨ufung 25 6 Fuzzing-Test 28 6.1 Fuzzer 29 6.1.1 Repository ”61850-Fuzzing“ 29 6.1.2 Anpassung des Fuzzing-Skripts 30 6.2 Durchf¨uhrung und Auswertung 36 7 Zusammenfassung und Diskussion 39 7.1 Ausblick 40 8 Anhang 42 8.1 Teile der Norm IEC 61850 - Kommunikationsnetze und -systeme f¨ur die Automatisierung in der elektrischen Energieversorgung 42 8.2 Tabelle der Literaturanalyse 45 8.3 Listing von target alive 47 8.4 Testbericht des ’Operate‘-Befehls 48 8.5 Anlagenverzeichnis 51 Literatur 52 Eidesstattliche Erklärung 56

Os objetivos deste trabalho são apresentar e avaliar o projeto de uma subestação focando o compartilhamento da instalação, dos equipamentos e particularmente das informações entre empresas de transmissão e distribuição de energia, o que gera implicações relativas à segurança de acesso aos dados, à segurança na manutenção e operação e à divisão das responsabilidades técnicas. A necessidade desse tipo de projeto vem se tornando frequente no estado de São Paulo à medida que cresce o acesso ao sistema de transmissão pelas usinas térmicas das empresas do setor sucroalcooleiro, em concordância com as resoluções normativas da Agência Nacional de Energia Elétrica. O trabalho propõe a configuração de funções de supervisão e proteção utilizando a troca de informações entre os agentes através do serviço de mensagens prioritárias previsto na norma IEC 61850, em substituição aos relés auxiliares e ao painel de interface que utiliza cabos de cobre. Tendo a segurança como ponto principal de discussão quando se deseja conectar duas redes de comunicação de empresas diferentes, são avaliadas, através de simulações, as operações das lógicas de proteção, o acesso aos dados, e a troca de informações de supervisão. Algumas tecnologias apresentadas já são amplamente utilizadas na área de Tecnologia da Informação, como os requisitos de segurança digital e que, se utilizados em sistemas baseados na IEC 61850 sem impactar significantemente na performance e nos custos, apresentam enormes vantagens para os sistemas digitalizados das subestações. Por fim, são apresentadas as diferenças e os benefícios de se utilizar os recursos da norma para um projeto tão particular. / The aims of this study are to present and to evaluate the design of a substation, focusing on the sharing of the installation, equipments, and particularly on the information between transmission and distribution energy companies. This will highlight implications for data access security, along with the security concerning maintenance and operation of a substation and the division of technical responsibilities. The need for this type of project is becoming common in the state of São Paulo as the access to the transmission system by thermal power plants of sugar companies increases, in accordance with the normative resolutions of the Agência Nacional de Energia Elétrica. The study proposes the configuration of supervision and protection functions using exchange of information between agents via priority messaging service provided by IEC 61850 instead of the auxiliary relays and panel interface that uses copper wires. When connecting two communication networks of different companies while considering safety as the main issue, simulations are conducted to evaluate protection logic operations, data access and supervision data exchange. Certain technologies presented here are already widely used in Information Technology, such as the cyber security requirements. When utilized in IEC 61850 based systems without significantly impacting performance and costs, these cyber security requeriments present great advantages for the substations digitalized systems. Finally, differences and benefits are considered for the use of the resources of the norm for such a particular project.

Os objetivos deste trabalho são apresentar e avaliar o projeto de uma subestação focando o compartilhamento da instalação, dos equipamentos e particularmente das informações entre empresas de transmissão e distribuição de energia, o que gera implicações relativas à segurança de acesso aos dados, à segurança na manutenção e operação e à divisão das responsabilidades técnicas. A necessidade desse tipo de projeto vem se tornando frequente no estado de São Paulo à medida que cresce o acesso ao sistema de transmissão pelas usinas térmicas das empresas do setor sucroalcooleiro, em concordância com as resoluções normativas da Agência Nacional de Energia Elétrica. O trabalho propõe a configuração de funções de supervisão e proteção utilizando a troca de informações entre os agentes através do serviço de mensagens prioritárias previsto na norma IEC 61850, em substituição aos relés auxiliares e ao painel de interface que utiliza cabos de cobre. Tendo a segurança como ponto principal de discussão quando se deseja conectar duas redes de comunicação de empresas diferentes, são avaliadas, através de simulações, as operações das lógicas de proteção, o acesso aos dados, e a troca de informações de supervisão. Algumas tecnologias apresentadas já são amplamente utilizadas na área de Tecnologia da Informação, como os requisitos de segurança digital e que, se utilizados em sistemas baseados na IEC 61850 sem impactar significantemente na performance e nos custos, apresentam enormes vantagens para os sistemas digitalizados das subestações. Por fim, são apresentadas as diferenças e os benefícios de se utilizar os recursos da norma para um projeto tão particular. / The aims of this study are to present and to evaluate the design of a substation, focusing on the sharing of the installation, equipments, and particularly on the information between transmission and distribution energy companies. This will highlight implications for data access security, along with the security concerning maintenance and operation of a substation and the division of technical responsibilities. The need for this type of project is becoming common in the state of São Paulo as the access to the transmission system by thermal power plants of sugar companies increases, in accordance with the normative resolutions of the Agência Nacional de Energia Elétrica. The study proposes the configuration of supervision and protection functions using exchange of information between agents via priority messaging service provided by IEC 61850 instead of the auxiliary relays and panel interface that uses copper wires. When connecting two communication networks of different companies while considering safety as the main issue, simulations are conducted to evaluate protection logic operations, data access and supervision data exchange. Certain technologies presented here are already widely used in Information Technology, such as the cyber security requirements. When utilized in IEC 61850 based systems without significantly impacting performance and costs, these cyber security requeriments present great advantages for the substations digitalized systems. Finally, differences and benefits are considered for the use of the resources of the norm for such a particular project.

Substation primary plant and instrument transformers generally remain in service for many years and are only renewed when physically or mechanically life-expired. However, substation protection and control systems, also known as secondary systems, are changed more frequently, especially electronic or computer based systems. One way to overcome the lifecycle-coordination problem is to develop a new architecture for substation secondary systems by deploying new technology such as standard interface modules, the bay process bus and IEC 61850 communication protocol. IEC 61850-9-2 'process bus' has proposed an Ethernet based communication network to replace traditional hardwiring and cabling, for communication of analogue and binary signals with Ethernet messages. The application of processbus in substations is able to reduce the life-time cost of the secondary systems and improve flexibility and functionality. Sufficient confidence must be demonstrated in the application of this new technology. This thesis describes the design and performance evaluation of a prototype protection scheme suitable for application on a corner of a mesh transmission substation of the type used in the UK on the transmission network.

Este estudo é uma análise de interfaces e protocolos de automação que possuem potencial para serem adotados como padrões em redes elétricas inteligentes em um futuro próximo. A fim de verificar a possibilidade de implementar a IEC 61850 em uma aplicação típica de redes deste tipo, é realizada uma simulação usando o software NS-2. Os resultados deste trabalho servirão de orientação para o dimensionamento de redes de automação baseadas em IEC 61850. / This study is an analysis of automation interfaces and protocols with the potential to be adopted as standards for smart grids in the near future. In order to verify the feasibility of implementing the IEC 61850 in a typical application of such grids, it is performed a simulation using NS-2 software. The results of this work will be an orientation to dimension automation networks based on IEC 61850.

Este estudo é uma análise de interfaces e protocolos de automação que possuem potencial para serem adotados como padrões em redes elétricas inteligentes em um futuro próximo. A fim de verificar a possibilidade de implementar a IEC 61850 em uma aplicação típica de redes deste tipo, é realizada uma simulação usando o software NS-2. Os resultados deste trabalho servirão de orientação para o dimensionamento de redes de automação baseadas em IEC 61850. / This study is an analysis of automation interfaces and protocols with the potential to be adopted as standards for smart grids in the near future. In order to verify the feasibility of implementing the IEC 61850 in a typical application of such grids, it is performed a simulation using NS-2 software. The results of this work will be an orientation to dimension automation networks based on IEC 61850.

IEC 61850 standards are the global standard for communication in substations. It is gaining popularity in power substation automation and will dominate the future substation automation and protection system design. The standards provide new approaches for protection, control and metering function via communication. The secondary circuits in substation are simplified significantly and the massive hardwired cables are replaced by the high-speed process bus which transmit analogue and binary signals with Ethernet messages. However, the conformity of a device with the standards does not necessarily guarantee the interoperability with devices from different manufacturers. The use of devices compatible with IEC 61850 standards presents a challenge to many system integrators, especially due to lack of familiarity with features such as Generic Object Oriented Substation Event (GOOSE), reporting, Sampled Values and the need for system redundancy. To facilitate a smooth implementation, all the features and the data exchanges between devices need to be tested to ensure the system operates correctly. This project was carried out to study the protection performance of secondary schemes with IEC 61850 process bus architecture in substation. The tests were performed including current differential protection and distance protection on a transmission substation of the type used in the UK on the transmission network. The protection schemes were tested under IEC 61850 environment with multi-vendor IEDs like Alstom MiCOM IEDs, NARI IEDs with the OMICRON test set. More tests were carried out to verify the interoperability and the performance of time-critical messages were evaluated under different network architectures. The impact of the background traffic on these two messages was investigated and the response of the IEDs when the Sampled Values packets were lost or overwritten was recorded and provided to utility as a reference. This project also presented a technique to assess the performance of Merging Units from different manufacturers, when operating with Intelligent Electronic Devices (IEDs) performing a distance protection function. The performance of the process bus with parallel redundancy protocol is evaluated using a closed loop approach involving a Real Time Digital Simulator. The results indicate that protection using process bus communication is feasible, and meets grid code requirements when implemented with commercially available products. It was found that process bus operation is robust, even with network traffic conditions far beyond what would be experienced in an active substation.

As the use of renewable energy and the implementation of smart grids becomemore prevalent in Europe, there will be a need to ensure that the quality ofpower supply is not compromised during the integration of distributedgeneration to the main grid. Europe's electricity networks should be flexible,accessible, reliable and economic. In the UK, National Grid has standardisedits substation protection and control equipment commissioning andreplacement policies, yet issues affecting system long life availability remain,one reason being long outage periods during substation secondary equipmentinstallation, commissioning and maintenance. The present use of directhardwired point to point connections between the primary power system plantequipment and substation secondary system protection and control devicesdoes not allow for easy upgrading or replacement of these substationsecondary devices without an outage of the primary plant or substation. Outage and the consequent availability problems associated with secondaryequipment can be addressed by the open utility communication architecturestandard IEC 61850. A well-designed simple, highly reliable, secure, flexibleand long-life communication IEC 61850-based architecture can help mitigatethe impact of using protection and control IEDs (Intelligent Electronic Devices).Faulty IEDs can be replaced with little or no interruption to the overall operationof the substation. Interoperability is a key feature of the adoption of IEC 61850in substations. IEC 61850-compliant protection and control devices cancommunicate with one another, even if they made from different manufacturers. This thesis has proposed a simple, long life IEC 61850 based communicationarchitecture which is expected to be flexible and robust enough to cope withboth growth and outages. Reliability analyses have been carried out on varioushypothetical applications of the proposed process bus architecture to NationalGrid substation bays. A detailed description of how to determine the optimalprocess bus architecture using the life cycle cost evaluation technique has beenprovided. The design and implementation of a test bed used for evaluating theperformance characteristics of merging units has been presented. The resultsof the tests have been fed back to National Grid and the manufacturers, whomay then use the data to assist with the drafting of a Merging Unit Test BedSpecification, and also to help the manufacturers to make refinements to themerging units in order to make interoperability more readily achievable.

El presente trabajo muestra la forma de generar un procedimiento para la implementación de enclavamientos en sistemas de Control & Protecciones de subestaciones eléctricas usando el protocolo de comunicación IEC 61850 y Mensajes GOOSE. El objetivo de esto es presentar un nuevo estándar en los sistemas de Control y Protecciones facilitando su implementación, disminuyendo costos de ingeniería y manteniendo su confiabilidad. En particular este procedimiento se implementa en el sistema de Control y Protecciones de la Subestación Principal Esperanza en 220 kV, perteneciente al Sistema Interconectado del Norte Grande. Se presenta un marco teórico de los tópicos relacionados con los Sistemas de Control y Protecciones, que incluye la filosofía de Control y Protecciones, una reseña de los IED, los sistemas de comunicaciones para subestaciones y el protocolo IEC 61850, de modo de contextualizar el funcionamiento de los sistemas. Además se describe el proyecto de la Subestación Principal Esperanza 220 kV. A continuación se detalla el procedimiento para implementar los enclavamientos de manera genérica, válida para cualquier aplicación. Se diseñan 2 aplicaciones para el sistema de Control y Protecciones de la Subestación Principal Esperanza. La primera aplicación consiste en crear un enclavamiento para controlar los movimientos de los equipos de patio, enviando la posición de uno de estos equipos por Mensajes GOOSE, lo cual reduce las interconexiones de cableado. La segunda aplicación consiste en dar un respaldo a la función de recierre automático, mostrando la factibilidad de crear aplicaciones no consideradas en la ingeniería inicial. Se presentan las simulaciones realizadas a las aplicaciones descritas. Con éstas se demuestra que las aplicaciones son confiables para reemplazar enclavamientos por hardware del sistema de Control y Protecciones. Adicionalmente se analiza el comportamiento de los Mensajes GOOSE verificando sus características y usos como herramienta de comunicaciones. Finalmente se detallan las ventajas y restricciones para el uso de Mensajes GOOSE en sistemas de Control y Protecciones. Se concluye que el uso del Protocolo IEC 61850 y Mensajes GOOSE es una herramienta innovadora que contribuye a la simplificación de los sistemas de Control y Protecciones, modifica su filosofía, y que, adicionalmente, su estandarización llevará a una mayor automatización de los Sistemas Eléctricos.

This work describes DNP3, IEC-60870, IEC-61850 communication protocols and their implementing in SCADA systems. It further describes communication of these protocols between RaspberryPi as a slave device and Personal Computer as a master device.