Category: GE

Cyber Security –

CyberSentry UR

CyberSentry UR enabled UR devices deliver full

cyber security features that help customers to

comply with NERC CIP and NIST® IR 7628 cyber

security requirements.

wThis software option delivers the following core features:

AAA Server Support (Radius/LDAP)

Enables integration with centrally managed

authentication and accounting of all user

activities and uses modern industry best

practices and standards that meet and exceed

NERC CIP requirements for authentication and

password management.

Role Based Access Control (RBAC)

Efficiently administrate users and roles within

UR devices. The new and advanced access

functions allow users to configure up to five

roles for up to eight configurable users with

independent passwords. The standard “Remote

Authentication Dial In User Service” (Radius) is

used for authentication.

Event Recorder (Syslog for SEM)

Capture all cyber security related events within

a SOE element (login, logout, invalid password

attempts, remote/local access, user in session,

settings change, FW update, etc), and then

serve and classify data by security level using

standard Syslog data format. This will enable

integration with established SEM (Security Event

Management) systems.

Monitoring and Metering

The C30 provides high resolution measuring

of the status of external devices wired to its

contact inputs. The changing of a contact input

status can be measured

and time-stamped with a 0.5ms resolution,

making the C30 ideal for bay or substation SOE

recording.

Fault and Disturbance Recording

The advanced disturbance and event recording

features within the C30 can significantly reduce

the time needed for postmortem analysis

of power system events and the creation of

regulatory reports.

Advanced Device Health Diagnostics

The C30 performs comprehensive device health

diagnostic tests at startup and continuously

during run-time to test its own major functions

and critical hardware. These diagnostic tests

monitor for conditions that could impact security

and availability of protection, and present device

status via SCADA communications and front

panel display. Providing continuous monitoring

and early detection of possible issues help

improve system uptime.

Monitoring & Metering

• Advanced recording capabilities with highcapacity

event recorder, configurable and

extended waveform capture and data logger

• Metering: current, voltage, power, energy,

frequency, and harmonics

Protection and Control

As part of the UR family of Protection & Control

devices, the Multilin C30 offers a high degree

of modularity in its design and functionality,

providing superior performance while meeting

the toughest requirements of the marketplace.

Control, automation, I/O expansion and data

gathering are ideally suited for the C30 in the

following applications:

• Bay control

• Substation automation

• Remote I/O

Advanced Automation

The C30 incorporates advanced automation

features including powerful FlexLogic™

programmable logic, peer- to-peer

communications and SCADA capabilities that

far surpass what is found in the average PLC or

controller. The C30 integrates seamlessly with

other UR relays to extend the I/O capabilities and

perform complete bay management and control.

Applications

• Bay control and substation automation

• Programmable logic control

• UR I/O expansion

• Sequence of Events (SOE) recorder replacement

Protection and Control

• Programmable logic, timers, counters

• Distributed logic, remote I/O expansion

• User-definable protection elements

• Up to 96 digital inputs and 64 digital outputs

• Transducer I/Os (RTD, DCmA)

Advanced

Communications

• 3 independent Ethernet ports for simultaneous

& dedicated network connections with IEEE

1588 support

• Advanced IEC 61850 Edition 2 implementation

and IEC 61850-9-2 process bus support

• Supported industry protocols: IEC 61850 Ed.

2. SFTP, MMS File Transfer Service, DNP 3.0.

Modbus Serial/TCP, IEEE 1588. IEC 60870-5-

104 and 103. PRP, SNTP, HTTP, TFTP

• Direct I/O: secure, high-speed exchange of

data between UR relays for Direct Transfer

Trip and I/O extension applications

Cyber Security

• CyberSentry™ provides high-end cyber

security aligned to industry standards and

services (NERC® CIP, AAA, Radius, RBAC, Syslog)

• Setting for security audit trails, tracking

changes to device configurations

Multilin™ C30

Substation Hardened Programmable

Logic Controller

The Multilin C30 controller system is a substation hardened device designed to perform substation

control logic that can also expand the I/O capability of protection devices and replace existing SOE

recorders. The C30 provides fast and deterministic execution of programmable logic with I/O capabilities

far above an average protection relay.

Graphical programming tools, supported by a library of logic operators, make the C30 simple to use

and configure. Using high-speed peer-to-peer communications for inter-device messaging, the C30 can

also accept signals and commands from other protection and control devices at a fraction of the cost

of hard-wiring these signals.

Key Benefits

• Powerful and deterministic programmable logic suitable for creating most customized automated

substation control solutions

• Modular hardware architecture allowing for flexibility in the I/O configuration to support most bay

management applications

• Reduced bay or station wiring through the use of high-speed peer-to-peer communication for sending

and accepting control commands from other relays

• Simplified system integration and access to information through the use of multiple communication

options and protocols not found in industrial grade PLCs

• Advanced IEC 61850 Ed. 2 implementation, complete settings via SCL files and IEC 61850-9-2 process

bus solution enable resource and platform managing optimization and reduce cost of ownership

• Increased network availability via failover time reduced to zero through IEC® 62439-3 “PRP” support

• CyberSentry™ provides high-end cyber security aligned to industry standards and services (NERC® CIP,

AAA, Radius, RBAC, Syslog)

• Advanced fault and disturbance recording, including internal relay operating signals, eliminating the

need for external recording devices

Conclusion

CT/VT modules with enhanced diagnostics, released on 23 October 2006 with firmware 5.2.

offer much higher security for internal CT/VT module error detection and prevent undesired operations of URs.

Every UR firmware released since version 5.2 supports CT/VT modules with enhanced diagnostics,

which greatly improves the security and reliability of the protection system.

To take advantage of this feature, a relay hardware and possibly firmware upgrade is required.

If the existing relay has a firmware version below 4.0. GE recommends purchasing a

UR Upgrade Kit that allows modernization of the obsolete relay hardware

while taking advantage of the relay modularity.

The UR Upgrade Kit contains a new CPU and CT/VT modules that can be

inserted in an existing relay case (case is fully backwards compatible).

If the relay currently has firmware version 4.0 to 5.0. the latest firmware

can be downloaded from the GE Multilin website, and Enhanced Diagnostic

CT/VT modules (8L, 8M, 8N, 8R, 8S, 8V) can be purchased from the GE Online Store.

Consult with your local GE representative if you have any questions on the upgrade process.

Internal CT secondary monitoring

The CT/VT input modules with enhanced diagnostics are monitoring internal CT circuitry integrity.

This is done to eliminate relay erroneous operation in case of CT secondary winding failure.

The secondary winding of CT is divided into two equal parts with a central tap in the middle.

CT current values from both halves of the CT secondary windings are run through

a differential amplifier to get a true current sample for the phasor calculations.

It also compares between each other by simply summing two samples together.

(Note that due to CT central tap, samples have different polarity.)

In case that values from different halves of the same CT accumulated over

one protection pass per adaptable per signal level do exceed the fixed error boundary,

failure is declared and protection is blocked.

CT secondary monitoring is performed at all four CT channels (A, B, C, and N) individually at each CT

bank.

INTRODUCTION

The performance of a microprocessor-based relay is highly dependent

on the performance of the analog channels measurement of the relay,

as protection functions operate on these values.

The failure of an analog measurement channel, 

either due to a failure in the external measurement circuit,

or due to an internal failure inside a UR CT/VT module, 

can cause incorrect operation of protection functions.

The UR CT/VT modules with Enhanced Diagnostics (module types 8L, 8M, 8N, 8R, 8S, 8V)

can detect the failure of an analog channel measurement due to internal

failures of the CT/VT module, alarm for failure of the module,

and block tripping from any protection function associated with this module.

This feature is available when using firmware 5.20 or later within

the UR family and therefore field-proven since 2006.

Test Modes

IEC 61850 edition 2.1 provides standard mechanisms for testing

purposes, reducing commissioning complexity and allowing new bay

installations without affecting substation operation.

With the test modes in MU360 users can independently configure

mode and behavior of each logical devices allowing then to operate

as: On, Test, Blocked, Test/Blocked and Off.

A Safer and Cybersecure Substation

Transmitting the instrument transformers´ measurements digitally

through optical fibers eliminates the risk of inadvertent mishandling

of the current and voltage circuits and makes the relay room a safer

work environment, eliminating hazards and reducing the risk of

personnel injury.

To ensure MU360 have all this connectivity in a cybersecure way, it

has been designed according to IEC 62443 and have all capabilities

described by SL2 of this standard, including RBAC, secure boot and

signed firmware.

Reduce the Engineering Effort and Cost

The use of Process Bus with the MU360 drastically reduces the

need for trenches, ducts, glands, cable trays and copper hardwiring,

as the information is exchanged among IEDs using fiber optic cables

and ethernet switches.

Fewer cables to manage also means reduced engineering complexity

as extensive wiring schematics are replaced by standardized

version-controlled configuration files. Future reconfigurations are

automatically documented by the IED configuration tool.

Transmitting the instrument transformers´ measurements digitally

through optical fibers eliminates the risk of inadvertent mishandling

of the current and voltage circuits and makes the relay room a safer

work environment, eliminating hazards and reducing the risk of

personnel injury.

To ensure MU360 have all this connectivity in a cybersecure way, it

has been designed according to IEC 62443 and have all capabilities

described by SL2 of this standard, including RBAC, secure boot and

signed firmware.