SAENEWS
Visit us at E-world 2017 between 7/2 and 9/2/2017 in Essen, Hall 6, Stand 6-321
Solutions in Mind
05
Product extension
Customer Newsletter · Issue 16
8
10
Solutions
Product innovation
11
Product innovation
Simulation
All-IP
BCU-50
FW-5-GATE-4G
The simulation of process values in setIT
Many providers are converting their
Rugged bay controller BCU-50 for the
An internal LTE mobile telephone modem
allows adjustments and enhancements to
switched telephone lines to IP-based
most exacting of requirements as per
is another addition to the broad FW-5-
be made in the middle of operations.
connections.
IEC 61850-3
GATE performance range.
What needs to be done?
02
Data security
Next level IT-Security
Editorial by Joachim Schuster
Product innovation
Grasped from the future
visIT
New challenges are unavoidable
Web-based plant visualisation Efficient plant visualisation makes the work of service staff much
In recent years, scarcely any industry has had to face such a
Unexpectedly we have been forced to act in the market in a
rapid and profound change requirements than the energy sec-
different area. Some telecom providers have terminated ISDN
tor. Both the German Federal Government’s political environ-
and analogue dial-up links in combination with DSL and have
mental targets and the side effects of technological progress
switched to IP-based connections– All-IP. This technology re-
are manifesting themselves in strict legal requirements. Real
placement can offer up benefits but can also be time-consum-
implementation opportunities lead to massive costs (smart
ing. We can give you an overview of the courses for action.
Find out more on
Page 06
Product extension
meter roll-out) or in many places are extremely vague (IT Security Act).
easier.
The issue of IT security has become a significant aspect of telecontrol systems and is not likely to vanish from all of our
More is possible!
After most existing renewable energy plants were connected
agendas any time soon. At SAE, we invested a lot of money last
as per § 9 EEC and a large number of market firms already got
year in order to adapt our products, processes and infrastruc-
In future, FW-5-GATE can be run as a
out of direct energy marketing due to smaller margins, the fo-
tures to more stringent standards. In particular, driven by stim-
transparent and intelligent protocol
cus - and intelligent local networks - has returned to traditional
uli from foreign countries which are far ahead of Germany in
converter.
work, such automation of substations and distribution stations.
this issue, we have been able to learn a great deal and integrate
In the form of the net-line BCU-50 SAE can offer a station and
new features into our systems.
Find out more on
Page 11
bay controller which meets the most exacting requirements for medium- and high-voltage switchgears as per IEC 61850-3. Legal notice
With this in mind specially, the platform-independent visualisation tool visIT has also been further developed as the increas-
Published by: SAE IT-systems GmbH & Co. KG
ing complexity of our supply networks has also brought about
Im Gewerbegebiet Pesch 14 · 50767 Cologne, Germany Tel.: +49(0)221/59 808-0 · Fax: +49(0)221/59808-60
greater challenges in its monitoring. In times of reduced staff
Joachim Schuster, Managing Partner
numbers, it is important to get a good overview right away.
Cologne, November 2016
Efficient plant visualisation makes the troubleshooting and res-
info@sae-it.de · www.sae-it.de
Editorial team: Matthias Schuster and Jürgen Venhaus
olution work of service staff on-site considerably easier; saving
Authors: Ivan Theunissen, Enexis B.V. · Marcin Wycinka, BTC
you time and money. We do not use any safety-critical elements
Business Technology Consulting Sp. z o.o. · Rainer Schermuly,
such as Java. Contrary to our expectations, many customers
Stadtwerke Ratingen GmbH · Oliver Kirpal, ZVO Energie GmbH
are also considering using visIT in local network stations and
Other authors: Joachim Schuster, Sabrina Cieplik, Michael
customer systems. Thanks to power measurement terminals
Winter, Jörg Schroeder, Stephan Kerkhoff, Wolfgang Besler
PM-1-R for connecting Rogowski coils and PM-1-S for the linking of small-signal sensors, new possibilities open up towards the intelligent distribution network. In telemetry, we have made the switch to LTE with the FW-5-GATE-4G.
Layout: Vancado AG
02
SAENEWS ¡ Solutions in Mind
Next level IT-Security A continuous process Data security
IT security is a highly-prized asset. To attain it requires extensive effort in various different areas. Using secure components which meet strict requirements is only one of such areas. The programmed objectives can only be reached when all components work harmoniously with each other without impairing practical and the operability of a facility. Firewall with connection settings via VPN
In the areas of commissioning, maintenance and diagnostics especially, some very popular functions must be dispensed with for reasons of security. The challenge when developing Version V5.003
rect password entries, an update outside of operating hours or other
was to maintain the usual high functionality of setIT. Metaphorically speaking, some ditches need
unusual events.
to be jumped, new bridges built, some doors closed, but some doors also needed to be torn down.
In addition, the last 40 messages can be displayed on the station’s
At the same time, new algorithms and the latest drivers needed to be integrated to provide lasting
web server and a log file can be loaded on-site containing up to 1MB of
security based on BSI requirements.
information. Of course, only to authorised users!
IPsec IKEv2
Sign firmware
A secure connection needs a means of encryption which switches keys when establishing a con-
When a station configuration is updated, a compressed archive is sent
nection and checks these keys before the connection is deemed secure and can be released. The
to the station. This archive contains a fully executable system in the
methods used include highly-sophisticated state of the art mathematical functions. These need to
form of firmware with configuration data and run time systems. This
be updated from time to time. Automatic key management for IPsec is handled using the Internet
system can also be signed via the system password. By selecting this
Key Exchange Protocol. The previous version - IKEv1 - is now considered vulnerable to attack. For
option, the firmware archive created during the generation process is
this reason, the IKEv2 procedure was defined in Guideline RFC4306, since integrated via the Strong-
encrypted and is given a project-specific signature. This protects the
Swan library. Simply choose the method in station services and configure the necessary parameters
firmware from unauthorised modifications and also prevent unautho-
- it could not be any easier.
rised access to the information contained therein. A station to which a signature has been applied will then only accept appropriately signed
SYSLOG
firmware; manipulation is thus excluded.
Log messages are automatically-recorded information such as logins, updates, website access, building connections to setIT, compromise reports from the firewall, and much more. Syslog allows
Encrypted database
you to transmit log messages automatically from one station to a central server across the network.
Securing a station is only one of the measures we have talked about for secure implementation. A potential risk lies in having an unpro-
The great aspect of this function is the centralised acquisition of operational events from many
tected setIT project database. As well as the user profiles with granular
stations. It also evaluates this information. Depending on the type and the equipment of the Syslog
access control to setIT and the stations on-site, the database itself can
server, alarms may be generated to report attacks, attempted attacks, e.g. . a high number of incor-
also be protected against any form of attack. The new database format .sdbx allows the entire file to be encrypted using secure AES256 encryption. Protected by the system password, the encryption keeps information safe, only allowing genuine users access. Control commands for the temporary activation of system functions There is a certain tension in the air when safety experts and commissioning personnel implement a project together. The arguing begins when it comes to access for on-site diagnostics and maintenance. Commissioning personnel would have to do without some much loved functionality if it were not for system commands. Some functions which can potentially be classified as critical in the station can be activated externally using an adjusting command; they do not run permanently, exposing a potential for attack but are temporarily released via the system commands. This can be done e.g. via a key-operated switch on-site or via a command from the control centre. Extended firewall rules setIT V5.003 allows extended firewall rules to be defined. As well as defining which services are available at which interface , you can now configure granularly whether a service needs to be transmitted securely in a connection or whether a tunnel is permitted for operational
Selection of services and functions
reasons.
Solutions in Mind · SAENEWS
03
Seconds for the FW-5 New extension boards Download & service area
Product innovation
Safety-relevant topics are not only important in telemetry and their config-
Reduce power with the 4DI4DO
function and specification. However, in many applications
uration tools. The EDP system and data
An extension board has four particularly-powerful relay
in Feed-in Management or direct marketing, only two set
transmission to and from customers
outputs and four information inputs. The latter are 2-pole
points are needed for the P & Q requirement, two of the most
is also a relevant topic. To provide our
isolated without a common root. They operate in both ±
cost-intensive outputs can be dispensed with. We can offer
customers and partners with a high-
directions and provide a selection of operating thresholds in
you a more favourable solution.
ly-accessible access to current informa-
wide range operation. The command relays are available as
tion, documents and software on a safe
monostable OR bi-stable changeover contacts. The bistable
New connection variants with the PM-1
platform, we installed the Citrix ShareFile
variant 4DI4DO-2 keeps its switching status even in the case
The PM-1 module allows cost-effective measurement of rel-
service on a server in our DMZ. Data is
of a power failure.
evant network values in low and medium voltage networks.
only sent via https in a single direct con-
For instance, power reduction and checkback indication on
As an extension board to the FW-5 and FW-5-GATE, it also
nection; any email services or distribu-
EEG facilities is only available with one assembly. A timer inte-
allows for measurement of characteristic values for voltage
tion stations are excluded.
grated in the 4DI4DO makes an additional PLC program in the
quality in accordance with DIN EN 50160 and provides basic
The ShareFile accounts are maintained
FW-5 unnecessary. Alongside direct command processing,
data as per ISO 50001. The connection options are extended
by the user directly. Special access rights
a 1/n monitor and the BBO (Break Before Operate) and BAO
again with variants PM-1-R and PM-1-S.
allow separate content to be provided for
(Break After Operate) modes are available with the definition
• The PM-1-R measures currents up to 4000 A using Ro-
vendors, customers, partners or for in-
of a pause- and overlap time which enables adaptation to the
gowski coils; the voltage measurement is as before done
dividual employees. Exclusive approvals
different requirements of the generation plants.
directly or via metering transformers. The coil can simply be
are likewise possible. Both a download
attached to the bus bar and delivers an output signal of 100
and an upload area are available which enable the safe transmission of data
mV/1 kA. Item
Function
4DI4DO-1-1
4 messages, value range ±18 to ±72 V DC
within our company; before final delivery, the files are inspected for malware
and voltages. In contrast to PM-1 and PM-1-R, the transform-
access whatsoever beforehand.
Both variants make retrofitting in installations a breeze. In the 4DI4DO-1-2
4 messages 110/220 V AC/DC
*At present, the PM-1-S has only been tested with the small signal sensors made by Zelisko.
Before all these measures can be ‘cut 4DI4DO-2-1
4 messages value range ±18 to ±72 V DC 4 bistable changeover contact
of proper functioning is available, we are installing an ISM on our premises and on IEC 27001/27019. Preparations are in
best case scenario, the device does not need to be shut down.
4 changeover contact
ISMS & IEC 27001 Certification
working towards a certification based
er ratios for the current and voltage are fixed.
4 changeover contact
by our IT system. The employer has no
and dried’ and before verifiable evidence
• The PM-1-S uses small signal sensors* to connect currents
4DI4DO-2-2
4 messages 110/220 V AC/DC 4 bistable changeover contact
full swing. For various reasons, however,
Care for a bit less?
a certification is not expected until the
The 2AO extension board is identical to the known 4AO in
start of 2018.
The extension boards 4DI4DO, 2AO and PM-1
Transformers can be used with other loads (19.1 kΩ voltage or 490 kΩ current) to reduce measuring precision.
04
SAENEWS · Solutions in Mind
Medium-voltage automation DO box for retrofitting and modern stations Current · IEC 61850 · IT security
Enexis is responsible for a large portion of the electricity and gas network in the Netherlands. Enexis’ Supply region includes the provinces of Groningen, Drenthe, Overijssel, as well as parts of Flevoland, Noord-Brabant and Limburg. Enexis uses approx. 142,000 km cable network and 40,000 km gas pipelines in these regions in order to supply its 2.5 million electricity and 1.8 million gas customers.
network. The remote terminal unit is responsible for mapping the data from IEC 61850 to IEC 60870-5-104. Due to these different connection strategies, the remote terminal unit must function as both an IEC 61850 client to the protective equipment, as well as assuming basic I/O. FW-5-GATE as DO Box The basic DO Box MV-T version is designed for the implementation of telemonitoring and -control from new/modern MV-MV stations. Enexis will also use the DO box ordered by SAE IT-systems to break up the
Enexis operates approx. 1,200 medium-voltage installations (MV-T) in its network. The sub-stations
existing MV-MV stations which have reached the end of their service life.
have simple busbars with 5 to 20 outputs and are located in the network between the HV/MV trans-
These older monitoring systems are based on conventional, fixed-wired
former stations and MV/LV stations.
I/O (voltage, current, feed-in capacity, switch position, initiation signal, etc.). As these upgrades are very work-intensive and also result in an
Some these stations have been monitored with the aid of fix-wired digital and analogue inputs for
increasingly higher depreciation cost due to the premature replacement
many years. Since 2011, Enexis has also been providing substations with the capability of using me-
of existing technology, Enexis plans to add the existing I/O to the next
dium voltage circuits. Here, the protective equipment is used for interaction with the primary process
generation of automation systems; the FW-5-GATE with its separate
and the data are transferred to the remote terminal unit via an unmanaged single star IEC 61850
extension boards is a perfect fit here.
Control centre ENEXIS
VPN Router ENEXIS LTE
IEC 60870
LTE
Telecontrol unit net-line FW-5-GATE with up to 12 extension units and LTE modem
Protective equipment up to 20 devices per telecontrol unit
Enexis Configurator
LTE
Telecontrol unit up to 300 installations
IEC 61850
“ENEXIS plans to provide comprehensive automation (monitor and control) of its MV network and touch up its old stations. ENEXIS is initiating a European writedown for selecting a remote control solution for the MV-MV stations. The core criteria for this remote control solution is a high level of IT security and communicability. All of the bidding parties were assessed on an equal footing in terms of conformity with the technical specifications, progress made in their IT security measures, user-friendliness, and the ruggedness and performance of the demo systems they provided. SAE IT-systems had the best score in this evaluation process and were awarded the contract.” Ivan Theunissen, Enexis B.V.
Solutions in Mind · SAENEWS
Langenzenn public utility is using SAE telecontrol
Simulation of process data
Water · Electricity · Local grid stations
Product extension · setIT planning phase, only the power supply area is being taken into account. Later, the drinking water supply will be added. A net-line FW-50 in a large rack is being used in the central zone. The very remote substations, including Teichenbach, Ziegelbruck, which can also be reached via their own Cu cables or transfers were
05
A practical function was added to the extensive test and diagnostics capabilities in setIT: simulation of process values in the middle of operation.
also equipped with the modular net-line FW-50 units. The good news that the
The idea of a simulation is nothing new, although
entire communication structure could
realisation of it is not trivial - especially because its
be built using Langenzenn’s own cables
operation should fit into setIT’s intuitive input philos-
enables connection to other stations
ophy.
coupled with the IEC 60870-5-101 protocol by WT modem. These are usually The Langenzenn public utility has a very long history, founded as long
equipped with appropriate extension
ago as 1848. Back then during this eventful historical period, petro-
boards with the smaller net-line FW-5
leum-lamp street-lighting was brought in. A few years later in 1862,
type compact units. The switches in the
the first water pipe was built in Langenzenn. The municipal water pipe
stations are triggered from suitable DSO
network was extended until 1905. This provided the inhabitants with
units , 1.5 pole via double command. Var-
a good supply of high-quality drinking water. In 1911, the connection to
ious external couplings such as Janitza
the Middle Franconia power plant was begun, which enabled electri-
directional earth fault relay and network
cal street-lighting to be introduced. More and more households were
analysis systems are implemented via
connected up to the electrical system. The number of consumers
Modbus. After being assembled inde-
increased rapidly. The first unit-type district heating power station was
pendently, the configuration was carried
established in 1993. Based on its many years’ experience, the Lan-
out in cooperation with SAE IT-systems
genzenn public utility provides a reliable supply of drinking water and
design. After the basic installation of the
electrical power to its inhabitants, running a 20kV medium voltage and
control centre, it was possible to contin-
low voltage network. The sub-supplier for the power supply is MDN
ue configuration work here via remote
Main-Donau Netzgesellschaft mbH from Nuremberg.
access.
Approx. In 2008, it became clear that the current telemetry system
Work with the project manager is
the context menu. The context menu allows you to
with process control system was in need a major revamp in the com-
structured and partner-like. Mr Eberlein
set single-point information, double-point infor-
ing years. The technical staff at the public utilities made an extensive
emphasised the handling of the tele-
mation, system information, system double-point
survey of the market. At a SAE telecontrol user day in 2009, held in
control systems during assembly and
information, measured values, system measured
Fürth, good contacts were made with local suppliers were and one
configuration using setIT so that a good
values, bitstring information or computed values to
got up to speed with the latest technical information. A number of
foundation was established for much of
a predefined state for test purposes, so they can also
visits were made to get an extended overview of the practical use
the independent work for later system
be simulated for the control system.
of SAE IT systems. In 2014, it became real. Detailed plans for a new
extensions in local network automation
network control system with telecontrol were drawn up for electricity
and drinking water supply. The existing
As well as this value, the statuses of the process
and water supply areas. In on-site discussions, technical sales at SAE
protective equipment was first to be
data can also be simulated individually or together
IT-systems lent their support for structuring and design planning.
adapted to the central positions as per
according to IEC 870-5 IV/NT/SB/BL/OV.
The focus was on the planning of a new control centre and telemetric
IEC 60870-5-103. The project is sched-
The simulation remains active until the connection
connection to substations and other central network stations. The
uled to be completed in 2016.
from setIT to the station is disconnected. If the opera-
Start the simulation directly from the context menu
Only one simulation mode can be launched during the active connection from setIT to the station, via
head of the e-plant, master electrician Carle Eberlein was at the fore
tor then refrains from ending the simulation mode, a
of the planning, putting a great emphasis on independent working
one-minute timeout stops the mode and overwrites
independently across the board. The aim was to achieve autonomous
the process data with its real values.
connection planning and assembly of all components. Special attention was also paid to ensuring the parametric tools were easy to use.
This allows you to check planned process data ahead
After the framework conditions were established, suitable offers were
of a modification.
gathered. SAE IT-systems was able to convince in functionality and price. In the detailed planning discussion which took place in mid-2015, more concrete agreements were made concerning the new ProCoS network control system made by KISTERS, as well as the network control system and SAE-IT telecontrol. As part of the first project
06
SAENEWS · Solutions in Mind
visIT Web-based plant visualisation Product innovation
Efficient plant visualisation makes the work of service staff much easier. Allows for quick troubleshooting and saves time and money. The display can be installed on-site from mobile devices or remotely over network connections as with the Web server; all meeting stringent IT safety standards as you would expect.
The concept
switching operations and target requirements are also possible with visIT.
visIT is a platform-independent visualisation tool for creating modern user interfaces. By importing all
Exporting and importing process variables
process variables from the parametrisation tool setIT*,
Calling the Designer from within setIT*, the created process
the Designer can be used to conveniently integrate all
variables are automatically sent to the Designer. Big process
relevant elements and can quickly be compiled into a
data can be imported quickly and are ready for process
tailor-made visualisation; the provided symbol library
visualisation. Separate designators in setIT set up a self-suf-
can be accessed but also drawn and dynamised fully
ficient reference. Some process variables can be created and
autonomously.
edited in the Designer.
The visualisation is then loaded into the telecontrol unit as an element of the firmware and can be called from its
The Designer
IP address in the same way as the web server. Almost all devices with HTML5-enabled browsers can serve as
Visualisation images are created by the VisIT Designer,
terminals; compatible smartphones and tablets, as well
a variant of the professional visualisation tool PRO-
as fixed-installed touch displays.
CON-WEB V6. The process variables for the telecontrol station are modelled in the Designer as numerical,
By combining with connectIT and installing on a separate
logical or text variables and can be displayed using
server, visIT technology can also provide information for
simple assignment in the interface. The user has a
calls via decentralised close operating stations and can
number of pre-made controls, such as number fields,
thus be used as a rudimentary control system.
buttons and sliders. These can be adjusted individually both visually and functionally. Even self-drawn graphics
Indication on site in the switchgear cabinet or via a recessed display.
Monitoring & intervention
can be imported and used in the visualisation. Through
visIT runs in the station in runtime mode and has direct
dynamisation of graphics, their representation can vary
access to current process data and logged values of the
depending on the process variables, in the form of:
station. In this way, all relevant information can be shown
• Flashing
for operation and service:
• Colour change • Movement (e.g. Rotation)
• Online values • Operations diary • Alarm list • Curve diagrams** *
starting with setIT V5.003.05
** starting with setIT V5.004
As well as the pure monitoring of system components and communication paths, active interventions such as
Solutions in Mind · SAENEWS
07
Control centre
DSL
M2M
DSL
1
Installed touch panel
2
Service staff with smartphone or tablet PC
3
On separate server for workstations
M2M
Mobile radio: GPRS/UMTS/HSPA/LTE
Internet
IEC 870-5-104 DSL
M2M
5000
DSL
2
1
PROCON-Web-Server
3
Workstation 2
1
Application capabilities and terminals
Example The position of switchgears is recorded via digital inputs on the remote terminal unit. In the visualisation interface, this is represented by the rotation of a switch symbol. To implement the requirement, information about the process point states is needed for various display angles:
Single-point information This process data type from SetIT corresponds to a logical variable in VisIT. • logical process variable = 0 corresponds to switch OFF (inactive) • logical process variable = 1 corresponds to switch ON (active) Double-point Information This process data type from SetIT corresponds to a numerical variable in VisIT.
Detailed display of a local network station with switching option (left)
• numerical process variable = 0 corresponds to switch moving • numerical process variable = 1 corresponds to switch OFF (inactive) • numerical process variable = 2 corresponds to switch ON (active) • numerical process variable = 3 corresponds to switch malfunction
High IT security Sending switching commands or predefining set points via visIT requires a user management in setIT to be created and activated with password protection. This ensures that only employees can perform switching operations who have appropriate permissions. Unlike many other concepts on plant visualisation in the market, HTML5 and JavaScript used for VisIT offer a high level of IT security. Example of an Operations Diary
08
SAENEWS · Solutions in Mind
All-IP as a replacement for switched telephone lines Telecommunication
Across Europe, some telecom providers have terminated ISDN and analogue dial-up links in combination with DSL and have switched to IP-based connections (All-IP). The aim is to reduce complexity in the network infrastructures by phasing out local exchanges. The switch in technology can offer advantages but can also be complex to carry out. Is there any change to purely analogue switched tele-
or ISDN) are affected for whom data transmission with
telephone services to mobile via GSM is possible. In this
DSL and telephone using the old technology is oper-
case, the telecontrol system can continue to be used
ated. At Deutsche Telekom, the first step consists of
though it will need to be set up with a different model
altering the VDSL connections with more than 16 MBit/s
and new numbers.
Downstream. The entire migration shall be completed before 2018. Swisscom for example aims to have done
How much longer to wait?
the conversion to All-IP by the end of 2017. At Vodafone,
Telekom and Vodafone switched the CSD service to IP
ISDN should remain available until 2022 at least.
back in 2011. At present in Germany, there are no plans to terminate the 2G network GSM/GPRS/EDGE. Swiss-
Pure ISDN connections without DSL are also to be
com is switching off the 2G network in 2020.
modified. Deutsche Telekom has already stopped selling new connections. Telekom is offering an ISDN-
Can a cable connection be used a dedicated line?
All-IP converter which however does not meet industrial
A control cable has possibly been exposed or an access
requirements.
via a copper double line is available. This can be integrated via SHDSL or a WT modem as a dedicated line.
phone lines? No. Telekom – the largest offering of last miles connec-
Can the dial-up link to DSL continue to be used?
Depending on the type of route involved, existing tech-
tions – is aware of its responsibility and is not keen to
An earlier analogue switched telephone line used a
nology can even be used.
undertake the expense of making changes to millions of
telephone connection as a cable harness to the next
terminals. Although a network-side adjustment is made,
switching centre. In the classic case, the line was only
this should not something customers notice. Special
active when the handset was picked up and a telephone
adapters were set up on the new connection nodes.
call was initiated by dialling up. If the Internet was con-
…updating equipment to series5+ technology is unfor-
These continue to support the old standard. All old
nected at the same time via the cable, a higher frequen-
tunately unavoidable. Older systems from the easy-line,
services are to continue to be available until the rotary
cy range was then modulated enabling a permanent
profi-line and top-line series as well as systems under
selectors are supplied remotely with pulse dialling.
connection to the Internet; in other words, there were
the series 5 generation are not designed for complex
If you have still not found a solution...
two worlds in a single cable. These days, VoIP technol-
communication with TCP-IP. Despite the devices’ long
What do the practicians say?
ogy is standard. It is used to package voice signals into
service life, the opportunity should be taken to replace
Deutsche Telekom has provided us with their test centre
IP packets– the basic means of communication over the
them to ensure system availability for the future. The
in Bonn for checking the dial-up links to All-IP-technol-
Internet. The old regional switching office is obsolete. A
new diagnostics capabilities and access to the web serv-
ogy. In our tests, all of the models were able to success-
central control point over the Internet is used - the SIP
er of the stations also enable rapid analysis in the event
fully establish connections to each other and transfer
server or NGN service. Old regional switching offices al-
of a failure and save time-consuming and costly service
data safely. Connections via GSM (CSD) were also possi-
ready use a VoIP-like technology in the central network.
trips.
ble. A longer routing or transfer time was not fixed.
For this reason, telephone conversations have been digital for a long time already, which means providers
Can a radio link be used?
For the simple existing telephone connection, the con-
can use the All-IP campaign to remove a whole layer of
Depending on the conversion effort and the position
version will likely take place in the background without
technology and thus make considerable cost savings.
of the building, the switch to radio link may be a good alternative. Modern radio systems such as the Aprisa
notice. Best if the customer does not notice anything. All-IP no longer supports the old telephone connection.
series 4RF offer good penetration in the exclusive 470-
So who will actually be affected?
All-IP can use the same frequency range on the same
MHz band, as well as a respectable range and a trans-
All ISDN subscribers (Deutsche Telekom) and all DSL
cable. A new VoIP telephone or router will have to con-
parent bandwidth of up to 120 kBit/s with IT technology.
connections with old telephone connections (analogue
vert the voice signals to IP. On many new routers, ana-
The radio link is protected from unauthorised access by
logue or ISDN telephones can be connected directly to
means of AES256 encryption. A service provider should
the router; telephoning is possible as before. However, it
assist you with the planning in order to confirm radio
is a different story when it comes to data transmission;
broadcasting and channel registration with the German
this now needs to be IP-based.
Federal Network Agency.
rather as a special service that is not a part of the
Is VoIP- the transmission of voice over IP - a solution?
Can GPRS/EDGE/UMTS/HSPA/LTE mobile technology be
contract with Telekom. Despite the conversion to an
Compromises are used with VoIP telephone systems
used?
adapter it can also lead to faults in the dial-up links
which reduce considerably the data volume to be trans-
If the mobile network is available, a switch to GRPS/
if the components used are not compatible.
mitted. Data packages must be transmitted transpar-
UMTS or LTE has been the favoured solution up to now
ently, i.e. no changes to the data are allowed. A dial-up
for replacing terminated dedicated lines. This option is
There are also regional differences in the con-
model connection via VoIP could work however there is
also available here. A system replacement is compulso-
version of All-IP which can lead to unpredictable
no guarantee of function.
ry.
Note: Telekom does not regard data transmission via switched telephone lines as promised feature but
behaviour. Can a switch be made to mobile via GSM? In some cases, switching the medium from terrestrial
Solutions in Mind · SAENEWS
09
SAE internal
Reinforcements
Provider SIP-phone
@ DSL
IT security is a broad field; the tasks TAE
ISDN
Telecom installation
and requirements are constantly changing. On account of this, we have added some more young specialists to our team. Since 15/11/2015, Chris-
ISDN-phone(s)
Fax
Analogue-phone (if supported)
topher Budschun has been working in software development and is helping our systems to be convenient to use but also safe.
Typical connection structure up to All-IP
Why do we recommend an industri-
Annex J is the newer standard which can
al-suited ADSL router?
provide the lower frequency band for a
Conclusion
With the DSL connections, the Telekom
quicker upstream connection; both are
If you are using a remote terminal unit
providers provide a router adapted to
the same in the downstream. Annex J
on a public dial-up connection (ana-
its routers which can be purchased or
has been in use longer and is usually
logue/ISDN), the conversion planned be-
rented. Usually relatively cheap elec-
installed on the network node for All-IP
fore 2018 is relevant for you. In the best
tronics are involved- these are designed
connections. Deutsche Telekom intends
case scenario, everything will continue
for sporadic use in the home of office.
to convert all connections to Annex J on
as before yet it is not known whether the
As former employee of the Krefeld
Speedport & Co. are not suitable for long
the network side before 2018. A router
conversion is functionally-compatible or
public utility, Dominik Mäkelburg is
periods of round-the-clock services.
must support Annex J in order to be able
not.
not only perfectly familiar with our
Christopher Budschun
products he also knows the needs
synchronise an Annex-J connection. Important features for industrial use,
Many new routers already support both
The conversion of telecontrol stations to
and requirements of our custom-
such as e.g. top-hat rail assembly; supply
variants meaning no new investment is
TCP/IP-enabled connections (All-IP) is a
ers. He is on hand with advice and
from the same voltage source as the
required. Annex-J compatibility is also
complex process. However, the conver-
support as an expert for substation
telecontrol station in the cabinet; or
important.
sion is worth it as the new communica-
automation and distribution network
tion paths allow for the use of additional
automation.
simple buffering capability via battery/ UPS are important reasons for using
IT-Security: How can the installation be
services and system jobs can be per-
professional-standard equipment. On
supported?
formed better and in a more reliable
top of this, it is worth mentioning their
Every access to the Internet via ADSL,
way. In any case, it pays to get advice.
considerably longer service life and
GPRS or other means conceals the risk
much greater immunity to overvoltage
of an unintended access through com-
and voltage peaks/flashes. Industrial
promised access attempts or sabotaging
routers are designed for reliable long-
communication. To prevent affecting
term operation and can also be supplied
the systems behind it and to ensure
with the latest firmware. If additional
continued safe operation, cabinets and
VPN encryption is needed (KRITIS),
fuses must be activated in the upstream
traditional routers are usually out of the
devices or - even better - in the telecon-
In the East Germany region, we have
picture. The LANCOM routers designed
trol system. With basic routers, these
added another specialist. Dipl.-Ing.
for business use are equipped with a
are not available or are only insufficiently
Heiko Kühn has joined our local
stateful inspection firewall, offer built-in
available.
external sales team with a fixed
Dominik Mäkelburg
position in Kleinmachnow. With his
VDSL/ADSL2/2+ modems, All-IP option and optionally also VPN encryption of
The new series5+ technology offers
studies in electrical energy technol-
additional network components. The
extensive fusing in order to ensure
ogy and almost 20 years’ experience
higher quality of router is also associated
operation based on the BDEW white-
in the district heating area, he shares
with a better stability and profession-
paper. By selecting the functions, all of
a commitment to our common ob-
al service in the event of failures. The
the required safety functions such as
jective: Economic service reliability.
Lancom 831A with All-IP option is an
firewall or end-to-end encryption of data
We will be very pleased to work on
inexpensive entry-level model.
paths can be configured directly from
more of these projects in the future!
the substation. An “IT security for SAE Annex B or Annex J, what is correct?
IT systems” checklist helps you with the
Annex B is a requirement on how to
set-up. Both the station itself and the
integrate old DSL connections with stop-
entire installation must be taken into
band for analogue and ISDN telephony.
account with the accesses to it.
The range below 138 kHz is not available for DSL. Dipl.-Ing. Heiko Kühn
10
SAENEWS · Solutions in Mind
It's tough! Bay controller BCU-50 for the most exacting of requirements Product innovation tion into existing structures.
With a vibration resistance of 10 m/s as per DIN EN 60068-2-6 and a shock resistance of 15 g
Bay station controllers in the electrical power supply must withstand special environmental requirements, especially when the station automation is used in high-voltage equipment, strongly vibrating or shock generating system components as well as environments with a seismic risk. The BCU-50 based on the established net-line FW-50-14. In terms of mechanics, isolation, stability and function, it has also been adapted to the more stringent requirements of IEC 61850-3.
To meet stringent availability requirements,
(150 m/s²) as well as a continuous shock load of
the intelligent SV-6 power supply with
10g given a stress immunity of 6000 shocks in
24/48/60/110/220 V DC for the BCU-50 and
accordance with IEC 60068-2-27, the system is
FW-50 can also be made redundant. Different
able to withstand a good deal. In order to with-
supply voltages can be used in parallel. Addi-
stand the mechanical stresses in areas exposed
tional features of the SV-6 include voltage-,
to the risk of earthquake as well, the system can
power- and temperature monitoring, as well as
also tolerate seismic vibrations up to 3.5 mm
a potential lockout after an under-voltage. This
in accordance with EN 60255-21-3 (measuring
is used to prevent switching errors for empty
relays and protection equipment) in each axis.
battery blocks. The 12RA system card for controlling circuit
Free space for raw application areas
breakers directly is new. A connection of the BCU-50 to the IED (Intelli-
The BCU-50 offers a perfect system for realisa-
gent Electronic Device) as protective equipment
tion as a
in the IEC 61850 network is of course possible.
• Station and bay controller in medium- and high-voltage switchgears
Starting with the new setIT version, the BCUCommon strengths supplemented as needed
50 also supports the IEC 61850 server and can
As with all series5 products, a special strength with the BCU-50 is
itself be used as an IED, e.g. as a remote IO
the extensive communication capabilities and redundancy concepts,
controller.
• Gateway and communication router between station buses, fieldbus and control systems • Monitoring and control device for utilities,
the wide range of functions, stringent IT security based on the BDEW
waste disposal and industrial sectors
whitepaper and last but not least in the convenient configuration and
On the test bench
quick diagnostics capability provided by setIT.
The BCU-50 has been consistently developed towards the product standard DIN EN 61850-3
The BCU-50 offers high flexibility through a wide selection of com-
(communication system for automation in the
munication interfaces and highly resilient input/output modules. The
electric power supply) for the highest class of
capacity can be adapted to custom requirements thanks to its modular
high voltage switchgears "H" and connections
structure. Large capacities can also be realised easily with up to 16
"h" which also cover the other areas. Therefore,
BCU-50s cascadable to a logical station.
the dielectric strength of 2.5 kV AC/3.5 kV DC
The various assembly variants, e.g. in the 19''-rack frame with optional
and 5-kV surge voltage also conforms to the
cable tray or direct wall-installation allow for uncomplicated integra-
VW3 class according to IEC 60870-2-1.
Bevorzugte Einsatzbereiche net-line BCU-50
Types of sites for casings, power supply and function earth links H
Common application in HV substations
G
Common application in Generation plant and MV stations
P
Protected area, if existing
Types of signal links h
High voltage equipment
f
Field connection
t
Telecommunication
p
link to protected area, if existing Supervisor
Process
Protected area
High voltage
P p
Field station
f
G Tool shed G
G
t
Far earth
f
f
G
G f
Relay station f
G
H h
f
t Earth
Far earth Connection
Recommended areas of application net-line BCU-50 (Source: based on IEC/TS 61000-6-5:2001, Fig. 3)
Quelle: In Anlehnung an IEC/TS 61000-6-5:2001, Bild 3
h
Solutions in Mind · SAENEWS
11
All in one The net-line FW-5-GATE-4G Product innovation
What do your customers expect from an intelligent component for the automation of distribution networks? It should take up as little space as possible in the switchgear cabinet, be easy to parameterise, offer high flexibility, ensure the necessary IT security and where possible, not cost a great deal. The net-line FW-5-GATE-4G is a concrete answer
there is no need for the connection cable between sta-
to these wishes. The system is a telecontrol station,
tion and modem; a typical point of vulnerability in risk
router, gateway and modem in one. An internal LTE
assessments. Afterwards, only the power supply and
mobile telephone modem is added to high FW-5-GATE
the aerials need to be mounted, insert SIM card, load
performance range. All earlier forms of use as a router,
firmware- and you are done.
net-line FW-5-GATE-4G
gateway or protocol converter with media disruption from serial to LAN as well as the chance to increase ca-
New LEDs for system information have been added to
pacity using extension boards continue to be available
the front panel for basic checking. The general system
of course.
state can be indicated via the sys-LED. The VPN-LED
Prepared for M2M and IoT applications
indicate the status of the tunnel. Both signals can be
The M2M (machine to machine) core of the FW-5-
Rapid commissioning and simple diagnostics
freely configurable in order to offer flexible signalling
GATE-4G is a modern 4G chipset with high recipient
Thanks to full configuration of all components of the
for any application and network topology.
technology through MIMO technology with two anten-
device in setIT, there is no need to integrate or adapt
especially in terms of IT security.
nas. Download rates up to 150 MBit/s are attainable;
an external modem, which can be time-consuming at
State-of-the-Art technology with high IT security
upload to the station of up to 50 MBit/s is possible. The
times. VPN tunnels and end-to-end encryption must be
The FW-5-GATE-4G was converted to a new, fu-
ability to fall back to 3G (UMTS/HSPA) or 2G (GPRS/
established from the station, according to the BDEW
ture-proof platform. The series 5e generation has at
EDGE) allows the FW-5-GATE-4G to operate even in
Whitepaper. In addition, all available information from
least 3x the performance of the series5+ generation
areas with poor reception/reduced mobile phone cov-
the mobile radio module must be used in the diagnos-
with 1200 MIPS. The improved performance in partic-
erage.
tics functions of setIT.
ular has a positive impact on the network communica-
The modem has approval for Europe and covers the
tion via IEC 61850 and process point treatment accord-
typical frequency bands there. Support for DUAL SIMs
Installation in the switchgear cabinet becomes far easier:
ing to IEC 60870-5-10x standards. The overall system
for an online provider change is in preparation.
Only 65 mm are used on the top-hat rail; an additional
was based on a modern linux kernel which allows for
power supply is not needed for an external model and
greater flexibility and easier maintenance of firmware
More is possible! The intelligent protocol converter
• Connection to multiple control centres possible • VPN-encryption for -104 (optional)
Product innovation · Communication Many IT security concepts require a media disruption
to be configured. The converter is happy with the decla-
Communication can be controlled in so-called wh-
from Ethernet network/LAN to serial interfaces in order
ration of the connected stations and the addressing of
itelists in which the common addresses of the autho-
to prevent potential attacks resulting from a physical
them. It converts the protocols in both directions there-
rised stations and their type identifications can be
decoupling. Other applications need a transformation
by providing the stringent IT security standard of series
released. Familiar diagnostics functions such as the
from IEC 60870-5-101 to a -104-series protocol because
5 technology. In spite of a serial linking on the one
interface monitor or Wireshark logs remain available as
the devices to be coupled simply do not provide this.
hand, for example, an end-to-end VPN tunnel can be set
before.
up for one or more control centres via IEC 60870-5-104. For such scenarios, a FW-5-GATE offers a tailor-made
Converting an unprotected IEC 60870-5-104 protocol
solution in the “Protocol converter” mode since - unlike
into as VPN-protected tunnel is also possible - using
a telecontrol station - no process data let alone specific
setIT in the customarily simple and intuitive way.
information about the signals being transmitted need
12
SAENEWS · Solutions in Mind
Wind farm linking with DNP3 First DNP3 application with BTC in Poland Industry · Electricity
BTC Business Technology Consulting Sp. z o.o. is a wholly-owned subsidiary company of BTC AG Germany. In Poland, BTC offers both SCADA solutions for public utilities and automation systems for Smart Grid and renewable energies. Thanks to the many years’ experience in the IT and energy market, BTC Poland - together with SAE IT-systems - was able to present a convincing case to its customers when it comes to the full monitoring and control of its wind farms. The highly-developed BTC PRINS® SCADA system with fully-redundant backup is now also providing special functions for wind turbines. In the project, SAE IT systems with DNP3-Online came into use. The Jozwin (Poland) wind farm comprises eleven 2.85-MW
with the dispatching centre of the Transmission System Opera-
wind turbines which are connected to the 110-kV network using
tor. In addition, there are two IEC 60870-5-104 channels to the
110/15-kV transformer substations. The brand-new transformer
BTC PRINS® SCADA system of the park operator and a further
substation connects two 110-kV lines via one linking field and
one for local HMI applications (also based on BTC PRINS®).
the farm using a 110/15-kV transformer. There are nine 15kV fields on the medium voltage area. Additional wind turbines are
The FW-5000 integrates a large number of different compo-
being added to the wind farm this year which is why the station
nents in the field direction. The 13 high-voltage protection de-
will be the recipient of 6 additional MV fields.
vices are connected with the aid of the mcFO-ST star coupler as per optical multimode based on the IEC 60870-5-103 protocol;
To meet the network connection conditions, the station was
nine medium-voltage protection devices per RS485 bus (IEC-
equipped with telecontrol which is designed to send the online
103 here too). Further auxiliary power supplies, switch automatic
values to the distribution and Transmission System Operator.
devices and additional devices (e.g. pressure sensors) are con-
A system based on the SAW net-line FW-5000 was chosen
nected via the standard Modbus-RTU or Modbus-TCP however.
to do so. Based on the requirements, the FW-5000 offers five RS232 interface cards with DNP3 communication. Three of them
The customer wants to read out some intelligent electricity
exchange the information and commands with the Distribution
meters directly. 28 ZMD/ZMQ meters from Landis+Gyr were
System Operator (two redundant DNP3 channels to the region-
integrated successfully thanks to the support of IEC 62056-21
Switchgear cabinet with FW-5000 and
al SCADA system, one third to the main control centre). The
protocol based on the RS485 interface of the net-line telecon-
BTC Prins® HMI working place
remaining two DNP3 channels secure a redundant connection
trol unit. An additional FW-5 collects some general I/O from the
Solutions in Mind · SAENEWS
controlled station.
tions enter productive operation. The wind park is controlled by
SAE news
the BTC PRINS SCADA system of the operator whereby all daily
In brief
®
Communication with the wind farm control was given particular
actions such as P/Q/U/output factor presetting remain the re-
importance. The telecontrol station uses the modbus TCP inter-
sponsibility of the Distribution System Operator. For this reason,
face with an optical Ethernet connection in single mode. This is
the substation is provided with all set points and commands for
a very important data source for the overall system. For this rea-
the 110-kV side per DNP3 channel. Thanks to the support of the
son, the connection and all switches in the path are monitored
DNP3 Unsolicited mode in the telecontrol unit, Distribution- and
continuously by the telecontrol system using SNMP diagnostics.
Transmission System Operators are given quick and reliable
This was made possible by releasing the SNMP service in the
feedback from the field.
13
FW-5000. SAE on YouTube
After completing start-up work, the wind farm and all substa-
We finally have our own channel. You will get an insight into how we work and our company philosophy and also see real areas where are technology is Remote diagnostics and engineering
applied and possible solution concepts.
Switch
Videos are spread out in different areas
SCADA GE
of our web site. You can also view them directly on our SAE YouTube channel. In future, tutorials featuring basic functionality, and
110 kV
15 kV
sample applications of our configuration tools setIT will also appear.
IEC
Modbus TCP
IEC 60870-5-103
IEC 60870-5-103
Local SCADA BTC Prins®
Take a look!
IEC 60870-5-103
Star coupler mcFO-ST, mcPS-1
Switch Hirschmann
VHPready with SAE
-104
VHPready Version 4.0 was published
-104
Router & firewall Westermo
in September 2015. Now, connecting -104
RS 232/RS 485
Timesync
Port
Meinberg
virtual power stations can be based on a
IEC 62056-21 Smart meter Landis + Gyr
GPRS router
Telecontrol master FW-5000
Redundant power supply Mean Well
5000
Router
single industrial standard. This promises to generate enormous simplifications when joining generation plants
RTU FW-5-GATE + 8 DI + 8 DO
from different manufacturers. Important communication cornerstones of this standard are: the use of a self-contained user group; the OpenVPN encryption
DNP3
method; and the use of the telecontrol protocol IEC 60870-5-104. Its flexible connection capabilities and extensive Wind park operator SCADA BTC Prins®
DSO Regional control centre
DSO Main control centre
TSO Control centre
security features make SAW telecontrol systems perfect for connecting generation plants according to VHPready 4.0.
Configurator of the Jozwin project
“The FW-5000 is presented as a powerful, efficient platform for processing various SCADA protocols (DNP3/IEC101/IEC104). It can also be integrated into heterogeneous infrastructures thanks to its high compatibility and communicability.“ Marcin Wycinka, BTC Business Technology Consulting Sp. z o.o.
14
SAENEWS · Solutions in Mind
Ratingen public utilities New telecontrol systems for substations and key stations Current
Stadtwerke Ratingen is a multi-utility company that offers electricity, natural gas, heat and drinking water in one go. The public utility is also responsible for running public street lighting and public baths. The KomMITT Ratingen GmbH subsidiary is also forcing through the expansion of fibre-glass communication networks and professional measuring services. “Based on the system relevance for telecontrol, to ensure a secure telecontrol system regeneration of
After completing the replacement measures in the trans-
relevant operating equipment it was important for us to
former stations and key stations, a gradual replacement
hire an established marketplayer”, according to Dipl.-
of remote control positions in the gas pressure control
Ing. Rainer Schermuly, Head of power supply at the
systems, the pressure booster systems and waterworks
Ratingen public utility. “This meant choosing the poten-
of Stadtwerke Ratingen GmbH is planned for 2017. In ad-
tial firms was not an easy undertaking for us”. The basic
dition, new staff are to be hired in the area of telecontrol
requirement was that a single provider would be able
as it is becoming more and more important to be able to
to take care of all service aspects such as drawing up
model different network states in real time. Thanks to the
concepts, building, configuration, commissioning up to
telecom subsidiary KomMITT Ratingen GmbH, the public
complete documentation of the installed system parts.
utilities are already well positioned when it comes to the extending telecommunication fibre glass networks.
We also considered the customer focus of the partner company very relevant. What matters is that once the
The preparations for extending an information security
risk transfer had taken place, competent contact per-
management system based on DIN ISO/IEC 27001:2015-
sons were available to use in the event of a fault or if we
03 have been addressed with appropriate certificate.
had some specialised questions.”
Due to the size of the company, Stadtwerke Ratingen GmbH is not required to obtain certification before the
In November 2015, Stadtwerke Ratingen GmbH award-
2018 financial year, but despite that it has already begun
ed the contract to SAE IT-systems GmbH & Co. KG to
preparations for reaching its information security tar-
alter the telecontrol system in three substations and
gets in order to extend appropriate security organisa-
three key stations after comparing several offers. The
tion and develop the necessary processes. An IT securi-
order comprised:
ty officer has been appointed which will from now on be
Over 240 employees provide optimum energy supplies
• Disposing of old switchgear cabinets and cables
involved in all projects with a relevance to IT security as
to approximately 91,600 inhabitants in the supply region
• Producing new switchgear cabinets
a means of taking into account safety-relevant aspects
88.7 km in size. Around 1,290 km of modern electrical
• Configuration of the stations
in the planning phase.
power lines and its own command centre staffed 24/7
• Support for commissioning
In the context of the pending certification, all securi-
generate energy sales of around 510 million kWh (2015).
• On-site assembly, including cabling
ty-relevant IT components are subject to a stringent
The energy feed into the electrical distribution networks
• Documentation of the “process point– terminal“ as-
selection process. This includes, in particular, telecon-
Renovation work by SAE employees
2
is based on three substations and three key stations from
signation directly in setIT
the 110kV network belonging to the Transmission System
trol system components. Stadtwerke Ratingen GmbH are on the safe side with SAE products as the company
Operator, Westnetz GmbH. The public utility converts
All data points must be connected via terminals in
has already integrated an extensive range of security
the electrical energy on the secondary coil of the power
the substations. In the largest substation - UA Ratin-
technology into its telecontrol systems and has taken
transformers. Distribution to a extended 10-kV-medium
gen - three net-line FW-50 are installed in the BGT-L,
on far-reaching optimisations to its own infrastructures
voltage network is done by means of highly-modern
with a total of 370 digital inputs, 56 measured value
and processes. SAE is also aiming for certification based
distribution stations. The medium voltage network has
inputs and 64 command outputs with corresponding
on DIN ISO/IEC 27001 and has begun a project to this
around 550 DSO transformer stations and 135 private
return information, inclusive of 1/n monitoring and
end.
customer transformer stations in which the medium
measuring circuit tests. In the smallest key station, a
voltage is stepped down to the low-voltage of 400V/230V
large rack (also net-line FW-50-14) was adequate for a
used in homes.
total of 48 digital inputs, 16 measured value inputs and 16 command outputs with their corresponding return
According to the EnWG (German Energy Industry Act),
information; also with 1/n monitoring and measuring
operators of power supply systems are required to
circuit tests here too. With the energetic support of
operate a secure, reliable and powerful energy supply
the Stadtwerke Ratingen GmbH project leader, Mr Jan
network neutrally, and to maintain and optimise this
Maurmann, commissioning and all of the work asso-
network as and when required, to reinforce and extend
ciated with it could be implemented briskly and to the
it to the extent economically reasonable.
fullest satisfaction of Stadtwerke Ratingen GmbH.
Solutions in Mind · SAENEWS
15
Stadtwerke Marburg Monitoring of 20 kV local network stations Electricity· water
Stadtwerke Marburg GmbH is a 100 % municipal, customer-focussed service provider active in the electricity, gas, heat, water, waste water local transportation and communication services sector in county of Marburg.
In 2008 the Marburg public utility launched
plings are done securely and reliably by the FW-5. If the
the SAE net-line FW-5 telecontrol system for
application changes, the system can be equipped with
the first time, which was used to monitor a rain
up to twelve expansion modules. To enable the user to
spillway basin (RSB). Continuous monitoring
respond quickly and flexibly to current developments
at weekends was to be ensured. The GPRS network was chosen as the
and to implement the requirements in a cost-effective
communication network in order to transmit data securely and en-
manner.
net-line FW-5000 in use
Requirement profile
crypted to the BTC control system via a VPN router. The IEC 60870-5-
• BTC-control system/work station
104 protocol was used throughout. In the meantime, almost 40 FW-5
Easy configuration
telecontrol stations have been built over the entire urban area. GPRS
The configuration tool setIT is a winner versus the prod-
and VFT systems are preferred for the data communication.
ucts of other manufacturers due to the its quick and easy configuration which leads to considerably shorter
linking • Parallel operation during development of new system • Compliance with IT security stan-
The waste water/water areas are currently equipped with ten stations
implementation times. The personnel at Stadtwerke
which are predominately used for monitoring RSBs and pump stations.
Marburg were quick to realise the importance of quick
Another 30 stations have stood the test in the monitoring of 20-kV
project implementation. In 2009, it sent two employees
• Suitable lightning protection
local network stations; 15 of them are joined with LINK dries via the
to a training seminar in Cologne.
• Connection of existing telecontrol
dards (e.g. VPN encryption)
systems
Modbus-RTU, thus enabling remote switching of the installations. Migration step-by-step Complete fuel package
In 2015, Stadtwerke Marburg paved the way for the fu-
Stadtwerke Marburg has a compact, powerful telecontrol system in
ture investing in a new ring concept based on a network
The advantage of this gateway ring archi-
the form of the FW-5, which meets all of the requirements on mon-
with SHDSL modems and six new net-line FW-5000
tecture was the noticeably quicker data
itoring, control, logging and transmission. Complex tasks such as
gateways. The prerequisite was a step-by-step migra-
communication to the higher-level BTC
command termination with measuring circuit testing or modbus cou-
tion while the old systems continued to run in parallel.
control system. The underlying integration of additional BTC work stations via LAN gave staff at the public utility quick access to existing remote terminal units.
BTC control centre
Thanks to net-line FW-5000 gateways, modular master stations with TCP/IP networks and individually-equipped interfaces were used, allowing gradual
Redundant telecontrol server switches by client Limit of supply
conversion of systems without fuss. In addition, existing copper lines were used
Transformer station Süd
to join the master stations in a network
Cu DA
which lead to massive cost savings.
with 11 VFT lines
Using the MiniFlex SHDSL modem, an Ethernet network was built as a ring. Depending on the characteristic curve, Substation West
Substation Lahnberge
coupling 6 outstations
coupling 4 outstations
BTC AP waterworks BTC emergency control centre Cu DA
it was possible to bypass distances of up to 15 km and attain a throughput of up to 15 Mbit/s. The protocols IEC 60870-5101/IEC 60870-5-104 were used here by default.
Substation Rudolphplatz
SA Nord
coupling 7 outstations
coupling 10 outstations
Replacement of Hytec subrate multiplexers by flexible telecontrol systems
16
SAENEWS · Solutions in Mind
ZVO Energie GmbH Gas and water supply with SAE Technik Gas · water
ZVO Energie GmbH is a subsidiary of the Ostholstein municipal union and a part of the ZVO Group. The primary areas of business of ZVO Energie GmbH are gas and water supply to the County of Ostholstein. The ZVO Group is headquarted in Neustadt in Holstein. The surface area of the supply area is 1,392.65 km². In the supply area there are 29,763 domestic water and 24,038 domestic gas connections. As well as supplying the inhabitants of Ostholstein, ZVO Energie GmbH also supplies a large number of tourists who come to Ostholstein and especially the Baltic Sea on holiday each year. planned or in the testing phase. All other communica-
coupled to the control system via GRPS with the IEC
tion paths are switched telephone lines, directional ra-
60870-5-104 protocol, taking into account all the neces-
dio communication and GRPS solutions. In larger works
sary security aspects of course, e.g.:
with PLCs, these are coupled
• User administration
with the substation via IEC 60870-5-104 or Profibus-DP.
• secure protocols HTTPS, FTPS
All process data from the remote substations are sent
• IPsec-secured connection between substation and
to the central command centre at Neustadt i. Holstein. A
master
total of around 20,000 process data items are sent and ZVO Energie GmbH operates 20 master stations and
processed by the control system.
121 telecontrol substations, including six waterworks, six storage tanks, one gas transfer station and a wide
ZVO Energie uses Siemens S7-300 and its successor
range of measuring and control stations. For ZVO drain-
the S7-1500 as the PLC. SAW telecontrol substations
age, ZVO Energie GmbH operates 188 remote terminal
have been in use at ZVO Energie since 2011. Every year,
units in their sewage treatment and pumping stations
old telecontrol stations are being replaced with the new
in the service relationship. SAE telecontrol systems are
net-line FW-5 and FW-50s. Currently, SAIA Burgess
responsible for monitoring- and remote control tasks in
PCD 4 are being used as master stations. These are
a total of 309 stations.
equipped by Proton as a master station and have their WT-and RS232-COMIOs developed in-house. SAE mas-
The vast majority of them are wired. ZVO Energie GmbH
ter stations are also used; e.g. in the last project which
operates its own cable network with a length of approx.
was implemented in 2015 with the aid of SAE. Oliver Kirpal, ZVO Energie GmbH
900 km and 740 terminal boards. Communication is done via VFT channels. SHDSL routes are also being
“In SAE IT-systems, we have managed to find a competent and reliable partner with whom we can also address new projects in the future.”
To replace an old GSM master station, an FW-50 was