Collaborative defense of energy distribution protection and control devices
AssigneeABB Research Ltd.
InventorsReynaldo Nuqui, Le Tang
Life of this patent
Estimating the term…
Abstract
A method is disclosed for preventing malicious settings changes to IEDs in a power transmission and distribution network. Attempted changes to the protection settings of an IED is detected and transmitted to one or more neighboring IEDs. The neighboring IEDs check for consistency of the new settings and return conformance or nonconformance signals. If a nonconformance signal is received, the attempted setting change is not allowed.
Claims21
A method of preventing malicious settings changes to one of a plurality of IEDs in a power network, the method comprising,
- detecting an attempted change to protection settings of a first IED in the power network;
- transmitting the attempted change to the protection settings of the first IED to a second IED in the power network, wherein the second IED has protection settings different from the protection settings of the first IED and includes at least one predefined protection rule for the protection settings of the first IED;
- the second IED checking whether the attempted change to the protection settings of the first IED will result in the protection settings of the first IED not satisfying the at least one predefined protection rule, such that the first IED and the second IED would be miscoordinated with respect to their respective protection settings;
- the second IED transmitting a nonconformance signal to the first IED in response to the checking by the second IED determining the attempted change will result in the protection settings of the first IED not satisfying the at least one predefined protection rule for the protection settings of the first IED;
- and
- the first IED denying the attempted change to the protection settings of the first IED upon receipt of the nonconformance signal from the second IED.
A non-transitory computer readable medium carried in first and second IEDs in a power network, the computer readable medium containing computer executable instructions which, when executed by at least one processor in the first and second IEDs, cause the at least one processor to perform a method of preventing malicious settings changes to one of a plurality of IEDs in a power network, the method comprising,
- detecting an attempted change to protection settings of the first IED in the power network;
- transmitting the attempted change to the protection settings of the first IED to the second IED in the power network, wherein the second IED has protection settings different from the protection settings of the first IED and includes at least one predefined protection rule for the protection settings of the first IED;
- the second IED checking whether the attempted change to the protection settings of the first IED will result in the protection settings of the first IED not satisfying the at least one predefined protection rule, such that the first IED and the second IED would be miscoordinated with respect to their respective protection settings;
- the second IED transmitting a nonconformance signal to the first IED from the second IED in response to the checking by the second IED determining the attempted change will result in the protection settings of the first IED not satisfying the at least one predefined protection rule for the protection settings of the first IED;
- and
- the first IED denying the attempted change to the protection settings of the first IED upon receipt of the nonconformance signal.
A method of preventing malicious settings changes to one of a plurality of IEDs in a power network, the method comprising,
- detecting an attempted change to protection settings of a first IED in the power network;
- transmitting the attempted change to the protection settings of the first IED to a second IED in the power network, wherein the second IED has protection settings different from the protection settings of the first IED and includes at least one predefined protection rule for the protection settings of the first IED;
- the second IED checking whether the attempted change to the protection settings of the first IED will result in the protection settings of the first IED satisfying the at least one predefined protection rule such that the first IED and the second IED would be coordinated with respect to their respective protection settings;
- the second IED transmitting a conformance signal to the first IED if the attempted change to the protection settings of the first IED will result in the protection settings of the first IED satisfying the at least one predefined protection rule for the protection settings of the first IED;
- and
- the first IED denying the attempted change to the protection settings of the first IED if no conformance signal is received from the second IED.
Dependencies are inferred from the claim text.