Abstract: A method includes transmitting time-critical messages in an OSI layer 2 network tunnel from a first IED in a first substation to a second IED in a second substation over a WAN, wherein each of the first and second substation comprises an edge IED and is associated with a substation LAN, wherein each of the time-critical messages comprises message parameters. The method includes: creating a translation table comprising corresponding values of the message parameters, between the LANs and the WAN; defining a virtual IED in the second substation using the translated values of the message parameters, to impersonate the first IED; translating the message parameters according to the translation table, by the edge IED of the first and second substation; forwarding the time-critical messages from the first IED in the first substation to the WAN; and receiving the time-critical messages by the second IED in the second substation from the WAN.

Abstract: The invention relates to the field of a security framework for transmitting communication messages between a Substation LAN and packet-switched WAN, in particular, a network interface for transmitting protection data in a power network. The present invention provides a network interface for transmitting communication data including protection data of a power communication network, between a Substation Ethernet LAN and a packet-switched WAN usually in Layer 2. The network interface comprises: a firewall and a Layer 3 router being connected with each other and adapted to transmit the communication data excluding the protection data; and a Layer 2 bypass being in parallel with the firewall and the Layer 3 router, and adapted to transmit the protection data. According to a further aspect, the present invention also provides a method for transmitting such communication data.

Abstract: A network interface is disclosed for redundant coupling of a substation communication network and a packet-switched WAN of a power network. The interface device can include: a first redundancy module having: two LAN ports connectable with the Substation communication network, and a first interface port; a second redundancy module having: two WAN ports connectable with the WAN, and a second interface port; and a first interworking module connecting the first with the second redundancy module via the first and the second interface port, and adapted to forward protection data between the first and the second redundancy module.

Abstract: Exemplary embodiments are directed to use of transparent transmission of teleprotection commands in the form of GOOSE or GSSE messages, as defined by the Generic Substation Event class model by the standard IEC 61850, between substations combined with Channel Supervision and Monitoring equivalent to CSM offered by known teleprotection equipment. This approach avoids the disadvantage of non-transparent transmission when using the gateway approach and of the lack of the CSM functionality when using the tunnelling approach.

Abstract: A method for transmitting measurement data includes receiving measurement data in a first communication module, time stamping the measurement data in the first module with a time tag, transmitting the measurement data to a second communication module via a packet switched data network, and outputting the transmitted measurement data after a predefined delay time ?tD after the time stamping of the measurement data.

Abstract: The present invention discloses a method of transmitting time-critical messages in an OSI layer 2 network tunnel from a first TED in a first substation to a second IED in a second substation over a WAN, wherein each of the first and second substation comprises an edge IED and is associated with a substation LAN, wherein each of the time-critical messages comprises message parameters. The method comprises the steps of: a) creating a translation table comprising corresponding values of the message parameters, between the LANs and the WAN, b) defining a virtual FED in the second substation using the translated values of the message parameters, to impersonate the first IED, c) translating the message parameters according to the translation table, by the edge IED of the first and second substation, d) forwarding the time-critical messages from the first IED in the first substation to the WAN, and e) receiving the time-critical messages by the second IED in the second substation from the WAN.

Abstract: An exemplary method and system of the present disclosure use the Parallel Redundancy Protocol PRP (IEC 62439-3) for traffic duplication and redundant transport of the duplicated traffic in a single packet-switched wide-area communication network including a plurality of nodes interconnected via inter-node links in a meshed topology. The method involves identifying, between a send and receive node, two distinct communication paths with no link or node in common except for the send and receive node, and configuring the send and receive nodes to operate according to the Parallel Redundancy Protocol PRP. At any time during regular operation, and for any critical message to be transmitted from the send to the receive node, two redundant packets can be generated, and each of the redundant packets is sent via one of the two communication paths, resulting in an increased availability of the communication network without incurring the cost of full network duplication.

Abstract: The invention relates to the field of a security framework for transmitting communication messages between a Substation LAN and packet-switched WAN, in particular, a network interface for transmitting protection data in a power network. The present invention provides a network interface for transmitting communication data including protection data of a power communication network, between a Substation Ethernet LAN and a packet-switched WAN usually in Layer 2. The network interface comprises: a firewall and a Layer 3 router being connected with each other and adapted to transmit the communication data excluding the protection data; and a Layer 2 bypass being in parallel with the firewall and the Layer 3 router, and adapted to transmit the protection data. According to a further aspect, the present invention also provides a method for transmitting such communication data.

Abstract: A network interface is disclosed for redundant coupling of a substation communication network and a packet-switched WAN of a power network. The interface device can include: a first redundancy module having: two LAN ports connectable with the Substation communication network, and a first interface port; a second redundancy module having: two WAN ports connectable with the WAN, and a second interface port; and a first interworking module connecting the first with the second redundancy module via the first and the second interface port, and adapted to forward protection data between the first and the second redundancy module.

Abstract: A method for transmitting measurement data includes receiving measurement data in a first communication module, time stamping the measurement data in the first module with a time tag, transmitting the measurement data to a second communication module via a packet switched data network, and outputting the transmitted measurement data after a predefined delay time ?tD after the time stamping of the measurement data.

Abstract: An exemplary method and system of the present disclosure use the Parallel Redundancy Protocol PRP (IEC 62439-3) for traffic duplication and redundant transport of the duplicated traffic in a single packet-switched wide-area communication network including a plurality of nodes interconnected via inter-node links in a meshed topology. The method involves identifying, between a send and receive node, two distinct communication paths with no link or node in common except for the send and receive node, and configuring the send and receive nodes to operate according to the Parallel Redundancy Protocol PRP. At any time during regular operation, and for any critical message to be transmitted from the send to the receive node, two redundant packets can be generated, and each of the redundant packets is sent via one of the two communication paths, resulting in an increased availability of the communication network without incurring the cost of full network duplication.