MEANINGFUL TESTING

OF NUMERICAL MULTIFUNCTION PROTECTION SCHEMES

by

Jay Gosalia
Doble Engineering Company

Introduction: available to the user depends upon the design of the

protection scheme. This flexibility improves the
Generally, an electromechanical relay is a functionality of the protection multi-fold, and at the
single function module. Multiple electromechanical same time makes the protection scheme complex.
relays wired together create a complete protection This added complexity increases the possibility that
scheme. Electromechanical relay design is not very the engineers will commit errors in the protection
complex and is relatively easy to test. Traditionally, configuration. The relatively complex protection
complete protection scheme testing was not done. design poses a number of challenges for the relay test
Test engineers tested each individual component of instruments. The traditional test methods will not be
the scheme and assumed that if the individual sufficient to evaluate the performance of
component worked correctly then the complete multifunction numerical protection. A Protection test
scheme worked correctly. This is true to some extent instrument should provide the functionality to enable
as the scheme is relatively simple; hence, the the user to evaluate the capability of the
assumptions stated above provided satisfactory multifunction digital protection scheme.
results.
This paper describes how to test
Advances in Digital Signal Processing multifunction numeric protection effectively. It also
technology and microprocessor design allow the user discusses test instrument requirements for testing and
to do more with protection today than older evaluation of multifunction protection schemes. Use
technology provided. These advances now allow the of today's technological advances in the personal
complete protection scheme to be designed by computers, in testing and in the evaluation of a
combining different protection functions in software protection scheme under actual power system
logic. With modern, high-power computers, the condition using COMTRADE standard and
protection designer accurately simulates power simulation programs like EMTP and ATP is
system conditions using tools like EMTP, ATP, etc. discussed in this paper.
to develop new protection methodology. This new
methodology provides efficient protection where Numerical Protection Functions and Settings:
protection functions are implemented using a
Numerical protection provides a host of
numerical algorithm. Protections are now designed
protection schemes along with control and metering
to work effectively under power system disturbance.
functions in one package. The user configures the
Efficient protection is not the only benefit of this
protection to suit the application by enabling certain
advanced technology. Additionally, these advances
functions and disabling unnecessary functions. The
allow the protection designer to put a host of
connection between the various functions is done
different features in a box resulting in a reduction of
through software links. Software links are equivalent
the protection packaging size. Numerical
to a wiring connection between the protection
multifunction protection provides a myriad of
elements in an electromechanical protection scheme.
different options to cover a wide range of
The difficult part to the user is that unlike
applications. Changing the software logic functions
electromechanical schemes, in numerical protection
to customize the protection scheme for the individual
it is not apparent which elements are active or how
application is easy. The degree of customization
they are interconnected. In numerical protection,
these details are only available via Human Machine simulated power system conditions. A report from
Interface (HMI) if provided or by connecting a PC, IEEE Power System Relaying Committee entitled
typically via serial port, to the protection. Some of Relay Performance Testing discusses how Dynamic-
the line protection scheme can have setting State Testing and transient simulations provide a far
parameters as high as 250. Understanding how to better understanding of how the protection system
calculate settings and how to implement the various performs. By making a profile of the operation of
function links are not trivial tasks. the scheme, malfunctions can be found faster
To apply the protection for the application, because it is easier to identify the changes in areas
perform the following tasks: that do not operate the way they are expected.
Dynamic-State Testing allows fundamental
• Enable the required protection elements frequency components to switch synchronously and
• Disable the protection elements which are not thereby represent power system events. The
required synchronous switching between the pre-fault, fault,
and post-fault conditions allows users to simulate a
• Calculate the settings for all required protection power system event easily and quickly. Dynamic-
elements
State Testing does not simulate transient components
• Set up the links between various protection of the power system event. In most applications, this
element typically using the software function may be acceptable, as what is being verified is the
links configuration of the scheme, protection algorithm,
and interaction between the various elements of the
• Assign output contacts for trip, close, control,
numerical protection. Some modern-line protection
and annunciation functions
schemes use a superimposed component to detect the
• Assign logic inputs for various functions direction of the fault. For such type of protection,
transition between two states of the Dynamic-State
• Configure the protection for metering display
simulation needs to be examined to confirm that
and set up communication option to SCADA or
transition from one state to other state does not create
sub-station automation system if required
problems with the protection. Figure 1 shows the
These tasks require careful evaluation of the functional block diagram for Dynamic-State Testing
application and a good understanding of the of a protection scheme.
capability of the numerical protection. Once this task
is completed, the user needs to create an application Protection
Under Test
verification plan to confirm that the protection meets Source Protection
Inputs Outputs
the intended need.

Dynamic-State Testing: Power System Logic

Simulator Inputs
As described above, numerical protection
State change
provides many protection and control functions in V I
Definition
one box. It is not an easy tack to verify the proper
setting and functionality of each individual function. Power System State Simulation
Controls Sources and outputs
Traditional Steady-state Testing of an individual
function requires the protection element under test to
be isolated and at the same time to deactivate the Figure 1. Functional Block Diagram for
other protection element, so that it does not interfere Dynamic Testing of a Protection Scheme
with the protection function under test.
Reconfiguring the protection typically allows user to
test protection using Steady-State techniques. Some Dynamic-State Testing, as mentioned
of the numerical protection can be put in a diagnostic above, controls the voltage and current applied to the
mode or test mode, which facilitates testing of the protection under test. By simulating voltage and
protection element for Steady-State Test. This is a current phasors for various states of the power
time consuming task and requires intimate system, protection response can be analyzed. The
knowledge of the protection scheme. To verify the transition from pre-fault to fault to post-fault state
application, Dynamic-State Testing of the protection can be programmed by the user by monitoring the
is the logical choice. response from the output contacts of the protection.
To simplify the testing of numerical During every state, logic outputs can be controlled to
protection Dynamic-State Testing can used. simulate events like carrier signal, breaker position,
Dynamic-State Testing means testing under etc. Dynamic-State Testing, thus by controlling
current/voltage phasors, logic outputs and monitoring scheme wiring. It is mostly the software changes.
protection output contact response in a real time can When protection is in the service and firmware
simulate power system events accurately which changes are required, then the protection scheme
allows user to test protection response easily. should be at least tested to ascertain the proper
operation of the protection. Figure 2 describes how
Distribution Numerical Protection Scheme: some functions of a distribution protection scheme
Consider the typical distribution numerical can be tested using Dynamic-State Testing.
protection scheme, which includes the following
Breaker Fail Protection:
protection functions in a package.
Breaker fail protection provides the
• Device 51 phase and ground time over current
functions (Directional or non-directional) protection when a breaker fails to trip.
• Device 50 high set over current protection Protection senses the fault and issues a trip
typically protection provides 2 high set over command. If the breaker fails to clear the fault,
current protection the breaker fail timer times out, and if the
• Device 79 Multi shot auto-reclose function protection continues to sense current through the
• Device 25 Sync check function breaker, then it provides breaker fail output.
• Device 87 Bus differential protection The breaker fail output contact generally picks
• Device 50 BF Breaker fail protection scheme up the lock-out relays to trip the associated
• Device 81 under and over frequency protection breaker to clear the fault. Figure 2 shows a
typical block diagram of breaker fail logic.
Some other protection functions may include
load-shedding scheme, VT/CT supervision functions, To test breaker fail protection properly, the
and Cold start supervision. Discussion of the following power system conditions should be
complete protection scheme and its application is simulated:
beyond the scope of this paper.
• Breaker fail condition
Protection Testing: How Much And When?
• Normal trip condition
Before applying the protection scheme,
testing needs to be performed to confirm the • Delayed breaker trip condition
suitability of the scheme for the application. When Dynamic-State Testing can simulate all of the
testing a protection scheme, it is important to test the above conditions. Dynamic-State Testing allows the
configuration, which is intended to be the user to simulate a power system event by creating
configuration in service. It is impossible to test all different states of the power system.
possible configurations for the scheme. For
evaluation of the protection scheme, it is necessary to • First state of the test simulates the normal load
check the configuration that exercises the maximum condition, which is Pre-Fault State. This
elements of the scheme. Another question that arises condition should be simulated for time sufficient
here is when and how much testing should be done for protection to come to a quiescent state.
when the firmware of the protection changes? The
• Fault State should follow the pre-fault condition
manufacturer of the digital protection scheme by simulating fault current and fault voltages.
upgrades the protection firmware time to time. The
Test instrument in this state should monitor the
reason for these changes can be a problem fix or
response of the output contacts from the
improvement in the protection performance. This
protection scheme. The protection test
practice is going to continue, as such changes most
instrument should monitor trip output and
of the time do not require changes in the hardware or
breaker fail output contacts along with other
protection contact outputs.
52a BFR
Trip • Program the test instrument to simulate Post-
I & Fault State on sensing the operation of breaker
Current
fail output contact. It is important that the test
Detector Breaker Fail instrument should monitor all or as many output
Timer
Trip contacts as possible of the protection scheme.
Protection
Algorithm
This allows the user to analyze the protection
performance by checking response of the output
contacts. The user can compare the protection
response with the expected response to analyze
Figure 2. Typical Breaker Fail
the operation.
 By programming the transition from Fault State any time set by the user). This assumes that this is a
to Post-Fault State on trip contact, normal trip radial system.
condition can be simulated. The test instrument
Testing of this logic at the incomer protection
should be able to simulate breaker operation by
can be accomplished by Dynamic-State Testing. The
simulating breaker trip and close operation with
first step is to define the states of the power system to
applicable delays like three-cycle trip time and five-
simulate the feeder fault.
cycle close time. Programming breaker trip time to a
desired value can simulate delayed breaker trip. The • First state of the test simulates the normal load
effect of the 52a contact on the logic can be analyzed condition, which is Pre-Fault State.
by simulating 52a contact from the test instrument.
Similarly, if the logic is effected by any other logic • Fault State should follow the pre-fault condition
input the test instrument could simulate the same. by simulating fault current and fault voltages.
Test instrument in this state should simulate the
By recording the transition of protection block-input signal using logic output.
contacts, protection trip time, and breaker fail time
delay, the resetting time of the current detectors and • Program the test to simulate Post-Fault State on
the breaker fail margin time can be measured. These sensing the operation of trip output contact.
parameters are very important for the proper During this state normal voltage and no current
operation of the breaker fail protection. As should be provided which simulates breaker
mentioned above by monitoring as many output open condition.
contacts as possible the proper operation of the By not exercising the block signal, a bus
protection scheme can be ascertained. fault can be simulated. Refer to the Fault at F1 in
Bus Protection Logic: Figure 3. During this condition, monitor all the
output contacts to analyze the response of the
incomer protection for the feeder fault. Testing of
One common feature in distribution
such type of scheme is relatively simple when all the
numerical protection is simple bus protection logic.
elements of the scheme are available for testing.
Microprocessor based protection allows simple logic
However, it may not be feasible all the time to have a
bus protection to be included for distribution
complete scheme available, typically when
protection. Figure 3 describes the simple bus
protection logic. evaluating the protection for application in the lab.
Therefore, if a complete scheme is not available,
Incomer Dynamic-State Testing can simulate the operation of
the protections not available during evaluation.
Block Trip
Accurate control of logic outputs for
Dynamic-State Testing allows user to simulate
F1
various fault conditions for protection scheme. For
this purpose, an adequate number of logic outputs
should be available. When all of the logic outputs
are independent of each other, they provide ample
flexibility for simulation of any power system event
F2 the user conceives.
B
A C Numerical Protection Reclosing Logic:
Figure 3. Simple Bus Protection Logic Testing and evaluating the Reclosing logic
in the multifunction protection requires control of
Protection at the incomer provides backup multiple inputs to the protection and monitoring
for A, B, and C feeder protections. Close up fault on various output signals from the protection on time
any of the feeders A, B, or C (Fault F2 in the above basis. The test instrument can be programmed to
figure), both feeder and back up protections high set simulate different power system events such as
element will pick up. If the fault is close up then it is transient fault, permanent fault, three-phase fault,
difficult to be distinguished by back up protection as multiphase fault, single-phase fault or combination of
bus or feeder fault. The typical logic employed any of the above. During the fault simulation, the
checks that if high set element of incomer protection test instrument can be programmed to simulate
picks up and receives no block operation from the breaker closing/tripping operation, operation of other
feeder protection then it is a bus fault. (Refer to the associated control and protection element by
Fault at F1 in Figure 3.) Incomer protection should controlling logic outputs of test instrument. During
trip the incomer breaker after a delay of 50-mSec (or the simulation, test instrument can be programmed to
record the protection response, which can be define the characteristics of voltage, current and the
evaluated by the user. status of digital channels before, during and after an
event. High playback rate of the transient event
Numerical Line Protection: using COMTRDADE data is necessary to simulate a
Numerical line protection provides many power system event accurately. Test instrument
enhanced functions for the effective protection of the should be able to play the transient data at high
transmission line. Over and above the 3-zone playback rate. To simulate dc-offset, dc-coupled
3-phase, phase and ground impedance protection, amplifiers are required for Transient Testing.
numerical protection can provide the following EMTP/ATP can generate transient data at
enhanced functionality: 50-microsecond intervals to simulate a transient
event accurately. This requires that the test
• Switch on to the fault instrument play back the data at rate of 20 kHz. Test
• Power swing blocking instruments, which can play transient data at this
rate, can easily have a bandwidth of six kHz, which
• VT/CT supervision is adequate for simulation of transient conditions.
Along with the control of the voltage and current
• Long memory
values on a sample-by-sample basis, an instrument
• Reclosing and Synchrocheck functions should be able to simulate logic output with
0.1-mSec accuracy and should be able record
• Time over current back up response of the protection with 0.1-mSec accuracy.
• Breaker fail protection The ability of test instrument to record multiple
inputs and timers along with the ability to control
• Distance to fault function logic outputs with 0.1-mSec accuracy is very
Dynamic-State Testing tests the above functions important in testing modern multifunction numerical
easily by simulating power system phasors, protection.
controlling logic output for simulation of power Test Instrument Requirements:
system events and recording protection response.
Dynamic-State Testing allows users to create test A test instrument should provide a sufficient
plans independent of the protection manufacturer. number of logic inputs, in order to allow the user to
Dynamic-State Testing simply simulates power monitor multiple contact output from the protection
system conditions and allows users to analyze the under test. The numerical protections' output
response of the protection. contacts are typically under software control. The
output contacts can be allocated to perform different
Transient Testing: functions depending on the application. To evaluate
To test state-of-the-art protection such as a the protection performance, it is important to
super- imposed directional comparison protection, simulate power system conditions, record, and
some special capabilities are expected from the test analyze the status of all output contacts during test
instrument. This type of protection operates very fast interval. It is important to ensure that the contacts,
and works on the transient component during the that operated were supposed to operate, and that the
fault. For such a protection type, Dynamic-State contacts that did not operate were not supposed to
Testing may not be adequate. Transient Testing operate. At the same time it is necessary to ensure
provides the accurate simulation of power system that pick up and drop out timings of the contacts are
events. It is an important tool the user has, to as expected. The instrument should also be able to
perform a thorough evaluation of protection scheme start multiple timers to analyze the timing sequence
operation. Transient Testing can be performed using of the various events. To simplify the analysis of the
the data created by an EMTP program or data event, the timer should be able to be started and
recorded by DFRs. To check such types of stopped by the user by defining the trigger where
protection, Transient Simulation should be used. trigger definition includes logical combination of
Actual DFR record or an EMTP/ATP generated inputs.
record can be used to test such type of protection. Summary:
COMTRADE data files help the user to perform
Transient Testing. Modern DFRs and digital Advances in the microprocessor and digital
protection can record power system events in a signal processing technology allow the user to
COMTRADE data format. It is also possible to employ multifunction numerical protection for the
create COMTRADE data files from simulation protection of power system apparatus. Modern state-
programs such as EMTP and ATP. The of-the-art protections are designed to work under
COMTRADE format is a collection of data around power system conditions. Software logic provides
an event point, recorded at regular time intervals, to enormous flexibility to the user to design protection
logic for the application. To properly test and in Electrical Engineering and M.S. in Computer
evaluate the protection for the application, Dynamic- Science.
State Testing or Transient Testing should be used.
Dynamic-State Testing simulates power frequency
phasors, which can be useful in evaluating the
protection algorithm. Transient Testing simulates
power system events accurately by the simulation of
transient conditions. The simulation of power
system conditions, includes simulation of voltage and
current values along with the simulation of the events
like breaker operation, carrier signals, etc.
Numerical protection can only be tested effectively
by playing back such events. The modern test
instrument employs similar technology as used in the
protection, which allows simulation of the power
system events easily and effectively. A modern test
instrument provides dc-coupled amplifiers with
adequate power along with 8 to 16 isolated logic
inputs and outputs. Such a high number of inputs
and outputs is necessary to test numerical protections
effectively. Response time of such inputs and
outputs should be on the order of 100 microseconds.
To simplify the analysis of protection response, test
instrument provides timing functionality where time
interval can be recorded for user specified events.
The start and stop functionality of the timer based
upon the logical combination of inputs further
simplifies the protection response evaluation.
References:

1. ANSI/IEEE C37.111.1991 Standard Common

Format for Transient Data Exchange
(COMTRADE) for Power Systems
2. IEEE Special Publication # 96TP115-0 Relay
Performance Testing, Power System Relaying
Committee, Report of Working Group I 13.
3. Jodice, J.A. and Giuliante, A.T.,”A New
Philosophy for Protection Diagnostics”,
Proceedings of the Sixty-Third Annual
International Conference of Doble Clients,
1996, Section 6-7.

About The Authors

Jay Gosalia is currently working at Doble
Engineering Company as Vice President of
Engineering and Marketing. He has over 22 years of
experience in the Power Engineering field, 17 of
which have been dedicated to the development and
marketing of Protective Relays. Prior to joining
Doble Engineering, Jay was the U.S. Sales &
Marketing Manager at GEC Alsthom T&D,
Protection & Control Division for 13 years. Prior to
GEC, Jay worked at ABB in the Circuit Breaker
Division as a design and development engineer.
Jay is an active member of the IEEE Power System
Relaying Committee and has authored several
technical papers on Protective Relays. He has a B.S.