View source for Power system protection

{{Short description|Branch of electrical power engineering}}
{{More citations needed|date=December 2021}}
'''Power system protection''' is a branch of electrical [[power engineering]] that deals with the protection of electrical power systems from [[Fault (power engineering)|faults]]{{citation needed|reason=Need primary source to restrict the topic to this specific instance of protection|date=September 2021}} through the disconnection of faulted parts from the rest of the [[Grid (electricity)|electrical network]]. The objective of a protection scheme is to keep the power system stable by isolating only the components that are under fault, whilst leaving as much of the network as possible in operation. The devices that are used to protect the power systems from faults are called '''protection devices'''.

== Components ==
Protection systems usually comprise five components
*[[Current transformer|Current]] and [[Instrument transformer#Voltage transformer or potential transformer|voltage transformers]] to step down the high voltages and currents of the electrical power system to convenient levels for the relays to deal with
*[[Protective relay]]s to sense the fault and initiate a trip, or disconnection, order
*[[Circuit breaker]]s or [[Residual-current device|RCD]]s to open/close the system based on relay and autorecloser commands
*[[Battery (electricity)|Batteries]] to provide power in case of power disconnection in the system
*Communication channels to allow analysis of current and voltage at remote terminals of a line and to allow remote tripping of equipment.
For parts of a distribution system, [[Fuse (electrical)|fuses]] are capable of both sensing and disconnecting [[electrical faults|fault]]s.

Failures may occur in each part, such as insulation failure, fallen or broken transmission lines, incorrect operation of circuit breakers, short circuits and open circuits. Protection devices are installed with the aims of protection of assets and ensuring continued supply of energy.

Switchgear is a combination of electrical disconnect switches, fuses or circuit breakers used to control, protect and isolate electrical equipment. Switches are safe to open under normal load current (some switches are not safe to operate under normal or abnormal conditions), while protective devices are safe to open under fault current. Very important equipment may have completely redundant and independent protective systems, while a minor branch distribution line may have very simple low-cost protection.
<ref>Alexandra Von Meier (2013). Electrical Engineer 137A: Electric Power Systems. Lecture 14:Introduction to Protection Systems, Slide 3.</ref>

[[File:Protective relay.jpg|thumb|A digital (numeric) multifunction protective relay for distribution networks. A single such device can replace many single-function electromechanical relays, and provides self-testing and communication functions.]]

==Types of protection==

===High-voltage transmission network===
Protection of the transmission and distribution system serves two functions: protection of the plant and protection of the public (including employees). At a basic level, protection disconnects equipment that experiences an overload or a short to earth. Some items in substations such as transformers might require additional protection based on temperature or gas pressure, among others.

===Generator sets===  
In a power plant, the protective relays are intended to prevent damage to [[alternator]]s or to the [[transformer]]s in case of abnormal conditions of operation, due to internal failures, as well as insulating failures or regulation malfunctions. Such failures are unusual, so the protective relays have to operate very rarely. If a protective relay fails to detect a fault, the resulting damage to the alternator or to the transformer might require costly equipment repairs or replacement, as well as income loss from the inability to produce and sell energy.

===Overload and back-up for distance (overcurrent)===
Overload protection requires a current transformer which simply measures the current in a circuit and compares it to the predetermined value. There are two types of overload protection: instantaneous overcurrent (IOC) and time overcurrent (TOC). Instantaneous overcurrent requires that the current exceeds a predetermined level for the circuit breaker to operate. Time overcurrent protection operates based on a current vs time curve. Based on this curve, if the measured current exceeds a given level for the preset amount of time, the circuit breaker or fuse will operate. The function of both types is explained in {{YouTube|id=zc_Dj5JNInc|title="Non-Directional Overcurrent Protection"}}.

===Earth fault/ground fault ===
Earth fault protection also requires current transformers and senses an imbalance in a three-phase circuit. Normally the three phase currents are in balance, i.e. roughly equal in magnitude. If one or two phases become connected to earth via a low impedance path, their magnitudes will increase dramatically, as will current imbalance. If this imbalance exceeds a pre-determined value, a circuit breaker should operate. Restricted earth fault protection is a type of earth fault protection which looks for earth fault between two sets of current transformers<ref>{{cite web|title=Restricted Earth Fault Protection|url=http://myelectrical.com/notes/entryid/150/restricted-earth-fault-protection|publisher=myElectrical.com|access-date=2 July 2013}}</ref> (hence restricted to that zone).

===Distance (impedance relay)===
Distance protection detects both voltage and current. A fault on a circuit will generally create a sag in the voltage level. If the ratio of voltage to current measured at the relay terminals, which equates to an impedance, lands within a predetermined level the circuit breaker will operate. This is useful for reasonably long lines, lines longer than 10 miles, because their operating characteristics are based on the line characteristics. This means that when a fault appears on the line the impedance setting in the relay is compared to the apparent impedance of the line from the relay terminals to the fault. If the relay setting is determined to be below the apparent impedance it is determined that the fault is within the zone of protection. When the transmission line length is too short, less than 10 miles, distance protection becomes more difficult to coordinate. In these instances the best choice of protection is current differential protection.{{citation needed|reason=Your explanation here|date=July 2016}}

===Back-up===
The objective of protection is to remove only the affected portion of plant and nothing else. A circuit breaker or protection relay may fail to operate. In important systems, a failure of primary protection will usually result in the operation of back-up protection. Remote back-up protection will generally remove both the affected and unaffected items of plant to clear the fault. Local back-up protection will remove the affected items of the plant to clear the fault.

===Low-voltage networks===
The [[low-voltage network]] generally relies upon fuses or low-voltage circuit breakers to remove both overload and earth faults.

===Cybersecurity=== 
The bulk system which is a large interconnected electrical system including transmission and control system is experiencing new cybersecurity threats every day. (“Electric Grid Cybersecurity,” 2019). Most of these attacks are aiming the control systems in the grids. These control systems are connected to the internet and makes it easier for hackers to attack them. These attacks can cause damage to equipment and limit the utility professionals ability to control the system.

==Coordination==
Protective device coordination is the process of determining the "best fit" timing of current interruption when abnormal electrical conditions occur. The goal is to minimize an outage to the greatest extent possible. Historically, protective device coordination was done on translucent log–log paper. Modern methods normally include detailed computer based analysis and reporting.

Protection coordination is also handled through dividing the power system into protective zones. If a fault were to occur in a given zone, necessary actions will be executed to isolate that zone from the entire system. Zone definitions account for [[Electric generator|generators]], buses, [[transformer]]s, [[Transmission line|transmission and distribution lines]], and [[Electric motor|motors]]. Additionally, zones possess the following features: zones overlap, overlap regions denote circuit breakers, and all circuit breakers in a given zone with a fault will open in order to isolate the fault. Overlapped regions are created by two sets of instrument transformers and relays for each circuit breaker. They are designed for redundancy to eliminate unprotected areas; however, overlapped regions are devised to remain as small as possible such that when a fault occurs in an overlap region and the two zones which encompass the fault are isolated, the sector of the power system which is lost from service is still small despite two zones being isolated.<ref>Glover J. D., Sarma M. S., Overbye T. J. (2010) Power System and Analysis 5th Edition. Cengage Learning. Pg 548-549.</ref>

==Disturbance-monitoring equipment==
Disturbance-monitoring equipment (DME) monitors and records system data pertaining to a [[Fault (power engineering)|fault]]. DME accomplish three main purposes:
* model validation,
*disturbance investigation, and
*assessment of system protection performance.<ref>{{cite web|url=http://www.nyiso.com/public/webdocs/documents/manuals/operations/System_Protection_Manual.pdf|title=System Protection Manual|publisher=[[New York energy law|New York Independent System Operator]]|access-date=2011-12-31}}</ref>
DME devices include:<ref>{{cite web|url=http://www.nerc.com/files/Glossary_12Feb08.pdf|title= Glossary of Terms Used in Reliability Standards|publisher=[[North American Electric Reliability Corporation]]|access-date=2011-12-31}}</ref>   
*Sequence of event recorders, which record equipment response to the event
*Fault recorders, which record actual waveform data of the system primary voltages and currents
*Dynamic disturbance recorders (DDRs), which record incidents that portray power system behavior during dynamic events such as low frequency (0.1&nbsp;Hz – 3&nbsp;Hz) oscillations and abnormal frequency or voltage excursions

==Performance measures==
Protection engineers define dependability as the tendency of the protection system to operate correctly for in-zone faults. They define security as the tendency not to operate for out-of-zone faults. Both dependability and security are reliability issues. Fault tree analysis is one tool with which a protection engineer can compare the relative reliability of proposed protection schemes. Quantifying protection reliability is important for making the best decisions on improving a protection system, managing dependability versus security tradeoffs, and getting the best results for the least money. A quantitative understanding is essential in the competitive utility industry.<ref>{{cite conference |first1=John J. |last1=Kumm |first2=Mark S. |last2=Weber |first3=E. O. |last3=Schweitzer |first4=Daqing |last4=Hou |title=Philosophies for Testing Protective Relays |conference=NETA International Electrical Testing Association Technical Conference |date=March 1995 |url=https://cdn.selinc.com/assets/Literature/Publications/Technical%20Papers/6047_PhilosophiesTesting_Web.pdf }}</ref><ref>{{cite conference |first1=John J. |last1=Kumm |first2=Edmund O. |last2=Schweitzer |first3=Daqing |last3=Hou |title=Assessing the Effectiveness of Self-Tests and Other Monitoring Means in Protective Relays |conference=1995 Pennsylvania Electric Association Relay Committee Spring Meeting |date=May 1995 |url=https://cdn.selinc.com/assets/Literature/Publications/Technical%20Papers/6004_AssessingEffectiveness_Web.pdf }}</ref> 
*Reliability: Devices must function consistently when fault conditions occur, regardless of possibly being idle for months or years. Without this reliability, systems may cause costly damages.
*Selectivity: Devices must avoid unwarranted, false trips.
*Speed: Devices must function quickly to reduce equipment damage and fault duration, with only very precise intentional time delays.
*Sensitivity: Devices must detect even the smallest value of faults and respond.
*Economy: Devices must provide maximum protection at minimum cost.
*Simplicity: Devices must minimize protection circuitry and equipment.

'''Reliability: Dependability vs Security'''

There are two aspects of reliable operation of protection systems: dependability and security.<ref>NERC Reliability Fundamentals of System Protection, December 2010, Sec 3 - 4.1.2.3, https://www.nerc.com/comm/PC/System%20Protection%20and%20Control%20Subcommittee%20SPCS%20DL/Protection%20System%20Reliability%20Fundamentals_Approved_20101208.pdf</ref> Dependability is the ability of the protection system to operate when called upon to remove a faulted element from the power system. Security is the ability of the protection system to restrain itself from operating during an external fault. Choosing the appropriate balance between security and dependability in designing the protection system requires engineering judgement and varies on a case-by-case basis.

==See also==
*[[Fault current limiter]]
*[[Network analyzer (AC power)]]
*[[Prospective short-circuit current]]
*[[ANSI device numbers]]

==Notes==
{{Reflist}}

==References==
{{Refbegin|}}
*{{cite web|url=http://www.gegridsolutions.com/multilin/notes/artsci/artsci.pdf|title=The Art and Science of Protective Relaying|last=Mason|first=C. Russell|publisher=[[General Electric]]|access-date=2009-01-26}}
*{{cite web|url=http://www.usace.army.mil/publications/armytm/tm5-811-14/|title=Coordinated Power Systems Protection|date=1991-02-25|publisher=Army Corps of Engineers|access-date=2009-01-26|archive-url=https://web.archive.org/web/20080113071902/http://www.usace.army.mil/publications/armytm/tm5-811-14/|archive-date=2008-01-13}}
*{{cite web|url=http://www.littelfuse.com/protection-relays/introduction/solving-electrical-problems.html|archive-url=https://archive.today/20130128014005/http://www.littelfuse.com/protection-relays/introduction/solving-electrical-problems.html|url-status=dead|archive-date=2013-01-28|title=How Do Protection Relays Work?|publisher=[[Littelfuse]]|access-date=2011-12-31}}
*{{cite web|url=http://www.roseindia.net/technology/scada/what-is-SCADA.shtml|title=What is SCADA?|publisher=Rose India Technologies|access-date=2011-12-31}}
*{{cite web|url=http://www.ece.uidaho.edu/ee/classes/ECE526S05/text/Ch1.PDF|title=Introduction to Practical Power System Protection|publisher=[[University of Idaho]]|access-date=2011-12-31|archive-url=https://web.archive.org/web/20120426082434/http://www.ece.uidaho.edu/ee/classes/ECE526S05/text/Ch1.PDF|archive-date=2012-04-26|url-status=dead}}
*{{cite web|url=https://fas.org/sgp/crs/homesec/R45312.pdf|title=Electric Grid Cybersecurity}}
* {{cite journal |last1=Abdelmoumene |first1=Abdelkader |last2=Bentarzi |first2=Hamid |title=A review on protective relays' developments and trends |journal=Journal of Energy in Southern Africa |date=23 June 2017 |volume=25 |issue=2 |pages=91–95 |doi=10.17159/2413-3051/2014/v25i2a2674 |doi-access=free }}
{{Refend}}
*http://perso.numericable.fr/michlami protection and monitoring of the electrical energy transmission network

{{Electricity delivery}}
{{Authority control}}

[[Category:Over-current protection devices]]
[[Category:Power engineering]]