Dual Permission Security Access - GE D30 Instruction Manual

8.1 PASSWORD SECURITY
The following access supervision settings are available.
• INVALID ATTEMPTS BEFORE LOCKOUT: This setting specifies the number of times an incorrect password can be
entered within a three-minute time span before lockout occurs. When lockout occurs, the
REMOTE ACCESS DENIED
expiration of the lockout.
• PASSWORD LOCKOUT DURATION: This setting specifies the time that the D30 will lockout password access after
the number of invalid password entries specified by the
The D30 provides a means to raise an alarm upon failed password entry. Should password verification fail while accessing
a password-protected level of the relay (either settings or commands), the
asserted. The operand can be programmed to raise an alarm via contact outputs or communications. This feature can be
used to protect against both unauthorized and accidental access attempts.
The
UNAUTHORIZED ACCESS
command. Therefore, to apply this feature with security, the command level should be password-protected. The
ALARMS
operand does not generate events or targets.
If events or targets are required, the
with event logs or targets enabled.
The access level timeout settings are shown below.

PATH: SETTINGS PRODUCT SETUP
 ACCESS LEVEL
 TIMEOUTS
These settings allow the user to specify the length of inactivity required before returning to the restricted access level. Note
that the access level will set as restricted if control power is cycled.
• COMMAND LEVEL ACCESS TIMEOUT: This setting specifies the length of inactivity (no local or remote access)
required to return to restricted access from the command password level.
• SETTING LEVEL ACCESS TIMEOUT: This setting specifies the length of inactivity (no local or remote access)
required to return to restricted access from the command password level.

PATH: SETTINGS PRODUCT SETUP
 DUAL PERMISSION
 SECURITY ACCESS
8
The dual permission security access feature provides a mechanism for customers to prevent unauthorized or unintended
upload of settings to a relay through the local or remote interfaces interface.
The following settings are available through the local (front panel) interface only.
• LOCAL SETTING AUTH: This setting is used for local (front panel or RS232 interface) setting access supervision.
Valid values for the FlexLogic™ operands are either "On" (default) or any physical "Contact Input ~~ On" value.
If this setting is "On", then local setting access functions as normal; that is, a local setting password is required. If this
setting is any contact input on FlexLogic™ operand, then the operand must be asserted (set as on) prior to providing
the local setting password to gain setting access.
8-4
FlexLogic™ operands are set to "On". These operands are returned to the "Off" state upon
operand is reset with the
UNAUTHORIZED ACCESS
 
SECURITY ACCESS SUPERVISION
COMMAND LEVEL ACCESS
TIMEOUT: 5 min
SETTING LEVEL ACCESS
MESSAGE
TIMEOUT: 30 min
 
SECURITY

DUAL PERMISSION SECURITY ACCESS

LOCAL SETTING AUTH:
On
REMOTE SETTING AUTH:
MESSAGE
On
ACCESS AUTH
MESSAGE
TIMEOUT: 30 min.
D30 Line Distance Protection System
INVALID ATTEMPS BEFORE LOCKOUT
UNAUTHORIZED ACCESS

COMMANDS CLEAR RECORDS
operand can be assigned to a digital element programmed

ACCESS LEVEL TIMEOUTS
Range: 5 to 480 minutes in steps of 1
Range: 5 to 480 minutes in steps of 1
8.1.6 DUAL PERMISSION SECURITY ACCESS
Range: selected FlexLogic™ operands (see below)
Range: FlexLogic™ operand
Range: 5 to 480 minutes in steps of 1
8 SECURITY
or
LOCAL ACCESS DENIED
setting has occurred.
FlexLogic™ operand is

RESET UNAUTHORIZED
GE Multilin