Page 4
Copyright ABB is the owner of the copyright in this document. This document or any parts thereof must not be reproduced or copied without the written permission from ABB and the contents thereof must not be used to any unauthorized purpose.
Page 5
Other than under explicit contractual commitments, in no event shall ABB be responsible or liable for any loss or damage resulting from the use of this manual or the application of the equipment.
Page 6
Conformity This product complies with following directive and regulations. Directives of the European parliament and of the council: • Electromagnetic compatibility (EMC) Directive 2014/30/EU • Low-voltage Directive 2014/35/EU • RoHS Directive 2011/65/EU • RoHS Directive (EU) 2015/863 amending Annex II UK legislations: •...
Introduction 2NGA001859 A Introduction This manual The communication protocol manual describes a communication protocol supported by the protection relay. The manual concentrates on vendor-specific implementations. Intended audience This manual addresses the communication system engineer or system integrator responsible for pre-engineering and engineering the communication setup in a substation from a protection relay's perspective.
Figure 1: The intended use of documents during the product life cycle 1.3.2 Document revision history Document revision/ Product release History date A/2024-03-22 PCL1 First release 1.3.3 Related documentation www.abb.com/ Download the latest documents from the ABB Web site medium-voltage Symbols and conventions REX615 IEC 60870-5-104 Communication Protocol Manual...
Introduction 2NGA001859 A 1.4.1 Symbols The caution icon indicates important information or warning related to the concept discussed in the text. It might indicate the presence of a hazard which could result in corruption of software or damage to equipment or property. The information icon alerts the reader of important facts and conditions.
2NGA001859 A IEC 60870-5-104 overview IEC 60870-5-104 overview IEC 60870-5-104 protocol The IEC 60870-5-104 protocol standard is officially named “Network access for IEC 60870-5-101 using standard transport profiles”. The protocol is based on existing IEC 61870-5-101 application and transport layer profiles while also including a network link layer specification for Ethernet/TCP communication.
IEC 60870-5-104 overview 2NGA001859 A In the balanced link mode, both the client and the server can initiate message transfers. In the unbalanced mode, the client initiates the transmission with a request to which the server responds. Basic protocol functionality The server (controlled station) delivers various data to the client.
2NGA001859 A Vendor-specific implementation Vendor-specific implementation Protocol instances The protocol can be started and run in up to five instances, one instance for each possible IEC 60870-5-104 client attached. The instances operate independently of one another, so it is possible to use different network link (TCP) and transport layer settings for each instance.
Vendor-specific implementation 2NGA001859 A • SPS.stVal • SPC.stVal • DPC.stSeld • ACD.general/phsA/phsB/phsC/neut • ACT.general/phsA/phsB/phsC/neut Table 2: Single-point information Type ASDU M_SP_NA_1 Single point Event M_SP_TB_1 Single point with CP56Time2a 3.2.2 Double-point information Double-point information is derived from several IEC 61850 data attributes. •...
2NGA001859 A Vendor-specific implementation Table 4: Measured value, short floating point Type ASDU M_ME_NC_1 Measurand, float32 Event M_ME_TF_1 Measurand, float32 with CP56Time2a 3.2.4 Measured value, scaled integer A scaled integer (int16) is derived from the IEC 61850 data classes/attributes defined for integer values, that is, the common data classes dealing with either integer or enumeral values.
Vendor-specific implementation 2NGA001859 A 3.2.6 Step position Tap changer step position information (-64…63) is derived from the IEC 61850 class BCS (binary controlled step position). • BCS.ValWTr.stVal Table 7: Step position Type ASDU M_ST_NA_1 Step position Event M_ST_TB_1 Step position with CP56Time2a 3.2.7 Single command...
2NGA001859 A Vendor-specific implementation Value change detection The IEC 60870-5-104 data objects begin producing change events if the corresponding source IEC 61850 data objects reside in an IEC 61850 data set which is enabled for change reporting. Only the IEC 61850 data objects which reside in a data set are checked for value changes by the system.
Vendor-specific implementation 2NGA001859 A IEC 60870-5-104 internal event buffering The protocol stack instance internally stores change events based on ASDU event types. The event buffer size per ASDU type is 1000 events. However, this buffer is shared between all protocol instances activated in the relay. This means that with e.g.
2NGA001859 A Vendor-specific implementation 3.5.2.1 Direct operation Direct operation is possible for the double command if the controllable object has been configured to "Direct control" mode. If attempting to perform direct control for a controllable object in SBO mode, command is rejected and an error response is generated.
Vendor-specific implementation 2NGA001859 A 3.6.1 Integrated totals object grouping The existing IT objects can individually be configured to belong to any IT object group 1…4. When an IT master command is performed, it can be directed only to a specific IT object group or to all IT object groups. There are two commands related to counter groups.
2NGA001859 A Vendor-specific implementation The relay supports one predefined user with user number 1 and username Common. This user has predefined OPERATOR access rights so the user can perform all the supported IEC 60870-5-104 protocol requests. The Update Key for this user must be predefined by Account Management in PCM600 using 'Configure Secure Communication'.
Vendor-specific implementation 2NGA001859 A 3.7.4 Secure authentication settings 3.7.4.1 Predefined behavior Part of the secure authentication behavior is predefined in the relay. Association Id The relay supports up to five IEC 60870-5-104 protocol instances simultaneously. The Association Id for each instance corresponds to the protocol instance number in the menu structure and in Application Configuration.
2NGA001859 A Vendor-specific implementation 3.7.5 Statistics and security events Security statistics counters analyze and diagnose authentication-related events. As required by the standard, the counters are preserved in the relay's memory during the device reboot. The statistics counters are available via Configuration > Monitoring >...
Page 26
Vendor-specific implementation 2NGA001859 A 3.8.1 Communication link settings Table 10: Communication link settings Setting Description Operation This enables the IEC 60870-5-104 protocol instance to work on the Ethernet link. This setting should be set to "On". Client IP The IP address of the IEC 60870-5-104 client for which this instance is intended.
Page 27
2NGA001859 A Vendor-specific implementation Setting Description Link address length because Device address and equal to “Common address of ASDU“ are equal. The length must also match the configuration throughout the network. TX window (k) Sliding window protocol (k) transmit window setting. This is the maximum difference between the receive sequence and the send state variable, that is, the maximum number of outstanding I (information) format APDUs.
Vendor-specific implementation 2NGA001859 A 3.8.1.2 Sliding window protocol and timeout settings The link procedures are described in the standard IEC 60870-5-104/Part 5-104: Transmission protocols – Network access for IEC 60870-5-101 using standard Chapter 4 IEC 60870-5-104 interoperability Chapter 5 Secure transport profiles, authentication conformance statement If the IEC 60870-5-104 client disappears, the established TCP/IP socket...
2NGA001859 A Vendor-specific implementation Table 12: Statistic counters threshold settings Setting Description Unexpected Msgs Counter threshold value for unexpected messages Auth failures Counter threshold value for authorization failures Authn failures Counter threshold value for authentication failures Reply timeouts Counter threshold value for reply time-outs Rekeys Authn failure Counter threshold value for rekeys due to authentication fail- Total Msgs Tx...
Page 30
Vendor-specific implementation 2NGA001859 A Setting Description with time tags. The client-provided time stamp must be giv- en in this defined time format. The setup of the local time, meaning the relative time adjustment to be made between UTC (GMT) time and local time, is done elsewhere in the relay.
2NGA001859 A Vendor-specific implementation Setting Description Cyclical period setting defines the periodical PCM600. The reporting time of these cyclical data objects. Command delay Defines the maximum delta time (internal delay) allowed for client control commands with time stamps. 3.8.4 Update rate of analog and indication protocol data Update rate of protocol data depends on multiple factors that need to be considered when communication engineering is done.
Vendor-specific implementation 2NGA001859 A • Signals selected in communication management (instantaneous or deadband supervised value) Engineering of dataset and report control blocks is described in IEC 61850 Engineering Guide. Measurement data Typically, the commonly used measurement data, such as current/voltage measurement is included in IEC61850 default dataset with data_change + data_update trigger options.
2NGA001859 A Vendor-specific implementation Setting Description Transport errors Number of transport layer errors CnReject no sockets Number of rejected TCP connections due to unavailable sockets CnReject unregistered Number of rejected TCP connections due to an unregistered client 3.8.5.1 Secure authentication diagnostic counters The secure authentication diagnostic counters are located under Monitoring >...
Page 34
2^0 + 2^1, 3. The use of advanced customization features can be monitored in Monitoring > Communication > Protocols > IEC60870-5-101/104(n). Possible firmware version dependent expansions to customization parameter can be queried from ABB Customer support. REX615 IEC 60870-5-104 Communication Protocol Manual...
2NGA001859 A IEC 60870-5-104 interoperability IEC 60870-5-104 interoperability Overview This companion standard presents sets of parameters and alternatives from which subsets have to be selected to implement particular telecontrol systems. Certain parameter values, such as the number of octets in the COMMON ADDRESS of ASDUs represent mutually exclusive alternatives.
IEC 60870-5-104 interoperability 2NGA001859 A Network configuration (Network-specific parameter, all configurations that are used are to be marked with “X”.) Point-to-point Multipoint-party line Multiple point-to-point Multipoint-star Link layer (Network-specific parameter, mark all used options with an “X“. Specify the maximum frame length. If a non-standard assignment of class 2 messages is implemented for unbalanced transmission, indicate the Type ID and COT of all messages assigned to class 2.) Frame format FT 1.2, single character 1 and the fixed time-out interval are used...
2NGA001859 A IEC 60870-5-104 interoperability Type identification Cause of transmission Application layer Transmission mode for application data Mode 1 (Least significant octet first), as defined in 4.10 of IEC 60870-5-4, is used exclusively in this companion standard. Common address of ASDU (System-specific parameter, mark all used configurations with an “X“.) One octet Two octets...
Page 38
IEC 60870-5-104 interoperability 2NGA001859 A <5>:= Step position information M_ST_NA_1 <6>:= Step position information with time tag M_ST_TA_1 <7>:= Bitstring of 32 bit M_BO_NA_1 <8>:= Bitstring of 32 bit with time tag M_BO_TA_1 <9>:= Measured value, normalized value M_ME_NA_1 <10>:= Measured value, normalized value with time tag M_ME_TA_1 <11>:= Measured value, scaled value M_ME_NB_1...
Page 39
2NGA001859 A IEC 60870-5-104 interoperability <37>:= Integrated totals with time tag CP56Time2a M_IT_TB_1 <38>:= Event of protection equipment with time tag CP56Time2a M_EP_TD_1 <39>:= Packed start events of protection equipment with time M_EP_TE_1 tag CP56Time2a <40>:= Packed output circuit information of protection equip- M_EP_TF_1 ment with time tag CP56Time2a Either ASDUs of the set <2>, <4>, <6>, <8>, <10>, <12>, <14>, <16>, <17>...
Page 40
IEC 60870-5-104 interoperability 2NGA001859 A <102>:= Read command C_RD_NA_1 <103>:= Clock synchronization command (option see 7.6) C_CS_NA_1 <104>:= Test command C_TS_NA_1 <105>:= Reset process command C_RP_NA_1 <106>:= Delay acquisition command C_CD_NA_1 Parameter in control direction (Station-specific parameter, mark each Type ID with an “X“ if it is only used in the standard direction, “R“...
Page 41
2NGA001859 A IEC 60870-5-104 interoperability "R" if only used in the reverse direction "B" if used in both directions Type identification Cause of transmission <1> M_SP_NA_1 <2> M_SP_TA_1 <3> M_DP_NA_1 <4> M_DP_TA_1 <5> M_ST_NA_1 <6> M_ST_TA_1 <7> M_BO_NA_1 <8> M_BO_TA_1 <9>...
2NGA001859 A IEC 60870-5-104 interoperability Basic application functions Station initialization (Station-specific parameter, mark with an “X“ if the function is used.) Remote initialization Cyclic data transmission (Station-specific parameter, mark with an “X“ if the function is only used in the standard direction, “R“...
Page 44
IEC 60870-5-104 interoperability 2NGA001859 A Measured value, scaled value M_ME_NB_1, M_ME_TB_1 and M_ME_TE_1 Measured value, short floating point number M_ME_NC_1, M_ME_TC_1 and M_ME_TF_1 Station interrogation (Station-specific parameter, mark with an “X“ if the function is only used in the standard direction, “R“ if only used in the reverse direction, and “B“ if used in both directions.) global group 1...
Page 45
2NGA001859 A IEC 60870-5-104 interoperability Select and execute set point command C_SE ACTTERM used No additional definition Short-pulse duration (duration determined by a system parameter in the outstation) Long-pulse duration (duration determined by a system parameter in the outstation) Persistent output Transmission of integrated totals (Station- or object-specific parameter, mark with an “X“...
Page 46
IEC 60870-5-104 interoperability 2NGA001859 A Low limit for transmission of measured values High limit for transmission of measured values Parameter activation (Station-specific parameter, mark with an “X“ if the function is only used in the standard direction, “R“ if only used in the reverse direction, and “B“ if used in both directions.) Act/deact of persistent cyclic or periodic transmission of the addressed object Test procedure...
2NGA001859 A Secure authentication conformance statement Secure authentication conformance statement Overview of clause Implementers of this specification shall supply the information in this section on request. An “X” in a box means that the implementation supports the listed feature. Required algorithms If the implementer does not declare support for an algorithm marked “(required)”, interoperability cannot be guaranteed.
Secure authentication conformance 2NGA001859 A statement Configurable statistic thresholds and statistic information object addresses Name Default value of statistic Configured value of statistic Information object address threshold of the integrated total for the statistic Unexpected Messages 3 (Configurable) Configurable Authorization Failures 5 (Configurable) Configurable Authentication Failures...
Page 51
2NGA001859 A Secure authentication conformance statement Type identification Description IEC 60870-5-101 IEC Configured as 60870-5-104 critical (Y/N/-) <8> M_BO_TA_1 Bitstring of 32 bits with time tag <9> M_ME_NA_1 Measured value, normalized value <10> M_ME_TA_1 Measured value, normalized value with time tag <11>...
Page 52
Secure authentication conformance 2NGA001859 A statement Type identification Description IEC 60870-5-101 IEC Configured as 60870-5-104 critical (Y/N/-) <59> C_DC_TA_1 Double command with time tag CP56Time2a <60> C_RC_TA_1 Regulating step command with time tag CP56Time2a <61> C_SE_TA_1 Set point command, normalized value with time tag CP56Time2a <62>...
2NGA001859 A IEC 60870-5-104 parameters IEC 60870-5-104 parameters IEC 101-104 General settings Table 18: Non group settings Parameter Values (Range) Unit Step Default Description Operation 5=off Selects if this pro- 1=on tocol instance is 5=off enabled or disabled Port 3=IEC104 - Ethernet Port selection 3=IEC104 - Ethernet Mapping select 1...2...
IEC 60870-5-104 parameters 2NGA001859 A Parameter Values (Range) Unit Step Default Description Counter Reporting 0=Read by master Counter reporting 0=Read by master after freeze 1=Spontaneous Freeze mode 0=Not in use Freezing mode for 0=Not in use externally triggered 1=Freeze only integrated totals 2=Freeze and Reset TX window (k)
2NGA001859 A IEC 60870-5-104 parameters Parameter Values (Range) Unit Step Default Description dicate that interval is not used Exp Sesn key Chg 2...10000000 4000 Expected session key change count Max Sesn key Stat 1...255 Maximum session key status count Sec Stat Cnt Grp 4=Group 4 Secure statistics 1=Group 1...
IEC 60870-5-104 parameters 2NGA001859 A Parameter Values (Range) Unit Step Default Description Failed Sesn key 1...65535 Security statistics Chgs threshold for failed session key changes Upd key Chgs 1...65535 Security statistics threshold for up- date key changes Failed Upd key 1...65535 Security statistics Chgs...
Page 57
2NGA001859 A IEC 60870-5-104 parameters Name Type Values (Range) Unit Description Authn Fail Cnt INT32 0...2147483646 Security statistics coun- ter for authentication failures Reply timeouts Cnt INT32 0...2147483646 Security statistics coun- ter for reply timeouts Rekey Authn Fail Cnt INT32 0...2147483646 Security statistics coun- ter for rekeys due to au-...
Page 58
Glossary 2NGA001859 A Glossary APDU Application protocol data unit ASDU Application-layer service data unit Certification authority Cause of transmission Data object Also known as DO. Part of a logical node object representing specif- ic information, for example status or measurement. From an object- oriented point of view, a data object is an instance of a class data object.
Need help?
Do you have a question about the RELION REX615 and is the answer not in the manual?
Questions and answers