Cybersecurity for shared infrastructure substation networks with IEC 61850 GOOSE and Sampled Values

Abstract

This study explains an example where select digital technologies are included to face the challenges related to cybersecurity in a windfarm solution. The network is planned, designed and commissioned by one operator, and will be maintained by two operators – one for generation assets for the windfarm, the other for the grid connection power transmission assets. The topology deployed is shown at a high level, describing how the windfarm offshore and onshore networks will be divided between the operators and the specific requirements of the solution. A more detailed view of the network is shown depicting Ethernet switches, routers and Intelligent Electronic Devices (IEDs); with the services and protocols used are explained and aligned with the challenges that each one represents in terms of cybersecurity, for example interconnections that use Parallel Redundancy Protocol for redundancy exchanging GOOSE interlocking. Each challenge is addressed one at the time and the topology will evolve as the solutions are added, going from a unified network under the control of one operator into two that can be easily split between operators.