Command Redirection Device for Substation Control Redundancy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing substation automation systems lack efficient redundancy mechanisms for control functions, requiring complex modifications to SCADA systems and IEDs, and are not transparent to the system, especially in cases of failure where exclusive control operations are needed.
Innovation Solution
A command redirection device is introduced to redirect control commands from a main control device to a backup device in case of failure, maintaining transparency to the SCADA system and avoiding modifications to existing hardware and software by acting as a proxy between the SCADA system and the station bus.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If redundant control devices are introduced for failover capability, then system reliability is improved, but device complexity and modification requirements increase
Solution Approach 1:
A proxy device is introduced as an intermediary component between the SCADA system and the IED. This proxy transparently redirects control commands to the backup IED when the primary IED fails, enabling redundancy without modifying existing SCADA or IED hardware/software. The proxy acts as a mediator that handles failover logic externally, preserving system simplicity while achieving reliability.
Solution Approach 2:
The redundancy function is segmented into a separate proxy component rather than being integrated into the existing SCADA system or IEDs. This segmentation allows the backup mechanism to operate independently, avoiding complexity in the primary control devices while still providing failover capability. The proxy handles redundancy management as a distinct functional unit.
2Ease of manufacture
If transparent redundancy is implemented without modifying existing components, then ease of manufacture and deployment is improved, but achieving effective failover control becomes more difficult
Solution Approach 1:
The proxy serves as an intermediary that monitors the operational status of the primary IED and automatically redirects commands to the backup IED when failure is detected. This intermediary approach simplifies deployment since no modifications are needed in existing components, while the proxy itself handles the complexity of failover detection and command redirection through its dedicated monitoring and routing functions.
Solution Approach 2:
The proxy implements feedback mechanisms by continuously monitoring the operational status of the primary IED through health checks and command response validation. When the primary IED fails to respond or indicates failure, the proxy receives this feedback and automatically switches command routing to the backup IED, ensuring reliable failover without requiring modifications to the existing control infrastructure.
Data Source
AI summary
Exemplary methods and systems are directed to a process control system having a main control device for controlling a primary equipment of the primary system and a backup control device for controlling the primary equipment in case of a failure of the first control device. A command redirection device for the process control system, is adapted to receive a control command destined to the main control device, and to redirect, in the event of a failure of the main control device, said control command to the backup control device.