Wind Turbine Network Segmentation for SCADA Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Wind turbines face challenges in obtaining relevant information during service due to disconnection from SCADA systems for safety reasons, which restricts access to monitoring and control data, and the addition of high bandwidth applications can interfere with or require additional networks, limiting access time for critical operations.
Innovation Solution
A wind turbine network architecture comprising a first sub-network connected to an external network and a second sub-network that can be disconnected from both the first sub-network and the external network, allowing secure and flexible communication, with a disconnector and router enhancing security and enabling local operation during service.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the wind turbine is disconnected from the SCADA system during service for safety reasons, then service technicians can work safely without external operation, but they cannot access past performance data or monitoring information
Solution Approach 1:
The network is divided into two separate sub-networks: a first sub-network for SCADA communication and a second sub-network for service operations. This segmentation allows service technicians to access the second sub-network independently while the first sub-network remains disconnected, resolving the contradiction between safety isolation and information access.
Solution Approach 2:
A disconnector device acts as an intermediary between the two sub-networks, enabling selective connection and disconnection. This intermediary allows the service sub-network to function independently when needed while maintaining the ability to connect to the SCADA sub-network when required, thus balancing safety and information access.
2Device complexity
If a single network is used for both control/monitoring and high bandwidth data applications, then device complexity is reduced, but the high bandwidth requirements interfere with or block critical control and monitoring operations
Solution Approach 1:
The network is segmented into a first sub-network dedicated to control and monitoring operations, and a second sub-network for high bandwidth data applications. This segmentation eliminates interference between critical control operations and data-intensive operations, ensuring that control operations maintain their required response times without being blocked by high bandwidth traffic.
3Quantity of substance
If a further network is added to handle high bandwidth data requirements, then data transmission capacity is improved, but the overall network complexity increases and access time for critical operations is restricted
Solution Approach 1:
The network is divided into two functional sub-networks with distinct purposes: the first sub-network handles control and monitoring traffic, while the second sub-network handles high bandwidth data applications. This segmentation provides the necessary data transmission capacity for each type of traffic without requiring a single complex network to handle all requirements, thereby managing overall complexity through functional separation.
Solution Approach 2:
A disconnector serves as an intermediary that manages connections between the two sub-networks and to external networks. This intermediary simplifies the overall network structure by providing clear connection points and isolation mechanisms, making the multi-network architecture more manageable despite the increased data transmission capacity requirements.
Data Source
AI summary
The invention relates to a wind turbine (1) comprising a network arranged for communicating with an external network (11), said network of the wind turbine comprising a first sub-network (20) and a second sub-network (30), where the first sub-network (20) is connectable to the external network (11) and where the second sub-network (30) is connectable to and disconnectable from the first network (20). Thus, two or more independent networks are created within a single wind turbine to allow communication among the different controllers in the wind turbine along with external communication. The second sub-network is disconnectable from the remaining network, while the first sub-network may have permanent remote connection. This network architecture provides for enhanced flexibility, enhanced security and enhanced functionality.