Simplifying Secure Routable GOOSE & Sampled Values

Free Webinar - Watch Replay Now!

Applications, Architecture, Configuration & Simulation

Thursday, July 30, 2020 - 11 AM to 12 NOON EDT

Smart Grid concepts have driven the need to migrate to microprocessor based controls and digital communications. There are several use cases that require interoperable communications within and between utilities as well as industrial complexes such as:
 - Transfer-Trip
 - Remedial Action Schemes (RAS)/System Integrity Protection Schemes(SIPS) 
      - Load Shed
      - Blackstart
      - Dynamic Grid Formation
      - Actionable Synchrophasor Exchange

All of the these use cases require point-to-multipoint secure communications. Some of the use cases can be extended to integrate between the utility enterprise and the industrial complex.

The routable version of the Generic Object Oriented Substation Event (R-GOOSE) and routable Sampled Values (R-SV) profiles satisfy the security and communication requirements of the utility industry. These profiles allow IP multicast address and advanced route path determination to prevent network flooding. The release of Amendment 1 to IEC 61850 Edition 2 has supplanted IEC TR 61850-90-5, providing enhancements and defect correction.

PROBLEM:

Security configuration and maintenance, in many cases, is viewed as complex and represents an impediment for adoption and deployment. The use of R-GOOSE/R-SV requires that the pairing of published information to subscribers of that information (e.g. a publication group) share a common symmetric key which utilizes a key distribution mechanism as specified in IEC 62351-9.

SOLUTION:

The engineering process of IEC 61850 allows for the configuration of publication groups, destination addresses for the publications, and addresses for key management for that group. The System Configuration Tool (SCT) stores this information in an SCL file that can be used by the Garibaldi Key Distribution Center to simplify security configuration by:
    - Managing large numbers of multicast group keys and policy distribution
    - Manages system Enrollment & Revocation
    - Operates in centralized and de-centralized environments

What you'll learn:  

• Why it's important to use routable GOOSE and the need for security
• The concepts of key delivery resiliency
• Leveraging IEC 61850 SCL to minimize security and system simulation configuration time
• Learn how to simulate system design and impact of security on a system using Distributed Test Manager (DTM)
• How to configure Garibaldi (Key Distribution Center) using SCL to save time & minimize configuration mistakes
• Learn about the separation of security management planes and real time operation planes
• How in-service testing equipment can be used in a secure environment

Who should attend this course: 

• System Integrators
• Software engineers
• IT Network engineers
• IT/OT Cyber security personnel
• Anyone interested in IEC 61850 automation & security

Instructors:

Herb Falk
Senior System Architect
PCITek

Mr. Falk has over 40 years of experience working in the automation, information exchange, standardization activities, and systems integration.  Previous employment was Westinghouse Numa-Logic and SISCO where he was responsible for 61850 and CIM integration projects and products.  Mr. Falk has been involved with IEC 61850 technology since 1982 and cyber security since 1993.  Mr. Falk is an editor of IEC 61850-8-1, editor of several cyber security standards, and is the Vice President of Testing for the UCA International Users Group (UCA Iug) . His work for His work for the UCA Iug has involved the coordination of IEC 61850 interoperability testing in 2011, 2013, 2015, and 2017.


Joel Greene
Director, IEC 61850 Development
Triangle MicroWorks, Inc. 

Joel has worked with communication protocols for over 15 years with the last 6 years in the power industry. He is the lead engineer for IEC 61850 development & products at Triangle MicroWorks and is heavily involved with 61850 industry groups. He also works as the co-editor of IEC 61850 7-2. He is a member of the UCA Test Committee and Test Procedures Working Group and involved in IEEE Standard Association. 

Mark Adamiak
Principle Consultant
Adamiak Consulting LLC

Mark Adamiak is an independent consultant for the electric power industry.  Mark started his career in the utility business with American Electric Power (AEP) and in mid-career, joined General Electric where his activities have ranged from advanced development, product planning, application engineering, and system integration in the Protection and Control industry.  Mr. Adamiak is an original member of the IEC61850 WG, a Life Fellow of the IEEE, a registered Professional Engineer in the State of Ohio and a GE Edison award winner.  Mark was the Principal Investigator for the EPRI IntelliGrid project to develop a reference architecture for the Smart Grid. In 2012, Mr. Adamiak was elected to the US National Academy of Engineering.