Patent Application
20140250972
This disclosure relates to detecting the failure of a precision time source using an independent time source. Particularly, this disclosure relates to detecting the failure of a precision time source in an electric power transmission or distribution system.
Non-limiting and non-exhaustive embodiments of the disclosure are described, including various embodiments of the disclosure with reference to the figures, in which:
In the following description, numerous specific details are provided for a thorough understanding of the various embodiments disclosed herein. However, those skilled in the art will recognize that the systems and methods disclosed herein can be practiced without one or more of the specific details, or with other methods, components, materials, etc. In addition, in some cases, well-known structures, materials, or operations may not be shown or described in detail in order to avoid obscuring aspects of the disclosure. Furthermore, the described features, structures, or characteristics may be combined in any suitable manner in one or more alternative embodiments.
Electric power transmission and distribution systems may utilize precision time information to perform various monitoring, protection, and communication tasks. In connection with certain applications, intelligent electronic devices (IEDs) and network communication devices may utilize time information accurate beyond the millisecond range. IEDs within a power system may be configured to perform metering, control, and protection functions that require a certain level of precision between one or more IEDs. For example, IEDs may be configured to calculate and communicate time-synchronized phasors (synchrophasors), which may require that the IEDs and network devices be synchronized to within nanoseconds of one other. Many protection, metering, control, and automation algorithms used in power systems may benefit from or require receipt of precision time information.
Various systems may be used for distribution of precision time information. According to various embodiments disclosed herein, a power system may include components connected using a synchronized optical network (SONET). In such embodiments, precision time information may be distributed using a synchronous transport protocol and synchronous transport modules (STMs). According to one embodiment, a precision time reference can be transmitted within a frame of a SONET transmission. In another embodiment, a precision time reference may be incorporated into a header or an overhead portion of a SONET STM frame. Similarly, the power system may include components connected using Synchronous Digital Hierarchy (SDH) protocol. Although several embodiments herein are described in terms of SONET, it should be recognized that the SDH protocol may be used in place of SONET unless otherwise specified.
IEDs, network devices, and other devices in a power system may include local oscillators or other time sources and may generate a local time signal. In some circumstances, however, external time signals, provided by a time distribution device, may be more precise and may therefore be preferred over local time signals. A power system may include a data communications network that transmits a precision time reference from the time distribution device to time dependent devices connected to the data communications network. In some embodiments, the communications network may include one or more local area networks (LANs) and one or more wide area networks (WANs). In a system with multiple LANs, multiple time distribution devices (one or more for each LAN) may be connected to the data communications network and each time distribution device can provide a precision time reference to other time distribution devices across the WAN. In each time distribution device, the precision time reference may be received or derived from an external precision time signal.
According to various embodiments, each time distribution device receives multiple precision time signals from various time sources and is configured to provide the best available precision time signal as the precision time reference. The precision time signals may be received using an Inter-Range Instrumentation Group (IRIG) protocol, a global navigation satellite system (GNSS), such as, for example, global positioning system (GPS), GLONASS, or the like, a radio broadcast such as a National Institute of Science and Technology (NIST) broadcast (e.g., radio stations WWV, WWVB, and WWVH), the IEEE 1588 protocol, a network time protocol (NTP) codified in RFC 1305, a simple network time protocol (SNTP) in RFC 2030, and/or another time transmission protocol or system.
While, the above listed precision time signals may provide accurate time to a time distribution device, they vary in quality. For example, the precision of NTP and SNTP is limited to the millisecond range, thus making it inappropriate for sub-millisecond time distribution applications. Further, both protocols lack security and are susceptible to malicious network attacks. The IEEE 1588 standard includes hardware-assisted timestamps, which allows for time accuracy in the nanosecond range. Such precision may be sufficient for more demanding applications (e.g., the sampling of the sinusoidal currents and voltages on power lines to calculate “synchrophasors”). It is well suited for time distribution at the communication network periphery, or among individual devices within the network. GNSS time signals provide a very accurate and robust time measurement, however GNSS signals are susceptible to spoofing. Therefore, it would be beneficial to provide a system and method for detecting failure in any of the received precision time signals such that the best available precision time reference can be provided to time dependent devices.
In certain embodiments, when the time distribution device determines that the connection to the best available time source has failed, a new best available time source may be selected from the remaining available time sources. In addition to relying on a precision time reference from the time distribution device, when available, the various time dependent devices may be configured to enter a holdover period when the precision time reference is unavailable. In some embodiments, a device may be configured to monitor the drift of a local time source with respect to the precision time reference and to retain information regarding the drift. During the holdover period, an IED or network device may rely on a local time signal.
Reference throughout this specification to “one embodiment” or “an embodiment” indicates that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment. Thus, the appearances of the phrases “in one embodiment” or “in an embodiment” in various places throughout this specification are not necessarily all referring to the same embodiment. In particular, an “embodiment” may be a system, an article of manufacture (such as a computer readable storage medium), a method, and a product of a process.
The phrases “connected to,” “networked,” and “in communication with” refer to any form of interaction between two or more entities, including mechanical, electrical, magnetic, and electromagnetic interaction. Two components may be connected to each other even though they are not in direct physical contact with each other and even though there may be intermediary devices between the two components.
Some of the infrastructure that can be used with embodiments disclosed herein is already available, such as: general-purpose computers, computer programming tools and techniques, digital storage media, and optical networks. A computer may include a processor such as a microprocessor, microcontroller, logic circuitry, or the like. The processor may include a special purpose processing device such as an ASIC, PAL, PLA, PLD, Field Programmable Gate Array, or other customized or programmable device. The computer may also include a computer readable storage device such as non-volatile memory, static RAM, dynamic RAM, ROM, CD-ROM, disk, tape, magnetic, optical, flash memory, or other computer readable storage medium.
As used herein, the term IED may refer to any microprocessor-based device that monitors, controls, automates, and/or protects monitored equipment within the system. Such devices may include, for example, remote terminal units, differential relays, distance relays, directional relays, feeder relays, overcurrent relays, voltage regulator controls, voltage relays, breaker failure relays, generator relays, motor relays, automation controllers, bay controllers, meters, recloser controls, communications processors, computing platforms, programmable logic controllers (PLCs), programmable automation controllers, input and output modules, and the like. IEDs may be connected to a network, and communication on the network may be facilitated by networking devices including, but not limited to, multiplexers, routers, hubs, gateways, firewalls, and switches. Furthermore, networking and communication devices may be incorporated in an IED or be in communication with an IED. The term IED may be used interchangeably to describe an individual IED or a system comprising multiple IEDs.
IEDs, network devices, and time distribution devices may be physically distinct devices, may be composite devices, or may be configured in a variety of ways to perform overlapping functions. IEDs, network devices, and time distribution devices may comprise multi-function hardware (e.g., processors, computer-readable storage media, communications interfaces, etc.) that can be utilized in order to perform a variety of tasks, including tasks typically associated with an IED, network device, and/or time distribution device. For example, a network device, such as a multiplexer, may also be configured to issue control instructions to a piece of monitored equipment. In another example, an IED may be configured to function as a firewall. The IED may use a network interface, a processor, and appropriate software instructions stored in a computer-readable storage medium in order to simultaneously function as a firewall and as an IED. In another example, an IED may include the necessary hardware and software instructions to function as a time distribution device for other IEDs in a LAN or WAN. In order to simplify the discussion, several embodiments disclosed herein are illustrated in connection with time distribution devices; however, one of skill in the art will recognize that the teachings of the present disclosure, including those teachings illustrated only in connection with time distribution devices, are also applicable to IEDs and network devices.
Aspects of certain embodiments described herein may be implemented as software modules or components. As used herein, a software module or component may include any type of computer instruction or computer executable code located within a computer readable storage medium. A software module may, for instance, comprise one or more physical or logical blocks of computer instructions, which may be organized as a routine, program, object, component, data structure, etc., that performs one or more tasks or implements particular abstract data types.
In certain embodiments, a particular software module may comprise disparate instructions stored in different locations of a computer readable storage medium, which together implement the described functionality of the module. Indeed, a module may comprise a single instruction or many instructions, and may be distributed over several different code segments, among different programs, and across several computer readable storage media. Some embodiments may be practiced in a distributed computing environment where tasks are performed by a remote processing device linked through a communications network. In a distributed computing environment, software modules may be located in local and/or remote computer readable storage media. In addition, data being tied or rendered together in a database record may be resident in the same computer readable storage medium, or across several computer readable storage media, and may be linked together in fields of a record in a database across a network.
The software modules described herein tangibly embody a program, functions, and/or instructions that are executable by computer(s) to perform tasks as described herein. Suitable software, as applicable, may be readily provided by those of skill in the pertinent art(s) using the teachings presented herein and programming languages and tools, such as XML, Java, Pascal, C++, C, database languages, APIs, SDKs, assembly, firmware, microcode, and/or other languages and tools.
A precision time reference refers to a time signal or time source relied on by a plurality of devices and distributed by a time distribution device, and which is presumed to be more precise than a local time source. The determination of accuracy may be made based upon a variety of factors. A precision time reference may allow for specific moments in time to be described and temporally compared to one another.
A time source is any device that is capable of tracking the passage of time. A variety of types of time sources are contemplated, including a voltage-controlled temperature compensated crystal oscillator (VCTCXO), a phase locked loop oscillator, a time locked loop oscillator, a rubidium oscillator, a cesium oscillator, a trained oscillator, a microelectromechanical device (MEM), and/or other device capable of tracking the passage of time.
A time signal is a representation of the time indicated by a time source. A time signal may be embodied as any form of communication for communicating time information. A wide variety of types of time signals are contemplated, such as those listed above. Time source and time signal may be used interchangeably herein.
Failure of a precision time source and/or precision time signal, as used herein, includes spoofing and/or jamming the signal, mechanical or software failures, system wide outages, etc.
Furthermore, the described features, operations, or characteristics may be combined in any suitable manner in one or more embodiments. It will also be readily understood that the order of the steps or actions of the methods described in connection with the embodiments disclosed herein may be changed, as would be apparent to those skilled in the art. Thus, any order in the drawings or detailed description is for illustrative purposes only and is not meant to imply a required order, unless specified to require an order.
Substations 22 and 35 include step-down transformers 24a, 24b, 24c, and 24d for stepping down the electric power to a level suitable for distribution to various loads 30, 32, and 34 using distribution lines 26, 28, and 29.
IEDs 102, 104, and 106 are illustrated in substations 16, 22, and 35 configured to protect, control, meter and/or automate certain power system equipment or devices. According to several embodiments, numerous IEDs are used in each substation; however, for clarity only a single IED at each substation is illustrated. IEDs 102, 104, and 106 may be configured to perform various time dependent tasks including, but not limited to, monitoring and/or protecting a transmission line, distribution line, and/or a generator. Other IEDs included in a substation may be configured as bus protection relays, distance relays, communications processors, automation controllers, transformer protection relays, and the like. As each IED or group of IEDs may be configured to communicate on a local area network (LAN) or wide area network (WAN), each IED or group of IEDs may be considered a node in a communications network.
As discussed above, an IED may be configured to calculate and communicate synchrophasors with other IEDs. To accurately compare synchrophasors obtained by geographically separate IEDs, each IED may need to be synchronized with a precision time reference with accuracy greater than a millisecond to allow for time-aligned comparisons. According to various embodiments, time synchronization, accurate to the microsecond or nanosecond range, may allow IEDs to perform accurate comparisons of synchrophasors.
As illustrated in
Each time distribution device 204, 206, and 208 is configured to receive time signals from a variety of time sources. For example, as illustrated, time distribution device 204 includes an antenna 220 and is configured to receive a GNSS signal from a GNSS repeater or satellite 202. Time distribution device 204 is also configured to receive a second time signal 221 from an external time source 201. The external time source may comprise one or more VOTCXOs, phase locked loop oscillators, time locked loop oscillators, rubidium oscillators, cesium oscillators, NIST broadcasts (e.g., WWV and WWVB), and/or other devices capable of generating precise time signals. In the illustrated embodiment, time distribution device 208 includes an antenna 220 configured to receive a GNSS signal from the GNSS repeater or satellite 202. As illustrated, time distribution device 206 does not directly receive an external time signal, however, according to alternative embodiments, any number and variety of external time signals may be available to any of the time distribution devices.
According to one embodiment, WAN 218 comprises a SONET configured to embed a precision time reference in a header or overhead portion of a SONET frame during transmission. Alternatively, a precision time reference may be conveyed using any number of time communications methods including IRIG protocols, NTP, SNTP, synchronous transport protocols (STP), and/or IEEE 1588 protocols. According to various embodiments, including transmission via SONET, a precision time reference may be separated and protected from the rest of the WAN network traffic, thus creating a secure time distribution infrastructure. Protocols used for inter IED time synchronization may be proprietary, or based on a standard, such as IEEE 1588 Precision Time Protocol (PTP).
According to various embodiments, time distribution devices 204, 206, and 208 are configured to perform at least one of the methods of detecting failure of a time source described herein. System 200 may utilize a single method or combination of methods, as described herein.
It is of note that even the most precise time signals may exhibit small discrepancies. For example, depending on the length and routing of the GNSS antenna cable, various clocks may exhibit microsecond level time offsets. Some of these offsets may be compensated by the user entering compensation settings, or may need to be estimated by the time synchronization network. Estimation may be performed during long periods of “quiet” operation (i.e., periods with no faults), with the individual source results stored locally in a nonvolatile storage register.
Another time source that may be fed to the time quality module 305 includes an external time source 306 that may conform to a time distribution protocol, such as IRIG. The external time source 306 may communicate with another time port such as an IRIG input 308.
The various time information from the WAN (from line ports 312 and/or 314), GNSS receiver 310, WWVB receiver 330, and IRIG input 308 are input into the time quality module 305. In one embodiment, the inputs may be fed into a multiplexer (not shown) prior to being input into the time quality module 305. The time quality module 305 functions to determine a precision time reference for use by the various devices connected to the time distribution device 304. The precision time reference is then communicated from the time quality module 305 to the various devices 322 using IRIG protocol (via the IRIG-B output 316) or to various devices 325 using another protocol 313 such as IEEE 1588 using Ethernet Drop Ports 318. The Ethernet Drop Ports 318 may also include network communications to the various devices connected to time distribution device 304. Time distribution device 304 may further include connections to SONETs and transmit the precision time reference in a header or overhead portion of SONET frames.
Time distribution device 304 may also comprise a time signal adjustment subsystem 324. Time signal adjustment subsystem 324 may be configured to track drift rates associated with various external time sources with respect to local time source 302. Time signal adjustment subsystem 324 may also communicate time signals according to a variety of protocols. Such protocols may include inter-Range Instrumentation Group protocols, IEEE 1588, Network Time Protocol, Simple Network Time Protocol, synchronous transport protocol, and the like. In various embodiments, time signal adjustment subsystem 324 may be implemented using a processor in communication with a computer-readable storage medium containing machine executable instructions. In other embodiments, time signal adjustment subsystem 324 may be embodied as hardware, such as an application specific integrated circuit or a combination of hardware and software.
According to various embodiments, the time quality module 305 determines whether a primary or “best available” time source is reliable, i.e., has not failed, and distributes the time signal from the best available time source as the precision time reference to time dependent devices in the system. If the best available time source has failed, the time quality module 305 provides an error alert to a user, and in some embodiments, enters a holdover period where an alternative time signal is used for the precision time reference. These techniques allow for the best available time source to be used as precision time reference provided to time dependent devices in a robust manner such that there is a high likelihood that the precision time reference is accurate. Moreover, in certain embodiments, relying on a secondary time source provided to the time quality module 305 as the precision time reference during a holdover period when the primary time reference has failed may provide more accurate time information than the holdover situation described above where a local oscillator in each time dependent device is used during the holdover.
In some embodiments, after a period of time using the secondary time source, a primary time source may become available again. The time quality module 305 may determine whether the primary time source is reliable. If the primary time source is reliable, the time distribution device 304 may begin using the primary time source for the precision time reference. If however, the primary time source is determined to be unreliable, the time distribution device 304 may continue using the secondary time source for the precision time reference and provide an error alert to a user indicating the availability and unreliability of the primary time source.
At 404 the time distribution device receives a second time signal from a second time source. In one embodiment, the second time source is a NIST broadcast such as WWVB. While not as accurate as a time reference derived from a GNSS signal, a time reference derived from a WWVB broadcast is still very accurate. While the example of
At 406 the time quality module compares the first time signal to the second time signal. Each of the time signals received by the time quality module have an inherent error bound related to the accuracy of the time signal. In one embodiment, the time quality module compares the time signals with regard to their respective error bounds to determine whether the first time source has failed. For example, given the relatively smaller error bound found in the time derived from a GNSS signal compared to that found in a time derived from a WWVB broadcast, the time based on the GNSS signal should fall within the error bound of the time based on the WWVB broadcast. However, if the GNSS based time signal falls outside of the error bound of the WWVB based time signal, the time quality module detects, at 408, that there is an error with the GNSS based time signal.
If, at 408, the time quality module determines that the first time source has not failed, the time quality module distributes time from the first time signal as the precision time reference at 410. If, at 408, the time quality module determines that the first time source has failed, at 412 the time quality module alerts a user that the best available time source has failed and that the time may not be accurate. In addition to alerting a user of the failure, the time quality module at 414 can optionally distribute time from the second time signal as the precision time reference.
While the example of
At 504 the time distribution device uses the first time signal to train an unlocked oscillator to track the time provided in the first time signal. While the oscillator is trained to track the time of the first time source, because the oscillator is unlocked the time provided by the trained oscillator will drift from that of the first time signal. However, the rate of drift is low and the time distribution device maintains the training relationship between the first signal and the oscillator such that the drift is corrected.
At 506 the time quality module compares the first time signal to the trained oscillator (again, taking into account the drift rate associated with the trained oscillator). In one embodiment, a counter tracks the number of oscillations of the oscillator between each PPS received from the first time signal. Because the oscillator is trained to the first time signal, any variation in the oscillation count from PPS to PPS should be low. If there is a large jump in the variation in the oscillation count, the time quality module, at 508, detects a failure of the first time source. The threshold for determining whether the time quality module detects a failure of the time source may depend on the characteristics of the oscillator used. For example, a temperature compensated crystal oscillator (TCXO) may have a draft rate in the parts-per-million range while oven controlled crystal oscillators and cesium based oscillators may have a drift rate in the parts-per-billion. Thus, the threshold for the more accurate oscillator may be higher. If the variation in the oscillation count exceeds the threshold, the time quality module may indicate a failure of the first time source.
In another embodiment, the oscillator may be used to validate time quality measurements transmitted as part of the time source. For example, an IRIG signal includes a Time Quality and Continuous Time Quality indication. The time quality module may use the oscillator to validate the time quality signal received as part of the time source.
If, at 508, the time quality module determines that the first time source has not failed, the time quality module distributes time from the first time signal as the precision time reference at 510. If, at 508, the time quality module determines that the first time source has failed, at 512 the time quality module alerts a user that the best available time source has failed and that the time may not be accurate. In addition to alerting a user of the failure, the time quality module at 514 can optionally distribute time from the trained oscillator, or a second time source, as the precision time reference during a holdover period.
In some embodiments, if a second time source is to be used for the precision time reference, the time quality module may determine whether the second time source is acceptable. For example, the time quality module may determine whether the time provided by the second time source falls within an acceptable range of the current time provided by the time distribution device (e.g., time kept by the internal oscillator). If the time falls within the acceptable range, the second time source may be used to provide the precision time reference.
The example embodiments above provide for a robust system of providing a precision time reference to time dependent devices by comparing several time signals to determine whether the best available time source has failed.
At 602 the time distribution device receives the GNSS signal. While the example of
If, at 608, the time quality module determines that the GNSS location falls within the threshold, the time quality module distributes the GNSS time as the precision time reference at 610. If, at 608, the time quality module determines that the GNSS location falls outside of the threshold and therefore the GNSS time source has failed, at 612 the time quality module alerts a user that the best available time source has failed and that the time may not be accurate. In addition to alerting a user of the failure, the time quality module at 614 can optionally distribute time from a secondary time source as the precision time reference during a holdover period.
In another embodiment, the time quality module may calculate a location drift rate using the GNSS signal and compare the location drift rate to a defined threshold. If the location drift rate exceeds the defined threshold, the time quality module may determine, at 608, that the GNSS time source has failed.
In one embodiment, the time quality module monitors instantaneous and average GNSS signal strength. If the instantaneous signal strength is larger than a set threshold for a set number of samples, then the time quality module may determine that the GNSS time source has failed. In such an instance, the time quality module may alert a user and/or rely upon a secondary time signal.
In another embodiment, satellite constellation may be monitored. Satellite constellation repeats every 24 hours. The time quality module may determine that the GNSS time source has failed by detecting a change in satellite constellation. In such an instance, the time quality module may alert a user and/or rely on a secondary time signal.
The above description provides numerous specific details for a thorough understanding of the embodiments described herein. However, those of skill in the art will recognize that one or more of the specific details may be omitted, or other methods, components, or materials may be used. In some cases, operations are not shown or described in detail.
While specific embodiments and applications of the disclosure have been illustrated and described, it is to be understood that the disclosure is not limited to the precise configuration and components disclosed herein. Various modifications, changes, and variations apparent to those of skill in the art may be made in the arrangement, operation, and details of the methods and systems of the disclosure without departing from the spirit and scope of the disclosure.
The present application claims the benefit under 35 U.S.C. §119(e) of U.S. Provisional Patent Application No. 61/698,583 filed Sep. 8, 2012 and titled “Quality of Precision Time Sources,” which application is incorporated herein by reference in its entirety.
| Number | Date | Country | |
|---|---|---|---|
| 61698583 | Sep 2012 | US |
