SlideShare a Scribd company logo
SCADA Protocols




 Overview of DNP3

   By Michael LeMay
Introduction
●
    DNP3 used for communications between
    SCADA masters (control centres) and remote
    terminal units (RTUs) and/or intelligent
    electronic devices (IEDs)
●
    DNP: Distributed Network Protocol
●
    SCADA: Supervisory Control And Data Acquisition
●
    Protocol defined in “Basic 4” document set from
    DNP Users Group
●
    Based on IEC 60870-5.
●
    International counterpart: IEC 60870-5-101
Protocol Overview
Protocol Participants
●
    SCADA Master Stations/Control centres
    –   Connected to HMI and other control centres
●
    Remote terminal units
    –   Interface between IEDs and master stations
    –   May exhibit limited autonomous control
●
    Intelligent electronic devices
    –   Sensors and meters
    –   Relays and other actuators
    –   Programmable Logic Controllers: PLCs
SCADA Master Basics
●
    Control centre from which multiple substations
    or other remote installations are controlled and
    monitored
●
    Connected to other control centres using ICCP,
    a separate protocol
●
    Interfaces with human through HMI (Human-
    Machine Interface), which may be local or
    remote.
●
    Connected to RTUs and/or IEDs
Sample SCADA Masters




Water SCADA HMI
                  Korean control center
RTU Basics
●
    Remote Terminal Unit
●
    Appears as IED to SCADA master when DNP
    used for communications
●
    Manages multiple actual IEDs
●
    Attached IEDs referenced using absolute
    addressing scheme
●
    Addresses only have meaning to SCADA
    master
Sample RTUs
   Radio      Cellular
   RTU          RTU


       Serial RTU
IED Basics

●
    Intelligent Electronic Device
●
    May be data acquisition device only
●
    May be responsible for control
●
    Possible inputs: configuration, setting, and
    command data
●
    Possible outputs: values, conditions, status, and
    results
●
    May be PLCs programmed with ladder logic
Sample IEDs/PLCs
Programmable Logic Controller (PLC)




                          Intelligent
                          Electronic
                             Device
                               (IED)
Parameters
●
    IEDs and RTUs can control and monitor a
    variety of physical processes and other
    information:
    –   Accumulate measurements like kilowatt hour
        consumption
    –   Monitor voltage and current
    –   Monitor temperatures (useful for automatically controlling
        tunnel fires)
    –   Switch electrical breakers on and off
    –   Transfer configuration files to/from SCADA master
DNP3 Protocol Standard
●
    The DNP3 protocol standard defines several aspects of SCADA
    Master-RTU/IED communications:
     –   Frame and message formats
     –   Physical layer requirements
          ●
            1200 bps+
          ●
            Busy link indicator for collision avoidance
     –   Data-link layer behavior
          ●
            frame segmentation
          ●
            Transmission retry algorithm
     –   Application layer
          ●
            file transfer
          ●
            time synchronization
          ●
            start/stop service
Protocol Basics
●
    Built on OSI layers 1,2,7
●
                                Application
●
                                Presentation
●
                                Session
●
                                Transport
●
                                Network
●
                                Data Link
●
                                Physical
IEC “Enhanced Performance Architecture”
Basic Message Breakdown
Protocol Requirements
●
    Components operate in harsh environments
●
    Protocol designed for reliability
●
    No confidentiality or integrity checks explicitly
    included
Req.: “Data Security”
●
    Correct data transmission required in presence
    of:
    –   EMI: Electromagnetic interference
    –   Differences in earth potential
    –   Aging components
    –   Other sources of noise and disturbance along
        transmission path
Req.: Data Security (cont.)
●
    Protection explicitly afforded against:
    –   Undetected bit errors
    –   Undetected frame errors caused by synchronization
        errors
    –   Undetected loss of information
    –   Gain of unintended information
         ●
             Simulation of valid message by noise
For More Info...
●
    DNP was originally developed by GE-Harris
    Canada in 1990 and released in 1993
●
    Now managed by the DNP Users Group:
    http://www.dnp.org
●
    The DNP Users Group includes master station,
    RTU and IED vendors, and representatives of
    the electric utility and system consulting
    communities.
●
    IEEE Std. 1379-2000 provides modern
    implementation best practices
●
    My SCADA Links: http://tinyurl.com/dqt2x

More Related Content

Scada

  • 1. SCADA Protocols Overview of DNP3 By Michael LeMay
  • 2. Introduction ● DNP3 used for communications between SCADA masters (control centres) and remote terminal units (RTUs) and/or intelligent electronic devices (IEDs) ● DNP: Distributed Network Protocol ● SCADA: Supervisory Control And Data Acquisition ● Protocol defined in “Basic 4” document set from DNP Users Group ● Based on IEC 60870-5. ● International counterpart: IEC 60870-5-101
  • 4. Protocol Participants ● SCADA Master Stations/Control centres – Connected to HMI and other control centres ● Remote terminal units – Interface between IEDs and master stations – May exhibit limited autonomous control ● Intelligent electronic devices – Sensors and meters – Relays and other actuators – Programmable Logic Controllers: PLCs
  • 5. SCADA Master Basics ● Control centre from which multiple substations or other remote installations are controlled and monitored ● Connected to other control centres using ICCP, a separate protocol ● Interfaces with human through HMI (Human- Machine Interface), which may be local or remote. ● Connected to RTUs and/or IEDs
  • 6. Sample SCADA Masters Water SCADA HMI Korean control center
  • 7. RTU Basics ● Remote Terminal Unit ● Appears as IED to SCADA master when DNP used for communications ● Manages multiple actual IEDs ● Attached IEDs referenced using absolute addressing scheme ● Addresses only have meaning to SCADA master
  • 8. Sample RTUs Radio Cellular RTU RTU Serial RTU
  • 9. IED Basics ● Intelligent Electronic Device ● May be data acquisition device only ● May be responsible for control ● Possible inputs: configuration, setting, and command data ● Possible outputs: values, conditions, status, and results ● May be PLCs programmed with ladder logic
  • 10. Sample IEDs/PLCs Programmable Logic Controller (PLC) Intelligent Electronic Device (IED)
  • 11. Parameters ● IEDs and RTUs can control and monitor a variety of physical processes and other information: – Accumulate measurements like kilowatt hour consumption – Monitor voltage and current – Monitor temperatures (useful for automatically controlling tunnel fires) – Switch electrical breakers on and off – Transfer configuration files to/from SCADA master
  • 12. DNP3 Protocol Standard ● The DNP3 protocol standard defines several aspects of SCADA Master-RTU/IED communications: – Frame and message formats – Physical layer requirements ● 1200 bps+ ● Busy link indicator for collision avoidance – Data-link layer behavior ● frame segmentation ● Transmission retry algorithm – Application layer ● file transfer ● time synchronization ● start/stop service
  • 13. Protocol Basics ● Built on OSI layers 1,2,7 ● Application ● Presentation ● Session ● Transport ● Network ● Data Link ● Physical IEC “Enhanced Performance Architecture”
  • 15. Protocol Requirements ● Components operate in harsh environments ● Protocol designed for reliability ● No confidentiality or integrity checks explicitly included
  • 16. Req.: “Data Security” ● Correct data transmission required in presence of: – EMI: Electromagnetic interference – Differences in earth potential – Aging components – Other sources of noise and disturbance along transmission path
  • 17. Req.: Data Security (cont.) ● Protection explicitly afforded against: – Undetected bit errors – Undetected frame errors caused by synchronization errors – Undetected loss of information – Gain of unintended information ● Simulation of valid message by noise
  • 18. For More Info... ● DNP was originally developed by GE-Harris Canada in 1990 and released in 1993 ● Now managed by the DNP Users Group: http://www.dnp.org ● The DNP Users Group includes master station, RTU and IED vendors, and representatives of the electric utility and system consulting communities. ● IEEE Std. 1379-2000 provides modern implementation best practices ● My SCADA Links: http://tinyurl.com/dqt2x