Module 1 Protection
Module 1 Protection
Chapter 1
1.1 Objectives:
In this chapter, we will provide an overview of electrical energy systems. Make a case
for protection systems. Describe necessity of apparatus and system protection. Define a
relay element. Discuss evolution of relays from electromechanical to numerical relay.
Describe functioning of a circuit breaker. We will introduce the following: Principle of
overcurrent protection. Principle of directional overcurrent protection. Principle of
distance protection. Principle of differential protection. For simplicity in explaining the
key ideas, we consider three phase bolted faults. Generalization of different fault types
will be discussed in subsequent chapters. Also, in this chapter we will: Overview
dynamics in power systems. Introduce system protection relays like underfrequency
relays, rate of change of frequency relays, reverse - power flow relays etc. Give a brief
introduction to lightning protection. Finally in this chapter we will learn the following
desirable attributes of protection system viz: Dependability. Security. Sensitivity.
Selectivity. Reliability. Necessity of speed in relaying. Speed vs. accuracy conflict. A
protection system is characterized by following two important parameters:
Dependability, and Security
They may occupy different angular positions, but all machines rotate at the same
electrical speed. This close knitting implies an embedded interaction of generators
through the transmission network which is governed by the differential and algebraic
equations of the apparatus and interconnects. This aspect is referred to as the system
behavior. This system has to be protected from abnormalities which is the task of
protection system.
the equipment. Designing electrical equipment from safety perspective is also a crucial
design issue which will not be addressed here. To conclude, every electrical equipment
has to be monitored to protect it and provide human safety under abnormal operating
conditions. This job is assigned to electrical protection systems. It encompasses
apparatus protection and system protection.
The answer lies in the fact that the system which encompasses body has also abstraction
like the mind. Overall health is not just an aggregation of apparatus. It is something
much more complex. It involves complex process and associated dynamics (biological,
chemical, mechanical etc.) and control. Thus, protecting a system is not just apparatus
protection but something much more. Since we cannot define this "much more" clearly,
it is complex and challenging. Monitoring of system behavior, taking corrective
measures to maintain synchronous operation and protecting the power system apparatus
from harmful operating states is referred as system protection.
The relay element analyzes these inputs and decides whether (a) there is a abnormality
or a fault and (b) if yes, whether it is within jurisdiction of the relay. The jurisdiction of
relay R1 is restricted to bus B where the transmission line terminates. If the fault is in
it's jurisdiction, relay sends a tripping signal to circuit breaker (CB) which opens the
circuit. A real life analogy of the jurisdiction of the relay can be thought by considering
transmission lines as highways on which traffic (current/power) flows. If there is an
obstruction to the regular flow due to fault F1 or F2, the traffic police (relay R1) can
sense both F1 and F2 obstructions because of resulting abnormality in traffic (power
flow). If the obstruction is on road AB, it is in the jurisdiction of traffic police at R1;
else if it is at F2, it is in the jurisdiction of R2. R1 should act for fault F2, if and only if,
R2 fails to act. We say that relay R1 backs up relay R2. Standard way to obtain backup
action is to use time discrimination i.e., delay operation of relay R1 in case of doubt to
provide R2 first chance to clear the fault.
operating torque may be restrained by a spring in the overcurrent relay. If the spring has
a spring constant 'k', then the deflection is proportional to the operating torque (in this
case proportional to Irms2). When the deflection exceeds a present value, the relay
contacts closes and a trip decision is issued. Electromechanical relays are known for
their ruggedness and immunity to Electromagnetic Interference (EMI).
Thus, the trip law for the impedance relay can be written as follows:
𝑉𝑅
|𝑍𝑎𝑝𝑝 | = < |𝑍𝑠𝑒𝑡 |, then trip; else restrain. While impedance relay has only
𝐼𝑅
one design parameter, Zset, 'mho relay' has two design parameters Zn, λ. The trip law for
mho relay is given by if |𝑍𝑎𝑝𝑝 | < |𝑍𝑛 |𝑐𝑜𝑠(𝜃 − 𝜆), then trip; else restrain. As shown in
the fig 1.10 'θ' is the angle of transmission line. Based upon legacy of electromechanical
relays 'λ' is also called 'torque angle'.
Example 1.1:
(a) Find out the value of Zn for a mho relay with torque angle 75o which has to give
100% protection to a 50 km long 110kV transmission line with impedance 0.8Ω per km
and angle 80o.
(b) If the maximum load on this line is 1000A at 30o lagging, is there any possibility of
relay tripping on load? CT ratio is 1000:5, and VT ratio = 1000.
Ans: (a) The two design parameters of a mho relay are Zn and λ. Here the torque angle,
λ of the relay has been selected as 75o.
The transmission line impedance ZLine as on primary = 0.8x50=40Ω
ZLine (secondary) = ZLine (Primary) RC/RV = 40x200/1000=8Ω
where Rc, CT ratio = 200, and Rv, VT ratio = 1000
ZLine=Zncos(θ-λ), where θ angle of transmission line
Zn=ZLine/(cos(θ-λ))=8.03 Ω, this value is to be set on the mho relay.
(b) Maximum Load current = 1000A, and VLine=110kV
Zload=VLine/√3𝐼𝑙𝑜𝑎𝑑 , Zload=63.5Ω
Zload (secondary) = Zload (Primary) RC/RV = 63.5x200/1000=12.7Ω
Since this value will not fall within the operating circle, the mho relay will not trip for
this load.
as pilot wire protection. Differential protection tends to be extremely accurate. Its zone
is clearly demarcated by the CTs which provide the boundary.
within the device like interturn short etc., then the normal mmf balance is upset i.e.
N1I1≠N2I2. Under this condition, the CT secondary currents of primary and secondary
side CTs will not match. The resulting differential current will flow through overcurrent
relay. If the pickup setting of overcurrent relay is close to zero, it will immediately pick
up and initiate the trip decision. In practice, the transformer is not ideal. Consequently,
even if I2=0, I1≠0, it is the magnetization current or (no load) current. Thus, a differential
current always flows through the overcurrent relay. Therefore overcurrent relay pick up
is adjusted above the no load current value. Consequently, minute faults below no load
current value cannot be detected. This compromises sensitivity.
Fig. 1.15 Captive generator that exports power and meets load demand
Undervoltage Relay:
Whenever there is an uncleared fault on the grid close to the plant, the plant generators
tend to feed the fault, and the voltages at the supply point drops. This can be used as a
signal for isolating from the grid.
Fig. 1.17 Utility and plant Fig. 1.18 Isolation of grid and
generator in parallel reversal of power flow
Example 1.2:
In fig 1.17, consider that the plant imports at all times a minimum power of 5 MW.
Studies indicate that for various faults in utility side, minimum power export from the
plant generator is 0.5 MW. Deduce the setting of reverse power relay. If the plant
generator is of 50 MW capacity, what is likelihood of underfrequency or rate of change
of frequency relay picking up on such faults?
Ans: Reverse power flow relay can be set to 0.4 MW. Since minimum reverse power
flow is 1% of plant capacity, it is quite likely, that utility disconnection may not be
noticed by underfrequency or the rate of change of frequency relays. Vector shift relays
and system protection schemes in transmission systems will be discussed in more details
in later lectures.
ZnO varistor is commonly used as lightning arrestor because of its peculiar resistance
characteristic. Its resistance varies with applied voltage, i.e, its resistance is a nonlinear
inverse function of applied voltage. At normal voltage its resistance is high. But when
high voltage surges like lightning strokes appear across the varistor, its resistance
decreases drastically to a very low value and the energy is dissipated in it, giving
protection against lightning.
1.13.1 Dependability:
A relay is said to be dependable if it trips only when it is expected to trip. This happens
either when the fault is in it's primary jurisdiction or when it is called upon to provide
the back-up protection. However, false tripping of relays or tripping for faults that is
either not within it's jurisdiction, or within it's purview, compromises system operation.
Power system may get unnecessarily stressed or else there can be loss of service.
Dependability is the degree of certainty that the relay will operate correctly:
𝑁𝑢𝑚𝑏𝑒𝑟 𝑜𝑓 𝑐𝑜𝑟𝑟𝑒𝑐𝑡 𝑡𝑟𝑖𝑝𝑠
𝐷𝑒𝑝𝑒𝑛𝑑𝑎𝑏𝑖𝑙𝑖𝑡𝑦% = × 100
𝑁𝑢𝑚𝑏𝑒𝑟 𝑜𝑓 𝑑𝑒𝑠𝑖𝑟𝑒𝑑 𝑡𝑟𝑖𝑝𝑠
Dependability can be improved by increasing the sensitivity of the relaying system.
Sensitivity: For simplicity, consider the case of overcurrent protection. The protective
system must have ability to detect the smallest possible fault current. The smaller the
current that it can detect, the more sensitive it is. One way to improve sensitivity is to
determine characteristic signature of a fault. It is unique to the fault type and it does not
occur in the normal operation. For example, earth faults involve zero sequence current.
This provide a very sensitive method to detect earth faults. Once, this signature is seen,
abnormality is rightly classified and hence appropriate action is initialized.
1.13.2 Security:
On the other hand, security is a property used to characterize false tripping on the relays.
A relay is said to be secure if it does not trip when it is not expected to trip. It is the
degree of certainty that the relay will not operate incorrectly:
𝑁𝑢𝑚𝑏𝑒𝑟 𝑜𝑓 𝑐𝑜𝑟𝑟𝑒𝑐𝑡 𝑡𝑟𝑖𝑝𝑠
𝑆𝑒𝑐𝑢𝑟𝑖𝑡𝑦% = × 100
𝑇𝑜𝑡𝑎𝑙 𝑛𝑢𝑚𝑏𝑒𝑟 𝑜𝑓 𝑡𝑟𝑖𝑝𝑠
False trips do not just create nuisance. They can even compromise system security. For
example, tripping of a tie-line in a two area system can result in load-generation
imbalance in each area which can be dangerous. Even when multiple paths for power
flow are available, under peak load conditions, overloads or congestion in the system
may result. Dependability and security are contrasting requirements. Typically, a relay
engineer biases his setting towards dependability. This may cause some nuisance
tripping, which can in the worst case, trigger partial or complete blackout! Security of
the relaying system can be improved by improving selectivity of the relaying system.
This discriminant is used to inhibit relay operation during inrush, there by, improving
selectivity in transformer protection. Also, a relay should be smart enough, not just to
identify a fault but also be able to decide whether fault is in it's jurisdiction or not. For
example, a relay for a feeder should be able to discriminate a fault on it's own feeder
from faults on adjacent feeders. This implies that it should detect first existence of fault
in it's vicinity in the system and then take a decision whether it is in it's jurisdiction.
Recall that directional overcurrent relay was introduced to improve selectivity of
overcurrent relay.
This jurisdiction of a relay is also called as zone of protection. Typically, protection
zones are classified into primary and backup zones. In detecting a fault and isolating
the faulty element, the protective system must be very selective. Ideally, the protective
system should zero-in on the faulty element and only isolate it, thus causing a minimum
disruption to the system. Selectivity is usually provided by (1) using time discrimination
and (2) applying differential protection principle. With overcurrent and distance relays,
such boundaries are not properly demarcated (see fig 1.20). This is a very important
consideration in operation of power systems. However with a differential protection the
CT location provides 'crisp' demarcation of zone of protection of CT (see fig 1.21). The
fault F1 is in the relay's zone of protection, but fault F2 is not in its jurisdiction. Because
differential protection scheme do not require time discrimination to improve selectivity,
they are essentially fast. These aspects will be discussed in more detail in the later
chapters.
1.13.3 Reliability:
A relaying system has to be reliable. Reliability can be achieved by redundancy i.e.
duplicating the relaying system. Obviously redundancy can be a costly proposition.
Another way to improve reliability is to ask an existing relay say, protecting an
Example 1.3:
The performance of an overcurrent relay was monitored over a period of one year. It
was found that the relay operated 14 times, out of which 12 were correct trips. If the
relay failed to issue trip decision on 3 occasions, compute dependability, security and
reliability of the relay.
Number of correct trips = 12
Number of desired trips = 12 + 3 = 15
12
𝐷𝑒𝑝𝑒𝑛𝑑𝑎𝑏𝑖𝑙𝑖𝑡𝑦% = × 100 = 80%
15
12
𝑆𝑒𝑐𝑢𝑟𝑖𝑡𝑦% = × 100 = 85.71%
14
12
𝑅𝑒𝑙𝑖𝑎𝑏𝑖𝑙𝑖𝑡𝑦% = × 100 = 70.59%
15+2
Note that even though dependability and security are individually above 80%, overall
reliability much poor (only 70.55%).
Note that number of desired trips can be greater than or equal to number of correct trips.
A desired trip may not happen for various reasons like, the fault level being below the
relaying sensitivity, stuck circuit breaker, incorrect setting of relays poor maintenance
of circuit breaker etc.
It is essential that primary zones of protection should always overlap to ascertain that
no position of the system ever remains unprotected. It can be seen in fig 1.22. This
overlap also accounts for faults in the circuit breakers. To provide this overlap
additional CTs are required.
Fig 1.24 shows the pre and post fault characteristics for the single machine infinite bus
system shown in fig 1.23. Initial operating point A is on the pre fault characteristic.
Occurrence of fault reduces Pe to 0. The power generation imbalance accelerates
generator and hence its δ (power angle) increases. At point C the fault is cleared by
tripping the faulted line and the system moves to post fault characteristics. The power
output jumps to point D. Now Pe > Pm and the machine decelerates. At point E, Δω=ω-
ω0 is equal to zero and the extreme point of swing is reached.
As Pe > Pm, the deceleration continues and hence the rotor starts retarding. At point O,
Pe = Pm the acceleration is zero, but machine speed is lower than nominal speed ω0=2πf0.
Consequently, the angle δ continues to fall back. However, as δ reduces further, Pe also
reduces, therefore Pm - Pe > 0 and the generator starts accelerating. This arrests the drop
in δ at point F and the swing reverses, again a consequence of acceleration. In absence
of damping, these oscillations will recur just like oscillation of a simple pendulum.
However, because of damping provided by generator, the oscillations reduce in
magnitude and finally system settles to equilibrium at point O. It should be obvious that
interval BC is dependent on fault clearing time of the protection system. The shaded
area ABCC1 is the acceleration area and area C1DEE1 the deceleration area. As per equal
area criteria, the post fault system reaches stable equilibrium if accelerating area equals
to the decelerating area. The limit point for deceleration is defined by point G the
intersection point of Pm0 and the post fault characteristic.
If the swing of generator exceeds beyond point G, the generator moves from
deceleration to acceleration region. Then, its angle δ continues to rise indefinitely, and
the machine is said to go out-of-step. If any machine goes out-of-step with rest of system
it has to be islanded. Out-of-step condition in a multi machine system can be simulated
by transient stability program. Detection in real-time is a much more challenging task
and it is dealt by ‘out-of-step relaying' schemes. When a multi machine system is
islanded in to different sub-systems, then for stable operation of each sub-system, it is
necessary that each sub-system should have generation load balance. Fig 1.25, however
it should be obvious by now that from the stability perspective, transmission system
protection should be made as fast as possible. As the fault clearing time increases, the
stability margin (area EE1G) reduces. The fault clearing time at which the stability
margin reduces to zero is called the critical clearing time.
Recap:
In this chapter we have learnt the following: Necessity of a protection system, Three
generations of relays, Role of Circuit Breaker. Types of protection i.e. apparatus
protection and system protection, Principle of overcurrent protection, Principle of
distance protection, Principle of directional overcurrent protection, Differential
protection, and Applications to apparatus protection. Dynamics in power systems,
Various system protection relays like underfrequency relays, rate of change of
frequency relays, reverse power flow relay, under voltage relay etc., Lightning
protection. Also, in this chapter we have learnt the following desirable attributes of
protection system viz: Dependability, Security, Sensitivity, Selectivity, Reliability,
Necessity of speed in relaying, and Speed vs. accuracy conflict.
Review Questions
1. What are the two types of protection?
2. Why is system protection required?
3. What are the functions of a relay and a circuit breaker?
4. Describe various generation of relays.
5. In fig 1.5, why is a resistor connected across CT secondary?
6. Why is phase angle information required to protect a radial system with source
at both ends?
7. Discuss the basic principle of distance protection.
8. How is differential protection scheme used in the following:
(a) Transmission line protection.
(b) Transformer protection.
(c) Busbar protection.
9. For the tapped line (fig 1.11), no relays are provided at the tapping point. Can
you explain reasons for the same?
10. Describe various system protection relays in use.
11. What are the functions of an underfrequency relay?
12. Explain the functioning of reverse power flow relay.
13. How transmission lines are protected against lightning?
14. Explain the functioning of ZnO varistor.
15. How is reliability achieved in a protective system?
16. Distinguish between dependability and security of a relay.
17. How is selectivity criteria provided in
(a) Overcurrent protection scheme
(b) Differential protection scheme.
18. Why is high speed system said to be less accurate?
19. The performance of a distance relay was monitored over a period of 2 years. It
was found that it operated 15 times, 12 were desired trips due to faults in its
jurisdiction. It was found that relay failed to issue trip decision on 2 occasions.
Compute dependability and security for the relay.
20. Define the following terms
(a) % Dependability
(b) % Security
(c) % Reliability