Protection of Embedded Generation Systems
Protection of Embedded Generation Systems
Protection of
embedded
generation systems
IMPORTANT DISCLAIMER
Contents
1.0 PURPOSE......................................................................................................................4
2.0 SCOPE...........................................................................................................................4
3.0 REFERENCES...............................................................................................................4
ANNEXURE A1......................................................................................................................18
ANNEXURE A2......................................................................................................................20
ANNEXURE A3......................................................................................................................21
1.0 PURPOSE
To describe the minimum electrical protection and control requirements for privately owned
generation intended to operate in parallel with the Endeavour Energy’s electrical distribution
or transmission network.
2.0 SCOPE
This instruction outlines the technical issues regarding electrical protection at the connection
of embedded generation in the transmission or distribution network, where operation in
parallel with the network is required. It also deals with privately owned generators within a
customer’s network that are directly connected to, and able to run in parallel with, any part of
Endeavour Energy’s network.
3.0 REFERENCES
• Company Policy 9.2.2 0 Network Protection
• ENA National Electricity Network Safety Code (NENS 01-2008)
• Integral Energy Network Management Plan 2009-2014
• AS/NZ 61000.2.12:2003 Electromagnetic Compatibility (EMC)
• AS/NZS 3000:2000 Wiring Rules
• Coal Mines Regulation (Electrical – Open Cut Mines) 1984 Division 4
• IEC 60255 (BS142) Electrical Relays
• Network Service Provider General Terms and Conditions or Customer Connection
Contract
• Service and Installation Rules of New South Wales
• The National Electricity Code
• Engineering Technical Report No. 113 Rev 1(1995) Notes of Guidance for the
Protection of Embedded Generating Plant for Operation in Parallel with Distribution
Systems
• Customer Guidelines for the Connection of Private Generation to Integral Energy’s
Distribution Network – June 2005
• Protection Design Instruction PDI 4000 – Protection definitions, vocabulary and
symbology
• PDI 4001 – Protection design principles
• Substation Design Instruction SDI 519 – Communications in substations
• SDI 538 – Supervisory Control and Data Acquisition (SCADA)
Connection agreement
An agreement between a Network Service Provider (Endeavour Energy) and the customer
(Generation Company) by which the customer (generation plant) is connected to the
transmission or distribution network and/or receives transmission services or distribution
services.
Customer
The proponent of the generating scheme, finally responsible for ownership and operation of
the scheme.
Embedded generator
A generator that generates electricity and the generating unit is directly connected to the
transmission or distribution system and includes customers with their own generation.
Grid
Endeavour Energy’s network and its connections to the National Electricity Grid.
Islanding
Islanding occurs when a private generator or generating system remains connected to a
portion of the network and continues to supply electricity to that portion of the network, but is
disconnected from the general electrical network or main source of generation.
NEC
National Electricity Code.
Synchronism
Synchronism occurs when two (2) a.c. voltages are of the same frequency and magnitude,
and have zero phase difference.
5.0 ACTIONS
There must be proper coordination between the protection systems of the customer and
Endeavour Energy’s network in order to ensure safety of the plant and stable operation of the
electrical network. Typical issues are:
• correct protection grading;
• tripping sequences;
• correct reclosing of faulted lines; and
• machine network synchronising.
The primary aim of protection and stability coordination is to ensure that the protection is
designed and set to rapidly clear faults, or restrain from operating when necessary in order to
maintain the security and integrity of the electrical network. Details of the proposed
protection arrangements associated with the embedded generator’s plant must be submitted
to the Network Service Provider (Endeavour Energy) to determine if additional protection is
required in the interests of safe and stable operation of the network.
5.1 Operations
Three (3) modes of operation will be considered for private generating units, namely:
Parallel operation: Connected continuously to the network, with or without the ability to
export energy to the grid.
Non-parallel operation (break before make operation): Operating in isolation from the
supply network by way of a changeover switch. For this type of installation, suitable
controlling switchgear is required that can be electrically, mechanically or key interlocked.
The major disadvantage of this arrangement is that the customer load must be interrupted
each time there is a changeover from one supply source to the other.
Standby operation (synchronise, close, transfer trip operation - SCTT): This mode of
operation has similar connection arrangements to the non-parallel scheme, except that both
the normal supply and generator supply may be connected for a short time in order to allow
testing of the generator’s operation without interrupting the customer’s load.
Detailed operating arrangements will be negotiated for each case and included in the
operating agreement between the customer and Endeavour Energy. The general operating
requirements for the different connection methods are listed below:
The generator continuously supplies energy to the grid. Salient points to consider include:
This mode of operation has similar connection arrangements to the non-parallel scheme,
with the exception that both the normal supply and generator supply may be connected for a
short time in order to allow testing of the generator’s operation without interrupting the
customer’s load. Typically, the generator is allowed to synchronise with the network before
the network is disconnected so that the generator then supplies only the customer’s load.
Usually, the conditions that apply to this arrangement are:
• an assurance that the generator shall be used for standby supply only;
• the generator will run only in parallel with Endeavour Energy’s network when switching
the generator on and off for generator testing purposes; and,
• the time period for operation in parallel with the network for any circumstance shall be no
longer than 15 seconds.
5.1.2.1 Synchronising
The generator shall parallel with the grid without causing a voltage fluctuation at the network
connection point greater than ± 5% of the prevailing voltage level at the NCP.
The prime mover must be equipped with suitable speed and power controls to allow the plant
to respond rapidly and without overshoot should the system frequency rise or fall, or a
sudden change in load occur.
All plant shall operate with a nominal frequency of 50Hz. The main grid frequency may vary
in the range of 49.8 Hz to 50.5 Hz and generators are expected to be able to operate safely
over this range. Continued operation is also expected during system disturbances, when the
frequency may go as low as 47.0 Hz or as high as 52.0 Hz for periods of 10 to 20 cycles.
Safe operation can include controlled shut-down or continued operation under load,
depending on the machine capability.
Automatic control equipment will be necessary to ensure that the voltage and power factor at
the point of connection are within the limits required by Endeavour Energy’s connection
agreements. In general, the Australian Standards on voltage and disturbance limits (AS
61000 series) apply. The generator must ensure a stable and well-damped response under
all operating conditions within the designed range. Where two (2) or more generators are in
close proximity to each other, appropriate control circuitry is required to ensure that the
possibility of interaction between the machines causing deleterious impacts on the grid are
minimised. The voltage control performance will be assessed on the basis that stable voltage
control must be maintained following the most severe credible single contingency.
There is a range of voltage variations that can exist on the network because of load
variations, load rejection, short circuit or open-circuit faults. These may include:
• Voltage dips, typical duration between 0.1 and 1 second [5 – 50 cycles] of random
magnitude and on any one (1) or more phases simultaneously due to fault clearance.
• Voltages may rise above the nominal voltage level on one or more phases under fault
conditions.
• Voltage variations due to tap-changer operations, variation of other customer loads,
sudden load shifts due to switching.
It is the responsibility of the generator operator to ensure the safe operation of the machine,
and that any adverse effects of the generator on the grid are minimised under the conditions
prevailing at the connection point. In particular, the generator operator must:
• be satisfied that the fault clearance times are within the transient stability requirements of
the machine; and,
• ensure that the steady state output of the machine is stable for all expected operating
conditions at the network connection point.
5.1.3 Islanding
All reasonable precautions must be taken to prevent the intentional or unintentional islanding
of private generation systems where there is a loss of supply from the network, unless
special provisions have been negotiated within the Customer Connection Agreement.
The generator may continue to supply the customer’s own plant downstream of the network
connection point from local generation, but there must be no connection to the grid.
• Islanding can cause potential quality of supply problems for other customers and the
legal implications of acceptance of risk and liability must be resolved before providing
isolated supply to other customers.
• Anti-islanding protection must complete its operation in less than five (5) seconds, or less
than half of the feeder reclose time, whichever is the less.
• The reclose time delay varies for different parts of the network.
All earthing must meet all statutory requirements under all operating conditions.
System grounding (neutral grounding) refers solely to the method of power source grounding
and not to the earthing of metal structures for personal safety. Earthing of the generator
neutral must be coordinated with the network earthing. Network earthing may be solid or
consist of neutral earthing resistors or reactors. The possible earth fault current will depend
on the neutral earthing system used.
Under some fault conditions, it may be possible for a portion of unearthed network to remain
energised with no current flow at phase to ground fault. It is important that the protection
system detects this condition and isolates the generator from the network. This is dealt with
in more detail in section 5.1.5.
If a generator is to continue operating on a network isolated from the grid, all relevant system
and safety earthing criteria must be met, including but not limited to AS 3000.
For LV system neutral earthing, solid earthing principals should apply. If neutral earthing
impedances are used to limit the generator earth fault currents, a generator transformer must
be used to ensure compliance with all statutory and supply authority safety earthing
requirements on the LV system for all operating scenarios.
The neutral busbar must be continuously connected to the source of supply as well as being
locally earthed. At all times, the provisions of the Wiring Rules and the Service and
Installation Rules apply.
The sensitivity of loss of mains protection depends on the relative mismatch between the
generation capacity and the connected load if an islanding situation develops. It is essential
that the generator’s protection equipment isolate the generator before a network reclose
occurs, after a fault has caused the network protection to trip the mains supply. If the ratio of
the generation capacity to the minimum load on the connecting feeder is greater than 70%,
or if other protection such as rate of change of frequency (ROCOF) or vector shift protection
is difficult to set, an inter-trip may be required in addition to the loss of mains protection.
The generator’s operator is responsible for calculating and applying the loss of mains
protection settings. The assumptions used to calculate the settings and the final settings are
to be approved by Endeavour Energy before they are put into service.
Set out below are the commonly accepted methods of addressing the issue of not allowing
embedded generation to supply an unearthed network.
In the case of the interconnecting ungrounded transformer (delta winding on the line side) at
NCP, the voltage on the ungrounded systems will experience a voltage shift under a phase
to earth fault condition and no fault current flows in the isolated unearthed portion of the
network.
One way to detect this condition is to connect a voltage sensing relay (59N) to three (3) VTs
in a broken delta configuration. A 3-phase, 5-limb broken delta voltage transformer is
typically installed on the delta winding side (line side) of the connected step up transformer.
The earthed star point of the VT primary provides a reference point for the neutral and allows
a zero phase sequence voltage to be generated on the broken delta secondary under earth
fault conditions.
During normal conditions, the voltage unbalance will be minimal and the zero sequence
voltage will be minimal. When a phase to ground fault occurs, the faulted phase voltage
collapses and the zero sequence voltage (3V0) across the voltage sensing device increases
to as much as full secondary phase to ground voltage. Primary voltage increases as much as
1.73 x nominal line to ground voltage. Protection Design should consider the following::
• Faults on adjacent feeder(s) could cause the NVD protection relay to respond and pick
up. Therefore, NVD settings should be graded with other earth-fault protection relays.
• The NVD relay needs to be set with sufficient time delay in order to allow other feeder’s
protection earth-fault relay(s) to clear their own feeder’s earth-fault first. For example
time delay setting of the NVD relay in the 11kV systems should be greater than 2.0 secs
in order to allow the other earth-fault relay(s) in the neighbouring circuits to clear the
earth-fault.
• Earth fault contribution needs to be calculated based on two (2) separate earthing
systems.
• Impact on other protection relays as a result of the sudden removal of the earth.
If the agreed maximum generation is at all times less than the total customer load, or there is
no intention to export power onto the grid, reverse power or directional current protection can
be used to detect a loss of mains condition. The criteria for deciding if this is possible are:
• The export at the NCP has a defined maximum value, and if this value is exceeded, a
loss of mains condition is assumed to have occurred and the generator is separated from
the grid.
• The export is less than 70% of the expected minimum feeder load, with all other
generation included.
Generator system operating characteristics such as PQ, voltage, ratings, lead and lag limits.
Machine characteristics such as Xd, Xq, _ve and 0 sequence impedances, time constants,
and inertia constant. Machine control characteristics such as droop, AVR, and governor. All
relevant data is required for installation as set out in Annexure A1.
Generators in parallel with the network may raise fault levels beyond the fault rating of
existing installed equipment. Calculations may be required of the contribution of the
generation plant to fault levels on the network in order to determine:
• Contribution to fault levels by the generator.
• The impact on neighbouring installations and customers.
• The level of protection required as a result of changed fault levels.
5.1.6.3 Stability
Synchronous generating units must operate in a stable manner at all times when connected
to the network. Any generator unit connected to the grid should:
• Disconnect from the grid for a power system disturbance that causes in unstable
operation.
• Provide damping of the system oscillations.
• Maintain steady state voltage stability criteria.
Endeavour Energy will provide information on the design criteria and all data related to the
network necessary to carry out the stability and other system studies. The proponent of the
scheme is responsible for the execution of all required system studies. Steady state and
transient stability study should include:
• The impact of embedded generations on the dynamics of a distribution feeder.
• The impact of embedded generations on the dynamic of an entire bulk power system.
• Effects on transient stability.
• Impact on damping.
• Effect on voltage stability.
All high voltage plants and apparatus shall comply with the relevant Australian Standard.
Plant and apparatus shall be designed, manufactured and tested in accordance with the
quality assurance requirements of Australian Standard AS/NZ ISO 9001.
Each connection between a customer and the network must be controlled by a circuit
breaker and related equipment capable of interrupting the short circuit current at the
network connection point (NCP).
Details of the proposed protection arrangements, along with general technical information of
the proposed generating plant, as mentioned in Annexures A1 and A2, must be submitted
to Endeavour Energy by the customer to determine if additional protection is required in the
interests of safe and stable operation of the network.
.
5.1.8 Fault clearance times
Fault clearance times (from fault inception to circuit breaker arc extinction) can vary
depending on circuit breaker technology, age, and the system characteristics. The fault
clearance times must be adequate to minimise equipment damage. In the case of the 132kV
system, the fault clearance times, set out in the National Electricity Rules (NER) for both
main protection and for breaker fail protection, must be achieved for all connected plants.
If there are transient stability critical clearance time limits imposed by a generator, the cost of
upgrading all protection systems in the affected area is the responsibility of the customer.
Normal operations of the network should not cause unnecessary tripping, and protective
devices should not operate in cases of:
• Switching of capacitor banks.
• Faults on remote equipment.
• Load swings (ensure adequate loss of mains protection settings).
• Transformer automatic tap changing.
• Other normal operating contingencies.
The distribution system will usually carry short bursts of high frequency signalling for load
control purposes. This is generally at 1050Hz or 750Hz or 283Hz and can typically have a
magnitude of 2-3% of the system nominal voltage. Under abnormal (system resonance)
conditions it may have excursions to 10% of nominal voltage. The generator protection and
control systems must be able to cope in the presence of these signals.
All protection associated with the generator and its connection to the grid must be designed
with overlapping zones of protection to ensure that any fault is detected and cleared by at
least one protective device.
Circuit breaker failure protection must be provided at the NCP circuit breaker to cover the
circuit breaker failing to operate when required. This circuit breaker failure protection must
be arranged to isolate the generator from the grid to avoid the possibility of out-of-
synchronism operation.
All generation plant connected to the 33kV or above sub-transmission network shall have at
least two (2) schemes of protective equipment installed for each zone of protection. This
includes provision of duplicate trip coils on the circuit breakers. All primary equipment shall
have ratings suitable for the expected duty in the presence of the generation. This includes,
but is not limited to, such things as ensuring adequate circuit breaker class for the system
X/R, insulation coordination and power frequency voltage withstand capability.
This covers generator and transformer faults as well as any other equipment within the
generating plant. It is the responsibility of the customer to ensure that adequate protection is
installed for their own equipment. Any protection scheme installed downstream of the
network connection point does not need to be graded with Endeavour Energy’s protection
systems, except as required by regulation. The following factors should be considered in the
design of the generator protection schemes:
• Each generator shall have protection installed that will operate within a minimum time
having regard for network performance, stability and grading requirements.
• Generator protection must cover permanent and transient faults under all permutations of
phase and ground short-circuit.
• Each generator must have protection to trip the generator and, where appropriate, shut
down the excitation and the prime mover.
• The protection should operate for all electrical or mechanical faults within the generator,
transformer and prime mover.
• Earth fault
• Overcurrent
• Over/under voltage
• Under/over frequency
• Negative phase sequence
• Reverse power
• Generator and/or transformer differential
• Field failure protection (reverse VAR)
• Pole slip (out of step)
• Transformer protection – winding gas
• Synchronism check
• Circuit breaker fail
This includes the protection installed on the circuit breaker that interfaces the customer with
Endeavour Energy’s network and has the potential to impact on power system security. The
protection must operate before any automatic reclose operation can occur.
The protection at the network connection point must grade satisfactorily with Endeavour
Energy’s protection schemes, so that any fault internal to the customer’s plant will be cleared
below or at the network connection point before any Endeavour Energy protection operates.
The grading at the network connection point will be checked by Endeavour Energy and must
be approved in terms of the customer connection process before operation commences.
Protection arrangements and settings will depend on the individual installation and local
requirement. The basic requirements must include the detection of:
• Over and under voltage
• Over and under frequency
• Phase fault
• Earth fault
• Loss of mains
• Battery under voltage
• Circuit breaker fail
The following loss of mains protective functions are considered as typical requirements:
5.1.10 Auto-reclose
Generators connected to the 11kV and 22 kV (distribution) networks may use synchronising
facilities to automatically reconnect the generation plant following a system disturbance no
earlier than 60 seconds after the main supply is restored.
Generator reclose is not allowed on to a dead feeder, except where there is an agreement
for islanding.
Endeavour Energy’s network provides automatic reclosing function on all of its overhead
lines so that if a protection relay trips the line as the result of a fault, the circuit breaker will
automatically close after a defined time delay. This delay time can vary for different parts of
the network. The embedded generator must be disconnected from the network before any
auto-reclose takes place.
Settings of the protection relays and control equipment or associated wiring must not be
altered unless written authorisation is received from the Network Service Provider
(Endeavour Energy).
Protection equipment must comply with the relevant parts of IEC 60255 or equivalent.
Remote monitoring and control equipment is required for remote operational purposes, inter-
tripping, load or voltage control. This requirement will be negotiated for each situation, as
any such requirements depend on the relative capacities of the generator and grid at the
connection point. A Supervisory Control and Data Acquisition (SCADA) system is the
preferred method of providing control and monitoring functions. A communication media
between the generator premises and Endeavour Energy’s control centre is required in order
to send and receive data.
A list of signals that are to be sent and received via SCADA systems must be negotiated with
Endeavour Energy. The signals include but tot limited to the following:
• A suitable remote terminal unit compatible with Endeavour Energy’s SCADA system. At
present only the ABB RTUs are used in Endeavour Energy's system.
• Wiring connection schedule for the RTU to allow the software to be developed for the
master station and the RTU.
Annexure A1
(Attach copy of fuse manufacturer’s minimum melt and total clearing time-current curves)
Manufacturer:
Type:
Size:
Class/speed:
Annexure A2
• A copy of plant electrical single line diagram (SLD) showing the configuration of all
generating facility equipment, current and potential transformers, and protection and
control elements and all other relevant power system elements up to the network
connection point.
• A copy of any applicable site documentation that indicates the precise physical location of
the proposed generating facility.
• A copy of any applicable documentation that describes and sets out in detail the
operation of the protection and control schemes.
Annexure A3
Rate of Change of Frequency (ROCOF): typically 0.4Hz / sec, 0.5 sec trip time (this high
level is specified to ensure minimum spurious tripping).
Vector shift: Typically 6 degrees, 0.5 sec trip time (it is susceptible to spurious tripping due
to grid disturbances).
Neutral voltage displacement (NVD) settings: NVD plug = 30%; NVD Time delay > earth-
fault clearance time of other earth-fault protection relay(s) in the connected network.
Following are five (5) cases of generation connections and the typical examples of the
protection requirements.
Protection required:
• Overcurrent and earthfault
• Under and over voltage
• Under and over frequency
• Three phase vector shift, subject to generator preference (optional).
Protection Required
Overcurrent and earthfault
Under and over voltage
Under and over frequency
3 phase vector shift
Optional
True ROCOF may be used as well as vector shift. True ROCOF detects the islanded
condition rather than the onset of islanding. Some ROCOF relays may also be sensitive to
an initial change in voltage vector.
The maximum cumulative generation export capacity is greater than 0.8 times the minimum
captive load, such that load/generator balance is possible, and the maximum export capacity
is less than 5 MW.
Protection required
Overcurrent and earthfault
Under and over voltage
Under and over frequency
3 phase vector shift,
Rate of Change of Frequency (ROCOF)
Neutral Voltage Displacement (NVD)
Dead line check
Protection required
Overcurrent and earthfault
Under and over voltage
Under and over frequency
Intertripping from primary bus intake
Parallel earthing or NVD protection
• Intertripping from the feeder breaker, or fault throwing or reverse VAR protection, where
applicable.
For large generators remote from the primary bus, adequate security may be achieved only
by double circuit connection to the primary bus.
Protection required
Overcurrent and earthfault
Under and over voltage
Under and over frequency
3-phase vector shift
The total generation connected to a primary substation using the vector shift method for loss
of mains protection, shall not exceed 20MW.
The general requirements are covered with synchronous machines in cases 1-4.