August 2015

See the unseen from a new perspective

SDM600 integrated in RTU500 series
environment

© ABB
January 20, 2018 Slide 1
| Slide
© ABB 24CAE000011
SDM600 – System Data Manager
January 20, 2018

Cyber Security Service and

Data Management
Management Maintenance

Disturbance
Central User Acount Tracking IED
Recorder Data
Management Software Versions
Management

Disturbance Tracking IED

Central Cyber
Recorder Data Configuration
Security Logging
Evaluation Revisions

Automatically collect, store Provide centralized User Documentation of

and provide evaluation for Account Management and Firmware and
disturbance recorder files. security logging configuration revisions of
the supervised IEC 61850
IEDs

© ABB
January 20, 2018 Slide 2
See the unseen from a new perspective
SDM600 integrated in RTU500 series environment

 Software solution for vendor independent

 Disturbance recorder data management
 Cyber Security event logging
All available on the 560HMR01 running Microsoft Windows
© ABB
January 20, 2018 | Slide 3
SDM600 integrated in RTU500 series environment
Management of disturbance recorder data

Independent and automatic

 Automatic upload of disturbance recorder
(DR) files from up to 150 IEDs from ABB or
other suppliers
 Supported protocols
 IEC 61850 (MMS)
 FTP
 COMTRADE files retrieved via RTU
ArchiveSyncService
 Polling the IEDs for new files
 No additional IEC 61850 engineering
required
 Seamless integration also into existing
substation automation system

© ABB
January 20, 2018 | Slide 4
SDM600 integrated in RTU500 series environment
Visualization of disturbance recorder data

From an overview to details

 Unique dashboard answering “when
and where did it happen?”
 Individual scalable and movable timeline
 Disturbance short report available as
PDF file
 Detailed analysis using integrated ABB
WaveWin software
 Configurable email notification for DR
files including short report

© ABB
January 20, 2018 | Slide 5
SDM600 integrated in RTU500 series environment
System wide cyber security event logging

Monitor your system  Built in visualization and reporting

 Retrieve and securely store cyber security  Integrate SDM600 into an existing event
events such as user activities from logging system
 IEDs, RTUs, Switches, Windows PCs
 Supported protocol: Syslog (UDP / TCP)

© ABB
January 20, 2018 | Slide 6
SDM600 integrated in RTU500 series environment
RTU cyber security event logging

 Security related
information send to
Network Control
Center
 This information is
used as trigger for
more detailed analysis
 Less complexity at
NCC because only
relevant data requires
actions

© ABB
January 20, 2018 | Slide 7
SDM600 integrated in RTU500 series environment
RTU cyber security event logging details

 A security expert can

access SDM600 to have
a quick overview on
security relevant
information.

© ABB
January 20, 2018 | Slide 8
SDM600 integrated in RTU500 series environment
Web based application

SDM600 is a web based client

server application built into the
560HMR01
 Pre-installed and licensed
 Secure access via encrypted
https protocol
 Optional redundant power
supply
 Processor board in RTU
form factor
Multiple users can access
SDM600 at the same time from
remote and inside the
substation via web browser

© ABB
January 20, 2018 | Slide 9
SDM600 integrated in RTU500 series environment
Typical installation within an IEC 61580 station

© ABB
January 20, 2018 | Slide 10
SDM600 integrated in RTU500 series environment
Typical configuration within an IEC 61580 station

.scd

Efficient configuration by simply importing the .scd files

© ABB
January 20, 2018 | Slide 11
SDM600 integrated in RTU500 series environment
Typical installation within a legacy station

© ABB
January 20, 2018 | Slide 12
SDM600 integrated in RTU500 series environment
Hierarchical installation

 Consolidate data from

several SDM600
installations at a
central place

 Clear overview

 Encrypted
communication
between SDM600
installations

© ABB
January 20, 2018 | Slide 13
SDM600 integrated in RTU500 series environment
User interface and demo

User activity and configuration changes

DR Event representation
Where did it happen

Correlations

When did it happen

© ABB
January 20, 2018 | Slide 14
SDM600 integrated in RTU500 series environment
Main benefits for the end customer

Efficiency Vendor neutral

Improvement implementation
• DR file • Based on
management international
• Cyber Security standards
Events • Compliant 3rd party
IEDs can be
integrated

Scalable system Easy to use

• Functionality based • Simple configuration
on a license key • SCD file import
• Flexible SDM600 • No training required
architecture
• Secure web based
access

© ABB
January 20, 2018 | Slide 15