Wireless Data Communications for SCADA Systems

BCWWA Conference
Whistler, April 2008 Presented by:

Dan Ehrenreich
Motorola Inc.
Wireless Communications for SCADA Systems BCWWA 2008

Advanced SCADA Features

Networking
(Communication Anywhere to Anywhere)

Communication Network

Data Reliability

Data Security

(No Communication Errors) (Immune to Intrusion)

Wireless Communications for SCADA Systems BCWWA 2008

Open Communication Solutions

SCADA Wonderware Intellution Factorylink etc.

Applications Pressure/Flow Maintenance Leak detection etc.

PLC Interface Allen Bradley Modicon Etc.

Versatile Interface

Versatile Media 900 Mhz Conventional 900MHz S.Spectrum Analog Trunking VHF / UHF Conventional UHF-900 MHz MAS System Telco Network GSM/GPRS Satellite Microwave.

MODBUS DNP 3.0 OPC MDLC over TCP/IP etc.

Versatile IEDs Pressure Control Flow calculations Pumps Start etc.

Wireless Communications for SCADA Systems BCWWA 2008

A Communication Oriented RTU 1/3

A powerful combination of two functions:
Programmable Logic Controller Communication Modem

Communication Modem,

Remote Control

Programmable Controller

Local Control

Wireless Communications for SCADA Systems BCWWA 2008

A Communication Oriented RTU 2/3

Store and Forward Repeater F1-F1 Node Linking two Media

Reporting By Event

Protocol Converter for PLC Links

RTU

Local Control of Remote Sites

Time Synchroniz ation

Wireless Communications for SCADA Systems BCWWA 2008

A Communication Oriented RTU 3/3

Local Process Network Comm.
Polling via radio

PLC

++

Report by Event

RTU

+++

Wireless Communications for SCADA Systems BCWWA 2008

Store and Forward Links

All radio links may use the same frequency !
RTU S&F

S&F Repeater
RTU RTU FIU

SCADA HMI

Wireless Communications for SCADA Systems BCWWA 2008

Backup Links Enhance Reliability

RTU

RF

IP Gateway
Line

RTU

Backup Radio
Radio

SCADA Control Center

RF

RF
RTU

RTU

Damaged Wire-line
Wireless Communications for SCADA Systems BCWWA 2008

Wide Area SCADA-Data Network

S&F Repeater

Primary Water SCADA Ethernet ToolBox IP Gateway Ethernet Secondary MCC

IP
S&F Repeater

Line Based network

RTU for Pumping Station

RTU and Comm. Node

RTU for Reservoir

Wireless Communications for SCADA Systems BCWWA 2008

Complex SCADA System

Printer Primary MCC Local Ethernet

RTU & Data Comm. Node

IP Gateway Wireline Comm.

Line Based IP

Main ToolBox

Remote Ethernet Secondary MCC RTU & Data Comm. Node (SLIP) Prime Link Remote ToolBox
TS

Prime Link

Backup Link

RTU & Data Comm. S&F

Backup Link

Wireline Comm.
RTU & Data Comm. Node Prime Link RTU & Data Comm. Node

Wireless Communications for SCADA Systems BCWWA 2008

10

Reporting in Wireless SCADA Systems

Cyclic Polling of RTUs
Complete Polling - Tell me about all your conditions
Time consuming process not suitable for wireless media

Report by Exception Tell me about only what changed

Change of state that does not require immediate attention

Cyclic Health Check - Indicate shortly that you are alive

To minimize the health check cycle (leave time gaps for alarms)

Initiating Unsolicited Messages

Report By Event - Predefined Alarm conditions
Must get immediate attention of the operator (critical alarms)

Group Calls
Burst messages Everyone Accept this Message
No acknowledgement is expected (all keep quite for 5 minutes)
Wireless Communications for SCADA Systems BCWWA 2008

11

Multiple Address System Network

F1
Using the 7-Layer protocol sites may be configured for single frequency F3

F2
RTU RTU

F1

F2

RTU

F3
Site 2 RTU

F3

Site 1

F1 F2

F3 Remote Programming

F3 SCADA
12

Wireless Communications for SCADA Systems BCWWA 2008

Wireless IP Connection with SCADA

Master Control Center IP Network
Programming ToolBox

IP Gateway

IP Con.

Ethernet

900 MHz 5.7 GHz

Wireless IP Infrastructure
IP Con.

Programming STS IP Con.

RTU
IP Con.

RTU

IP Con.

RTU
Wireless Communications for SCADA Systems BCWWA 2008

13

Wireless GSM/GPRS Network

RTU RTU

RTU

Site 2

Voice
Site 3

Voice
Site 1

Micro Wave Back Bone

RTU Site 4

SCADA

Voice
Wireless Communications for SCADA Systems BCWWA 2008

14

Combined PLC and I/Os with RTU

I/O Control RTU With radio

Wireless Network Customer Site STS ToolBox PLC or IED with Native protocol

I/O
Control

Installed PLC or IED

Wireless Communications for SCADA Systems BCWWA 2008

15

SCADA Security Incident Trends

Something Big Changes Here
13 28
* Projected

22*

20*

18

5 1 2 2 2 3

4 1

-1 99 3

19 94

19 95

19 96

19 97

19 98

19 99

20 00

20 01

20 02

20 03

20 04

19 82

Source: Eric Byres Wireless Communications for SCADA Systems BCWWA 2008

Se pt .

20 05

16

Combined Set of Solutions May Help

Physical Security
Provide adequate security to remote sites

Firewalls
Protecting the corporate network

Use of private data network

Public networks are often vulnerable

Use of complex protocol structure

Need for specific analyzer

Master Control Center

Communications Security

IP Gateway

Combined Encryption and Authentication Multiple passwords across the system, etc.
Wireless Communications for SCADA Systems BCWWA 2008

17

Cost Saving Analysis 1/2

Calculate the overall Economic factors:
Cost Cost Cost Cost Cost of lost potable water due to bursts and leakages of electric energy during designated period for repairs and replacement of equipment travel to remote sites for periodic checkup of system supervision and manual data collection

Cost (without SCADA) Cost (with SCADA) Saving = -------------------------------------------------------------Cost (without SCADA)
Wireless Communications for SCADA Systems BCWWA 2008

(%)
18

Cost Saving Analysis 2/2

2500 2000 1500 1000 500 0 Without SCADA With SCADA

Cost of lost potable water due to bursts and leakages Cost of electric energy during designated period Cost for repairs and replacement of equipment Cost travel to remote sites for periodic checkup Cost of manual data collection Total

Wireless Communications for SCADA Systems BCWWA 2008

19

System Programming Tasks

With Simple Protocol Network Addressing Error Detection & Message Retry Diagnostics Data Security Main Application Built In Built In Main Application With Layered Protocol Built In Built In

Wireless Communications for SCADA Systems BCWWA 2008

20