Channel Power

SCADA SOLUTIONS NOVEMBER 2013

DANNY PARVARY EMEA VOIP & SCADA BUSINESS MANAGER

MOTOROLA SCADA SOLUTIONS

SCADA Station

Programming Tool

Conventional Analog Radios, Trunk Analog radios,

PSTN, TETRA, ASTRO, MOTOTRBO, CANNOPY

GPRS, CDMA, IP Microwave, LAN, Microwave …

SCADA COMPONENTS

• Control Centers • Motorola offering supports all major Control Centers

• Data Gateway • Motorola DG Provides connectivity between the Control center & Communication system

• Communication System • Motorola SCADA offering supports all communications media and networks but its not

limited to Motorola radio systems. Motorola SCADA supports Public and Private communication networks as well.

• Remote Terminal Units (RTUs) • Motorola RTU supports all communications media and networks and extensive set of

industrial and “smart” sensors

• Sensors • Provide connectivity to various processes such as Oil & Gas, Electricity and water

management elements such as pumps, valves, power analyzers, environmental IO and more.

SCADA MAIN APPLICATIONS • Oil and Gas Pipelines • Electricity Distribution • Municipal Water, Waste Water • Public Safety and Security • Early Flood Warning • Irrigation, Water Distribution • Communication Monitoring • Transportation • Environmental Monitoring

OIL & GAS SCADA SYSTEMS

• Remote monitoring and control system • Theft and leakage detection • Remote emergency/fire shout-off • Flow and pressure monitoring • Pollution detection and prevention • Operating efficiency & productivity • Proactive maintenance • Personal safety and security • Cost savings: automatic detection, control and

monitoring • Protect investments

OIL AND NATURAL GAS TRANSPORTATION & STORAGE • Management system to ensure efficient and effective

movement of natural gas and crude oil from producing regions to consumption regions

• Centralized control center to collect, assimilate, and manage data received from monitoring and compressor stations all along the pipe.

• Storage of natural gas into storage facilities • Monitor compressing natural gas to reduce its volume

and push it through the pipe • Metering stations to monitor flow of the natural gas along

interstate pipelines • Valves control (for example if a section of pipe requires

replacement or maintenance)

FLOATING PRODUCTION STORAGE AND OFFLOADING • Control & monitor Offloading

process of Storage and offloading vessels

• Remote operation • Enhance Safety • Economical solution for

small oil fields • Can be moved to a new oil

fields

CATHODIC PROTECTION (CP)

• CP systems are used to protect fuel pipelines, storage tanks; offshore oil platforms and onshore oil well casings

• In some cases • Prevent stress corrosion cracking • More economically viable to protect a pipeline

using galvanic anodes.

EMERGENCY SHUTDOWN SYSTEMS

Single ESD command to all RTUs or selectable RTUs • Shut down of part systems and equipment • Isolate electrical equipment • Prevent escalation of events • Emergency ventilation control • Close fire doors.

FEP

Master Control Centre

RTU

RTU

RTU

CITY GAS SYSTEMS

• Monitor flow/consumption • Leakage Detection • Emergency Shut Down • Increase Public Safety

OIL & GAS DISTRIBUTION - RUSSIA

13

OIL & GAS DISTRIBUTION - RUSSIA

OIL & GAS DISTRIBUTION - SERBIA

WW PARTIAL CUSTOMERS LIST

• GASPROM • TRANSNEFT • CPC • SEOUL CITY GAS • BOTAS • TOTAL • PETROBRASS BRASIL • SHELL OIL • MARAVEN • ARCO OIL AND GAS • CORPUS CHRISTY • KOC • SHELL BRUNEI • ELF • KAZAKHSTAN OIL

• KARACHAGANAK PETROLEUM • MARATHON PETROLEUM • MOBIL OIL • OCCIDENTAL PETRO • PEMEX • PETRONAS • PHILLIPS 66 • CHEVRON • TEXACO • TURKMENISTAN SEIDE • UNION CARBIDE • UNOCAL • BELORUSNEFT

POWER GRID CONTROL

240kV-69 kV Substation Control

69kV-12.8 kV Transformer Control

12.8 kV Load Break Switch Control

AMI AMR 110/240V Meter

reading

12.8 kV Power Generation

110/220/750kV Transmission

Distribution Automation

ACE3600 FOR DA

• Control a range of Switchgears from different vendors • Load Break switches • Circuit breakers-Reclosers

• Vendor independence • Significant cost saving • Simple migration to automation

• Worldwide experience • Large projects • Thousands of RTUs in a system

MOSCAD RTU

Power line switch

POWER DISTRIBUTION AUTOMATION

• The power grid equipped with isolating switches

• These switches are being used to isolate a faulty section in the power grid

• Power can be restore to the majority of the power grid once the faulty link was disconnected

• The MOSCAD RTU monitor and control the switch

• The MOSCAD RTU communicates with the Control Center via radio link

TYPICAL DA INSTALLATION

Mechanical Air Break Switch SF – 6 Switch

24KV - 200A MOTORIZED POLETOP

HUNGARY POLETOP SF-6

SUBSTATION AUTOMATION AND TELEMETRY

WW PARTIAL ELECTRIC CUSTOMERS Europe • FECSA Spain • E.ON Hungary • EDB - Belgrade Power Utility Serbia • Kran & Selije Slovenia • EDA Portugal • ENHER Spain • EDF France • Maribor Slovenia • VCE Czech Republic • JP EP BiH ED TZ Bosnia & Herzegovina • Komunalno Brčko Bosnia & Herzegovina • Elektrokrajina Banjaluka Bosnia &

Herzegovina • EP HZ HB Bosnia & Herzegovina • EFACEC Portugal • Elektrovojvodina Serbia

Middle East & Africa • IEC Israel Electric Co • Cape Town Municipality South Africa • ESKOM South Africa • NEPA Nigeria • SA Electric Company South Africa

Asia Pacific • TPC Taiwan • MEA Metropolitan Electric Authority

Thailand • Horowhenua Energy New Zealand • Hanstar Taiwan • EGAT Thailand • Solaris Australia • AGL Australia • Pacific Power N.S.W Australia

WW PARTIAL ELECTRIC CUSTOMERS Latin America • PQU Brazil • ICE Costa Rica • ELECTROSUL Brazil • CESP Brazil • EPSA Colombia • Siderar Campana Argentina • EPEC Argentina • Transpa Argentina • CEMIG Brazil • Garoto Brazil

• INFRAERO Brazil • ELFEC Bolivia • CFE Mexico • Energia del Sur Peru • Electra Panama • Luz Y Fuerza Mexico • T&Tech Trinidad • S&C Guyana • Empresas Públicas de Medellín Colombia • Compañía de Electricidad de Tulua

Colombia

WW PARTIAL ELECTRIC CUSTOMERS USA & Canada • Boston Edison Massachusetts • Northern States Power (NSP) USA • Cincinnati Gas& Elec. Ohio • Soyland Power USA • Baltimore Gas & Electric Maryland • Jones – Onslow EMC USA • Southern Carolina E. South Carolina • Savannah Electric Georgia • DCR Florida • Baltimore Gas and Electric Maryland • GPU Energy Pennsylvania & New

Jersey • Dominion Virginia Power • Silicon Power Corporation Pennsylvania • Rochester Gas and Electric NY • Entergy Louisiana

• Georgia System Operations Center • Alabama Electric Cooperative • Kanata Hydro Quebec Canada

India • RSWM Ltd, Rajasthan India • AD Hydro Power India • Bajura Sub-Stations India • Malana Hydro Power India • Ambuja Cement India • Hindalco India • JayPee Power India • Rajwest Power India • Uttarakhand Jal Vidyut Nigam Ltd

India

WATER CONTROL MANAGEMENT APPLICATIONS

FIRE EXTINGUISHING SYSTEM

• Suit flammable or explosive chemical circumstance, airport, oil area, oil transport wharf, shipyard etc.

• Remote Control of water/foam splinters and canons via • Control Center • Ruggedized suitcases

• Monitor water & foam valves • Control water & foam pumps • Automated splinters/canons

sequence upon emergency situation

AIRPORT CONTROL TOWER APPLICATIONS

TETRA

Control Tower

Braking Cables

Traffic Lights & Signs

End of Runway

Safety Nets

Mobile Control Tower

Sirens

M

Runway lights,

M M

M

M

M

Flickers & Papi Landing strip lights,

M

Approach Lane lights

M CCR Tower

Indicators

M

Navigation Aids M

Signaling lights

= ACE3600 M

AIRPORT CONTROL TOWER • Runway

• Safety nets • Breaking cables • Landing strip lights

• Approach lanes lights and navigation aids

• Traffic lights and Control Tower indicators

• Sirens (Emergency, Alerts, Public annunciation, etc).

• “Vehicle on Runway” alert • Special signaling lights • Mobile Control Tower

workstation

MARINE NAVIGATION SYSTEM

SIREN SOLUTIONS POWER & PETROCHEMICAL SITES

SIREN SOLUTION NATIONAL DISASTER MANAGEMENT SYSTEM

NDMA to identify the exact location of a potential hazards incidents and incorporates centrally-controlled sirens to alert local residents and plant personnel of any impending danger.

RTUs • ACE3600 • MOSCAD-M

NEW PRODUCT PORTFOLIO

FEPs • IP Gateway (new)

• MOPC (SW)

• MCPM/API (SW)

• Accessories • ACT

NEW

NEW NEW

ACE3600 RTU – MODULAR CONFIGURATION

Housing & Chassis

Frames

I/O Modules

CPU

Power Supply

Radios

Software

MOTOROLA RTUS – ACE3600

Multiple Comm. Options - Digital radios VHF / UHF - Analog radios VHF / UHF - Digital trunking - MOTOTRBO - Data radios, MAS - GSM/GPRS/CDMA/HSPA - Wi-Fi / Wi-Max - Wire line - PSTN - Microwave - Fiber Optics

Communication with Field instruments

Command Monitoring

COVERAGE EXTENSION WITHOUT MOTOTRBO REPEATER

36

SCADA Station

Comm. System (TETRA/MOTOTRBO/ASTRO/Canopy/More)

ACE3600

ACE3600

ACE3600 (Out of Range)

Communication Node

Metering concentrator

ACE3600

Metering concentrator

. . .

Electric Meters

Conventional Radio

Metering concentrator

Conventional Radio Comm. System

Base Station

Base Station

Conventional Radio

Microwave

Metering concentrator

Metering concentrator

ACE3600

ACE3600

37

Pushbuttons

Plug-In 1 Port (optional)

Plug-In 2 Port (optional)

Serial 1 Port (RS-232/RS485) Serial 2 Port (RS-232) Ethernet 1 Port (on CPU 3640 and CPU 3680)

Status LEDs

Communication Ports LEDs

User LEDs

USB Device Port (for Future use)

2 USB Host Ports for MotoTrbo radios)

CPU 3610 CPU3640 CPU3680 Flash memory 16 MB 16 MB 32 MB SDRAM memory: 32 MB 32 MB 128 MB

User Flash: 3 MB 3 MB 19 MB User SDRAM: 10 MB 10 MB 118 MB SRAM Plug-In 4 MB 4 MB 4 MB

CPU3680

CPU PLUG-IN PORT OPTIONS

• Serial Ports • RS232 up to 230 kb/s • RS485 up to 230 kb/s

• Configurable conventional/ Trunk radio modems:

• DPSK 1.2 kb/s, FSK 2.4 kb/s , DFM 4.8 kb/s , Duo-Binary 9.6 kb/s

• Ethernet • 10/100 Mb/s (In Plug-in 1 only) • Ethernet 10 Mb/s

38

COMMUNICATION MEDIA OPTIONS

• Motorola Radio Support: • Mobile two-way radio - CM200, CM140, EM200, GM3188, CDM750 • Portable two way radio - HT 750, GP320, GP328, PRO5150 • Astro – XTL 5000 & XTL2500 (mobile digital and analog trunking), XTS

2500 (portable digital Trunking) • Dimetra – MTM700/800 • MotoTrbo Digital - XPR4350, DM3400, XiR M8220, DGM4100

• 3rd party Radio / MODEM connectivity • 3rd party two way radios • Data radios (MDS, Data radio, etc.) • Dial-up modems • Cellular modems (dial mode & PD, GPRS,CDMA) • Broadband (WLAN, Canopy, iNet900,etc.)

39

MOTOROLA COMMUNICATION SOLUTIONS - UNLIMITED

40

TCP/IP on Ethernet

IP GATEWAY

SCADA Computer

MOSCAD Tool Box

SCADA Computer

RS-232

RS-232 RS-485 RTU

RTU

RTU RTU

RTU

19.2 Kbps RS232

IP Network (Intranet)

MOSCAD toolbox IP)

Ethernet

MDLC over IP RTU

RTU

RTU

RTU Fiber optic

RTU RTU

RTU

Radio

I/O EXPANSION FRAMES & DISTRIBUTED I/O (UP TO 13 I/O EXPANSION FRAMES)

LAN Cables

Expansion Frame #1

Up to 50 m

Power

Up to 50 m

Main Frame

Expansion Frame #n

Power Power

Main Frame Power Supply CPU 3640 LAN Switch

Expansion Frame Power Supply Exp. CPU

ACE3600 RTU REDUNDANCY

PS2 PS1 CPU1 CPU2

4 I/O cards

NEW • Hot/Swap

• Power Supply Redundancy • CPU Redundancy

• < 50msec switch over • Rear onboard 100Mb/s port • IO Expansion rack support • OS data base sync. function • 50x50 cm metal chassis • 19” rack mount installation

RTU & FEP MOTOTRBO DIRECT CONNECTIVITY

CPU3680 CPU4600

Two USB2.0 Host Ports GM3400

MOTOTRBO radio

Inputs, Outputs & Comm. Ports TO MONITOR & CONTROL

USB CABLE

• Supports MOTOTRBO digital radio topologies • Direct Mode (DMO) • Single Repeater • IP Site Connect

• NO Interface box • Dynamic Remote Site

Addressing • Supports GROUP CALL • FULL OSI 7 Layers

implementation • Provides RNDIS Interface • True IP physical port over

USB2.0

NATURAL GAS TURBINE GENERATOR STATION

44

A Good Day A Bad Day

NATIONAL THREAD

• Control system attacks: • Foreign-Based Cyber Attack on Illinois Water Plant? (Nov 2011) • Hacker Breached Texas Water Plant. (Nov 2011) • Stuxnet • Netherlands pumping system - accessed remotely (Feb 2012)

• Possible intruders:

• Countries accompanying military actions (Georgia) / feasibility tests

• Security experts investigations & demos (Texas, Netherlands)

• Organized crime

45

PAGE 46

One example of the challenges presented was the recent disclosure of a SCADA system compromise, which was responsible for controlling a local government’s municipal water supply. This example highlights the need to focus cyber security efforts and the importance of critical infrastructure. SCADA security is an emerging issue, which can no longer be ignored. The U.S. Department of Homeland Security Control Systems Security Program, Idaho National Laboratory, Chief Information Security Officer of New York State, and the SANS Institute have established an initiative to bring public and private sector entities together to improve the security of control systems. The goal is for private and public asset owners and regulators to come together and adopt procurement language that will help ensure security integration in control systems. The Cyber Security Procurement Language Project Workgroup comprises 242 public and private sector entities from around the world representing asset owners, operators, and regulators. In addition, over 20 vendors participate in a working group to assist in reviewing and producing the procurement language.

WHAT ARE CONTROL SYSTEMS? Supervisory Control and Data Acquisition (SCADA), Process Control System (PCS), Distributed Control System (DCS), etc. generally refer to the systems which control, monitor, and manage the nation’s critical infrastructures such as electric power generators, subway systems, dams, telecommunication systems, natural gas pipelines, and many others.

http://www.us-cert.gov/control_systems/pdf/FINAL-Procurement_Language_Rev4_100809.pdf

MOTOROLA SCADA BUSINESS Collaboration with

• US Department of Homeland Security

• US Technical Support Work Group TSWG addresses a technical specialty to meet requirements across the four pillars of combating terrorism

• Antiterrorism • Counterterrorism • Intelligence support • Consequence management.

• Other National Information Security Agencies

47

MSI IS PIONEER IN SCADA SECURITY • Most vendors are in evaluation process of needs • WindRiver & McAfee embedded white-listing is

in definition stage • There are many IT security experts but very little

for non IP world!

Motorola SECURED ACE3600 is the first FULLY secured RTU/PLC to hit the market

48

Secured ACE IP Gateway / FIU

Secured ACE3600 Authentication Server

SCADA Workstation / Server

SecuredACE3600

SecuredACE3600

Secured Admin STS Tool

Secured Technician STS Tool

CONTROL CENTER

SecuredACE3600

NEW

SECURITY RELEASED

SECURED MDLC COMMUNICATION

NETWORK

ACE3600 SECURE PRODUCTS

• Secured ACE 3600 RTU • Secured ACE IP Gateway • ACE 3600 Users Authentication Server • Secured configuration & management tools

(STS)

50

SECURITY COMPONENTS

• MDLC Encryption • Users authentication • Users permissions • File encryption • Security logs • White-listing • Policy enforcement • Communication ports control • Default passwords avoidance • Limit access protocols

MOSCAD-M RTU MAIN FEATURES

CONTROLLED DEVICES

SUPERVISED DEVICES

DI, AI

DO, AO

RS-232/RS-485 (MDLC)

OR External Radio

• MOSCAD Low Cost RTU • Member of the MOSCAD/ACE3600 family • Basic I/Os - 12DI, 4 Relay DO, 4 FET DO • Optional expansion I/O board – 3DI, 4AI, 1AO • Power Management Features (PMF) • Sleep Mode Operation @ 5ma • Programmable Wakeup Events • Three communication ports

• One RS485/RS232 Port • One RS-232 Ports • One RS-232 or Radio

• LED display - functional/diagnostic • DNP3.0 and other protocols • Programmable by ‘C’ Toolkit • Indoor Housing (Wall/DIN rail mounting)

RS-232/RS-485 “SMART”

DEVICES

53

Direct DI LED + Train DI

Expansion Board

AO AI

Radio DO ML

FPGA Clock Monitor

9 - 30 V V Keep - Alive

PS_VNORMAL (SW)

PS_MAIN

PS_FPGA (SW)

V In Monitor (SW)

PS_RADIO (SW)

PS_AI_FLOATING

PS_AO_FLOATING

PF2

PG1

PC6

PF0

PB3

PC3

PK7

Uart 2 Uart 1

PF5

PF6

MOSCAD-M RTU PMF

SCADA SW ELECTRICITY

54

SCADA SW WATER MANAGEMENT

55

SCADA SW OIL & GAS

56

COMPLETE DEMO SCADA SOLUTION LAUNCH PACK

PROMOTIONAL PACKAGE AVAILABLE

PLEASE CONTACT YOUR REGIONAL SALES MANAGER or myself at danny@motorolasolutions.com

• Two MOSCAD-M RTUs - F4586 • ACE3600 FEP - F7509 • STS - System Tools Suite - F7500 • MOSCAD-M Toolbox - F4560 • MOSCAD-M Easy Configurator • ACE3600 FEP application • WIZCON SCADA demo application • WIZCON SCADA demo version

LOW COST RTU – HW TBD*

58

DIN Rail

Back Up Battery

Main Power

PS CPU IO1 IO2

Eth

C A N

Serial

USB

Plug IN

12-24V IN

LED

’s

IO’s

SD card

C A N

LED

’s

IO’s

C A N

C A N

LED

’s

IO’s

C A N

C A N

CAN + PWR BUS

PWR IN

Bat IN/OUT

12V OUT

LED’s

C A N

C A N

AUX Out

CPU Module • Small size • Low power capable

(Sleep mode) • High bandwidth capable

(Broadband ready) • Few general purpose I/O

(Wakeup on I/O) • Standard BUS Interfaces • Strong Security built in • Low cost

I/O Modules: • Small size 10x12x3 cm • Low power capable

(Sleep mode) • Small Variety of I/O options • Low cost

LOW COST RTU – SW TBD*

• OS: Linux (Including Java VM)

• Built-In Security (i.e. Authorization, Authentication, Encryption..)

• Built-In Protocols (i.e. SNMP, SSH, SFTP, HTTPS, MDLC …)

• Built-In Interfaces (i.e. Management - STS, SNMP MIB, …)

• Built-In Communication (i.e. Ethernet, USB, CAN, Serial)

• Built-In Database (i.e. Data Tables,…)

• Optional Communication (i.e. WiFi, LTE,…)

• Application Framework (i.e. VAR Application framework..)

• Application specific protocols (i.e. MODBUS,…)

59

SHOULD YOU HAVE ANY QUIERY PLEASE CONTACT YOUR REGIONAL SALES MANAGER OR DANNY PARVARY AT

mailto:danny@motorolasolutions.com