Channel Power

SCADA SOLUTIONS
NOVEMBER 2013

DANNY PARVARY
EMEA VOIP & SCADA BUSINESS MANAGER

MOTOROLA SCADA SOLUTIONS

SCADA Station

Conventional Analog Radios, Trunk Analog radios, PSTN, TETRA, ASTRO, MOTOTRBO, CANNOPY GPRS, CDMA, IP Microwave, LAN, Microwave

Programming Tool

SCADA COMPONENTS
Control Centers
Motorola offering supports all major Control Centers

Data Gateway
Motorola DG Provides connectivity between the Control center & Communication system

Communication System
Motorola SCADA offering supports all communications media and networks but its not limited to Motorola radio systems. Motorola SCADA supports Public and Private communication networks as well.

Remote Terminal Units (RTUs)

Motorola RTU supports all communications media and networks and extensive set of industrial and smart sensors

Sensors
Provide connectivity to various processes such as Oil & Gas, Electricity and water management elements such as pumps, valves, power analyzers, environmental IO and more.

SCADA MAIN APPLICATIONS

Oil and Gas Pipelines Electricity Distribution Municipal Water, Waste Water Public Safety and Security Early Flood Warning Irrigation, Water Distribution Communication Monitoring Transportation Environmental Monitoring

OIL & GAS SCADA SYSTEMS

Remote monitoring and control system Theft and leakage detection Remote emergency/fire shout-off Flow and pressure monitoring Pollution detection and prevention Operating efficiency & productivity Proactive maintenance Personal safety and security Cost savings: automatic detection, control and monitoring Protect investments

OIL AND NATURAL GAS TRANSPORTATION & STORAGE

Management system to ensure efficient and effective movement of natural gas and crude oil from producing regions to consumption regions Centralized control center to collect, assimilate, and manage data received from monitoring and compressor stations all along the pipe. Storage of natural gas into storage facilities Monitor compressing natural gas to reduce its volume and push it through the pipe Metering stations to monitor flow of the natural gas along interstate pipelines Valves control (for example if a section of pipe requires replacement or maintenance)

FLOATING PRODUCTION STORAGE AND OFFLOADING

Control & monitor Offloading process of Storage and offloading vessels Remote operation Enhance Safety Economical solution for small oil fields Can be moved to a new oil fields

CATHODIC PROTECTION (CP)

CP systems are used to protect fuel pipelines, storage tanks; offshore oil platforms and onshore oil well casings In some cases
Prevent stress corrosion cracking More economically viable to protect a pipeline using galvanic anodes.

EMERGENCY SHUTDOWN SYSTEMS

Single ESD command to all RTUs or selectable RTUs Shut down of part systems and equipment Isolate electrical equipment Prevent escalation of events RTU Emergency ventilation control Close fire doors.
RTU

FEP

Master Control Centre

RTU

CITY GAS SYSTEMS

Monitor flow/consumption Leakage Detection Emergency Shut Down Increase Public Safety

OIL & GAS DISTRIBUTION - RUSSIA

OIL & GAS DISTRIBUTION - RUSSIA

13

OIL & GAS DISTRIBUTION - SERBIA

WW PARTIAL CUSTOMERS LIST

GASPROM TRANSNEFT CPC SEOUL CITY GAS BOTAS TOTAL PETROBRASS BRASIL SHELL OIL MARAVEN ARCO OIL AND GAS CORPUS CHRISTY KOC SHELL BRUNEI ELF KAZAKHSTAN OIL KARACHAGANAK PETROLEUM MARATHON PETROLEUM MOBIL OIL OCCIDENTAL PETRO PEMEX PETRONAS PHILLIPS 66 CHEVRON TEXACO TURKMENISTAN SEIDE UNION CARBIDE UNOCAL BELORUSNEFT

POWER GRID CONTROL

Distribution Automation 12.8 kV Power Generation 110/220/750kV Transmission 240kV-69 kV Substation Control 69kV-12.8 kV Transformer Control 12.8 kV Load
AMI AMR

Break Switch 110/240V Meter reading Control

ACE3600 FOR DA
Control a range of Switchgears from different vendors
Load Break switches Circuit breakers-Reclosers

Vendor independence
Significant cost saving Simple migration to automation

Worldwide experience
Large projects Thousands of RTUs in a system

POWER DISTRIBUTION AUTOMATION

The power grid equipped with isolating switches These switches are being used to isolate a faulty section in the power grid Power can be restore to the majority of the power grid once the faulty link was disconnected The MOSCAD RTU monitor and control the switch The MOSCAD RTU communicates with the Control Center via radio link

Power line switch

MOSCAD RTU

TYPICAL DA INSTALLATION
Mechanical Air Break Switch SF 6 Switch

24KV - 200A MOTORIZED POLETOP

HUNGARY POLETOP SF-6

SUBSTATION AUTOMATION AND TELEMETRY

WW PARTIAL ELECTRIC CUSTOMERS

Europe
FECSA Spain E.ON Hungary EDB - Belgrade Power Utility Serbia Kran & Selije Slovenia EDA Portugal ENHER Spain EDF France Maribor Slovenia VCE Czech Republic JP EP BiH ED TZ Bosnia & Herzegovina Komunalno Brko Bosnia & Herzegovina Elektrokrajina Banjaluka Bosnia & Herzegovina EP HZ HB Bosnia & Herzegovina EFACEC Portugal Elektrovojvodina Serbia

Middle East & Africa

IEC Israel Electric Co Cape Town Municipality South Africa ESKOM South Africa NEPA Nigeria SA Electric Company South Africa

Asia Pacific
TPC Taiwan MEA Metropolitan Electric Authority Thailand Horowhenua Energy New Zealand Hanstar Taiwan EGAT Thailand Solaris Australia AGL Australia Pacific Power N.S.W Australia

WW PARTIAL ELECTRIC CUSTOMERS

Latin America
PQU Brazil ICE Costa Rica ELECTROSUL Brazil CESP Brazil EPSA Colombia Siderar Campana Argentina EPEC Argentina Transpa Argentina CEMIG Brazil Garoto Brazil INFRAERO Brazil ELFEC Bolivia CFE Mexico Energia del Sur Peru Electra Panama Luz Y Fuerza Mexico T&Tech Trinidad S&C Guyana Empresas Pblicas de Medelln Colombia Compaa de Electricidad de Tulua Colombia

WW PARTIAL ELECTRIC CUSTOMERS

USA & Canada Boston Edison Massachusetts Northern States Power (NSP) USA Cincinnati Gas& Elec. Ohio Soyland Power USA Baltimore Gas & Electric Maryland Jones Onslow EMC USA Southern Carolina E. South Carolina

Georgia System Operations Center Alabama Electric Cooperative Kanata Hydro Quebec Canada

India
RSWM Ltd, Rajasthan India AD Hydro Power India Bajura Sub-Stations India Malana Hydro Power India Ambuja Cement India Hindalco India JayPee Power India Rajwest Power India Uttarakhand Jal Vidyut Nigam Ltd India

Savannah Electric Georgia DCR Florida Baltimore Gas and Electric Maryland GPU Energy Pennsylvania & New Jersey Dominion Virginia Power Silicon Power Corporation Pennsylvania Rochester Gas and Electric NY
Entergy Louisiana

WATER CONTROL MANAGEMENT APPLICATIONS

FIRE EXTINGUISHING SYSTEM

Suit flammable or explosive chemical circumstance, airport, oil area, oil transport wharf, shipyard etc. Remote Control of water/foam splinters and canons via Control Center Ruggedized suitcases Monitor water & foam valves Control water & foam pumps Automated splinters/canons sequence upon emergency situation

AIRPORT CONTROL TOWER APPLICATIONS

M = ACE3600

TETRA
M M M Navigation Aids M Tower Indicators Control Tower M CCR M M
End of Runway Safety M Nets Approach Lane lights Sirens

Mobile Control Tower

Runway lights, Landing strip lights, Flickers & Papi Signaling lights

Traffic Lights & Signs

Braking Cables

AIRPORT CONTROL TOWER

Runway
Safety nets Breaking cables Landing strip lights

Approach lanes lights and navigation aids Traffic lights and Control Tower indicators Sirens (Emergency, Alerts, Public annunciation, etc). Vehicle on Runway alert Special signaling lights Mobile Control Tower workstation

MARINE NAVIGATION SYSTEM

SIREN SOLUTIONS POWER & PETROCHEMICAL SITES

SIREN SOLUTION NATIONAL DISASTER MANAGEMENT SYSTEM

NDMA to identify the exact location of a potential hazards incidents and incorporates centrally-controlled sirens to alert local residents and plant personnel of any impending danger.

NEW PRODUCT PORTFOLIO

FEPs
IP Gateway (new) MOPC (SW) MCPM/API (SW)

RTUs
ACE3600 MOSCAD-M Accessories
ACT

NEW

NEW

NEW

ACE3600 RTU MODULAR CONFIGURATION

Power Supply

Housing & Chassis

CPU

Frames

I/O Modules

Radios

Software

MOTOROLA RTUS ACE3600

Multiple Comm. Options
Digital radios VHF / UHF Analog radios VHF / UHF Digital trunking MOTOTRBO Data radios, MAS GSM/GPRS/CDMA/HSPA Wi-Fi / Wi-Max Wire line PSTN Microwave Fiber Optics

Monitoring

Command

Communication with Field instruments

COVERAGE EXTENSION WITHOUT MOTOTRBO REPEATER

SCADA Station
Conventional Radio Comm. System

Comm. System (TETRA/MOTOTRBO/ASTRO/Canopy/More)

Base Station

Conventional Radio

Metering concentrator

ACE3600
Metering concentrator

Metering concentrator

Base Station

ACE3600 Microwave
Metering concentrator

ACE3600

ACE3600

Communication Node Conventional Radio

ACE3600
Electric Meters Metering concentrator

...

ACE3600 (Out of Range)

36

CPU3680
Pushbuttons Status LEDs 2 USB Host Ports
for MotoTrbo radios)

Communication Ports LEDs

Plug-In 1 Port (optional) Serial 1 Port (RS-232/RS485) Serial 2 Port (RS-232) Ethernet 1 Port
(on CPU 3640 and CPU 3680) USB Device Port (for Future use)

User LEDs

Plug-In 2 Port (optional)

CPU 3610 CPU3640 CPU3680 Flash memory 16 MB 16 MB 32 MB SDRAM 128 MB 32 MB 32 MB memory: User Flash: 3 MB 3 MB 19 MB User SDRAM: 10 MB 10 MB 118 MB SRAM Plug-In 4 MB 4 MB 4 MB

37

CPU PLUG-IN PORT OPTIONS

Serial Ports
RS232 up to 230 kb/s RS485 up to 230 kb/s

Configurable conventional/ Trunk radio modems:

DPSK 1.2 kb/s, FSK 2.4 kb/s , DFM 4.8 kb/s , Duo-Binary 9.6 kb/s

Ethernet
10/100 Mb/s (In Plug-in 1 only) Ethernet 10 Mb/s

38

COMMUNICATION MEDIA OPTIONS

Motorola Radio Support:
Mobile two-way radio - CM200, CM140, EM200, GM3188, CDM750 Portable two way radio - HT 750, GP320, GP328, PRO5150 Astro XTL 5000 & XTL2500 (mobile digital and analog trunking), XTS 2500 (portable digital Trunking) Dimetra MTM700/800 MotoTrbo Digital - XPR4350, DM3400, XiR M8220, DGM4100

3rd party Radio / MODEM connectivity

3rd party two way radios Data radios (MDS, Data radio, etc.) Dial-up modems Cellular modems (dial mode & PD, GPRS,CDMA) Broadband (WLAN, Canopy, iNet900,etc.)
39

MOTOROLA COMMUNICATION SOLUTIONS - UNLIMITED

SCADA Computer SCADA Computer
TCP/IP on Ethernet

MOSCAD toolbox IP)

MOSCAD Tool Box

RS-232

IP GATEWAY

IP Network (Intranet)

Ethernet
MDLC over IP
RTU

RTU
RS-232 RS-485

Radio
RTU

RTU

RTU RTU

RTU

RTU RTU RTU

RTU

Fiber optic
RTU

19.2 Kbps RS232

40

I/O EXPANSION FRAMES & DISTRIBUTED I/O

(UP TO 13 I/O EXPANSION FRAMES)
Main Frame Power Supply CPU 3640 LAN Switch

Main Frame

Power

Expansion Frame #1

Up to 50 m LAN Cables

Up to 50 m

Expansion Frame

Power Supply Exp. CPU

Expansion Frame #n

Power

Power

ACE3600 RTU REDUNDANCY

Hot/Swap
Power Supply Redundancy CPU Redundancy PS2 CPU1 NEW

< 50msec switch over Rear onboard 100Mb/s port IO Expansion rack support OS data base sync. function 50x50 cm metal chassis 19 rack mount installation

PS1

4 I/O cards CPU2

RTU & FEP MOTOTRBO DIRECT CONNECTIVITY

Supports MOTOTRBO digital radio topologies Direct Mode (DMO) Single Repeater IP Site Connect NO Interface box Dynamic Remote Site Addressing Supports GROUP CALL FULL OSI 7 Layers implementation Provides RNDIS Interface True IP physical port over USB2.0
GM3400 MOTOTRBO radio
USB CABLE

Two USB2.0 Host Ports

Inputs, Outputs & Comm. Ports TO MONITOR & CONTROL

CPU3680 CPU4600

NATURAL GAS TURBINE GENERATOR STATION

A Good Day A Bad Day

44

NATIONAL THREAD
Control system attacks:
Foreign-Based Cyber Attack on Illinois Water Plant? (Nov 2011) Hacker Breached Texas Water Plant. (Nov 2011) Stuxnet Netherlands pumping system - accessed remotely (Feb 2012)

Possible intruders:
Countries accompanying military actions (Georgia) / feasibility tests Security experts investigations & demos (Texas, Netherlands) Organized crime
45

http://www.us-cert.gov/control_systems/pdf/FINAL-Procurement_Language_Rev4_100809.pdf

WHAT ARE CONTROL SYSTEMS? Supervisory Control and Data Acquisition (SCADA), Process Control System (PCS), Distributed Control System (DCS), etc. generally refer to the systems which control, monitor, and manage the nations critical infrastructures such as electric power generators, subway systems, dams, telecommunication systems, natural gas pipelines, and many others. One example of the challenges presented was the recent disclosure of a SCADA system compromise, which was responsible for controlling a local governments municipal water supply. This example highlights the need to focus cyber security efforts and the importance of critical infrastructure. SCADA security is an emerging issue, which can no longer be ignored. The U.S. Department of Homeland Security Control Systems Security Program, Idaho National Laboratory, Chief Information Security Officer of New York State, and the SANS Institute have established an initiative to bring public and private sector entities together to improve the security of control systems. The goal is for private and public asset owners and regulators to come together and adopt procurement language that will help ensure security integration in control systems. The Cyber Security Procurement Language Project Workgroup comprises 242 public and private sector entities from around the world representing asset owners, operators, and regulators. In addition, over 20 vendors participate in a working group to assist in reviewing and producing the PAGE 46 procurement language.

MOTOROLA SCADA BUSINESS

Collaboration with
US Department of Homeland Security US Technical Support Work Group TSWG addresses a technical
specialty to meet requirements across the four pillars of combating terrorism Antiterrorism Counterterrorism Intelligence support Consequence management.

Other National Information Security Agencies

47

MSI IS PIONEER IN SCADA SECURITY

Most vendors are in evaluation process of needs WindRiver & McAfee embedded white-listing is in definition stage There are many IT security experts but very little for non IP world! Motorola SECURED ACE3600 is the first FULLY secured RTU/PLC to hit the market

48

SECURITY
RELEASED
CONTROL CENTER
NEW
SCADA Workstation / Server

Secured ACE3600 Authentication Server

Secured ACE IP Gateway / FIU

Secured Admin STS Tool

Secured Technician STS Tool

SECURED MDLC COMMUNICATION NETWORK

Secured ACE3600

Secured ACE3600

Secured ACE3600

ACE3600 SECURE PRODUCTS

Secured ACE 3600 RTU Secured ACE IP Gateway ACE 3600 Users Authentication Server Secured configuration & management tools (STS)

50

SECURITY COMPONENTS
MDLC Encryption Users authentication Users permissions File encryption Security logs White-listing Policy enforcement Communication ports control Default passwords avoidance Limit access protocols

MOSCAD-M RTU MAIN FEATURES

MOSCAD Low Cost RTU Member of the MOSCAD/ACE3600 family Basic I/Os - 12DI, 4 Relay DO, 4 FET DO Optional expansion I/O board 3DI, 4AI, 1AO Power Management Features (PMF) Sleep Mode Operation @ 5ma Programmable Wakeup Events Three communication ports One RS485/RS232 Port One RS-232 Ports One RS-232 or Radio LED display - functional/diagnostic DNP3.0 and other protocols Programmable by C Toolkit Indoor Housing (Wall/DIN rail mounting)
RS-232/RS-485 (MDLC) OR External Radio

RS-232/RS-485 SMART DEVICES

DI, AI DO, AO

SUPERVISED DEVICES

CONTROLLED DEVICES

MOSCAD-M RTU PMF

PF6 PF5

Uart 1 Uart 2 Direct DI LED + Train DI Expansion Board

PS_AO_FLOATING PB3 PS_AI_FLOATING PC3 PS_RADIO (SW) PK7

PS_VNORMAL (SW) PF2

AO AI Radio DO ML

V Keep -Alive

9-30 V

PS_MAIN PG1

PS_FPGA (SW) PC6 V In Monitor (SW) PF0

FPGA Clock Monitor

53

SCADA SW ELECTRICITY

54

SCADA SW WATER MANAGEMENT

55

SCADA SW OIL & GAS

56

COMPLETE DEMO SCADA SOLUTION LAUNCH PACK

Two MOSCAD-M RTUs - F4586 ACE3600 FEP - F7509 STS - System Tools Suite - F7500 MOSCAD-M Toolbox - F4560 MOSCAD-M Easy Configurator ACE3600 FEP application WIZCON SCADA demo application WIZCON SCADA demo version

PROMOTIONAL PACKAGE AVAILABLE PLEASE CONTACT YOUR REGIONAL SALES MANAGER or myself at danny@motorolasolutions.com

LOW COST RTU HW TBD*

CAN + PWR BUS

CPU Module
C A N C A N C A N C A N C A N C A N

C A N

C A N

Serial

LEDs
USB

Eth
Plug IN IOs IOs LEDs LEDs
SD card

AUX Out

Small size Low power capable (Sleep mode) High bandwidth capable (Broadband ready) Few general purpose I/O (Wakeup on I/O) Standard BUS Interfaces Strong Security built in Low cost

DIN Rail
Bat IN/OUT

LEDs

I/O Modules:
IOs

12V OUT

PWR IN

Small size 10x12x3 cm Low power capable (Sleep mode) Small Variety of I/O options Low cost

12-24V IN

PS
Back Up Battery

CPU

IO1

IO2

Main Power
58

LOW COST RTU SW TBD*

OS: Linux (Including Java VM) Built-In Security (i.e. Authorization, Authentication, Encryption..) Built-In Protocols (i.e. SNMP, SSH, SFTP, HTTPS, MDLC ) Built-In Interfaces (i.e. Management - STS, SNMP MIB, ) Built-In Communication (i.e. Ethernet, USB, CAN, Serial) Built-In Database (i.e. Data Tables,) Optional Communication (i.e. WiFi, LTE,) Application Framework (i.e. VAR Application framework..) Application specific protocols (i.e. MODBUS,)

59

SHOULD YOU HAVE ANY QUIERY PLEASE CONTACT YOUR REGIONAL SALES MANAGER OR DANNY PARVARY AT mailto:danny@motorolasolutions.com