For most of the last century, substation protection and control depended on copper. Hundreds of hardwired connections carried currents, voltages, trip signals, and status points between field equipment and relay panels. IEC 61850, Communication networks and systems for power utility automation, changes that model. It defines how devices describe themselves, how they exchange information, and how an entire substation is engineered as a coherent data system. For protection engineers, it is no longer optional knowledge.
A Standard Built on Data Models
The core idea of IEC 61850 is a standardized, object-oriented data model. Functions are represented as logical nodes with standardized names. For example, XCBR represents a circuit breaker, XSWI a switch, PTOC time overcurrent protection, PDIS distance protection, and PTRC trip conditioning. Logical nodes contain data objects and attributes with defined meanings.
Because the meaning of data is standardized, devices from different manufacturers can understand each other without custom point mapping. That is the foundation of interoperability.
Interoperability is not automatic, however. Devices declare which parts of the standard they support, and different editions of IEC 61850 introduced changes to data models and engineering features. Protection engineers should confirm edition compatibility, conformance testing, and vendor tool support early in a project, before devices are ordered.
The Three Communication Services
| Service | Purpose | Characteristics |
|---|---|---|
| MMS (client-server) | SCADA, settings, reports, file transfer | Mapped by IEC 61850-8-1; routable, not time-critical |
| GOOSE | Fast peer-to-peer events such as trips, interlocks, and breaker failure initiation | Multicast, published repeatedly with retransmission, time-critical |
| Sampled Values (SV) | Digitized current and voltage measurements | Mapped by IEC 61850-9-2; high-rate streams on the process bus |
The station bus connects relays, gateways, and HMIs. The process bus connects protection devices to merging units and intelligent breaker controllers in the switchyard. Requirements for digital outputs from instrument transformers and merging units are addressed in IEC 61869-9.
GOOSE deserves special attention from protection engineers. A GOOSE message is not acknowledged like a traditional contact closure. Instead, the publisher retransmits the message at increasing intervals after a change and then at a steady heartbeat. Subscribers monitor that heartbeat and flag the message as invalid if it stops. Protection schemes must define what each relay does when a subscribed message is lost, and that behavior must be tested.
Engineering with SCL
IEC 61850-6 defines the Substation Configuration Language (SCL), an XML-based format that describes devices, data, communications, and the substation itself. Protection engineers will encounter several file types:
- SSD: System Specification Description, the single-line and functional specification.
- ICD: IED Capability Description, what a device can do.
- SCD: Substation Configuration Description, the complete engineered system.
- CID: Configured IED Description, the configuration loaded into a specific device.
- IID: Instantiated IED Description, used to exchange device-level changes.
The SCD file becomes the authoritative description of the substation. Version control and disciplined change management for SCL files are as important as drawing control was in the copper era.
This shift changes who does what. System integrators, protection engineers, and vendors must agree on which tool owns the SCD file, how device configurations are exported and imported, and how changes are reviewed. Without that agreement, a substation can end up with relay configurations that no longer match the documented design.
Time Synchronization and Network Redundancy
Sampled Values require precise, common timing so that measurements from different merging units can be compared. Digital substations commonly use the Precision Time Protocol defined in IEEE 1588, with the power utility profile specified in IEC/IEEE 61850-9-3. Loss of synchronization must be detected and handled by the protection logic.
Because protection now depends on the network, the network must be designed to protection-grade reliability. IEC 62439-3 defines the Parallel Redundancy Protocol (PRP) and High-availability Seamless Redundancy (HSR), which provide zero-recovery-time redundancy for critical traffic.
Cybersecurity
Replacing wires with Ethernet introduces new attack surfaces. The IEC 62351 series addresses security for power system communications, including authentication for GOOSE and SV messages. In North America, applicable utilities must also meet NERC CIP requirements. Protection engineers should work closely with OT security teams on network segmentation, access control, and configuration integrity.
Testing in a Digital World
Testing changes fundamentally.Instead of injecting secondary currents and monitoring contacts, test sets publish Sampled Values and subscribe to GOOSE messages. IEC 61850 provides test and simulation modes and quality attributes so that devices can be isolated logically during testing. Engineers must understand how to verify that a device is truly isolated before testing, because a test GOOSE trip sent to the wrong subscriber is a real trip.
Commissioning also expands in scope. Beyond relay functions, teams must verify network switches, VLAN and priority settings, time synchronization accuracy, and redundancy failover. Documentation should capture which messages each device publishes and subscribes to, so that future maintenance teams can isolate equipment confidently years after the original engineers have moved on.
Key Takeaways
- IEC 61850 standardizes data models through logical nodes, enabling multi-vendor interoperability.
- MMS, GOOSE, and Sampled Values serve different purposes with different timing requirements.
- SCL files, especially the SCD, are the engineering backbone of a digital substation.
- Precise time synchronization and redundant networks are protection-critical.
- Cybersecurity and logical isolation during testing require new skills and procedures.
ASEEE’s Power Systems & High Voltage discipline includes protective relaying and relay testing programs that build these skills through practical assessment. Explore the catalog on our courses page or see the FAQ for details on certification.


