Channel Power

SCADA SOLUTIONS
NOVEMBER 2013

DANNY PARVARY
EMEA VOIP & SCADA
BUSINESS MANAGER
MOTOROLA SCADA SOLUTIONS

Conventional Analog Radios,

Trunk Analog radios,
PSTN, TETRA, ASTRO,
MOTOTRBO, CANNOPY
GPRS, CDMA, IP Microwave,
SCADA Station LAN, Microwave …

Programming Tool
SCADA COMPONENTS

• Control Centers
• Motorola offering supports all major Control Centers

• Data Gateway
• Motorola DG Provides connectivity between the Control center & Communication system

• Communication System
• Motorola SCADA offering supports all communications media and networks but its not
limited to Motorola radio systems. Motorola SCADA supports Public and Private
communication networks as well.

• Remote Terminal Units (RTUs)

• Motorola RTU supports all communications media and networks and extensive set of
industrial and “smart” sensors

• Sensors
• Provide connectivity to various processes such as Oil & Gas, Electricity and water
management elements such as pumps, valves, power analyzers, environmental IO and
more.
SCADA MAIN APPLICATIONS

• Oil and Gas Pipelines

• Electricity Distribution
• Municipal Water, Waste Water
• Public Safety and Security
• Early Flood Warning
• Irrigation, Water Distribution
• Communication Monitoring
• Transportation
• Environmental Monitoring
OIL & GAS SCADA SYSTEMS

• Remote monitoring and control system

• Theft and leakage detection
• Remote emergency/fire shout-off
• Flow and pressure monitoring
• Pollution detection and prevention
• Operating efficiency & productivity
• Proactive maintenance
• Personal safety and security
• Cost savings: automatic detection, control and
monitoring
• Protect investments
OIL AND NATURAL GAS
TRANSPORTATION & STORAGE
• Management system to ensure efficient and effective
movement of natural gas and crude oil from producing
regions to consumption regions
• Centralized control center to collect, assimilate, and
manage data received from monitoring and compressor
stations all along the pipe.
• Storage of natural gas into storage facilities
• Monitor compressing natural gas to reduce its volume
and push it through the pipe
• Metering stations to monitor flow of the natural gas along
interstate pipelines
• Valves control (for example if a section of pipe requires
replacement or maintenance)
FLOATING PRODUCTION STORAGE
AND OFFLOADING
• Control & monitor Offloading
process of Storage and
offloading vessels
• Remote operation
• Enhance Safety
• Economical solution for
small oil fields
• Can be moved to a new oil
fields
CATHODIC PROTECTION (CP)

• CP systems are used to protect fuel pipelines,

storage tanks; offshore oil platforms and
onshore oil well casings
• In some cases
• Prevent stress corrosion cracking
• More economically viable to protect a pipeline
using galvanic anodes.
EMERGENCY SHUTDOWN SYSTEMS

Single ESD command to all RTUs or selectable RTUs

• Shut down of part systems and equipment
• Isolate electrical equipment
• Prevent escalation of events
RTU
• Emergency ventilation control
• Close fire doors.

RTU
FEP

Master Control
Centre RTU
CITY GAS SYSTEMS

• Monitor flow/consumption
• Leakage Detection
• Emergency Shut Down
• Increase Public Safety
OIL & GAS DISTRIBUTION - RUSSIA
OIL & GAS DISTRIBUTION - RUSSIA

13
OIL & GAS DISTRIBUTION - SERBIA
WW PARTIAL CUSTOMERS LIST
• GASPROM • KARACHAGANAK PETROLEUM
• TRANSNEFT • MARATHON PETROLEUM
• CPC
• MOBIL OIL
• SEOUL CITY GAS
• OCCIDENTAL PETRO
• BOTAS
• PEMEX
• TOTAL
• PETROBRASS BRASIL • PETRONAS
• SHELL OIL • PHILLIPS 66
• MARAVEN • CHEVRON
• ARCO OIL AND GAS • TEXACO
• CORPUS CHRISTY • TURKMENISTAN SEIDE
• KOC • UNION CARBIDE
• SHELL BRUNEI • UNOCAL
• ELF • BELORUSNEFT
• KAZAKHSTAN OIL
POWER GRID CONTROL

Distribution Automation
12.8 kV Power 110/220/750kV
Generation Transmission 240kV-69 kV
Substation
Control

69kV-12.8 kV
Transformer
Control

12.8 kV Load
AMI Break Switch
AMR 110/240V Meter Control
reading
ACE3600 FOR DA

• Control a range of Switchgears

from different vendors
• Load Break switches
• Circuit breakers-Reclosers
• Vendor independence
• Significant cost saving
• Simple migration to automation
• Worldwide experience
• Large projects
• Thousands of RTUs in a system
POWER DISTRIBUTION AUTOMATION

• The power grid equipped with

Power line isolating switches
switch • These switches are being used
to isolate a faulty section in the
power grid
• Power can be restore to the
majority of the power grid once
the faulty link was
MOSCAD RTU disconnected
• The MOSCAD RTU monitor
and control the switch
• The MOSCAD RTU
communicates with the Control
Center via radio link
TYPICAL DA INSTALLATION

Mechanical Air Break Switch SF – 6 Switch

24KV - 200A MOTORIZED POLETOP
HUNGARY POLETOP SF-6
SUBSTATION AUTOMATION AND
TELEMETRY
WW PARTIAL ELECTRIC
CUSTOMERS
Europe Middle East & Africa
• FECSA Spain • IEC Israel Electric Co
• E.ON Hungary • Cape Town Municipality South Africa
• EDB - Belgrade Power Utility Serbia
• ESKOM South Africa
• Kran & Selije Slovenia
• NEPA Nigeria
• EDA Portugal
• SA Electric Company South Africa
• ENHER Spain
• EDF France
Asia Pacific
• Maribor Slovenia
• VCE Czech Republic
• TPC Taiwan
• JP EP BiH ED TZ Bosnia & Herzegovina • MEA Metropolitan Electric Authority
Thailand
• Komunalno Brčko Bosnia & Herzegovina
• Horowhenua Energy New Zealand
• Elektrokrajina Banjaluka Bosnia &
Herzegovina • Hanstar Taiwan
• EP HZ HB Bosnia & Herzegovina • EGAT Thailand
• EFACEC Portugal • Solaris Australia
• Elektrovojvodina Serbia • AGL Australia
• Pacific Power N.S.W Australia
WW PARTIAL ELECTRIC
CUSTOMERS
Latin America
• PQU Brazil
• ICE Costa Rica
• ELECTROSUL Brazil
• CESP Brazil
• EPSA Colombia
• Siderar Campana Argentina
• EPEC Argentina
• Transpa Argentina
• CEMIG Brazil
• Garoto Brazil
• INFRAERO Brazil
• ELFEC Bolivia
• CFE Mexico
• Energia del Sur Peru
• Electra Panama
• Luz Y Fuerza Mexico
• T&Tech Trinidad
• S&C Guyana
• Empresas Públicas de Medellín Colombia
• Compañía de Electricidad de Tulua
Colombia
WW PARTIAL ELECTRIC CUSTOMERS
USA & Canada
• Georgia System Operations Center
• Boston Edison Massachusetts
• Alabama Electric Cooperative
• Northern States Power (NSP) USA
• Kanata Hydro Quebec Canada
• Cincinnati Gas& Elec. Ohio
• Soyland Power USA
• Baltimore Gas & Electric Maryland
• Jones – Onslow EMC USA India
• Southern Carolina E. South Carolina • RSWM Ltd, Rajasthan India
• Savannah Electric Georgia • AD Hydro Power India
• DCR Florida
• Bajura Sub-Stations India
• Malana Hydro Power India
• Baltimore Gas and Electric Maryland
• Ambuja Cement India
• GPU Energy Pennsylvania & New
Jersey • Hindalco India
• Dominion Virginia Power • JayPee Power India
• Silicon Power Corporation Pennsylvania • Rajwest Power India
• Rochester Gas and Electric NY • Uttarakhand Jal Vidyut Nigam Ltd
India
• Entergy Louisiana
WATER CONTROL MANAGEMENT
APPLICATIONS
FIRE EXTINGUISHING SYSTEM

• Suit flammable or explosive

chemical circumstance, airport,
oil area, oil transport wharf,
shipyard etc.
• Remote Control of water/foam
splinters and canons via
• Control Center
• Ruggedized suitcases
• Monitor water & foam valves
• Control water & foam pumps
• Automated splinters/canons
sequence upon emergency
situation
AIRPORT CONTROL TOWER
APPLICATIONS
M = ACE3600

TETRA
M

M Sirens

M Approach Lane
lights Mobile
Control Tower
Navigation Aids M

M M CCR
M M
Tower
End of
Indicators Runway
Runway lights, MNetsSafety
Landing strip lights,
Control Traffic Braking
Tower Flickers & Papi Lights & Cables
Signaling lights Signs
AIRPORT CONTROL TOWER
• Runway
• Safety nets
• Breaking cables
• Landing strip lights
• Approach lanes lights and
navigation aids
• Traffic lights and Control
Tower indicators
• Sirens (Emergency, Alerts,
Public annunciation, etc).
• “Vehicle on Runway” alert
• Special signaling lights
• Mobile Control Tower
workstation
MARINE NAVIGATION SYSTEM
SIREN SOLUTIONS POWER &
PETROCHEMICAL SITES
SIREN SOLUTION NATIONAL
DISASTER MANAGEMENT SYSTEM

NDMA to identify the exact

location of a potential hazards
incidents and incorporates
centrally-controlled sirens to
alert local residents and plant
personnel of any impending
danger.
NEW PRODUCT PORTFOLIO

FEPs RTUs
• IP Gateway (new) • ACE3600 • Accessories
• MOPC (SW) • MOSCAD-M • ACT
• MCPM/API (SW)

NEW

NEW NEW
ACE3600 RTU – MODULAR
CONFIGURATION

Power Housing &

Supply Chassis

CPU Frames

I/O Modules Radios

Software
 MOTOROLA RTUS – ACE3600

Multiple Comm. Options

- Digital radios VHF / UHF
- Analog radios VHF / UHF
- Digital trunking
- MOTOTRBO
- Data radios, MAS
- GSM/GPRS/CDMA/HSPA
- Wi-Fi / Wi-Max
- Wire line
- PSTN
- Microwave
- Fiber Optics Monitoring Command

Communication with
Field instruments
COVERAGE EXTENSION WITHOUT
MOTOTRBO REPEATER
SCADA Station

Conventional Radio Comm. System

Metering
Comm. System
concentrator
(TETRA/MOTOTRBO/ASTRO/Canopy/More) Conventional
Radio ACE3600

Base Metering
Base concentrator
Station Station
Metering ACE3600
concentrator
ACE3600
Microwave

Metering Communication
ACE3600 concentrator Node

Conventional
Radio
ACE3600
Electric Meters
Metering
concentrator
... ACE3600
(Out of Range)

36
CPU3680
Pushbuttons

Status LEDs
2 USB Host Ports
for MotoTrbo radios)
Communication Plug-In 1 Port (optional)
Ports LEDs Serial 1 Port (RS-232/RS485)
Serial 2 Port (RS-232)
Ethernet 1 Port
(on CPU 3640 and CPU 3680)
USB Device Port (for Future use)

Plug-In 2 Port (optional)

User LEDs
CPU 3610 CPU3640 CPU3680
Flash memory 16 MB 16 MB 32 MB
SDRAM
32 MB 32 MB 128 MB
memory:
User Flash: 3 MB 3 MB 19 MB
User SDRAM: 10 MB 10 MB 118 MB
SRAM Plug-In 4 MB 4 MB 4 MB 37
CPU PLUG-IN PORT OPTIONS

• Serial Ports
• RS232 up to 230 kb/s
• RS485 up to 230 kb/s
• Configurable conventional/
Trunk radio modems:
• DPSK 1.2 kb/s, FSK 2.4 kb/s ,
DFM 4.8 kb/s , Duo-Binary 9.6 kb/s
• Ethernet
• 10/100 Mb/s (In Plug-in 1 only)
• Ethernet 10 Mb/s

38
COMMUNICATION MEDIA OPTIONS

• Motorola Radio Support:

• Mobile two-way radio - CM200, CM140, EM200, GM3188, CDM750
• Portable two way radio - HT 750, GP320, GP328, PRO5150
• Astro – XTL 5000 & XTL2500 (mobile digital and analog trunking), XTS
2500 (portable digital Trunking)
• Dimetra – MTM700/800
• MotoTrbo Digital - XPR4350, DM3400, XiR M8220, DGM4100

• 3rd party Radio / MODEM connectivity

• 3rd party two way radios
• Data radios (MDS, Data radio, etc.)
• Dial-up modems
• Cellular modems (dial mode & PD, GPRS,CDMA)
• Broadband (WLAN, Canopy, iNet900,etc.)
39
MOTOROLA COMMUNICATION
SOLUTIONS - UNLIMITED
MOSCAD
SCADA SCADA toolbox IP)
Computer Computer
TCP/IP on Ethernet
IP Network
MOSCAD
RS-232
IP GATEWAY
(Intranet) Ethernet
Tool Box
MDLC
RTU RTU
Radio over IP
RS-232
RTU RS-485 RTU

RTU
RTU

RTU
RTU RTU
Fiber optic
RTU
RTU
19.2 Kbps RTU
RS232

40
 I/O EXPANSION FRAMES & DISTRIBUTED I/O
(UP TO 13 I/O EXPANSION FRAMES)

Main Frame
Power Supply
CPU 3640 Main Frame
LAN Switch

Power

Expansion Up to 50 m Up to 50 m
Frame LAN
#1 Cables

Expansion
Expansion Frame Frame
Power Supply #n
Exp. CPU

Power
Power
ACE3600 RTU REDUNDANCY

NEW
• Hot/Swap
• Power Supply Redundancy
• CPU Redundancy 4 I/O cards
PS1 PS2
• < 50msec switch over CPU1 CPU2
• Rear onboard 100Mb/s port
• IO Expansion rack support
• OS data base sync. function
• 50x50 cm metal chassis
• 19” rack mount installation
RTU & FEP MOTOTRBO DIRECT
CONNECTIVITY
• Supports MOTOTRBO digital
Two USB2.0
radio topologies Host Ports
GM3400
• Direct Mode (DMO) MOTOTRBO radio
USB CABLE
• Single Repeater
• IP Site Connect
• NO Interface box
• Dynamic Remote Site
Addressing
• Supports GROUP CALL
• FULL OSI 7 Layers
implementation
• Provides RNDIS Interface Inputs, Outputs & Comm. Ports
TO MONITOR & CONTROL CPU3680
• True IP physical port over
CPU4600
USB2.0
NATURAL GAS TURBINE
GENERATOR STATION

A Good Day A Bad Day

44
NATIONAL THREAD

• Control system attacks:

• Foreign-Based Cyber Attack on Illinois Water Plant? (Nov 2011)
• Hacker Breached Texas Water Plant. (Nov 2011)
• Stuxnet
• Netherlands pumping system - accessed remotely (Feb 2012)

• Possible intruders:
• Countries accompanying military actions (Georgia) / feasibility
tests
• Security experts investigations & demos
(Texas, Netherlands)
• Organized crime
45
 http://www.us-cert.gov/control_systems/pdf/FINAL-Procurement_Language_Rev4_100809.pdf

WHAT ARE CONTROL SYSTEMS?

Supervisory Control and Data Acquisition
(SCADA), Process Control System (PCS),
Distributed Control System (DCS), etc.
generally refer to the systems which control,
monitor, and manage the nation’s critical
infrastructures such as electric power
generators, subway systems, dams,
telecommunication systems, natural gas
pipelines, and many others.

One example of the challenges presented was the recent disclosure of a SCADA system
compromise, which was responsible for controlling a local government’s municipal water supply. This
example highlights the need to focus cyber security efforts and the importance of critical
infrastructure. SCADA security is an emerging issue, which can no longer be ignored.

The U.S. Department of Homeland Security Control Systems Security Program, Idaho National
Laboratory, Chief Information Security Officer of New York State, and the SANS Institute have
established an initiative to bring public and private sector entities together to improve the security of
control systems. The goal is for private and public asset owners and regulators to come together and
adopt procurement language that will help ensure security integration in control systems.

The Cyber Security Procurement Language Project Workgroup comprises 242 public and private
sector entities from around the world representing asset owners, operators, and regulators. In
addition, over 20 vendors participate in a working group to assist in reviewing and producing the
procurement language. PAGE 46
MOTOROLA SCADA BUSINESS

Collaboration with
• US Department of Homeland
Security
• US Technical Support Work
Group TSWG addresses a technical
specialty to meet requirements across
the four pillars of combating terrorism
• Antiterrorism
• Counterterrorism
• Intelligence support
• Consequence management.
• Other National Information
Security Agencies

47
MSI IS PIONEER IN SCADA
SECURITY
• Most vendors are in evaluation process of needs
• WindRiver & McAfee embedded white-listing is
in definition stage
• There are many IT security experts but very little
for non IP world!

Motorola SECURED ACE3600 is the first FULLY

secured RTU/PLC to hit the market

48
SECURITY
RELEASED

NEW
CONTROL
SCADA
CENTER Workstation /
Server

Secured Secured
ACE Secured
ACE3600 Admin
Authentication IP Gateway /
FIU STS Tool
Server

SECURED MDLC
Secured COMMUNICATION
Technician NETWORK
STS Tool

Secured
Secured Secured ACE3600
ACE3600 ACE3600
ACE3600 SECURE PRODUCTS

• Secured ACE 3600 RTU

• Secured ACE IP Gateway
• ACE 3600 Users Authentication Server
• Secured configuration & management tools
(STS)

50
SECURITY COMPONENTS

• MDLC Encryption
• Users authentication
• Users permissions
• File encryption
• Security logs
• White-listing
• Policy enforcement
• Communication ports control
• Default passwords avoidance
• Limit access protocols
MOSCAD-M RTU MAIN FEATURES

• MOSCAD Low Cost RTU RS-232/RS-485

(MDLC)
• Member of the MOSCAD/ACE3600 family OR External Radio
• Basic I/Os - 12DI, 4 Relay DO, 4 FET DO
• Optional expansion I/O board – 3DI, 4AI, 1AO
• Power Management Features (PMF)
• Sleep Mode Operation @ 5ma
• Programmable Wakeup Events
• Three communication ports
• One RS485/RS232 Port
• One RS-232 Ports RS-232/RS-485
“SMART”
• One RS-232 or Radio DEVICES DI, AI
• LED display - functional/diagnostic DO, AO
• DNP3.0 and other protocols
• Programmable by ‘C’ Toolkit SUPERVISED CONTROLLED
DEVICES DEVICES
• Indoor Housing (Wall/DIN rail mounting)
MOSCAD-M RTU PMF

PF6 Uart 1
Uart 2
PF5
Direct DI
PS_VNORMAL (SW) LED + Train DI
PF2
Expansion Board
PS_AO_FLOATING
PB3 AO
PS_AI_FLOATING
V Keep
-Alive PS_MAIN PC3 AI
9-30 V PG1 PS_RADIO (SW)
PK7 Radio
DO ML
PS_FPGA (SW)
PC6 FPGA Clock
V In Monitor (SW)
PF0 Monitor

53
SCADA SW
ELECTRICITY

54
SCADA SW
WATER MANAGEMENT

55
SCADA SW
OIL & GAS

56
COMPLETE DEMO SCADA SOLUTION
LAUNCH PACK
• Two MOSCAD-M RTUs - F4586
• ACE3600 FEP - F7509
• STS - System Tools Suite - F7500
• MOSCAD-M Toolbox - F4560
• MOSCAD-M Easy Configurator
• ACE3600 FEP application
• WIZCON SCADA demo application
• WIZCON SCADA demo version

PROMOTIONAL PACKAGE AVAILABLE

PLEASE CONTACT YOUR REGIONAL SALES
MANAGER or myself at danny@motorolasolutions.com
 LOW COST RTU – HW TBD*
CAN + PWR BUS
CPU Module
• Small size
C C C C C C C C
A A A A A A A A
• Low power capable
N N N N N N N N (Sleep mode)
• High bandwidth capable
Serial
(Broadband ready)
LED’s • Few general purpose I/O
USB Eth (Wakeup on I/O)
• Standard BUS Interfaces
Plug • Strong Security built in
AUX Out IN
IO’s IO’s • Low cost
DIN Rail SD card

LED’s

LED’s
LED’s

Bat
IN/OUT I/O Modules:
IO’s • Small size 10x12x3 cm
12V OUT
• Low power capable
(Sleep mode)
• Small Variety of I/O options
PWR IN
• Low cost
12-24V IN

PS CPU IO1 IO2

Back Up Main
Battery Power
58
LOW COST RTU – SW TBD*

• OS: Linux (Including Java VM)

• Built-In Security (i.e. Authorization, Authentication, Encryption..)
• Built-In Protocols (i.e. SNMP, SSH, SFTP, HTTPS, MDLC …)
• Built-In Interfaces (i.e. Management - STS, SNMP MIB, …)
• Built-In Communication (i.e. Ethernet, USB, CAN, Serial)
• Built-In Database (i.e. Data Tables,…)
• Optional Communication (i.e. WiFi, LTE,…)
• Application Framework (i.e. VAR Application framework..)
• Application specific protocols (i.e. MODBUS,…)

59
SHOULD YOU HAVE ANY QUIERY PLEASE CONTACT YOUR REGIONAL
SALES MANAGER OR DANNY PARVARY AT
mailto:danny@motorolasolutions.com