Substation Protection, Control, and Interlocking

Introduction

A substation is not merely a collection of transformers, circuit breakers, isolators, current transformers (CTs), voltage transformers (VTs), and busbars. It is an integrated operating system in which protection, control, measurement, communication, interlocking, and station auxiliary supplies must act together. A protection relay may correctly detect a fault, yet the substation can still be unsafe if the trip circuit is open, the wrong breaker is selected, an isolator is operated under load, or the station battery is unavailable.

Substation protection and control therefore have two complementary purposes:

1. To clear faults rapidly and selectively, limiting damage and maintaining system stability.
2. To permit safe, reliable, and flexible operation, including switching, maintenance, restoration, and transfer of circuits.

This chapter develops practical schemes for common bus arrangements and explains breaker-failure protection, trip-circuit supervision, lockout, synchronism checking, interlocking, transfer schemes, and station DC supplies.

Learning Objectives

After studying this chapter, the reader should be able to:

• explain the protection and control requirements of common busbar arrangements;
• distinguish electrical, mechanical, and software interlocking;
• design the logic of breaker-failure protection and lockout schemes;
• explain trip-circuit supervision and the role of station DC systems;
• apply synchronism-check principles before closing a circuit breaker;
• analyze transfer-bus and bus-coupler operating schemes;
• identify important commissioning, maintenance, cybersecurity, and safety requirements.

1. Substation Functions and Operating Layers

A substation performs five closely related functions:

• Transformation: changing voltage levels through power transformers.
• Switching: connecting or isolating lines, transformers, generators, and bus sections.
• Protection: detecting abnormal conditions and disconnecting the affected equipment.
• Control: issuing commands, selecting operating modes, and coordinating automatic actions.
• Measurement and communication: acquiring currents, voltages, status indications, alarms, and event records.

A typical protection and control system contains the following signal path:

Primary equipment → instrument transformers → merging units or relay inputs → protection logic → trip output → lockout and breaker trip coil → circuit-breaker contacts → status and indication circuits.

The path is deliberately redundant in important installations. For example, a transformer may have two independent protection systems, separate CT cores, two trip coils, and duplicated DC supplies.

1.1 Primary switching devices

A circuit breaker (CB) can interrupt load current and fault current. An isolator or disconnector provides visible isolation but is normally not intended to interrupt substantial current. An earthing switch connects isolated equipment to earth for safety. A bus coupler connects two bus sections, while a bus-section breaker divides a bus into sections.

The operating distinction is essential: a breaker is normally opened before an isolator is operated, and an earthing switch is closed only after the relevant conductors have been isolated and verified dead.

1.2 Protection zones

Protection is organized into zones such as:

• generator zone;
• transformer zone;
• transmission-line zone;
• busbar zone;
• breaker-and-a-half or breaker-failure zone;
• auxiliary and control-power zone.

Zones generally overlap around circuit breakers. This overlap prevents an equipment fault from remaining outside every protection zone. CT location is important because it defines the electrical boundary of differential protection.

2. Common Bus Arrangements and Their Protection

2.1 Single-bus arrangement

In a single-bus substation, all circuits connect to one busbar. It is simple and economical, but a busbar fault or bus maintenance outage can interrupt every connected circuit.

Busbar differential protection compares the sum of currents entering and leaving the protected bus. Using a sign convention in which currents entering the zone are positive, the differential operating current is

where I_k is the complex current contribution from feeder or transformer branch k. For an ideal healthy bus, the phasor sum is approximately zero. For an internal bus fault, the sum becomes substantial.

A practical relay also uses a restraint quantity, commonly related to the magnitudes of the branch currents. A generalized percentage-restraint characteristic can be represented as

where I_d is differential current, I_pickup is the minimum operating current, I_r is restraint current, and S is the restraint slope. The precise definition of I_r and the characteristic are relay-dependent. CT saturation during external faults is a major design concern because unequal secondary currents can produce false differential current.

A single-bus scheme should normally include:

• busbar differential protection;
• breaker-failure protection for every breaker;
• independent overcurrent or distance backup where appropriate;
• isolator-status supervision for correct bus-zone selection;
• lockout relays for serious bus faults;
• duplicated trip paths in critical substations.

2.2 Sectionalized single bus

A bus-section breaker divides the bus into two or more sections. Under normal conditions, the sections may operate coupled or split, depending on the network design. If a fault occurs on one section, only the breakers connected to that section should trip.

The bus-section breaker can improve continuity of supply, but it introduces additional logic. The protection system must know which circuits are connected to each section. This information is often obtained from auxiliary contacts of isolators, supplemented by discrepancy alarms and configuration validation.

2.3 Main-and-transfer-bus arrangement

A main-and-transfer-bus substation has a normal main bus and an auxiliary transfer bus. A transfer or bypass breaker allows a feeder to be connected temporarily to the transfer bus while its own breaker is maintained.

The operating sequence must preserve protection coverage. When a feeder breaker is bypassed, the protection trip commands that normally operate the feeder breaker must be redirected, through appropriate transfer logic, to the transfer breaker. The transfer bus must not be treated as a simple metallic extension without considering CT locations, bus differential zones, and breaker-failure logic.

Typical transfer operations are:

1. close the transfer-bus isolator for the selected feeder only when permitted;
2. energize the transfer bus under an approved system condition;
3. close the transfer breaker and verify current transfer;
4. open and isolate the feeder breaker;
5. place the feeder protection in the correct transfer mode;
6. test indications and trip paths before maintenance.

The exact sequence varies by design. Control logic should make the permitted sequence explicit rather than relying only on operator memory.

2.4 Double-bus, single-breaker arrangement

Each circuit can be connected to either of two buses through bus isolators, but normally has one circuit breaker. This arrangement gives operational flexibility but does not allow maintenance of a breaker without interrupting its circuit unless a transfer scheme is provided.

The key risk is incorrect bus selection. Closing both bus isolators unintentionally can parallel the two buses. Such paralleling may be permissible only under controlled conditions and with synchronism or voltage checks. Interlocking should prevent prohibited combinations.

2.5 Breaker-and-a-half arrangement

In a breaker-and-a-half scheme, two circuits share three breakers between two buses. Each circuit has a breaker at its outer position and shares a central breaker. The arrangement provides high reliability and permits bus maintenance without necessarily losing a circuit.

Protection logic must correctly associate the central breaker with both circuits. A fault on one circuit may require tripping two breakers, whereas a bus fault requires a different set of breakers. Breaker-failure logic is correspondingly more complex because failure of the central breaker may require tripping breakers associated with both adjacent circuits.

2.6 Ring bus

A ring bus uses breakers arranged in a closed loop, with circuits connected between adjacent breakers. A circuit can generally be isolated by opening its two associated breakers. Ring buses provide good continuity and moderate cost, but protection and switching logic must account for changes in the ring topology when a breaker is out of service.

Bus protection, breaker-failure protection, and status processing must be topology-aware. A protection design that assumes a fixed arrangement may operate incorrectly during maintenance or abnormal configurations.

3. Breaker-Failure Protection

3.1 Purpose

Breaker-failure protection operates when a breaker receives a valid trip command but does not interrupt the fault current within the permitted time. Without breaker-failure protection, an uncleared fault can damage equipment, destabilize generators, and cause upstream or remote protection to clear a much larger portion of the network.

A breaker-failure scheme normally uses three criteria:

1. a valid trip initiation from a protection function or manually initiated critical trip;
2. evidence that current remains above a threshold, or that the breaker has not reached the required open state;
3. a time delay long enough to allow normal breaker interruption, but short enough to limit damage.

A simplified operating condition is

Here the multiplication symbol denotes logical AND, not numerical multiplication; I is the measured current and I_BF is the breaker-failure current threshold. The logic may use phase current, residual current, breaker auxiliary contacts, or a combination.

3.2 Sequence of operation

For a fault on a feeder:

1. feeder protection issues a trip command;
2. the breaker trip coil is energized;
3. the breaker should open and interrupt current;
4. if current persists after the breaker-failure timer expires, the breaker is declared failed;
5. adjacent breakers and relevant remote breakers are tripped to isolate the fault.

The breaker-failure timer must include breaker interrupting time, relay output time, auxiliary contact transition time, and a security margin. It must not be selected merely from the nominal mechanical opening time.

3.3 Current-based and contact-based supervision

Current-based detection is generally more dependable for confirming interruption because a breaker may report an open auxiliary contact while current still flows through an arcing or welded contact. However, current transformers can saturate and residual magnetizing or capacitive currents may complicate low-current detection.

Contact-based logic can improve dependability for low-current faults but should not be used as the only criterion in applications where current may persist despite a misleading contact indication. Modern schemes often use current plus breaker status, with separate treatment for three-pole and single-pole tripping.

3.4 Coordination and security

Breaker-failure operation must be secure against:

• inadvertent relay trip outputs;
• CT saturation during external faults;
• incorrect breaker-status indication;
• maintenance test conditions;
• loss of DC supply;
• communications failure in schemes requiring remote tripping.

A breaker-failure trip is usually routed through a lockout relay so that the affected breaker and associated equipment cannot be reclosed until the fault and equipment condition have been investigated.

4. Trip-Circuit Supervision

A protection system is useful only if its trip path is healthy. Trip-circuit supervision (TCS) continuously or periodically checks the trip circuit, including the DC source, wiring, fuse or miniature circuit breaker, trip coil, and relevant auxiliary contacts.

A TCS circuit commonly includes a supervision relay and a high-resistance monitoring path. The monitoring current is low enough not to operate the trip coil but sufficient to detect an open circuit. Supervision may be provided with the breaker closed, open, or in both states. The exact circuit depends on the breaker mechanism and manufacturer.

TCS should detect, where applicable:

• loss of control voltage;
• blown fuse or tripped DC protective device;
• broken trip-circuit conductor;
• open trip-coil circuit;
• incorrect auxiliary-contact condition.

A TCS alarm does not necessarily mean that a breaker has failed. It means that the ability to trip is impaired and requires prompt investigation. Alarm prioritization should distinguish loss of one trip coil from loss of all available trip paths.

5. Lockout Protection

A lockout relay, often designated 86 in common device-numbering practice, is a manually reset or electrically reset device that receives a serious fault trip and issues multiple tripping and blocking commands.

Lockout is appropriate for faults such as:

• transformer internal faults;
• busbar faults;
• breaker failure;
• transformer oil or winding protection operation;
• severe mechanical or fire-protection conditions.

A lockout function may:

• trip one or more breakers;
• block automatic reclosing;
• block transformer energization;
• initiate fire protection or depressurization actions where designed;
• send remote alarms and event records;
• require local inspection before reset.

A lockout scheme is not simply a larger trip relay. Its purpose is to prevent an unsafe or damaging re-energization. Reset authority should therefore be controlled by operating procedures, access permissions, and documented cause identification.

6. Synchronism Checking and Controlled Closing

Closing a breaker between two energized systems can produce severe transient current and torque if voltage magnitude, frequency, phase angle, or phase sequence are unsuitable. A synchronism-check function, commonly designated 25, permits closing only when the two sides satisfy specified limits.

Typical checks include:

• correct phase sequence;
• voltage difference within the permitted range;
• frequency difference within the permitted range;
• phase-angle difference within the permitted range;
• acceptable slip rate;
• correct breaker and isolator status.

If Δf is the frequency difference between the two sides, the phase angle changes approximately at the rate

where δ is the phase-angle difference in radians and Δf is in hertz. This relationship assumes that the frequencies are sufficiently stable over the short closing interval. It explains why a larger frequency difference causes the acceptable synchronizing window to pass rapidly.

A synchronism-check relay may supervise a close command, while an automatic synchronizer adjusts generator speed or voltage before issuing the command. Synchronism checking does not replace correct phasing during commissioning; phase sequence and VT wiring must first be verified.

Dead-bus/live-line and dead-line/live-bus closing are different conditions. A relay may permit closing when one side is confirmed dead, subject to voltage-dead thresholds and operating authority. Such functions must be carefully coordinated with line charging, transformer inrush, and reclosing practices.

7. Interlocking

Interlocking prevents unsafe or prohibited switching operations. It can be implemented through:

• mechanical key interlocks;
• hardwired electrical interlocks;
• relay or programmable-logic-controller logic;
• supervisory-control-and-data-acquisition (SCADA) command checks;
• procedural and permit-to-work controls.

No single method is universally sufficient. Safety-critical isolation should not depend only on software logic or a communication link.

7.1 Typical interlocking principles

A practical interlocking design may enforce the following rules:

• an isolator cannot open or close while its breaker is closed;
• an earthing switch cannot close while the associated circuit is energized;
• a breaker cannot close while its earthing switch is closed;
• two bus isolators cannot be closed if doing so would create an unauthorized bus parallel;
• a bus coupler cannot close unless the two buses satisfy voltage and synchronism conditions, unless the bus is intentionally dead;
• a transformer cannot be energized when a lockout condition is active;
• a maintenance earth cannot be removed without the proper authorization.

Interlocking must account for failure modes. For example, if an auxiliary contact becomes unreliable, the system should produce a discrepancy alarm and move to a safe state rather than silently permitting an unsafe operation.

7.2 Fail-safe design

Fail-safe does not mean that every failure causes a trip. A false trip can also be dangerous if it interrupts critical supply. The correct design objective is a controlled safe state appropriate to the function.

For an earthing-switch interlock, loss of control power should generally prevent remote operation and require local verification. For a protection trip path, loss of one DC source should generate an alarm and leave the independent trip path available. Design decisions must be based on risk analysis, equipment ratings, and applicable standards.

8. Transfer and Bus-Coupler Schemes

Transfer schemes are used to maintain supply during breaker maintenance or bus reconfiguration. They require coordination among breaker control, protection selection, CT circuits, VT circuits, bus topology, and operator indications.

8.1 Transfer-trip philosophy

When a circuit is transferred from its normal breaker to a transfer breaker, the protection must still trip the breaker that is electrically carrying the circuit. Possible methods include:

• switching protection trip outputs through dedicated auxiliary contacts;
• using a relay mode selected by verified isolator status;
• applying a common-bus protection zone that trips the transfer breaker;
• using a temporary protection panel or test switch arrangement.

The transfer arrangement should be documented on the approved single-line diagram and in the switching procedure. Temporary wiring and temporary logic are significant sources of human error.

8.2 Bus coupler control

A bus coupler may be used to transfer load from one bus section to another. Before closing it, the operator or automation system must establish whether the buses are both energized. If both are live, synchronism checking is generally required unless the system design explicitly permits paralleling under known conditions.

After the coupler is closed, the source breaker or feeder breakers can be opened in a controlled sequence. Protection settings may need to account for changed fault-current contribution and altered bus differential boundaries.

9. Station DC Supply Systems

Protection, tripping, closing, indication, emergency lighting, communications, and control systems commonly depend on a station battery and charger. AC auxiliary power can fail during a system fault; therefore, critical functions must not depend solely on the normal AC supply.

A station DC system generally includes:

• one or more battery banks;
• float and boost chargers;
• DC distribution boards;
• fuses or circuit breakers;
• monitoring relays;
• insulation or ground-fault monitoring;
• separate circuits for protection, control, communications, and emergency loads.

9.1 Battery sizing principle

For a simplified constant-current estimate, battery capacity is

where C_Ah is capacity in ampere-hours, I is current in amperes, and t is time in hours. This equation is only a first estimate. Practical sizing must include duty cycle, temperature correction, aging margin, discharge characteristics, end voltage, and manufacturer data.

For a duty cycle containing several loads, an energy or ampere-hour summation is more appropriate:

where I_j and t_j are the current and duration of duty step j, while K_a, K_t, and K_c represent applicable aging, temperature, and design-margin factors. Their values are determined by the battery technology, standard, manufacturer, and project specification; they must not be assumed universally.

9.2 DC segregation and protection

Separate DC feeders may be used for protection Group 1, protection Group 2, breaker trip coils, closing circuits, and control equipment. The purpose is to prevent one fuse operation or cable fault from disabling every protection function.

A DC earth fault may not immediately interrupt operation, but a second earth fault can short-circuit a control circuit or cause an unwanted operation. DC insulation monitoring is therefore important. Alarms should identify the affected polarity or circuit where practical.

9.3 Charger operation and testing

Chargers normally operate in float mode and restore the battery after a discharge. Periodic tests should verify:

• battery terminal voltage and individual cell condition;
• charger output and alarm functions;
• autonomy under the specified duty cycle;
• trip-coil and close-coil current;
• DC distribution voltage at remote equipment;
• insulation resistance or leakage indication;
• redundancy and changeover arrangements.

Battery tests must be planned because a discharge test can reduce the available emergency reserve. Safety precautions are required for hydrogen evolution, electrolyte exposure, short-circuit energy, and arc-flash hazards.

10. Integrated Control Architecture

Modern substations commonly use intelligent electronic devices (IEDs), process buses, station buses, time synchronization, and SCADA. IEC 61850-based systems may exchange status and trip signals through sampled values and generic object-oriented substation event messages. These technologies can reduce copper wiring and improve event recording, but they introduce configuration, network, and cybersecurity dependencies.

Protection functions should remain deterministic and sufficiently independent of nonessential communications. Engineering should address:

• time synchronization failure;
• incorrect logical-node mapping;
• network redundancy and latency;
• cyber access control;
• firmware and configuration management;
• test-mode indication;
• secure remote access;
• evidence preservation after an incident.

Artificial intelligence can assist with disturbance classification, alarm prioritization, predictive maintenance, and battery-health assessment. It should not silently replace deterministic trip logic without rigorous validation, explainability, fail-safe behavior, and formal approval. A machine-learning recommendation may support an operator; a protection trip must meet the required dependability and security criteria under known operating conditions.

11. Worked Example: Breaker-Failure Timing

A 132 kV feeder breaker has a specified interrupting time of 50 ms. The protection relay output and auxiliary relay delays together are estimated as 12 ms. The breaker-failure timer must include a 20 ms security margin.

The minimum nominal timer is therefore

A practical setting might be 90 ms, subject to system studies, relay resolution, breaker tolerances, and coordination with remote backup protection. The setting must not be selected solely from the breaker nameplate interrupting time, because the total clearing sequence includes sensing, relay processing, output contacts, trip-coil energization, mechanical travel, and current interruption.

If the breaker opens normally in 65 ms from trip initiation, the 90 ms setting provides approximately 25 ms beyond that observed time. If the breaker-failure signal then trips adjacent breakers, their clearing time must also be included in the overall fault-clearing assessment.

12. Applied Case: Transfer-Bus Operation During Feeder-Breaker Maintenance

This is an illustrative case based on a common substation operating problem.

Background

A 132/33 kV substation has a main bus, a transfer bus, one breaker per 132 kV feeder, and a transfer breaker. Feeder F1 requires breaker maintenance while its feeder must remain energized.

Problem

The engineering team must transfer F1 without losing protection or accidentally connecting the transfer bus to an incompatible source. The main risks are incorrect isolator sequencing, failure to redirect trip commands, and loss of bus-fault protection during the temporary arrangement.

Analysis

The team verifies the approved single-line diagram, breaker and isolator status, CT circuits, protection mode, busbar-zone selection, and DC supply condition. The transfer bus is inspected and confirmed available. The transfer breaker is tested for trip and close operation, and the synchronism-check function is confirmed for the intended live-live closing condition.

Approach and solution

The approved sequence is:

1. confirm F1 is in service and its protection is healthy;
2. confirm the transfer bus is isolated and correctly configured;
3. close the F1 transfer-bus isolator only when interlocks permit;
4. close the transfer breaker under synchronism supervision;
5. verify that F1 current has transferred to the transfer breaker;
6. open F1’s normal breaker;
7. isolate and earth the normal breaker for maintenance;
8. select and verify the transfer protection mode;
9. test the transfer breaker trip path and alarm indications;
10. record the temporary configuration and restrictions.

During maintenance, a fault on F1 must trip the transfer breaker. A fault on the transfer bus must trip all breakers connected to that bus, according to the bus differential design. Breaker-failure logic must also be associated with the transfer breaker while it carries F1.

Outcome

The feeder remains available while the normal breaker is maintained. The temporary protection and interlocking configuration preserves fault-clearing capability and prevents unauthorized switching. After maintenance, the return sequence is performed in reverse, followed by verification of normal protection mode, isolator status, and event/alarm clearance.

Learning points

• topology changes must be reflected in protection logic;
• protection transfer is as important as power-circuit transfer;
• synchronism checking is required for appropriate live-live closing conditions;
• temporary configurations require formal authorization and clear labeling;
• post-maintenance testing must verify the restored normal state.

13. Commissioning, Testing, and Maintenance Practices

A protection and control scheme should be tested from input to final equipment action. Important tests include:

• secondary injection of relay elements;
• verification of CT and VT polarity, ratio, and phase sequence;
• end-to-end testing of communications-assisted protection;
• trip-coil current and trip-time measurements;
• breaker-failure initiation and output tests;
• lockout pickup, seal-in, reset, and blocking tests;
• synchronism-check permissive and blocking tests;
• interlock tests for every permitted and prohibited operation;
• DC failover, charger, battery, and insulation-monitor tests;
• SCADA indication, control, alarm, and time-stamp verification.

Test switches and isolation facilities must be designed so that a relay can be tested without inadvertently tripping in-service equipment. Every temporary link, test plug, and disabled function must be controlled and removed after testing.

14. Limitations, Safety, and Governance

Protection schemes cannot eliminate all risk. They depend on correct design data, instrument-transformer performance, auxiliary power, software configuration, communications, and human operation. Common limitations include:

• CT saturation during high external faults;
• incorrect topology information;
• failed or misleading auxiliary contacts;
• common-mode failure in duplicated systems;
• inadequate battery autonomy;
• unsuitable relay settings after network changes;
• cyber compromise or unauthorized configuration changes.

Engineering governance should require approved settings, independent checking, version control, access management, disturbance review, and documented change control. Operators should never bypass an interlock or lockout without a formally authorized procedure and risk assessment. Safety rules, utility procedures, and applicable national and international standards take precedence over informal practice.

Chapter Summary

Substation protection and control combine fault detection with safe and flexible operation. Common bus arrangements—single bus, sectionalized bus, main-and-transfer bus, double bus, ring bus, and breaker-and-a-half—require different protection-zone definitions and switching logic. Breaker-failure protection detects failure to interrupt after a valid trip and trips surrounding breakers. Trip-circuit supervision monitors the availability of the trip path, while lockout prevents unsafe automatic re-energization after serious faults.

Synchronism checking protects equipment during live-live closing by evaluating voltage, frequency, phase sequence, and phase angle. Interlocking prevents unsafe switching of breakers, isolators, and earthing switches through combinations of mechanical, hardwired, software, and procedural controls. Transfer schemes must preserve protection coverage when circuits are moved to a transfer bus or bus coupler. Station batteries and chargers provide dependable DC energy for protection and control when AC auxiliary supplies may be unavailable.

Modern IED and digital-substation technologies improve information exchange and testing but introduce configuration and cybersecurity responsibilities. Reliable practice requires topology-aware logic, independent trip paths, formal commissioning, disciplined maintenance, and documented operating authority.

Key Terms

Protection zone: Defined portion of the power system covered by a protection function.

Busbar differential protection: Protection that detects faults by comparing currents entering and leaving a bus zone.

Circuit breaker: Switching device capable of interrupting normal and fault current.

Isolator: Switching device used to provide visible isolation, normally not for fault-current interruption.

Earthing switch: Device used to connect isolated equipment to earth.

Bus coupler: Breaker used to connect two bus sections or buses.

Breaker failure: Condition in which a breaker does not interrupt current after a valid trip command.

Trip-circuit supervision: Continuous or periodic monitoring of the breaker trip path.

Lockout relay: Device that trips associated equipment and blocks reclosing until manually or properly reset.

Synchronism check: Function that permits closing only when two electrical systems satisfy specified synchronizing conditions.

Interlocking: Arrangement that prevents prohibited or unsafe switching operations.

Transfer bus: Auxiliary bus used to maintain circuit service while a normal breaker is unavailable.

Station battery: DC energy source supplying critical protection, control, and emergency loads.

DC insulation monitoring: Supervision that detects leakage or earth faults in a DC control system.

CT saturation: Nonlinear CT behavior that causes the secondary current to deviate from the primary current.

Topology: The actual electrical connection arrangement of substation equipment.

IED: Intelligent electronic device that performs protection, control, measurement, or communication functions.

Fail-safe design: Design that places a system in an appropriately safe condition following specified failures.

Review Questions

Short Answer Questions

1. Why are breaker-failure schemes required in high-voltage substations?
2. What functions are commonly monitored by trip-circuit supervision?
3. Why must a synchronism-check relay consider frequency difference?
4. Distinguish a circuit breaker from an isolator.
5. State two important functions of a lockout relay.

Long Answer Questions

1. Explain the protection and operating characteristics of a sectionalized single-bus arrangement.
2. Describe the sequence and logic of a breaker-failure protection scheme.
3. Discuss the principles and limitations of interlocking in a double-bus substation.
4. Explain how a transfer-bus scheme maintains protection during feeder-breaker maintenance.
5. Describe the construction, functions, and testing requirements of a station DC supply system.

Analytical / Application Questions

1. A breaker receives a trip command, but current remains above the breaker-failure threshold after the normal interruption interval. Develop the logical sequence of actions, including lockout and adjacent-breaker tripping.
2. Two energized bus sections are to be connected using a bus coupler. Identify the measurements, interlocks, and permissive conditions that should be verified before closing.
3. During commissioning, an isolator auxiliary contact indicates open while field inspection shows it closed. Analyze the protection, control, and safety consequences and propose a safe response.

Multiple Choice Questions with Answers

Question 1

What is the primary purpose of breaker-failure protection?

A. To increase transformer efficiency

B. To clear a fault when the commanded breaker fails to interrupt

C. To measure bus voltage continuously

D. To regulate generator frequency

Correct Answer: B. To clear a fault when the commanded breaker fails to interrupt

Question 2

Which device is normally intended to provide visible isolation rather than interrupt fault current?

A. Circuit breaker

B. Bus coupler

C. Isolator

D. Lockout relay

Correct Answer: C. Isolator

Question 3

In an ideal healthy bus zone, the phasor sum of currents entering and leaving the bus is approximately

A. Equal to rated current

B. Zero

C. Equal to short-circuit current

D. Equal to transformer magnetizing current

Correct Answer: B. Zero

Question 4

Which function normally prevents unsafe re-energization after a major internal fault?

A. Lockout

B. Synchronism check

C. Voltage regulation

D. Load shedding only

Correct Answer: A. Lockout

Question 5

What condition is primarily checked before closing two energized systems together?

A. Oil temperature only

B. Synchronism

C. Battery electrolyte level only

D. Breaker paint condition

Correct Answer: B. Synchronism

Question 6

For the simplified battery estimate C_Ah = I t, what does t represent?

A. Voltage in volts

B. Current in amperes

C. Time in hours

D. Temperature in degrees Celsius

Correct Answer: C. Time in hours

Question 7

A transfer-bus scheme must ensure that feeder protection trips

A. Only the isolated normal breaker

B. The breaker currently carrying the feeder circuit

C. Every breaker in the station

D. No breaker until manual inspection

Correct Answer: B. The breaker currently carrying the feeder circuit

Question 8

Which condition should an interlock normally prevent?

A. Opening a breaker during a fault

B. Closing an earthing switch onto an energized circuit

C. Monitoring battery voltage

D. Recording relay events

Correct Answer: B. Closing an earthing switch onto an energized circuit

Question 9

If the frequency difference between two systems increases, the phase angle between them changes

A. More rapidly

B. More slowly

C. Not at all

D. Only after the breaker closes

Correct Answer: A. More rapidly

Question 10

What is a major reason for providing station batteries?

A. To replace all power transformers

B. To supply critical protection and control functions when AC auxiliary power fails

C. To eliminate the need for circuit breakers

D. To increase transmission-line frequency

Correct Answer: B. To supply critical protection and control functions when AC auxiliary power fails