IEC 60870-5 protocol in SCADA systems - Deep Dive

Overview - IEC 60870-5 protocol

What is it?

IEC 60870-5 is a set of international standards for communication in electrical power systems. It defines how devices like control centers and substations exchange data reliably and securely. The protocol helps monitor and control electrical grids remotely. It uses specific message formats and rules to ensure clear communication.

Why it matters

Without IEC 60870-5, power systems would struggle to share information quickly and safely. This could lead to delays in detecting faults or controlling equipment, risking blackouts or damage. The protocol ensures that operators can trust the data they receive and respond promptly, keeping the power grid stable and efficient.

Where it fits

Learners should first understand basic networking and serial communication concepts. After IEC 60870-5, they can explore advanced SCADA protocols like DNP3 or IEC 61850. This knowledge fits into the broader study of industrial communication and power system automation.

Mental Model

Core Idea

IEC 60870-5 is a rulebook that makes sure electrical devices talk clearly and safely to manage power systems.

Think of it like...

It's like a postal service for power grids, where every letter (message) has a strict format and delivery rules to avoid confusion and ensure it reaches the right place on time.

┌─────────────────────────────┐
│       IEC 60870-5 Protocol  │
├─────────────┬───────────────┤
│ Layer       │ Function      │
├─────────────┼───────────────┤
│ Application │ Data format & │
│             │ commands      │
├─────────────┼───────────────┤
│ Transport   │ Message       │
│             │ sequencing    │
├─────────────┼───────────────┤
│ Link        │ Frame control │
│             │ & error check │
└─────────────┴───────────────┘

Build-Up - 6 Steps

1

Foundation

Basics of SCADA Communication

Concept: Introduce the idea of SCADA systems and why communication protocols are needed.

SCADA systems control and monitor electrical grids remotely. Devices like sensors and control units need to send data back and forth. Without clear rules, messages could get lost or misunderstood. Protocols like IEC 60870-5 set these rules to keep communication reliable.

Result

Learners understand the need for communication protocols in power system control.

Knowing why communication rules exist helps appreciate the role of IEC 60870-5 in preventing errors and delays.

2

Foundation

Structure of IEC 60870-5 Protocol

Concept: Explain the layered structure and main components of the protocol.

IEC 60870-5 has layers: link layer handles framing and error checking; transport layer manages message sequencing; application layer defines data formats and commands. Each layer has a clear job, working together to send data safely.

Result

Learners see how the protocol organizes communication into manageable parts.

Understanding layers clarifies how complex communication is broken down into simple steps.

3

Intermediate

Types of Data and Commands

🤔Before reading on: do you think IEC 60870-5 only sends simple on/off signals or also complex data? Commit to your answer.

Concept: Introduce different data types and commands used in the protocol.

IEC 60870-5 supports various data types: single bits (like switch status), measured values (like voltage), and commands (like open a breaker). It also defines how to request data or send control instructions. This variety allows detailed monitoring and control.

Result

Learners recognize the protocol's flexibility in handling different power system data.

Knowing data types helps understand how the protocol supports both monitoring and control functions.

4

Intermediate

Communication Modes and Timing

🤔Before reading on: do you think IEC 60870-5 devices communicate only when asked or can they send data spontaneously? Commit to your answer.

Concept: Explain how devices communicate: either by request or spontaneously, and timing rules.

IEC 60870-5 supports two modes: balanced (master asks slave for data) and unbalanced (slave can send data spontaneously). Timing rules ensure messages don't collide and are processed in order. This keeps communication efficient and predictable.

Result

Learners understand how communication flow is controlled to avoid confusion.

Understanding modes and timing reveals how the protocol balances control and responsiveness.

5

Advanced

Error Detection and Recovery

🤔Before reading on: do you think IEC 60870-5 can detect all errors or only some? Commit to your answer.

Concept: Show how the protocol detects errors and recovers from them to maintain data integrity.

The link layer uses checksums to detect errors in frames. If an error is found, the receiver requests retransmission. Sequence numbers track message order. These mechanisms ensure that corrupted or lost messages don't cause wrong actions.

Result

Learners see how IEC 60870-5 maintains reliable communication even over noisy links.

Knowing error handling prevents surprises when messages fail and explains protocol robustness.

6

Expert

Security and Modern Adaptations

🤔Before reading on: do you think IEC 60870-5 includes built-in encryption? Commit to your answer.

Concept: Discuss the protocol's original lack of security and how modern systems add protections.

IEC 60870-5 was designed before cybersecurity was a major concern, so it lacks built-in encryption or authentication. Modern SCADA systems add security layers like VPNs, firewalls, or newer protocols (IEC 62351) to protect data. Understanding this helps design safer power networks.

Result

Learners grasp the security challenges and solutions around IEC 60870-5 in today's environment.

Recognizing security gaps guides better system design and risk management.

Under the Hood

IEC 60870-5 works by layering communication tasks: the link layer frames data with start/stop bits and checksums, the transport layer manages message order and retransmission, and the application layer formats commands and data types. Devices use fixed addresses and sequence numbers to track conversations. This layered approach ensures messages are complete, correct, and understood.

Why designed this way?

The protocol was created in the 1990s when serial communication was common and networks were less reliable. Layering separated concerns, making it easier to fix errors and add features. Alternatives like proprietary protocols lacked standardization, so IEC 60870-5 was adopted internationally to unify power system communication.

┌───────────────┐
│ Application   │
│ - Data types  │
│ - Commands    │
├───────────────┤
│ Transport     │
│ - Sequencing  │
│ - Retransmit  │
├───────────────┤
│ Link Layer    │
│ - Framing     │
│ - Checksum    │
└─────┬─────────┘
      │
      ▼
┌───────────────┐
│ Physical Layer │
│ - Serial/Ethernet │
└───────────────┘

Myth Busters - 4 Common Misconceptions

Quick: Does IEC 60870-5 include strong encryption by default? Commit to yes or no.

Common Belief: IEC 60870-5 has built-in encryption and strong security features.

Reality: The original IEC 60870-5 protocol does not include encryption or authentication mechanisms.

Why it matters: Assuming built-in security leads to vulnerable systems exposed to cyberattacks.

Quick: Is IEC 60870-5 only for sending simple on/off signals? Commit to yes or no.

Common Belief: IEC 60870-5 only handles basic binary signals like switch states.

Reality: It supports complex data types including measured values, time stamps, and control commands.

Why it matters: Underestimating data types limits system design and misses protocol capabilities.

Quick: Can IEC 60870-5 devices send data without being asked? Commit to yes or no.

Common Belief: Devices only send data when the master requests it.

Reality: IEC 60870-5 supports spontaneous data transmission from devices in unbalanced mode.

Why it matters: Ignoring spontaneous mode can cause delays in fault detection and response.

Quick: Does IEC 60870-5 work only over serial lines? Commit to yes or no.

Common Belief: IEC 60870-5 only works on serial communication links.

Reality: While originally designed for serial, it can run over Ethernet and other networks with adaptations.

Why it matters: Believing it is limited to serial restricts modernization and integration options.

Expert Zone

1

Sequence numbers in transport layer prevent replay attacks but require careful synchronization.

2

Spontaneous transmission mode improves responsiveness but increases network traffic and complexity.

3

Interoperability depends on strict adherence to standard data types and addressing schemes, which varies in real devices.

When NOT to use

IEC 60870-5 is not ideal for high-speed or complex automation requiring rich data models; newer protocols like IEC 61850 or DNP3 with built-in security and Ethernet support are better alternatives.

Production Patterns

In real systems, IEC 60870-5 is often combined with VPNs and firewalls for security, uses master-slave polling with spontaneous messages for fault reporting, and integrates with modern SCADA software via protocol converters or gateways.

Connections

OSI Model

IEC 60870-5 layers map closely to OSI layers 2-7

Understanding OSI helps grasp how IEC 60870-5 separates framing, transport, and application tasks.

Cybersecurity in Industrial Control Systems

IEC 60870-5's lack of built-in security highlights the need for external cybersecurity measures

Knowing IEC 60870-5's limits guides better defense strategies in critical infrastructure.

Postal Service Logistics

Both use strict addressing, sequencing, and error checking to ensure correct delivery

Recognizing this pattern helps understand how communication protocols guarantee message integrity.

Common Pitfalls

#1 Assuming IEC 60870-5 messages are secure by default

Wrong approach:

Deploying IEC 60870-5 devices directly on public networks without encryption or authentication

Correct approach:

Use VPNs, firewalls, or IEC 62351 security extensions to protect IEC 60870-5 communication

Root cause:

Misunderstanding that IEC 60870-5 was designed before modern cybersecurity needs.

#2 Ignoring spontaneous message mode

Wrong approach:

Configuring all devices to only respond to polling requests, missing spontaneous events

Correct approach:

Enable spontaneous transmission for timely fault and event reporting

Root cause:

Belief that master-only polling is the only communication mode.

#3 Using IEC 60870-5 for high-speed automation tasks

Wrong approach:

Relying on IEC 60870-5 for real-time control requiring millisecond response times

Correct approach:

Use protocols like IEC 61850 designed for fast, complex automation

Root cause:

Not recognizing protocol limitations in speed and data complexity.

Key Takeaways

IEC 60870-5 is a foundational protocol enabling reliable communication in electrical power systems through layered message handling.

It supports various data types and communication modes, balancing control and responsiveness in SCADA networks.

The protocol lacks built-in security, so modern systems must add protections to safeguard critical infrastructure.

Understanding IEC 60870-5's design and limitations helps choose the right tools and configurations for power system automation.

Real-world use combines IEC 60870-5 with security layers and newer protocols to maintain safe, efficient grid operations.

Practice

1. What is the primary purpose of the IEC 60870-5 protocol in SCADA systems?

easy

A. To encrypt data for secure internet browsing

B. To store historical data in databases

C. To enable communication between power system devices

D. To provide user interface design standards

Solution

1. Step 1: Understand the protocol's role

   IEC 60870-5 is designed for communication in power systems, connecting devices like RTUs and control centers.

2. Step 2: Eliminate unrelated options

   Options about databases, UI design, and internet encryption do not relate to device communication in power systems.

3. Final Answer:

   To enable communication between power system devices -> Option C

4. Quick Check:

   IEC 60870-5 = communication protocol [OK]

Hint: Remember: IEC 60870-5 connects power devices [OK]

Common Mistakes:

• Confusing communication protocol with data storage
• Thinking it handles user interface design
• Assuming it encrypts internet data

2. Which of the following is a correct characteristic of IEC 60870-5 protocol messages?

easy

A. They include structured fields for data and commands

B. They only support wireless communication

C. They use unstructured free text for data

D. They require manual data entry at each device

Solution

1. Step 1: Recall message format

   IEC 60870-5 messages have structured fields to clearly define data and commands.

2. Step 2: Check other options

   Unstructured text, wireless-only support, and manual data entry are incorrect for this protocol.

3. Final Answer:

   They include structured fields for data and commands -> Option A

4. Quick Check:

   Structured messages = They include structured fields for data and commands [OK]

Hint: Look for 'structured fields' in message descriptions [OK]

Common Mistakes:

• Assuming messages are free text
• Believing protocol only supports wireless
• Thinking manual entry is required

3. Given a device using IEC 60870-5-101 protocol, which communication method is it most likely using?

medium

A. Wireless Wi-Fi communication

B. Bluetooth low energy

C. Internet Protocol (IP) over Ethernet

D. Serial communication over RS-232 or RS-485

Solution

1. Step 1: Identify protocol version

   IEC 60870-5-101 is designed for serial communication using RS-232 or RS-485 interfaces.

2. Step 2: Compare options

   Wi-Fi, IP over Ethernet, and Bluetooth are not typical for 101 version; those relate more to 104 or other protocols.

3. Final Answer:

   Serial communication over RS-232 or RS-485 -> Option D

4. Quick Check:

   60870-5-101 = serial comm [OK]

Hint: 101 version means serial communication [OK]

Common Mistakes:

• Confusing 101 with 104 (network-based)
• Assuming wireless communication
• Selecting Ethernet/IP for 101

4. A SCADA engineer configures an IEC 60870-5-104 device but cannot establish communication. The device is set to use serial port settings. What is the likely issue?

medium

A. The serial port baud rate is too high for 104 protocol

B. The device should be configured for network (TCP/IP) communication, not serial

C. The device requires manual data entry to start communication

D. The IEC 60870-5-104 protocol does not support communication

Solution

1. Step 1: Understand protocol communication type

   IEC 60870-5-104 uses network communication over TCP/IP, not serial ports.

2. Step 2: Identify misconfiguration

   Configuring 104 device for serial communication causes failure; it must use network settings.

3. Final Answer:

   The device should be configured for network (TCP/IP) communication, not serial -> Option B

4. Quick Check:

   104 = network, not serial [OK]

Hint: 104 protocol requires TCP/IP network setup [OK]

Common Mistakes:

• Trying to use serial settings with 104
• Changing baud rate unnecessarily
• Thinking manual data entry is needed

5. You need to design a SCADA communication system that supports both serial and network devices using IEC 60870-5 protocols. Which approach best ensures compatibility?

hard

A. Use IEC 60870-5-101 for serial devices and IEC 60870-5-104 for network devices

B. Use only IEC 60870-5-104 for all devices regardless of connection type

C. Use IEC 60870-5-101 for network devices and IEC 60870-5-104 for serial devices

D. Use a custom protocol to replace IEC 60870-5 entirely

Solution

1. Step 1: Identify protocol roles

   IEC 60870-5-101 is designed for serial communication; 104 is designed for network (TCP/IP) communication.

2. Step 2: Match protocols to device types

   Using 101 for serial and 104 for network devices ensures compatibility and proper communication.

3. Step 3: Evaluate other options

   Using only 104 ignores serial devices; swapping roles is incorrect; custom protocol is unnecessary.

4. Final Answer:

   Use IEC 60870-5-101 for serial devices and IEC 60870-5-104 for network devices -> Option A

5. Quick Check:

   101 = serial, 104 = network [OK]

Hint: Match 101 to serial, 104 to network devices [OK]

Common Mistakes:

• Using 104 for serial devices
• Ignoring serial device support
• Trying to replace IEC 60870-5 unnecessarily