Microprocessor Protection Relay

What a Microprocessor Protection Relay Is

A protective relay is a device that detects an abnormal condition on the power system and commands a circuit breaker to open, isolating the faulted equipment before damage spreads or personnel are endangered. The microprocessor protection relay is the modern realization of this function: it digitizes the secondary current and voltage from instrument transformers, processes the samples with a microprocessor or digital signal processor, compares the measured quantities against engineer-defined settings, and issues a trip through an output contact. Because the logic lives in firmware rather than in springs, magnets, and discs, one relay can implement many protection functions simultaneously and adapt to different applications through settings alone.

The signal chain inside the relay has four stages. First, an analog input stage scales the current transformer (CT) and voltage transformer (VT) secondary signals through internal transformers and anti-aliasing filters. Second, an analog-to-digital converter samples each channel at a fixed rate, commonly a few thousand samples per second per channel, synchronized to the power frequency. Third, the protection processor computes phasors, RMS values, symmetrical components, harmonics, and impedance, then runs each enabled protection element. Fourth, when an element picks up and its time condition is satisfied, the relay energizes a trip output, asserts targets and event records, and publishes status to the substation network.

This architecture distinguishes a protective relay from an ordinary monitoring meter. A meter reports a value; a protective relay must take a guaranteed, time-critical action under the worst conditions the system can produce: deep voltage sags, saturated CTs, DC offset in the fault current, electromagnetic interference from nearby breakers, and battery-supply transients. The relay must operate correctly during these disturbances and must also be secure, meaning it must not trip when there is no fault. The balance between dependability (always trip on a real fault) and security (never trip without one) is the central engineering tension in protection, and numerical relays manage it with restraint characteristics, blocking logic, and supervision elements that were impractical in earlier technology.

The commercial milestone for this technology was 1984, when Schweitzer Engineering Laboratories introduced the first commercial digital protective relay, replacing analog measuring circuits with a microprocessor. Over the following decades, faster processors allowed a single relay to host an entire protection scheme, add oscillography, integrate control and metering, and finally connect to the station automation network. Today a numerical relay is a standard building block of every new substation and most industrial switchgear lineups, and the installed base of electromechanical relays is steadily being retrofitted.

Three engineering properties define a good numerical relay across its service life: speed (how quickly it isolates a fault to limit equipment damage and preserve system stability), selectivity (its ability to trip only the breaker nearest the fault so the rest of the network stays energized), and reliability (the combination of dependability and security, backed by continuous self-monitoring). A relay that trips fast but nuisance-trips on inrush, or one that is secure but slow, is unfit for its duty. These properties, not the feature count on the brochure, determine whether the relay protects the asset it was bought to guard.

Relay Generations and Classification

Protective relays evolved through four technology generations. Understanding them clarifies why the numerical relay behaves as it does and what it replaced. The first generation, electromechanical, used electromagnetic coils, induction discs, and moving contacts to respond to overcurrent, overvoltage, and reverse power. The second generation, static or solid-state, replaced moving parts with transistor and operational-amplifier circuits, offering higher sensitivity and no contact bounce. The third generation, digital, introduced commercially in 1984, converted the analog quantities to digital form for microprocessor analysis. The fourth generation, numerical, uses high-speed digital signal processors running specialized algorithms, typically multifunctional with multiple setting groups and full communication.

Beyond generation, numerical relays are classified by the object they protect, which is the practical axis for selection because a relay's algorithm set is tailored to its protected equipment. The main families are feeder protection relays, transformer protection relays, motor protection relays, generator protection relays, line distance and line differential relays, and busbar protection relays. A feeder relay leads with directional and non-directional overcurrent and earth fault; a transformer relay centers on percentage differential with harmonic restraint to ride through magnetizing inrush; a motor relay adds thermal, locked-rotor, and unbalance protection; a line relay adds distance or current-differential schemes with communication-assisted tripping.

Feeder protection relays are the most common numerical relay in distribution. Representative multifunction products include the Schweitzer Engineering Laboratories SEL-751, the ABB Relion REF615 and REF620, the Siemens SIPROTEC 5 7SJ85 and the compact 7SJ82, the Schneider Electric MiCOM P14x family, and the GE Multilin 750. These integrate phase and ground overcurrent, directional elements, auto-reclose, breaker failure, and metering in a single panel-mounted unit, and most support IEC 61850, Modbus, and DNP3 communication.

Transformer protection relays implement ANSI 87T percentage differential, which compares the current entering and leaving the transformer after correcting for turns ratio and vector group. Second-harmonic restraint blocks tripping during inrush, and fifth-harmonic restraint guards against overexcitation. Representative products are the SEL-487E, the Siemens 7UT85, and the ABB RET615 and RET670. Line distance relays (ANSI 21) respond to the apparent impedance seen from the relay location, reaching a defined percentage of the line; the SEL-411L, Siemens 7SA87, and ABB REL670 are typical transmission-class examples. Choosing the right family first narrows the selection to a handful of catalog models before any setting work begins.

A further classification axis is single-function versus multifunction. Single-function relays still exist for simple or retrofit duties, for example a dedicated earth-fault relay or a standalone synchronism-check relay. Multifunction IEDs dominate new build because consolidating functions reduces panel space, wiring, and inventory, and because one device can coordinate its internal elements with shared logic and a common event record. The trade-off is that a single hardware failure removes several protection functions at once, which is why critical assets often use two independent relays from different platforms for main and backup protection.

Protection Functions and ANSI Device Numbers

Every protection function is identified by an ANSI device number from the IEEE C37.2 standard, a numbering scheme so universal that protection engineers speak in numbers: a 50/51 relay, an 87T scheme, a 27/59 element. The number defines the function and an optional suffix defines the application or measured quantity, for example 50N for a neutral instantaneous overcurrent and 87T for a transformer differential. A numerical relay datasheet expresses its capability as a function block diagram listing every ANSI number it can perform. The table below decodes the device numbers most often found on feeder, transformer, motor, and line relays.

Overcurrent protection (50 and 51) is the foundation of distribution protection. The instantaneous element (50) trips with essentially no intentional delay when current exceeds a high set point, clearing close-in bolted faults fast. The time-overcurrent element (51) follows an inverse-time curve so that the larger the fault current, the faster it trips, allowing downstream relays and fuses to clear first and preserving selectivity. The inverse-time curve shapes are standardized, IEC 60255 defines standard inverse, very inverse, and extremely inverse curves, and IEEE defines moderately, very, and extremely inverse curves, selected by setting in the relay.

Directional overcurrent (67) adds a direction decision by comparing the fault current phasor against a polarizing voltage, so the relay trips only for faults flowing in the intended direction. This is essential on parallel feeders, ring mains, and any network where current can flow both ways. Earth-fault protection (50N, 51N, or sensitive earth fault) measures residual or neutral current to detect ground faults that the phase elements may not see, particularly on impedance-grounded systems where ground-fault current is deliberately limited.

Differential protection (87) is the most selective scheme: it sums the currents entering and leaving a protected zone, which should be zero for any external fault or normal load, and trips on the difference produced by an internal fault. Transformer differential (87T) corrects for the turns ratio and vector-group phase shift and uses harmonic restraint to avoid tripping on inrush. Differential schemes are inherently selective because the zone boundary is defined by the CT locations, not by current magnitude or time grading, so they trip fast for any fault inside the zone and not at all for faults outside it.

Voltage and frequency functions round out the set. Undervoltage (27) and overvoltage (59) protect against abnormal voltage that endangers motors and insulation, and frequency (81) elements trip or shed load on under and over frequency, supporting grid stability. Supervisory functions, synchronism check (25) before closing, auto-reclose (79) after a transient fault, breaker failure (50BF) if a breaker does not open, and the lockout (86) that latches a trip, are all implemented in firmware in a numerical relay rather than as separate panel devices.

Standards: IEC 60255, IEC 61850, IEEE C37

Two standards families govern a numerical relay and they answer different questions. The IEC 60255 series specifies how the relay must perform, be type-tested, and remain safe; it is a product standard. IEC 61850 specifies how the relay communicates with the rest of the substation; it is a communication standard. A relay typically complies with both at once. On top of these sit the IEEE C37 series, widely cited in North America, covering device numbering, surge withstand, and relay test procedures. Reading a datasheet means checking that the standards claimed match the duty.

The IEC 60255 series is structured so that the part numbers in the 100s define individual protection functions. IEC 60255-127 covers over and undervoltage, IEC 60255-149 covers thermal relays, and IEC 60255-121 covers distance protection. The IEC 60255-187 sub-series covers differential protection: IEC 60255-187-1 addresses restrained and unrestrained differential protection of motors, generators, and transformers, while IEC 60255-187-3 addresses biased (percentage) differential protection of transmission lines. The general and type-test parts, IEC 60255-1 for common requirements, IEC 60255-26 for EMC, and IEC 60255-27 for product safety, apply to every relay regardless of function.

IEC 61850 is the communication backbone of the modern substation. Its GOOSE messages (Generic Object-Oriented Substation Event) carry time-critical trip, interlock, and blocking signals between relays over Ethernet using a publisher-subscriber model. For the highest performance classes (P2 and P3), the standard targets a total transmission time of about 3 milliseconds, fast enough to replace hard-wired trip and blocking schemes. IEC 61850-9-2 defines sampled values for a process bus that digitizes CT and VT signals at the source; the widely used 9-2 LE profile specifies an 80-samples-per-cycle rate, which is 4.8 kHz at 60 Hz with a 208 microsecond sample interval. IEC 61850 also defines a standardized data model so relays from different vendors interoperate.

IEEE C37.90.1 defines the surge withstand capability (SWC) and electrical fast transient (EFT) tests that prove a relay survives the repetitive transients present on substation supply, control, and communication wiring. It specifies a slow damped oscillatory test and a fast transient burst test, establishing a reproducible basis for evaluating immunity. Together with the IEC 60255-26 EMC requirements, these tests are what let a relay operate reliably inside the electrically hostile environment of a switchyard. A datasheet that omits surge and EMC type-test references should be treated with caution for any utility or heavy-industrial application.

Functional safety adds another layer for some duties. Where a protection function forms part of a safety instrumented system, the relevant relay and scheme may need to demonstrate a safety integrity level (SIL) under IEC 61508, with documented failure-rate data. This is common in oil, gas, and process plants where a protection trip is also a process safeguard. The point for selection is that standards compliance is not a single checkbox: confirm the function standard, the EMC and safety type tests, the communication profile, and, where relevant, the functional-safety rating, all against the specific application.

Key Specification Parameters

A numerical relay datasheet can run to dozens of pages, but a manageable set of parameters drives selection: rated current and frequency of the inputs, voltage input rating, thermal withstand, auxiliary power supply range, measurement accuracy, operating temperature, ingress protection, communication protocols, and the protection function list. The comparison table below shows representative input and environmental figures for two widely deployed feeder relays, illustrating the ranges to expect; always confirm against the current datasheet for the exact ordering option.

Rated current and frequency. CT secondaries are standardized at 1 A or 5 A, and the relay is ordered or configured for one. The 5 A standard is common in North America and for short CT cable runs; 1 A lowers the burden over long cable distances and is common in IEC markets. Rated frequency is 50 Hz or 60 Hz, usually selectable. The current inputs must survive fault current, so check the continuous thermal rating (often around 4 times rated) and the short-time withstand (commonly on the order of 100 times rated for one second), because the relay endures fault current until the breaker clears.

Voltage inputs and accuracy. Voltage channels are typically rated for 100 to 120 V from the VT secondary. Metering accuracy on numerical relays is usually a fraction of a percent of reading for current and voltage, with the protection elements specified separately by pickup accuracy and timing accuracy, for example a pickup tolerance of a few percent and a timing accuracy of a small percentage or a few milliseconds. Do not confuse revenue-metering accuracy with protection accuracy: a relay good enough to trip is not necessarily a billing-grade meter, and dedicated power-metering or energy-metering classes apply where revenue accuracy is required.

Auxiliary supply and environment. Wide-range switching supplies let one model accept a substation battery and AC control power, with ordering options such as 24 to 60 V DC and 48 to 250 V DC, the upper range often also accepting 100 to 240 V AC as on the REF615. Operating temperature must match the cubicle: the SEL-751 is rated for -40 to +85 degrees Celsius, while many IEC relays specify continuous operation across a narrower band such as -25 to +55 degrees with wider transient and storage limits. Confirm the ingress rating, frequently IP54 at the front and IP20 at the rear, and the EMC and surge type tests under IEC 60255-26 and IEEE C37.90.1.

Operate speed and timing. The instantaneous element (50) typically trips in under one cycle, roughly 16 to 20 milliseconds at 50 or 60 Hz, with high-set elements reaching a quarter to a half cycle. The time-overcurrent element (51) is intentionally delayed by its inverse-time curve to achieve coordination, with grading intervals on the order of 0.15 to 0.3 seconds between successive devices. When relays trade trip and blocking signals over IEC 61850 GOOSE, the message transfer for the P2 and P3 classes is targeted below about 3 milliseconds. Total clearing time always adds output-contact closing and breaker clearing to the element operate time.

Communication and records. Modern relays speak IEC 61850 (including GOOSE and, on process-bus relays, sampled values), plus legacy DNP3 and Modbus, over copper RS-485 or fiber Ethernet, often with redundant ports (PRP or HSR) for availability. Beyond protection, expect multiple setting groups for changing network configurations, sequential event recording with a time stamp resolution of about 1 millisecond, disturbance (oscillography) recording for post-fault analysis, time synchronization by IRIG-B or IEEE 1588 PTP, and continuous self-supervision that raises an alarm and an internal-failure contact if the relay detects its own fault. These features turn the relay into the substation's primary data source as well as its protection.

Selection Decision Factors

Selecting a numerical relay is a top-down process: define what is being protected, then the functions it requires, then the standards and hardware that support it, and only then a specific model. Most selection errors come from skipping the protected-object step and starting from a familiar part number. The ordered checklist below works as a fixed RFQ template for feeder, transformer, motor, and line applications.

1. Protected object and relay family: Decide first whether you are protecting a feeder, transformer, motor, generator, busbar, or line. This selects the relay family (feeder relay, 87T transformer relay, motor relay, distance or line-differential relay) before any other choice and narrows the catalog to a few models.
2. Required protection functions (ANSI numbers): List every function the protected object needs, for example 50/51, 50N/51N, 67, 46, 27/59, 81, 79, 86 for a feeder, or 87T with harmonic restraint plus 49 and 50/51 backup for a transformer. Confirm each appears in the relay function block diagram.
3. Input ratings and CT/VT matching: Match rated current (1 A or 5 A) to the installed CT secondaries, confirm 50 or 60 Hz, the voltage input rating, and verify the current-input thermal and short-time withstand against the system fault level so the relay survives until the breaker clears.
4. Standards and certifications: Verify the function standard (IEC 60255-127, -149, -121, -187 as applicable), the EMC and safety type tests (IEC 60255-26, IEC 60255-27, IEEE C37.90.1 surge), and, where a protection trip is also a process safeguard, the functional-safety rating (SIL under IEC 61508).
5. Communication and integration: Confirm the substation protocol (IEC 61850 with GOOSE and, for process bus, sampled values; or DNP3 and Modbus for legacy systems), the physical media (RS-485 or fiber Ethernet), redundancy (PRP or HSR), and time synchronization (IRIG-B or PTP).
6. Auxiliary supply and environment: Order the power-supply range that matches the station battery or control power, and confirm the operating temperature, ingress rating, and vibration class match the cubicle and site. Outdoor or harsh-environment installations need wider temperature and higher ingress ratings.
7. Hardware I/O and logic capacity: Verify input/output contact counts and ratings, programmable logic capacity, the number of setting groups, fault-record depth, and front-panel HMI requirements against the scheme drawings before fixing the order code.
8. Total cost of ownership: Weigh purchase price against engineering tool licensing, commissioning effort, spare-part and firmware support over a 15 to 20 year asset life, and the cost of standardizing on one platform across a fleet to simplify settings, testing, and training.

One dimension that is easy to overlook at the purchasing stage but dominates the lifecycle is manufacturer support and platform standardization: the quality and licensing of the configuration software (such as SEL AcSELerator, Siemens DIGSI 5, ABB PCM600, or Schneider EcoStruxure tools), local availability of test equipment and trained engineers, firmware-update and cybersecurity patch policy, and the duration of spare-part availability. A protection relay is in service for 15 to 20 years, so a platform that is well supported and standardized across your substations will cost far less to own than the cheapest box that requires bespoke tooling and scarce expertise. For utility and critical-industrial projects, the established platforms from Schweitzer Engineering Laboratories, Siemens, ABB, Schneider Electric, and GE, along with major Chinese suppliers such as NR Electric, Sifang, and XJ Group for the Asian market, all offer documented standards compliance and long-term support.