GE G60 UR Series, Instruction Manual

Page: 432 / 634

8-4 G60 Generator Protection System GE Multilin
8.1 PASSWORD SECURITY 8 SECURITY
8
The following access supervision settings are available.
• INVALID ATTEMPTS BEFORE LOCKOUT : This setting specifies the number of times an incorrect password can be
entered within a three-minute time span before lockout occurs. When lockout occurs, the
LOCAL ACCESS DENIED
and
REMOTE ACCESS DENIED
FlexLogic™ operands are set to “On”. These operands are returned to the “Off” state upon
expiration of the lockout.
• PASSWORD LOCKOUT DURATION : This setting specifies the time that the G60 will lockout password access after
the number of invalid password entries specified by the
INVALID ATTEMPS BEFORE LOCKOUT
setting has occurred.
The G60 provides a means to raise an alarm upon failed password entry. Should password verification fail while accessing
a password-protected level of the relay (either settings or commands), the
UNAUTHORIZED ACCESS
FlexLogic™ operand is
asserted. The operand can be programmed to raise an alarm via contact outputs or communications. This feature can be
used to protect against both unauthorized and accidental access attempts.
The
UNAUTHORIZED ACCESS
operand is reset with the
COMMANDS
ÖØ
CLEAR RECORDS
ÖØ
RESET UNAUTHORIZED
ALARMS
command. Therefore, to apply this feature with security, the command level should be password-protected. The
operand does not generate events or targets.
If events or targets are required, the
UNAUTHORIZED ACCESS
operand can be assigned to a digital element programmed
with event logs or targets enabled.
The access level timeout settings are shown below.
PATH: SETTINGS
Ö
PRODUCT SETUP
Ö
SECURITY
ÖØ
ACCESS SUPERVISION
Ö
ACCESS LEVEL TIMEOUTS
These settings allow the user to specify the length of inactivity required before returning to the restricted access level. Note
that the access level will set as restricted if control power is cycled.
• COMMAND LEVEL ACCESS TIMEOUT : This setting specifies the length of inactivity (no local or remote access)
required to return to restricted access from the command password level.
• SETTING LEVEL ACCESS TIMEOUT : This setting specifies the length of inactivity (no local or remote access)
required to return to restricted access from the command password level.
8.1.6 DUAL PERMISSION SECURITY ACCESS
PATH: SETTINGS
Ö
PRODUCT SETUP
Ö
SECURITY
ÖØ
DUAL PERMISSION SECURITY ACCESS
The dual permission security access feature provides a mechanism for customers to prevent unauthorized or unintended
upload of settings to a relay through the local or remote interfaces interface.
The following settings are available through the local (front panel) interface only.
• LOCAL SETTING AUTH : This setting is used for local (front panel or RS232 interface) setting access supervision.
Valid values for the FlexLogic™ operands are either “On” (default) or any physical “Contact Input ~~ On” value.
If this setting is “On“, then local setting access functions as normal; that is, a local setting password is required. If this
setting is any contact input on FlexLogic™ operand, then the operand must be asserted (set as on) prior to providing
the local setting password to gain setting access.
„
ACCESS LEVEL
„
TIMEOUTS
COMMAND LEVEL ACCESS
TIMEOUT: 5 min
Range: 5 to 480 minutes in steps of 1
MESSAGE
SETTING LEVEL ACCESS
TIMEOUT: 30 min
Range: 5 to 480 minutes in steps of 1
„
DUAL PERMISSION
„
SECURITY ACCESS
LOCAL SETTING AUTH:
On
Range: selected FlexLogic™ operands (see below)
MESSAGE
REMOTE SETTING AUTH:
On
Range: FlexLogic™ operand
MESSAGE
ACCESS AUTH
TIMEOUT: 30 min.
Range: 5 to 480 minutes in steps of 1