Power Transformer Protection Schemes That Prevent Failure

For the protection scheme of power transformers to really work, it is necessary to cleverly link ratio differential protection (87T), restrictive ground fault protection (87N), and early mechanical fault detection devices such as gas (Buchholz) relays. Only in this way can internal faults be quickly isolated within 50 milliseconds. If you still cling to the same old default settings when dealing with a serious internal short circuit, the result will either be frequent false trips or catastrophic delayed resection. As a senior electrical engineer, we must make a precise distinction when configuring these solutions: what is a true internal fault, what is an excitation surge, and what is an external traversal fault. Next, let’s break it down and explain the specific configuration parameters, the algorithmic defense mechanism to resist CT saturation, and how veteran substation designers use the modern IEC 61850 process layer bus to completely eliminate the vicious accident of physical explosion of fuel tanks.

Three-Layer Electromechanical And Digital Defense Pyramid

Substation designers usually build transformer protection into an extremely strict hierarchical structure. This structure can both ensure high-speed fault excision in the event of a severe short circuit and provide a predictive warning of slowly deteriorating insulation aging.

Layer 1: High-speed unit electrical defense

This is the most core defense line. When a phase-to-phase or ground fault occurs inside the transformer, it instantly isolates the transformer from the grid. The action time here is a hard indicator and must be strictly controlled within 1 to 2 cycles (16-32 milliseconds).

Second layer: mechanical and backup electrical bottom line

When the main electrical protection fails, or a slowly evolving fault like an inter-turn short circuit generates insufficient current to trigger the first layer of protection, the backup system intervenes decisively.

Layer 3: Predictive digital diagnostics

Main Transformer Protection Plan: Don’t Be Fooled By The Fixed Values In Textbooks

Differential protection (87T) and harmonic locking traps

Ratio differential protection is definitely transformer safe “Dinghai Shenzhen”. Its logic is simple: contrast the current flowing into the primary side winding and the current flowing out of the secondary side winding. If the accounts don’t match (a difference occurs), something is wrong internally.
But when configuring modern low-loss transformers with surge brake set values, engineers often fall into a big hole. The second harmonic content in the surge generated when the old transformer is closed is extremely high, basically above 20%. Therefore, in the past, everyone habitually set the second harmonic locking threshold at 15% to prevent accidental tripping when closing with no load. However, the second harmonic current of modern amorphous alloy core transformers when closed is pitifully low ——sometimes less than 10%. At this time, if you still set the threshold at 15%, the protection device will foolishly regard the surge as an internal fault and directly give you an unnecessary power outage.
How to break the deadlock? The current approach of substation designers is to abandon pure harmonic locking and use harmonic braking algorithms instead, combined with waveform recognition technology (such as the interrupted angle method). This combination punch can keenly capture the asymmetric gaps in the surge waveform, which not only ensures stability during closing, but also does not slow down the removal of real faults.

Restricted Ground Fault (REF) Protection (87N) Optimization

Conventional differential protection has a soft rib, which is that it is not sensitive enough to ground faults near the neutral point of the star-wired winding. Because the drive voltage at that location is too low, the fault current will drop off in a cliff-like manner. The REF solution focuses specifically on zero-sequence current, and can even detect ground faults that occur within the last 5% to 10% winding range near the neutral point.
There is a hard requirement here: engineers must match the characteristics of the neutral point current transformer (CT) and the phase CT tightly. If a high-resistance REF scheme is used, the magnetization characteristics of the CT must be completely consistent, otherwise the protection is very likely to be misactivated if a large-scale ground fault occurs externally.

Scheme Type	Target Fault Type	Winding Coverage %	Response Speed	CT Matching Requirements
87T Transformer Differential Protection	Phase-to-phase faults, phase-to-ground faults, and internal winding faults across transformer zones	Typically detects faults across most of the winding, but reduced sensitivity near the neutral point	Fast operation (typically within milliseconds)	Requires matched phase CT ratios and accurate differential current balance
87N Restricted Earth Fault (REF) Protection	Low-level internal ground faults near the neutral point of star-connected windings	Covers the final 5–10% of winding near the neutral, where conventional differential protection may be less sensitive	Extremely fast operation for internal earth faults	Requires closely matched phase CTs and neutral CTs with similar magnetization characteristics, especially for high-impedance REF schemes

Expert Pit Avoidance Guide: Preventing Disasters Caused By CT Saturation

An external traversal fault will allow a large amount of current to pass through the transformer (although the fault point is not internal). If this extreme current does not move, it will saturate “hold” the current transformer. Once the CT is saturated, it is impossible to accurately restore the current on the primary side, and the secondary signals transmitted to the protection device are all distorted. When the relay saw that there was a false differential current, it directly jumped a transformer with a good end.
Field tests on heavy industrial power grids have long demonstrated that simple ratio braking curves alone are simply unreliable in the presence of deep transient saturation. To prevent this false trip, protection engineers have figured out a new approach: introducing a dual-slope braking feature and binding a negative-sequence current direction element. This negative sequence element can quickly confirm whether the fault is internal or external within a quarter of a cycle, and decisively lock the differential trip outlet before the CT is completely saturated.

Practical case: Anti-accidental jump defense battle at a 400kV substation

During the most recent renovation and upgrade of a 400/132kV transmission substation, fault recording data revealed a headache: a 315MVA autotransformer frequently and inexplicably jumped when an external fault occurred downstream. The engineering team retrieved the COMTRADE file for analysis, and the truth came out: the severe DC component offset caused transient saturation of the CT on the 132kV side. After finding the root cause of the problem, the team decisively disabled traditional harmonic locking and replaced it with a set of external fault detection (EFD) algorithms based on the rate of change of differential current and braking current (di/dt vs. ib/dt). The results were very impressive: over the next 18 months, the power grid had to endure five serious traversal failures, and this main transformation did not accidentally jump once. Roughly speaking, it directly saved the power grid about $2.4 million in power outage fines.

Early Failure Prevention: Giving Equal Weight To Mechanical And Thermal Solutions

Electrical relays focus on power imbalance, while mechanical relay tubes focus on physical hardware degradation. The two-pronged approach is absolute asset protection.

Linkage of gas relay (Buchholz) with dissolved gas data

The gas relay is generally installed on the communication pipe between the main oil tank and the oil storage cabinet. Its main task is to capture gases produced by the decomposition of insulating oil due to arcing or local overheating. If it is a minor fault and gas production is slow, it will accumulate gas and send out an alarm signal; if it encounters a serious fault and the oil flow is turbulent, it will directly jack up the lower float of the relay and trigger a hard trip in a crisp and clear manner.
However, if you listen to the gas alarm without comparing the data, it is equivalent to groping the elephant. The maintenance team must extract the collected gas to perform dissolved gas analysis (DGA). If the acetylene concentration is found to be abnormally soaring, don’t think about it. There must be an active high-energy arc in it, and it must be shut down and withdrawn from operation immediately. If the ethylene content is high, it means that the transformer oil has encountered extreme heating and overheating problems.

Burst Pressure Relay (SPR)

Once the interior is arc-started, the transformer oil vaporizes instantly, causing extremely violent pressure spikes. The smart thing about SPR is that it doesn’t look at how much absolute stress is, but rather how closely it keeps an eye on the rate at which stress is rising. When responding to catastrophic arc faults, it moves faster than the gas relay, directly throwing the trip signal to the main trip relay (86), and firmly guarding the bottom line of not letting the fuel tank explode.

Embracing The Future: Deep Fusion Of IEC 61850 Process Layer Buses

Whereas in the past the physical architecture of power transformer protection schemes consisted of thousands of copper cables, now everyone is striding towards the era of fiber optic networks. The IEC 61850 process layer bus architecture deploys merging units (MUs) directly in the switchfield, instantly digitizing the simulated CT and VT signals in place.
These digital signals, which become sampled values (SVs), are transmitted rapidly along the fiber, completely eliminating the voltage drop and ground loop interference problems caused by copper wires. After receiving these signals, the protection device (i.e., intelligent electronic device, IED) will issue a GOOSE (Substation Event for General Objects) message to command the circuit breaker to split. The most impressive thing about this architecture is that it supports adaptive protection fixed values. For example, if the digital twin model finds that the transformer is operating dynamically in a high temperature environment with extremely heavy loads, the central protection server will tighten the action threshold of the thermal overload (49) relay in real time in the background.

FAQ

Q: What is the difference between the main protection and backup protection of a power transformer?

Answer: The main protection (such as 87T differential and 87N restricted grounding) requires a fast knife to cut through the mess, and can instantly remove internal faults within 30 milliseconds. Backup protection (such as 50/51 overcurrent protection) is intentionally delayed. It will only remove the fault if the main system loses its chain or the fault occurs outside the main protection area but has seriously threatened the safety of the transformer.

Q: How did the gas relay detect the transformer fault?

A: Once insulating oil decomposes due to partial discharge or overheating, gas will be generated. Gas relays rely on collecting these gases to detect early failure hazards. When the gas runs slowly and accumulates into a lot, it will send an alarm; if it is a serious internal short circuit that causes a large-scale oil flow impact, it will directly trip the circuit breaker.

Q: Why do we have to use harmonic braking in transformer protection?

Answer: Mainly to prevent the transformer from tripping accidentally when it is just charging (closed) due to differential protection “blindly joining in the fun”. When the transformer is energized, it will absorb a huge excitation surge. From the perspective of the protection device, this looks very similar to an internal fault. However, because there are many second harmonics in the surge, the relay uses this specific frequency as an identification code to force the trip command to be pressed (braked).

Q: If there is an external fault, why does the differential relay still operate?

A: The culprit is current transformer (CT) saturation. The huge external traversing fault current forced the CT core directly into the magnetic saturation state, causing the current output on the secondary side to be completely deformed. The relay read this distorted signal and mistakenly thought that the primary and secondary winding currents did not match, so it muddled and issued an incorrect trip command.

Q: Why add restricted ground fault (REF) protection when there is differential protection?

A: Because there is a blind spot in the sight of conventional differential protection. If a minor ground fault occurs near the neutral point of the star-shaped wiring winding, the voltage driving the fault current is too low to be detected by conventional differential. REF protection uses zero-sequence current measurement and is extremely sensitive, specifically used to identify hidden faults within the last 5% winding range.

Q: What is the function of the main trip relay (86) in the transformer protection solution?

Answer: The main trip relay plays the role of a high-speed, multi-contact “locking commander-in-chief”. As soon as the main protection element (such as 87T or gas relay) is activated, relay No. 86 will be triggered. As soon as it receives the command, it immediately disconnects all relevant high-voltage circuit breakers at the same time and locks the automatic reclosing. After this, the transformer must be manually restored by the operator before it can be powered again.

Q: How does IEC 61850 improve transformer protection?

A: IEC 61850 replaced all the previous bulky and easily interfered analog copper wires with high-speed fiber optic communications. It uses a merging unit to instantly convert analog signals into digital signals, uprooting electrical interference. This digital process layer bus not only speeds up the removal of faults and saves a large amount of substation wiring costs, but also allows the protection device to flexibly use complex adaptive fixed values according to the real-time conditions of the power grid.