Issues #3090
sTm7: improve leap second processing
Added by Richard Schimmel almost 4 years ago.
Updated almost 3 years ago.
Discuss in Upcoming Meeting:
No
Closed Reason:
Test Procedure Update
Description
IEC 61850-90-4 clause 14.2.4.2 specifies that SNTP and PTP protocol do announce the "leap second at midnight" several hours before midnight. PTP at most 12 hours same for SNTP (https://en.wikipedia.org/wiki/Leap_second). As such every IEC 61850 device will know that the leap second will happen even if the connection to the time master is lost. No IEC 61850 device has an hold-over time exceeding such announcement period! Therefor the sTm7 test case is not practical, will never happen in real life and should be removed.
Files
I agree with Richard conclusions: the test is not practical. Remove the test from Rev1.1.
Thierry Dufaure wrote in #note-1:
I agree with Richard conclusions: the test is not practical. Remove the test from Rev1.1.
Agree.
WIKIPedia article actually says:
Although BIPM announces a leap second 6 months in advance, most time distribution systems (SNTP, IRIG-B, PTP) announce leap seconds at most 12 hours in advance.
https://www.ietf.org/rfc/rfc5905.txt (SNTP referenced by 61850-8-1:2020 consolidated) does not specify how far in advance of a leap second that LI (Leap indicator) flag need to be set by a time server.
The only relevant statement in RFC 5905 is:
LI Leap Indicator (leap): 2-bit integer warning of an impending leap second to be inserted or deleted in the last minute of the current month with values defined in Figure 9 .
Reference to PTP is irrelevant because sTm7 is only testing SNTP.
Therefore sTm7 remains relevant and no changes are needed to the test procedure.
Bruce Muschlitz wrote in #note-3:
WIKIPedia article actually says:
Although BIPM announces a leap second 6 months in advance, most time distribution systems (SNTP, IRIG-B, PTP) announce leap seconds at most 12 hours in advance.
https://www.ietf.org/rfc/rfc5905.txt (SNTP referenced by 61850-8-1:2020 consolidated) does not specify how far in advance of a leap second that LI (Leap indicator) flag need to be set by a time server.
The only relevant statement in RFC 5905 is:
LI Leap Indicator (leap): 2-bit integer warning of an impending leap second to be inserted or deleted in the last minute of the current month with values defined in Figure 9 .
Reference to PTP is irrelevant because sTm7 is only testing SNTP.
Therefore sTm7 remains relevant and no changes are needed to the test procedure.
I believe that the issue here is that the device will indicate Clock Not Synchronized long before the possibility of approaching an unexpected leap second, regardless of the sync protocol. Therefore, the condition is untestable.
Responding to Joel: 61850-7-2 specifies now that Clock-Not-Synchronized is set only when estimated error is greater than 1 second from UTC.
For a (bad) 100 PPM oscillator, this would take about 10000 seconds (3 hours). There is no requirement in SNTP to announce an upcoming leap second 3 hours ahead of midnight.
This is a system requirement that the annoucement has to be done long enough before it occurs, otherwise you go in the unreliable time stamps in case the snychronization is lost before midnight.
If user, on purpose set an hold over time interval, they want to have it working, even around midnight. The time is still valid during the HoldTms - therefore device can assume that LI annoucement are present at midnight - LPHD.HoldTms.
7-2 state "if the device is unable to determine if a leap second is occuring at midnight".
An implementation is allowed take the decision that LI fields have to be correctly set 5 min before midnight (LI fields seen before the loss of communication with the time server), and that they can relie on the annoucement 5 min before midnight in case the synchronization is lost 4 min before midnight.
sTm7 has been made mandatory is with redmine 635. To increase the reliabilty of time stamp, user shall proramme their clock server so that annoucement have to be trustfull a meaningfull time before they occur, to avoid that loss of synchronization shortly before midnight lead to a meaningless time stamping in the substation.
IEC 61850 part 7-2 table 9 is pretty clear how the leap second shall be processed. It make sense to test the leap second process with or without disconnecting the time server during midnight. To overcome the discussion about holdover time and CNS the test case shall force/ensure that the DUT has received the LI=1 from the time server before midnight. The DUT shall remember the LI and process the leap second by providing 61850 event timestamps as specified in table 9. Please review attached proposal.
- Subject changed from sTm7: remove because hold-over time does not exceed the SNTP/PTP announce period to sTm7: improve leap second processing
- Status changed from New to In Progress
TPWG August 24; agree to remove the "event during the leap second" part and update the sTm7 abstract description. See attached 20210824
- Status changed from In Progress to Closed
- Closed Reason Test Procedure Update added
- Closed Reason deleted (
--Not Set---)
- Discuss in Upcoming Meeting changed from Yes to No
Also available in: Atom
PDF