What breaker failure must accomplish
When primary protection issues a trip but the breaker does not interrupt the fault, local backup protection must isolate every remaining source feeding the fault. Breaker-failure protection (50BF) is not just a timer. It is a supervised sequence of initiation, retrip, current/status evaluation and backup tripping, built around the physical bus and CT locations.
1. Define failure modes
- Trip coil or DC circuit does not energize.
- Mechanism does not open or a pole fails to open.
- Contacts part but current is not interrupted.
- Breaker opens too slowly.
- Auxiliary contacts give incorrect position.
- Breaker closes when it should not or fails to close—sometimes covered by broader breaker-management logic.
Trip-circuit supervision detects some dormant failures before a fault, but it does not prove that the breaker can mechanically interrupt. Breaker failure responds after a trip command when clearing has not occurred.
2. Initiation logic
Initiate 50BF from protection functions that require current interruption: feeder, transformer, bus, arc-flash or external protection trips as defined. Keep initiation separate per phase or three-phase according to the scheme. A manual open command normally should not launch full system backup tripping unless the owner’s philosophy explicitly requires it.
The initiate signal must seal in long enough for evaluation, but must reset after successful clearing. If an external relay initiates 50BF, supervise the hardwired or GOOSE signal and test its duration.
3. Retrip before backup isolation
A fast retrip can operate a second trip coil, another output contact or a direct trip path before tripping adjacent breakers. This can clear a failed primary trip relay/contact without unnecessarily de-energizing the bus. Retrip and backup trip should be electrically independent where practical; sending both through the same failed auxiliary relay provides no redundancy.
short retrip delay → trip coil 2/direct retrip
failure timer expires with current/status asserted → trip adjacent breakers + upstream intertrip/lockout
4. Current and position criteria
| Criterion | Strength | Risk / mitigation |
|---|---|---|
| Phase current above threshold | Direct proof current is still flowing. | Weak/high-resistance faults or current zero after opening can fall below threshold; use suitable sensitive logic. |
| Residual/neutral current | Improves earth-fault sensitivity. | CT spill and network charging require secure pickup. |
| 52a/52b position | Useful for no-current trips and mechanical position. | Auxiliary contact can be wrong or change before main current interruption. |
| Combined current + position logic | Can cover fault and non-fault operations. | Boolean design must be documented; avoid requiring both when either failure indication should operate. |
| Pole currents/status | Detects pole discrepancy and single-pole failure where applicable. | More logic and CT channels; most MV breakers trip three-pole. |
A common fault-current path is: 50BF initiate AND current above threshold after the timer. For low-current operations, a separate position-based path may be needed. Do not use 52a dropout alone as proof of interruption; auxiliary timing can precede arc extinction.
5. Calculate the timer
Use maximum guaranteed values at minimum DC voltage and adverse service conditions. Example: 10 ms output/path, 60 ms maximum breaker clearing, 20 ms current-detector/reset allowance and 30 ms margin gives a preliminary 120 ms failure timer. The value is not universal: verify breaker test data, CT saturation, relay filtering, communications and whether an intermediate retrip stage is included.
Too short causes backup trips for healthy slow clearing. Too long subjects the switchgear and source to unnecessary fault energy. Measure actual breaker clearing during commissioning and compare it to the budget without automatically replacing the specified worst-case value by one good test.
6. Backup trip strategy
For a feeder breaker that fails on a feeder fault, open all incomers, ties or sources connected to the same bus zone and issue remote transfer trip if a remote source continues feeding through the feeder. For an incomer failure, trip the upstream source breaker and any tie/other source that feeds the fault. CT position matters: if the CT is bus-side of the breaker, a fault between CT and breaker can persist after one side opens and may require a stub or end-fault scheme.
Document backup destinations for every bus topology. Dynamic bus-replica logic can select them, but a check zone or conservative fallback is needed for ambiguous status.
7. Security controls
- Block initiation from protection tests unless the test plan intentionally includes full trip.
- Reset current detectors only after all phase/residual currents are below thresholds for the required time.
- Supervise GOOSE or hardwired initiate circuits.
- Use breaker-status discrepancy and trip-circuit alarms to identify dormant problems.
- Prevent stale latched initiation after DC cycling or relay reboot.
- Apply current thresholds above load/unbalance but below minimum fault current that 50BF must cover.
8. Commissioning matrix
| Test | Expected result |
|---|---|
| Trip with breaker clearing normally | 50BF starts, resets before backup timer; no adjacent breaker trip. |
| Trip coil 1 path disabled; retrip path healthy | Retrip clears breaker; backup trip remains secure. |
| Breaker mechanically blocked with fault current simulated | Backup timer trips correct bus sources and lockout/intertrip. |
| Low-current earth fault | Residual/current criterion remains dependable. |
| Auxiliary contact stuck/mismatched | Scheme follows documented current/status logic and alarms discrepancy. |
| Loss of communications to backup breakers | Alarm and specified hardwired/degraded response occur. |
| Bus tie states changed | Only breakers capable of feeding failed zone are tripped. |
Related protection guides
Engineering limitation
This guide explains a defensible engineering workflow; it is not a project setting calculation. Final protection functions, settings, wiring and trip logic must be based on the approved single-line diagram, short-circuit and coordination studies, equipment data, grid code, relay manual, and verified commissioning results. Changes require formal protection-management control.
References and further reading
- IEEE C37.119-2016 — breaker-failure detection and isolation methods
- IEEE C37.234-2021 — bus-related breaker-failure applications
- IEC 62271-100:2021 — AC circuit-breaker requirements and testing context
- ABB 615-series ANSI Technical Manual — 50BF and relay-logic implementation example
- Siemens 7VK87 breaker-management device — breaker-management application example
Standards must be applied using the edition required by the project, utility and local law. Standards summaries on public pages are not substitutes for the controlled documents.