Breaker-Failure Protection in Medium-Voltage Switchgear: Logic, Timers and Trip Strategies

Breaker-failure protection is local backup for the moment a protection trip is correct but the commanded breaker does not clear the fault. It must wait long enough to avoid declaring failure on the slowest successful interruption, yet trip every remaining source before equipment damage, arc energy or system instability becomes unacceptable.

This guide develops ANSI 50BF logic for MV switchgear: initiation, phase/earth current criteria, 52a/52b contacts, retrip, adjacent and remote isolation, timing, CT location, bus-coupler cases, low-current/non-current trips, testing and failure analysis. No universal BF time exists; use measured breaker and relay performance with explicit tolerances.

Executive rules

Start BF only from an authorised trip assigned to the same breaker, with anti-chatter/pulse-sealing as required.
Use current persistence as the main evidence for fault-clearing failure; auxiliary contacts add information but do not prove interruption.
Provide sensitive earth/neutral and low-current criteria so BF is not blind below phase-current pickup.
Base the timer on maximum successful clearing plus detector dropout, logic/output/communication tolerances and security margin.
Use staged retrip only when it improves success without consuming unacceptable backup time.
Trip all alternative sources—including coupler, parallel incomer, generator/DER and upstream breaker—defined by the failed breaker’s isolation zone.
Block ATS/autoreclose/close after BF and latch first-out targets until investigation.
Test with real or simulated current persistence and measure the complete escalation path, not only timer pickup.

1. What counts as breaker failure?

Failure mode	Observed response	BF relevance
Trip circuit/coil failure	No mechanism release; 52a remains closed; current persists	Trip-circuit supervision may alarm first; BF must isolate upstream/adjacent sources
Mechanism failure/stuck pole	Breaker fails to open or one pole remains conducting	Phase current and pole/52 contact discrepancy
Interrupting failure	Contacts move but arc/current does not cease	52a may change early; current criterion is essential
Slow operation	Clearing exceeds allowed maximum	BF may correctly escalate if beyond engineered security window
Re-strike/re-ignition	Current returns after apparent interruption	Reset/seal-in logic and event analysis must cover
Failure to close/close-and-latch	Commanded close unsuccessful	Often monitored by control automation; IEEE C37.119-2025 discusses broader breaker performance failures

2. Standards and naming

IEEE C37.119-2025: current active guide for detecting failed power-circuit-breaker clearing and electrically isolating the fault; supersedes 2016.
IEEE C37.2-2022: device function numbers; 50BF is common breaker-failure designation.
IEC 62271-100:2021+A1:2024: current circuit-breaker product/testing framework and operating/interrupting terminology.
IEC 60255-1:2022: common requirements for measuring relays and protection equipment.
IEC 61850: applies when BF initiate/trip/status uses GOOSE; IEC TS 60255-216-1:2025 adds functional test considerations for protection with digital I/O.

3. Core logic

A generic current-supervised scheme is:

BF START = authorised protection trip to breaker

BF OPERATE = START sealed as required AND clearing not confirmed before timer expiry.

Clearing is commonly confirmed when all applicable phase/earth current detectors reset; breaker auxiliary contact can accelerate/reset in no-current applications or supervise mechanism position. The exact Boolean logic must distinguish “breaker open” from “fault de-energised.”

4. BF initiation

Initiate from every protection that requires the breaker to clear fault current: phase/earth OC, differential, REF, arc-flash, distance, negative sequence and transfer trip as applicable.
Map each initiation to one physical breaker; central bus protection must issue separate BF starts for every tripped breaker.
Do not start from routine open/control commands unless the approved broader breaker-failure scheme intentionally covers them.
Use trip pulse seal-in if the initiating element may reset before the breaker current disappears.
Supervise testing/maintenance blocks; a relay in test must not unintentionally start station-wide BF.
Protect against contact bounce, repeated start and stale GOOSE; include source, quality, sequence/state and timeout logic.
Record which element initiated BF before bus trip changes currents and contacts.

5. Current criteria

Detector	Purpose	Setting concern
Phase current	Phase/three-phase faults and load current through failed breaker	Below minimum post-trip fault contribution; above noise/CT subsidence as required
Residual/neutral current	Low-current earth fault	CT spill/standing residual, grounding method and CBCT source
Negative sequence	Unbalanced faults where phase criterion is marginal	Load unbalance, motor contribution and algorithm delay
Per-pole current	One stuck pole/pole discrepancy	CT availability and single-pole logic
No-current/52a mode	Mechanical/non-electrical trips (e.g., some process/mechanical protection)	Aux contact timing/integrity; cannot prove interruption of unseen current

Calculate minimum current remaining through the failed breaker after all other breakers responding to the primary trip have opened.
Include motor/generator/DER contribution decay and current zero; a criterion can reset temporarily before the fault is isolated.
Check CT saturation delays detector assertion or creates subsidence current after primary interruption.
Use pickup/dropout and security margin from the exact relay manual; BF current detectors may have different filtering from protection 50/51.
For high-impedance/resonant earth faults, current may be too low for phase BF. Use the sensitive residual channel or validated position/zone logic.

6. 52a and 52b auxiliary contacts

52a generally follows the closed main-contact/mechanism state and 52b the open state, but their adjustment and timing are breaker-specific. Neither directly measures arc extinction.

Current persists, 52a opens: possible interrupting failure, CT located outside isolated section, backfeed or auxiliary-contact misadjustment—BF should not reset on 52a alone.
Current resets, 52a remains closed: fault/source current may be zero or auxiliary contact stuck; position supervision is still needed.
52a/52b both same: discrepancy/wiring fault; alarm and apply defined logic.
Trip without fault current: 52a transition can confirm mechanism opening, but consider whether a failed breaker creates an immediate electrical hazard requiring upstream action.
Use redundant contacts only if mechanically/electrically independent enough for the claimed reliability.

7. Timer design

If the BF timer starts with the trip command, a defensible security inequality is:

t_BF ≥ t_{trip-output,max} + t_{breaker-clearing,max} + t_{current-detector-reset,max} + t_{logic/communication uncertainty} + margin.

Adapt the equation to the actual start point: if START is generated after the trip output, do not count the same time twice. Compare the resulting worst-case BF isolation time with equipment damage, internal-arc duration, NGR rating and system-stability limits.

Use maximum measured breaker opening and arcing/clearing over permitted DC voltage, mechanism condition, temperature and interrupting duty—not an average timing test.
Include protection/BF timer positive and negative tolerances.
Include GOOSE/hardwire output/input and remote transfer-trip maximum time where it lies inside escalation.
Account for current detector dropout/subsidence and CT response.
Coordinate retrip stage so it does not postpone unavoidable backup isolation beyond the approved limit.
Recalculate after breaker replacement, trip-coil/control-voltage change or timing deterioration.

8. Illustrative timing budget

Illustrative only. The BF timer starts at relay trip assertion. Maximum breaker total clearing established for the application is 65 ms, BF current detector reset plus processing is 12 ms, timing/output uncertainty is 8 ms and approved security margin is 15 ms. A screening minimum BF delay is 65 + 12 + 8 + 15 = 100 ms.

Do not copy 100 ms. If the local breaker is 90 ms at minimum permitted trip-coil voltage, or current subsidence lasts 30 ms, that setting can falsely escalate. Conversely, a 250 ms traditional value may violate arc-energy or NGR duty. Measure and justify both security and speed.

9. Staged trip strategy

Initial trip: primary relay energises normal trip path.
Retrip: reassert same output or an independent output, preferably alternate trip coil/circuit where provided. A same-coil retrip cannot cure open coil/DC wiring.
Local backup: trip all breakers that can feed through the failed breaker—adjacent incomer, bus coupler and selected feeders/sources.
Remote backup: direct transfer trip upstream source breaker when local devices cannot isolate the fault.
Lockout: latch BF/bus lockout, block close/ATS/autoreclose and require investigation/reset.

Staging should be based on independent success paths and time value. An alternate coil supplied from the same failed DC fuse is not independent; a remote trip sent through the same failed switch/network is not independent.

10. CT location and the isolation zone

Draw the CT relative to breaker and bus. If the CT is on the bus side, a fault between CT and breaker can remain supplied from the line after the breaker opens; if on the line side, a fault in the breaker/bus-side section can remain on the bus. End-zone/dead-zone logic uses current, breaker position and adjacent trip to isolate the correct boundary.

Verify whether BF current still flows through the CT after the breaker opens.
Do not reset BF solely because current left the local CT if the blind section may remain energised.
Coordinate bus differential zone overlap and end-fault transfer trip.
In drawout switchgear, consider test/disconnected positions and auxiliary-contact validity.
For process-bus CTs, verify MU/channel availability and time/data quality through the failure.

11. Dual-incomer and bus-coupler example

Failed breaker	Fault/current situation	Typical BF isolation (verify zone)
Outgoing feeder	Feeder fault continues	Trip that bus-section incomer, coupler and any backfeeding source
Incomer A	Bus A or downstream fault fed from source A	Trip upstream source A; trip coupler/other sources if fault remains on bus A
Bus coupler	Transfer/bus fault continues across sections	Trip both incomers and all sources feeding either faulted side as zone logic dictates
Generator/DER feeder	Backfeed persists after local command	Trip source at independent point and block island/auto transfer

The BF trip matrix cannot be a single station-wide “trip all” output unless that consequence is deliberately accepted. Use topology-aware isolation, but ensure invalid topology defaults to safe fault clearing.

12. Communications-based BF

For GOOSE START/TRIP, specify publisher/subscriber datasets, quality, retransmission, network paths and maximum end-to-end latency.
Prevent stale BF starts after device restart/configuration mismatch.
Use PRP/HSR or independent paths only where the architecture and failure-mode study justify them.
Time synchronisation is valuable for SOE but basic GOOSE trip delivery must not depend on absolute time.
Test packet loss, duplicate/out-of-order frames, link/switch failure, device reboot and configuration revision.
Retain local hardwired/independent backup where consequences demand it.

13. Security against false BF

BF start and current must correspond to the same physical breaker/zone.
Reset/seal logic must handle a momentary initiating trip and successful current interruption.
Block or manage BF during breaker timing/primary injection with formal trip isolation.
Supervise CT circuit, input quality, auxiliary contacts, DC and communication.
Avoid a single stuck binary input starting BF indefinitely; use pulse/state plausibility and alarm.
Use two-out-of-two current/position only when dependability remains adequate for low-current failure.
Audit programmable logic after firmware/settings changes; BF outputs have wide consequences.

14. FAT and commissioning tests

Verify every authorised protection/transfer trip starts the correct breaker’s BF and no others.
Test phase, residual/neutral, negative-sequence and no-current criteria at pickup/dropout boundaries.
Simulate successful clearing: current and contacts change at earliest/latest combinations; BF must reset securely.
Simulate mechanism failure: current and 52a persist; verify retrip and timed escalation.
Simulate interrupting failure: 52a opens but current persists; BF must operate.
Simulate low-current earth fault, current zero/reappearance, CT saturation and subsidence.
Measure breaker trip-to-current-zero across permitted DC/operating conditions and validate the timer margin.
Trip each failed-breaker matrix through actual adjacent/upstream outputs, communications and breakers where safely possible.
Verify coupler/open/closed/invalid topology, DER/motor contribution and settings groups.
Fail DC, trip coil, output contact, auxiliary contacts, CT input, GOOSE/network and time; verify intended result.
Verify ATS/reclose/close blocking, lockout/reset authority, SCADA/SOE/oscillography and first-out.
Archive timing traces, current/contact transitions, settings/checksum, logic diagram and as-built trip matrix.

15. Maintenance and event analysis

trend measured opening/clearing time and compare with BF security margin;
test both trip coils/circuits and independent DC paths;
review 52a/52b adjustment and pole timing;
verify current-detector pickup/dropout after CT/relay changes;
test remote transfer-trip and GOOSE/network redundancy periodically;
after BF operation, reconstruct initiation, trip output, coil current, auxiliary contacts, phase currents, local/remote trips and current zero on one time base;
do not simply lengthen BF after an unwanted trip—identify breaker, CT, detector, contact or logic cause.

16. Frequent mistakes

Mistake	Consequence	Correction
52a alone confirms clearing	Interrupting failure missed	Current-supervised logic
Phase current only	Low earth fault blind	Sensitive residual/no-current criteria
Generic 150 ms timer	False BF or excessive arc energy	Measured maximum timing budget
Retrip same failed path	No added dependability	Independent coil/output/DC where justified
Coupler/DER omitted	Fault remains fed	All-source trip matrix
BF permits ATS/reclose	Damaged bus re-energised	Lockout and close block
Timer-only injection	Real current/contact races untested	Dynamic complete-path tests

References and further reading

Engineering note: Breaker opening and total clearing are different times. BF settings require the actual maximum current-interruption time from the BF start reference, including detector reset and all tolerances.