In short. In a critical-power system, protection must do two things at once: clear faults reliably and keep healthy loads running. That calls for selective coordination, fast clearing at the bus, independent redundant protection and DC supplies, and a way to test without losing supply.
Design principles
- Selectivity first: a fault on one feeder must not drop critical loads elsewhere. See coordination.
- Fast clearing: where selectivity requires delays, add bus protection, zone interlocking or arc detection.
- No single point of failure: redundant paths, independent control power and diverse protection where justified.
- Source-aware settings: utility, generator, UPS and BESS give different fault currents.
- Testability: bypass and isolation allow tests during operation.
Elements
| Element | Critical-power consideration |
|---|---|
| Generator | Full protection set with fault current support. See generator relay architecture |
| Transfer | ATS or breaker transfer with interlocks. See interlocking |
| Distribution | Dual feeds, tie breakers, selective devices |
| UPS | Low fault current from inverter; bypass path protection must clear faults for selectivity |
| BESS | Inverter current limit affects detection; use suitable protection |
| DC and control | Redundant, monitored. See DC systems |
| Earthing | Consistent across modes. See neutral-earth architecture |
UPS and BESS fault behaviour
Inverter-based sources limit fault current to a small multiple of rated current. Overcurrent devices may not trip, so protection relies on the bypass path, a utility or generator source, or fast electronic limits. Design must check that faults on downstream circuits are cleared, and that selectivity holds on inverter-only supply.
Review process
- List operating modes: normal, generator, UPS battery, bypass, maintenance, parallel.
- Compute fault levels in each mode.
- Check selectivity and clearing times in each mode.
- Examine failure modes and single points of failure. See protection failure modes.
- Plan commissioning and periodic tests.
Illustrative example
A data hall has a UPS fed from two sources. On battery, a short circuit on a rack branch produces only a small current from the inverter. The design adds fast-acting branch breakers selected for the inverter’s current limit, confirming that a branch fault clears without taking the whole UPS output to bypass or out.
What critical-power protection must achieve
For hospitals, data centres, telecom sites and process plants, protection must clear a fault quickly and also keep every unaffected load running. Selectivity is the first requirement, and independence the second.
Architecture patterns
| Pattern | Feature |
|---|---|
| Dual-source with ATS | Utility and generator, single path to load |
| Dual-bus with tie | Two buses, each with its own source, tie normally open |
| 2N distribution | Two independent paths to dual-corded loads |
| N+1 generators | One spare set beyond load requirement |
Design principles
- Redundancy needs independent failure paths. Two feeders in one cable tray share one fire risk.
- Coordinate so a fault is cleared at the lowest level.
- Duplicate DC supplies and protection for the most critical functions.
- Avoid common-mode failure: shared control power, shared software or shared CT.
- Include maintenance bypass so testing does not require an outage.
UPS and generator roles
The UPS protects the instant and the generator the duration. Protection must coordinate across both, including UPS bypass and inverter fault behaviour. See UPS and nonlinear loads.
Testing under realistic conditions
Run integrated tests with real loads, trip tests and failure simulations. See load bank testing and failure mode and resilience.
Common mistakes
- Coordination checked on the utility mode only.
- Assuming the inverter can trip standard breakers.
- Shared control supply for primary and backup protection.
What to send us
Send the architecture and load tolerance. Send your application details. See also UPS critical-power architecture.
Questions engineers ask
Why is selectivity so important here?
One tripped breaker should not drop critical loads that were healthy.
How is UPS output protected?
With branch devices coordinated for the inverter and bypass fault currents.
Do I need redundant protection?
For the most critical systems, yes, with independent supplies.
How can I test without shutting down?
With bypass and maintenance isolation designed in from the start.
This guide gives general principles. Protection design needs a system study.