Inferensys

Glossary

Select Before Operate (SBO)

A two-step control security mechanism that requires an operator to first select a switchgear object and receive a positive confirmation before issuing the operate command, preventing unintended operations.
Operations room with a large monitor wall for system visibility and control.
CONTROL SAFETY MECHANISM

What is Select Before Operate (SBO)?

A mandatory two-step process in substation automation that prevents inadvertent switching by requiring explicit selection and confirmation before executing a control command.

Select Before Operate (SBO) is a control security mechanism that mandates a two-step command sequence: an operator must first select a specific switchgear object and receive a positive status feedback confirmation before the system will accept the final operate command. This enforced sequence prevents catastrophic misoperations caused by accidental clicks or selecting the wrong device from a list.

In IEC 61850 systems, SBO is implemented using the SBOw (Select Before Operate with enhanced security) control model, which reserves the selected object exclusively for the issuing client. The Logical Node representing the circuit breaker or disconnector transitions through defined states—blocked, selected, and operated—with a strict timeout that automatically cancels the selection if the operate command is not issued within a configured window.

Control Security Mechanism

Core Characteristics of SBO

Select Before Operate (SBO) is a mandatory two-step control sequence that enforces operator intent verification before executing critical switchgear commands, forming the backbone of substation safety interlocks.

01

Two-Step Command Model

SBO enforces a strict Select then Operate sequence. The operator first issues a select command to a specific Logical Node (e.g., XCBR for a circuit breaker). The Intelligent Electronic Device (IED) validates the selection and returns a positive confirmation. Only after this acknowledgment can the operate command be issued. Any intervening selection of a different object or a timeout automatically cancels the first selection, preventing misdirected operations.

02

IEC 61850 Protocol Implementation

Within the IEC 61850 standard, SBO is modeled using the Operate service with the ctlModel data attribute set to sbo-with-enhanced-security or sbo-with-normal-security.

  • Normal Security: The IED validates the selection based on current interlocking conditions.
  • Enhanced Security: Requires an additional Check service response, verifying that the control command parameters (e.g., setpoint values) match exactly between the select and operate steps before execution.
03

Interlocking Integration

The select step triggers a real-time evaluation of the substation's interlocking logic. The IED checks the status of all associated switchgear—such as disconnectors, earthing switches, and circuit breakers—to ensure the requested operation does not create a hazardous condition. If the interlocking conditions are violated (e.g., opening an isolator under load), the selection is immediately rejected with a negative response and a cause code, blocking the operate command entirely.

04

Timeout and Cancellation Mechanisms

SBO incorporates strict temporal constraints to prevent stale selections from persisting in the system. A configurable selection timeout (typically 10-30 seconds) automatically cancels the selection if no operate command is received. Additionally, selecting a new control object implicitly cancels the previous selection. Operators can also issue an explicit Cancel service request to release a selection without executing the command, returning the control point to a quiescent state.

05

Client-Server Control Authority

SBO manages control authority to prevent conflicting commands from multiple clients. When a client (e.g., SCADA HMI or local engineering workstation) successfully selects a control point, that client holds exclusive authority to issue the subsequent operate command. Other clients attempting to select or operate the same point receive a control-blocked rejection until the first client's selection times out or is cancelled. This mechanism is critical in environments with both local and remote operators.

06

Cybersecurity Implications

The SBO sequence provides an inherent layer of defense against accidental or malicious single-packet attacks. A spoofed or replayed operate command without a preceding valid select is automatically rejected by the IED. Under IEC 62351 security guidelines, the select and operate messages should be authenticated and integrity-protected to prevent man-in-the-middle manipulation of the two-step sequence, ensuring the operate command corresponds exactly to the intended selection.

SELECT BEFORE OPERATE

Frequently Asked Questions

Clear, technically precise answers to the most common questions about the Select Before Operate control mechanism in substation automation systems.

Select Before Operate (SBO) is a two-step control security mechanism mandated by the IEC 61850 standard that requires an operator to first select a switchgear object—such as a circuit breaker or disconnector—and receive a positive confirmation of that selection before issuing the final operate command. The process begins when a control client sends a SelectWithValue request to the target Logical Node (e.g., XCBR for a circuit breaker). The Intelligent Electronic Device (IED) validates the request against its interlocking logic, checks for conflicting selections, and returns a Select response with status. Only after this positive acknowledgment can the client send the Operate command, which must match the previously selected object and value. This mechanism prevents unintended operations caused by misclicks, communication errors, or unauthorized commands, making it a foundational safety requirement in Substation Automation Systems (SAS).

Prasad Kumkar

About the author

Prasad Kumkar

CEO & MD, Inference Systems

Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.

His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.