Breaker failure protection (ANSI 50BF) — the last safety net when a circuit breaker does not open

The guide on LSI(G) settings and the guide on zone-selective interlocking (ZSI) both cover how a circuit breaker receives a trip command at the right moment. Both, however, silently assume something that is not always true: that the breaker actually carries out that command. This article covers the protection layer specifically designed for the case where that assumption fails: breaker failure protection, in practice referred to by the ANSI code 50BF.

Why a breaker can fail to respond to a trip command

A circuit breaker can fail to open despite a correct trip command from its protection relay for several mechanical or electrical reasons: a mechanically jammed or worn tripping mechanism, a faulty or de-energised trip coil, an interrupted wiring connection between relay and coil, or — in the case of a severe internal fault within the breaker itself — damage that physically obstructs the mechanism. In all of these cases, the fault that the trip command should have cleared simply persists, while every upstream breaker is unaware of this failure and continues to hold its normal time delay set for that fault.

How 50BF works: monitoring current after the trip command

A 50BF function is linked to the trip commands of the breaker it monitors and works in essence in two steps:

As soon as the monitored breaker receives a trip command, an internal pickup timer starts (typically on the order of a few tens of milliseconds), after which 50BF checks whether current is still flowing through the breaker.
If current is still present after this pickup timer — a sign that the breaker did not actually open — 50BF immediately sends a back-up trip command to every surrounding breaker that can interrupt the fault by another route (for example the upstream breaker in the switchboard, or other breakers feeding the same busbar).

If the breaker did open correctly before the pickup timer expires, the current disappears, 50BF detects this, and no back-up command is sent — the breaker has simply carried out its own task and 50BF does not intervene.

The fundamental trade-off: extra time versus an indefinitely persisting fault

The pickup timer of a 50BF function is a deliberate trade-off between two risks. A too short pickup time risks 50BF intervening unnecessarily while the breaker is in reality still within its normal, slightly slower mechanical opening time — causing an unnecessary, larger disconnection of healthy parts of the network. A too long pickup time lets a fault, when the breaker genuinely fails, persist unnecessarily long before the back-up breakers intervene, increasing the risk of equipment damage and a higher arc-flash energy (see the guide on arc flash). The pickup timer is therefore carefully tuned to the actual, manufacturer-specified opening time of the specific breaker, with a limited margin on top — not to a generic rule of thumb that would apply to every breaker type.

50BF is an addition to, not a replacement of, the primary protection

Just as zone-selective interlocking (ZSI) improves a breaker's response time without replacing the underlying LSI(G) setting, 50BF is a safety-net layer that only becomes active when the primary protection and the monitored breaker itself fail to perform their task correctly. A correctly functioning breaker that simply carries out its own trip command never activates 50BF — the function only intervenes in the specific, relatively rare but potentially very damaging scenario of a breaker that fails to open.

Note: the exact pickup time, the precise current threshold below which 50BF concludes the breaker has indeed opened, and which surrounding breakers receive the back-up command, follow from the system study and the relay settings of the installation in question; this article covers the principle, not a ready-made settings table for every switchboard.

Practical relevance

When assessing the protection scheme of an important switchboard — particularly at locations where a failure to trip would have major consequences, such as a main distribution board or a busbar with multiple infeeds — it is worthwhile to check whether 50BF protection is present and correctly set, and whether the commissioning test has actually exercised the back-up scenario (simulating the monitored breaker as "not opened"), not just the normal tripping function.

Common mistakes

Assuming a breaker always opens as soon as it receives a trip command — mechanical or electrical faults within the breaker itself go unnoticed and unresolved without 50BF.
Setting the 50BF pickup time too short — this can lead to unnecessary intervention while the monitored breaker is still within its normal, slightly slower opening time.
Setting the 50BF pickup time too long — this lets a genuinely failed breaker allow the fault to persist unnecessarily long before the back-up breakers intervene.
Not including 50BF in the commissioning test — without an explicit test of the back-up scenario, it remains unclear whether the function actually works at the moment it is needed.