800VDC Solid-State Circuit Breaker Protection

Place the protection boundary before choosing the switch #

An 800VDC solid-state circuit breaker is not simply a faster contactor. In an AI rack it must distinguish a failed feeder from a healthy rack, interrupt current before semiconductor and busbar limits are exceeded, absorb the energy stored in distribution inductance, and leave a verifiable isolation state for service. The first architecture decision is therefore which fault zone the device owns: the source/main bus, an individual rack feeder, or a protected power-conversion input.

This guide is for rack-power architects, protection engineers and BOM owners deciding between a certified breaker assembly and a custom semiconductor or hybrid interrupter. The short answer is to buy the complete assembly when the system needs a declared IEC breaker function, galvanic isolation and a manufacturer-backed interrupt rating. Build a custom power stage only when its electrical boundary, certification path, cooling, clamp network and local trip chain are owned by the equipment program—not inferred from a SiC module data sheet.

The distinction matters now because current products span very different maturity levels. ABB says its SACE Infinitus I25L family is available to order at 2500A and certified to IEC 60947-2, while Siemens launched the SENTRON 3QD2 semiconductor breaker platform in 2026. Infineon's public 800V reference board, REFSSBD800VDCJCQJ1TOBO1, documents useful semiconductor protection performance but is marked “coming soon” and is not a drop-in data-center breaker certification. [[evidence:vendor-product-page]]

Selective coordination limits the blast radius #

An 800V bus can have a main breaker at the source and feeder protection at each rack or power tray. For a downstream short, the desired result is simple: the nearest feeder opens, the main remains closed, and healthy racks continue to run. Eaton's current 800VDC architecture paper uses a 3000A main and 1500A feeder as an illustrative hierarchy and warns that coordination must include breakers, fuses, converters, inverters and any medium-voltage solid-state transformer—not only two trip curves in isolation.

The difficult part is the first few microseconds. Source-side capacitors drive current through bus inductance, while the failed rack's input capacitor can feed the short locally. A nominal current threshold cannot identify every direction or source. The coordination study should therefore cover at least:

• a bolted feeder short at minimum and maximum source impedance;
• a rack-internal short fed by its own input capacitance;
• normal inrush and converter startup, including a partially charged bus;
• reverse energy from a BBU, regenerative load or another energized segment;
• loss of control power, sensor saturation and communication failure; and
• main-breaker backup if the feeder device fails to open.

A fast main breaker with the same threshold and delay as every feeder is not selective; it is a mechanism for turning one rack fault into a row outage. The protection file needs explicit pickup, delay, di/dt and energy boundaries for each zone, plus measured tolerances. “Microsecond class” is a useful product attribute, not a coordination setting.

Fault interruption is an energy-transfer problem #

Opening a semiconductor switch does not make current disappear. Before the trip, bus inductance stores \(E_L=\tfrac{1}{2}LI^2\). During turn-off, that current commutates into a clamp or absorber and creates an overvoltage roughly related to \(L\,di/dt\). Meanwhile a downstream capacitor stores \(E_C=\tfrac{1}{2}CV^2\) and may discharge into a rack-side short without crossing the upstream breaker. At 800V, even 1mF contains 320J; the location of capacitance is therefore part of the protection topology.

Eaton specifically cautions that capacitive discharge can create a fast spike that defeats selectivity or exceeds an SSCB's di/dt limit, and recommends checking the device limit against the actual distribution system. Adding inductance can reduce current rise, but that same inductance increases stored energy at a given current and changes the required clamp rating. The design must close all three calculations together: current rise before detection, semiconductor safe operating area during turn-off, and absorber energy and temperature across the allowed reclose cycle.

Parasitic inductance between switch and clamp is especially costly because it is outside the intended energy path. Put the clamp physically close to the power module, validate overshoot at the fastest gate turn-off, and include busbar, connector and fixture inductance in the test article. A double-pulse test of one module is necessary device evidence; it is not a substitute for a full feeder short test with the production bus and capacitance.

Solid-state and hybrid breakers solve different jobs #

A pure solid-state path can interrupt quickly and perform controlled turn-on, which can reduce the need for a separate precharge contactor. Its penalty is continuous conduction loss and the need for fault-tolerant gate drive, sensing and cooling. A hybrid assembly adds a mechanical isolation element so the steady or post-trip state can provide a visible air gap or galvanic isolation. The mechanical pole is not expected to interrupt the uncontrolled DC fault by itself; the semiconductor stage first forces current to a safe condition.

ABB's published SACE Infinitus architecture combines power electronics, energy absorption, current limiting, sensing, cooling and mechanical galvanic isolation in one breaker platform. ABB states a current product boundary of up to 2500A at 1000VDC, insulation voltage up to 1250VDC and interruption in less than 25µs for the I25L family. Its technical material also describes bidirectional operation, which is important where a BBU or another bus section can backfeed a fault. Those are assembly-level claims; they should not be transferred to a discrete switch selected for a custom board.

Siemens describes SENTRON 3QD2 as a semiconductor circuit-breaker platform with microsecond interruption and says it uses Infineon 1200V CoolSiC MOSFET technology in the 62mm module format. The public launch material does not release every selectable catalogue number, current rating, cooling option or trip curve. Treat SENTRON 3QD2 as the family to quote and require Siemens to return the exact configured order code and technical schedule; do not name a convenient Infineon module as the undisclosed Siemens production BOM.

Keep the first trip independent of supervision #

The protection chain should have a local hardware path from current or voltage sensing to gate turn-off. A controller can configure thresholds, timestamp the event, coordinate a reclose and report health over CAN or another management bus, but the first destructive-current decision should not wait for a network packet or a non-deterministic firmware loop.

For a custom implementation, divide the chain into independently reviewable functions:

1. Sense: verify bandwidth, saturation recovery, busbar geometry, isolation and threshold accuracy across temperature. A high full-scale current range is not proof that the overcurrent output is fast enough. 2. Decide: use a local comparator or protection input with a defined maximum propagation delay, hysteresis and latching behavior. Document the safe state for missing bias power. 3. Turn off: qualify driver CMTI, DESAT or overcurrent behavior, soft-off, negative gate bias and isolation under the real dv/dt. 4. Absorb: size the MOV or active clamp for tolerance, repetitive energy, end-of-life leakage and worst-case ambient/coolant temperature. 5. Isolate and discharge: prove current zero before opening the mechanical pole, then discharge exposed capacitance and verify absence of voltage. 6. Supervise: log pre-trip samples, configuration revision, device temperature and reason code; block automatic reclose after non-recoverable faults.

Infineon's 350V REFSSCBACDC1PHSICTOBO1 is useful as topology evidence: it uses a bidirectional MOSFET switch, programmable protection, CAN/UART and a mechanical element for a physical air gap. It is not an 800V qualification article. The newer 800V REFSSBD800VDCJCQJ1TOBO1 specifies an 800V nominal, 850V maximum, 650A continuous air-cooled boundary, unidirectional blocking and less-than-2µs short-circuit protection, but its current page says “coming soon.” Use those limits to frame an evaluation request, not to populate a production AVL prematurely. Vendor Reference Design

Separate complete products from component candidates #

The following items are not substitutes for one another. The first table is for assembly-level sourcing; the second identifies active components that can support a custom protection release.

Voltage class deserves the same discipline as current. A component marketed for SSCB use is not automatically suitable for an 800V nominal bus. The RFQ must state continuous high/low bus limits, switching and fault overshoot, pollution degree, altitude and insulation coordination; the supplier must answer against that envelope, not against the nominal label.

Qualification plan and RFQ evidence #

Release the protection BOM only after the supplier and lab evidence describe the same fault model. At minimum, request:

• exact complete order code and lifecycle status for every breaker, module,

driver, sensor, clamp and isolator—not a family name alone;

• maximum continuous voltage/current, prospective short-circuit current,

interrupt rating, allowed di/dt, total clearing time and tolerance;

• bidirectional or unidirectional blocking and protection behavior, including

reverse-fed faults and loss of auxiliary power;

• conduction loss versus current and temperature, coolant or airflow contract,

thermal sensors, derating and allowed reclose sequence;

• clamp technology, single-event and repetitive energy, maximum switch

overshoot and production bus-inductance assumptions;

• isolation voltage, creepage/clearance, mechanical air-gap behavior, discharge

path, lockout and service verification;

• threshold configuration ownership, checksum/version control, trip log,

timestamp accuracy, communications behavior and cyber/update policy; and

• coordination evidence for main, feeder, fuses, converters, BBU paths and

downstream capacitance at minimum/maximum line and temperature.

The test matrix should include normal insertion, controlled precharge, overload, hard short at multiple cable lengths, high-impedance fault, downstream capacitor discharge, reverse feed, repeated faults at hot condition, sensor failure, gate-bias loss and a failed feeder trip that exercises main backup. Record current, switch voltage, clamp current, gate voltage, isolation state and recovery behavior on a common timebase. A log entry without the power waveform cannot prove that the semiconductor remained inside its safe operating area.

The upstream breaker and the downstream converter also need one interface owner. The companion 800VDC-to-54V/12V isolated DC/DC guide defines the conversion and startup contract; this protection guide defines who interrupts a bus or feeder fault and where stored energy goes. Combining those two specifications prevents both devices from assuming the other owns precharge, discharge or fault isolation.

Conclusion #

Choose an 800VDC solid-state breaker from the fault-zone and certification requirement outward. A complete, orderable platform such as ABB SACE Infinitus can carry assembly-level ratings and isolation evidence. A Siemens SENTRON 3QD2 quote needs its exact configured catalogue and technical schedule. An Infineon reference board or active SiC module can accelerate a custom design, but it transfers clamp, sensing, cooling, isolation, certification and coordination ownership to the equipment team.

The release decision is not the fastest advertised trip time. It is a measured selective trip in the production bus, with every source of current and stored energy represented, healthy racks left online, and an exact RFQ trail for the hardware that performed the test.

Official references #

• ABB SACE Infinitus solid-state circuit breaker product page
• ABB: SACE Infinitus I25L availability and IEC 60947-2 certification
• ABB Protection Devices for Direct Current Applications technical paper
• Eaton Deploying 800VDC Architecture white paper
• Siemens launch announcement for SENTRON 3QD2
• Siemens and Infineon 1200V CoolSiC collaboration announcement
• Infineon solid-state circuit-breaker application overview
• Infineon REF-SSBD-800V-DC-J reference-board page
• Infineon REF-SSCB-AC-DC-1PH-SiC reference-board page
• Infineon FF1MR12KM1H-S 1200V CoolSiC module
• Infineon 1ED3321MC12N isolated gate driver
• Infineon TLE5571-AE06O5-I-S0001 TMR current sensor
• Texas Instruments AMC23C12 isolated comparator data sheet