CN112804234A - Embedded intrusion-tolerant fault-tolerant device applied to power terminal and processing method - Google Patents
Embedded intrusion-tolerant fault-tolerant device applied to power terminal and processing method Download PDFInfo
- Publication number
- CN112804234A CN112804234A CN202110056847.1A CN202110056847A CN112804234A CN 112804234 A CN112804234 A CN 112804234A CN 202110056847 A CN202110056847 A CN 202110056847A CN 112804234 A CN112804234 A CN 112804234A
- Authority
- CN
- China
- Prior art keywords
- power terminal
- terminal system
- fault
- data
- electric power
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/12—Applying verification of the received information
-
- H—ELECTRICITY
- H02—GENERATION; CONVERSION OR DISTRIBUTION OF ELECTRIC POWER
- H02J—CIRCUIT ARRANGEMENTS OR SYSTEMS FOR SUPPLYING OR DISTRIBUTING ELECTRIC POWER; SYSTEMS FOR STORING ELECTRIC ENERGY
- H02J13/00—Circuit arrangements for providing remote indication of network conditions, e.g. an instantaneous record of the open or closed condition of each circuitbreaker in the network; Circuit arrangements for providing remote control of switching means in a power distribution network, e.g. switching in and out of current consumers by using a pulse code signal carried by the network
-
- H—ELECTRICITY
- H02—GENERATION; CONVERSION OR DISTRIBUTION OF ELECTRIC POWER
- H02J—CIRCUIT ARRANGEMENTS OR SYSTEMS FOR SUPPLYING OR DISTRIBUTING ELECTRIC POWER; SYSTEMS FOR STORING ELECTRIC ENERGY
- H02J13/00—Circuit arrangements for providing remote indication of network conditions, e.g. an instantaneous record of the open or closed condition of each circuitbreaker in the network; Circuit arrangements for providing remote control of switching means in a power distribution network, e.g. switching in and out of current consumers by using a pulse code signal carried by the network
- H02J13/00004—Circuit arrangements for providing remote indication of network conditions, e.g. an instantaneous record of the open or closed condition of each circuitbreaker in the network; Circuit arrangements for providing remote control of switching means in a power distribution network, e.g. switching in and out of current consumers by using a pulse code signal carried by the network characterised by the power network being locally controlled
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0823—Errors, e.g. transmission errors
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/12—Applying verification of the received information
- H04L63/123—Applying verification of the received information received data contents, e.g. message integrity
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
- H04L63/1408—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic by monitoring network traffic
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y04—INFORMATION OR COMMUNICATION TECHNOLOGIES HAVING AN IMPACT ON OTHER TECHNOLOGY AREAS
- Y04S—SYSTEMS INTEGRATING TECHNOLOGIES RELATED TO POWER NETWORK OPERATION, COMMUNICATION OR INFORMATION TECHNOLOGIES FOR IMPROVING THE ELECTRICAL POWER GENERATION, TRANSMISSION, DISTRIBUTION, MANAGEMENT OR USAGE, i.e. SMART GRIDS
- Y04S40/00—Systems for electrical power generation, transmission, distribution or end-user application management characterised by the use of communication or information technologies, or communication or information technology specific aspects supporting them
- Y04S40/20—Information technology specific aspects, e.g. CAD, simulation, modelling, system security
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Computer Hardware Design (AREA)
- Power Engineering (AREA)
- Health & Medical Sciences (AREA)
- General Health & Medical Sciences (AREA)
- Medical Informatics (AREA)
- Environmental & Geological Engineering (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
Abstract
The invention specifically discloses an embedded invasion-tolerant fault-tolerant device applied to a power terminal and a processing method, wherein the method comprises the following steps: s1, checking the legality and integrity of the input data to judge whether an abnormal state exists; s2, evaluating and early warning a damage range and a failure degree caused by an abnormal state existing in the operation process of the power terminal system; s3, repairing the abnormal state existing in the operation process of the power terminal system and reporting the repairing result, if the repairing is successful, entering the step S4, and if the repairing is failed, returning to continue repairing; and S4, continuously providing service for the electric power terminal system, and simultaneously generating a system log and an event report of the abnormal state in the operation process of the electric power terminal system. The invention can ensure that the power terminal system does not lose efficacy under the condition of the existence of faults, thereby protecting the core function of the power terminal system from being influenced, realizing the active immunity of the power terminal system and greatly improving the information safety protection capability of the power terminal system.
Description
Technical Field
The invention relates to the technical field of power systems, in particular to an embedded invasion-tolerant fault-tolerant device and a processing method applied to a power terminal.
Background
With the development of intellectualization and informatization of a power grid, a large number of terminals are connected into the power grid, and under an open network environment, power terminals are vulnerable to network attacks from multi-benefit agents. In recent years, Advanced Persistent attack (APT, Advanced Persistent Threat attack) aiming at Advanced attack means in the field of Energy system industrial control is a huge hazard to industrial control systems such as Energy and the like, wherein the APT is mainly used for malicious codes such as seismic nets, flames and Black Energy. At the same time, in practice, it is inevitable that the system will fail over a long period of operation. From the reason of the failure, some failures are degradation failures, such as hard disks of computers, which age with the increase of the use times and finally fail; some faults are design faults, namely faults caused by design defects in system design; still other faults are random faults, which are often triggered by some occasional, sudden event.
Both from external network attacks and the propagation of internal faults worsen, with the result that often part or all of the system's services fail. That is, an attack or failure will cause the system to fail to complete the intended service that one desires it to provide. Correspondingly, the fault tolerance is to enable the system with the fault to continue to provide acceptable service through corresponding algorithms and measures when the system is defective and has the fault. That is to say, in the embedded system of the power industrial control terminal, the technology of intrusion tolerance and fault tolerance is applied to ensure that the system can avoid service failure when the system fails, and the core function of the system is protected from being influenced. Fault tolerance can be roughly divided into two categories, hardware fault tolerance and software fault tolerance, depending on the type of fault. For the degradation failure of hardware peripherals, hardware fault tolerance, i.e., redundant hardware providing backup, is often required for implementation. And for random faults and design faults, a software fault tolerance method can be adopted for implementation.
Disclosure of Invention
In order to solve the above technical problems, the present invention provides an embedded fault tolerant device for an electric power terminal, comprising an error detection module, a damage assessment module, a state recovery module and a continuous service module, which are embedded in an electric power terminal system, wherein:
the error detection module is used for checking the legality and the integrity of input data and judging whether an abnormal state exists in the operation process of the power terminal system;
the damage evaluation module is used for receiving the system abnormal state judged by the error detection module and evaluating the damage range and the failure degree of the power terminal system;
the state recovery module is used for receiving the damage range and the failure degree information of the power terminal system evaluated by the damage evaluation module, performing failure self-healing repair management according to the failure mapping type and reporting a repair result to the power terminal system;
and the continuous service module is used for generating a system log of an abnormal state in the operation process of the electric power terminal system, performing off-line analysis on the generated system log and continuously providing service for the electric power terminal system.
Meanwhile, the invention also provides an embedded invasion-tolerant fault-tolerant processing method applied to the power terminal, which comprises the following steps:
s1, verifying the legality and integrity of the input data through the error detection module, and further judging whether the power terminal system has an abnormal state;
s2, evaluating and early warning a damage range and a failure degree caused by an abnormal state existing in the operation process of the power terminal system by using a damage evaluation module;
s3, repairing abnormal states existing in the operation process of the power terminal system by using the state recovery module and reporting a repairing result, if the repairing is successful, entering the step S4, and if the repairing is failed, returning to continue repairing until the repairing is successful;
and S4, continuously providing service for the electric power terminal system through the continuous service module, and simultaneously generating a system log and an event report of the abnormal state in the operation process of the electric power terminal system and performing offline analysis.
Preferably, the verifying the validity and the integrity of the input data by the error detection module specifically includes: performing parity check on a data bus of a processor and a register of the processor in the power terminal system, and judging whether bit errors occur in short word length data in the storage process; storing a data-encrypted ECC code on the extra data bits for determining whether the data has an error; carrying out validity check on externally acquired data in a mode of setting a limit value; setting an expected task and a time value in software or hardware in a processor, and monitoring whether the expected task is completed within the set time by using a watchdog timer to judge whether the hardware or the software in the processor has errors; performing polynomial calculation detection on the externally transmitted data block by using CRC (cyclic redundancy check), attaching a detection result to the back of a data frame, and judging whether the data is in error in the transmission process according to whether the CRC passes or not; comparing the same data acquired by different external devices or different signal points, and judging whether the homologous redundant data is abnormal or not; and setting a reverse checking mechanism on the basis of logic gate checking to check the validity of the business logic.
Preferably, the specific implementation manner of step S2 includes:
s21, analyzing the safety risks of each link of data, codes, business logic, maintenance strategies and logistics management by using a fault tree and failure mode severity based on the abnormal state existing in the power terminal system;
s22, identifying various potential faults in the electric power terminal system according to the analysis result of the safety risk classification in the step S21, and carrying out safety evaluation and state classification on the electric power terminal system according to the various potential faults;
and S23, establishing a risk early warning system of the power terminal system based on space-time multi-dimensional fault analysis.
Preferably, the status classification in the power terminal system in the step S22 includes five grades of normal, abnormal, severe and crisis.
Preferably, the specific implementation manner of step S23 is: firstly, various fault signals corresponding to abnormal states are mapped into specific fault properties, influence ranges and fault reasons, then the results are recorded in logs of the electric power terminal system protected by the safety chip and operation and maintenance personnel are notified, so that the establishment of a risk early warning system in the electric power terminal system is completed, and the control of the safety risk full life cycle of the electric power terminal system is realized.
Preferably, the specific implementation manner of step S3 includes:
s31, constructing an expert database comprising early warning description, early warning reasons and processing measures, and performing fault processing on abnormal states existing in the operation process of the power terminal system according to the expert database;
s32, establishing a plurality of state recovery blocks, selecting one of the state recovery blocks to recover the power terminal system, if the power terminal system does not recover to normal, continuing to call other recovery blocks to recover the power terminal system until the power terminal system recovers to normal or the state recovery blocks are used up, and reporting the recovery result to an operator;
and S33, resetting the whole power terminal system through the resetting mechanism to realize self-healing recovery of the power terminal system.
Preferably, the specific items of step S4 include:
s41, logging abnormal states existing in the operation process of the power terminal system;
s42, performing sorting analysis on the log records of the abnormal state in the step S41 and forming an event report;
and S43, continuously serving the power terminal system.
Compared with the prior art, the invention provides an embedded fault tolerance device and a processing method thereof applied to an electric power terminal, which are characterized in that an error detection module, a damage evaluation module, a state recovery module and a continuous service module are embedded in an electric power terminal system, whether an abnormal state exists in the operation process of the electric power terminal system is judged by using the error detection module, then the damage evaluation module evaluates the consequence caused by the corresponding fault of the existing abnormal state, the state recovery module repairs the corresponding fault of the abnormal state to try to eliminate the error in the electric power terminal system, if the fault repair in the electric power terminal system is successful, the continuous service module continues to provide service, thereby realizing the fault tolerance of the electric power terminal system, ensuring that the electric power terminal system still does not fail under the condition of the existence of the fault, and further protecting the core function of the electric power terminal system from being influenced, the active immunity of the power terminal system is realized, and the information safety protection capability of the power terminal system is greatly improved.
Drawings
Fig. 1 is a block diagram of an embedded intrusion-tolerant fault-tolerant device applied to a power terminal according to the present invention,
FIG. 2 is a flow chart of an embedded intrusion tolerance fault-tolerant processing method applied to a power terminal in the invention,
FIG. 3 is a flow chart of a method of evaluating an abnormal state by a damage-assessment module according to the present invention,
figure 4 is a flow chart of a method for repairing an abnormal state by a state repair module in the present invention,
fig. 5 is a flowchart of a method for continuously servicing an electric terminal system by a continuous service module according to the present invention.
In the figure: 1. the system comprises an error detection module, 2, a damage evaluation module, 3, a state recovery module and 4, a continuous service module.
Detailed Description
In order to make the technical solutions of the present invention better understood, the present invention is further described in detail below with reference to the accompanying drawings.
As shown in fig. 1, an embedded fault tolerance device for power terminals includes an error detection module 1, a damage evaluation module 2, a state recovery module 3, and a continuous service module 4, which are embedded in a power terminal system, wherein:
the error detection module 1 is used for checking the legality and the integrity of input data and judging whether an abnormal state exists in the operation process of the power terminal system;
the damage evaluation module 2 is used for receiving the abnormal state judged by the error detection module 1 and evaluating the damage range and the failure degree of the power terminal system;
the state recovery module 3 is used for receiving the damage range and the failure degree information of the power terminal system evaluated by the damage evaluation module 2, performing failure self-healing repair management according to the failure mapping type, and reporting a repair result to the power terminal system;
and the continuous service module 4 is used for generating a system log of an abnormal state in the operation process of the electric power terminal system, performing off-line analysis on the generated system log, and continuously providing service for the electric power terminal system.
In this embodiment, the error detection module 1, the damage assessment module 2, the state recovery module 3, and the continuous service module 4 are embedded in the power terminal system. Because the embedded trusted computing has the characteristics of two aspects of initiative and safety immunity, in the initiative aspect, mechanisms such as integrity measurement, white list management and control, trusted operation logs and the like of the trusted computing can realize safety functions such as active identification, active control, active alarm and the like, the intrusion tolerant fault-tolerant device firstly judges whether an abnormal state exists in the operation process of the power terminal system by using the error detection module 1, then evaluates the result caused by the fault corresponding to the abnormal state by using the damage evaluation module 2, then repairs the fault corresponding to the abnormal state by using the state recovery module 3 to try to eliminate the error in the power terminal system, if the error in the power terminal system is repaired successfully, the service is continuously provided by using the continuous service module 4, the intrusion tolerant fault-tolerant of the power terminal system is further realized, and the power terminal system can be ensured not to fail under the existence of the fault, the core function of the power terminal system is not affected, active immunity of the power terminal system is realized, and the information safety protection capability of the power terminal system is greatly improved.
As shown in fig. 2, an embedded intrusion tolerance fault-tolerant processing method applied to a power terminal includes the following steps:
s1, verifying the legality and integrity of the input data through the error detection module 1, and further judging whether the power terminal system has an abnormal state;
s2, evaluating and early warning a damage range and a failure degree caused by an abnormal state existing in the operation process of the power terminal system by using the damage evaluation module 2;
s3, the state recovery module 3 is used for repairing abnormal states existing in the operation process of the power terminal system and reporting a repairing result, if the repairing is successful, the step S4 is carried out, and if the repairing is failed, the repairing is returned to continue until the repairing is successful;
and S4, continuously providing service for the electric power terminal system through the continuous service module 4, and simultaneously generating a system log and an event report of the abnormal state in the operation process of the electric power terminal system and performing offline analysis.
In this embodiment, the embedded intrusion tolerance fault-tolerant processing method of the power terminal system includes four steps, specifically including: firstly, detecting and judging an abnormal state; evaluating the result caused by the abnormal state fault; thirdly, repairing the abnormal state error; if the repair is successful, continuously providing service for the power terminal system, and simultaneously generating a log and an event report. The fault tolerance of the power terminal system is realized through the four fault tolerance processing steps, the power terminal system is guaranteed not to lose effectiveness even if faults exist, core functions of the power terminal system are not affected, active immunity of the power terminal system is realized, and the information safety protection capability of the power terminal system is greatly improved.
The checking of the validity and the integrity of the input data by the error detection module 1 mainly includes seven aspects, specifically:
(1) the parity check can be applied to a data bus of a processor and a register of the processor in the power terminal system and is used for judging whether bit errors occur in the short word length data in the storage process;
(2) ECC (Error Correcting Code) checking, in which an ECC Code encrypted with data is stored in an extra data bit, and when data is written into a memory, the corresponding ECC Code is also stored; when the data which is just stored is read back again, the stored ECC code is compared with the ECC code generated when the data is read, if the two ECC codes are not the same, the two ECC codes are decoded to determine which ECC code in the data is wrong, and then the wrong ECC code is discarded, and meanwhile, the correct data is released by the memory controller;
(3) the method comprises the following steps of (1) checking the validity, namely firstly setting a reasonable limit value, and then checking whether externally acquired data exceed the set limit value;
(4) the watchdog timer is characterized in that a time value and an expected task are set by internal software or hardware of a processor, and if the expected task is completed within the set time, the watchdog timer is reset; if the expected task is not completed within the set time, the watchdog timer sends a signal, if the internal hardware or software of the processor fails, the watchdog timer can detect the fault, and meanwhile, the watchdog timer can also be used for detecting and jumping out of an infinite loop;
(5) integrity Check, when the transmission data comes from the outside, the polynomial calculation detection is carried out on the data block transmitted from the outside by using Cyclic Redundancy Check (CRC) Check, the obtained detection result is attached to the back of the data frame, and meanwhile, the receiving equipment also executes the algorithm detection, so that the correctness and the integrity of the data transmission can be ensured, and if the CRC Check is not passed, the data can be judged to have errors in the transmission process;
(6) the method comprises the steps of performing homologous redundant data check, namely comparing the same actual data acquired by different external devices or different signal points to judge whether an abnormal state exists, namely comparing the same actual data acquired by different devices or comparing the same actual data acquired by different signal points to judge whether the abnormal state exists;
(7) and (4) service logic validity check, wherein a reverse check mechanism is set on the basis of logic gate check, flag records are carried out on the execution condition of each logic gate, and only when all flag records are complete, a protection command outlet is allowed.
Through the error check and detection of the error detection module 1 in the seven aspects, whether an abnormal state exists in the operation process of the power terminal system is identified, and whether the power terminal system fails is further judged.
As shown in fig. 3, a specific implementation manner of the step S2 includes:
s21, analyzing the safety risks of each link of data, codes, business logic, maintenance strategies and logistics management by using a fault tree and failure mode severity based on the abnormal state existing in the power terminal system;
s22, identifying various potential faults in the electric power terminal system according to the analysis result of the safety risk in the step S21, and carrying out safety evaluation and state grading on the electric power terminal system according to the various potential faults;
and S23, establishing a risk early warning system of the power terminal system based on space-time multi-dimensional fault analysis.
Wherein, the status classification in the power terminal system in the step S22 includes five grades of normal, abnormal, severe and crisis.
The specific implementation manner of step S23 is as follows: firstly, mapping various potential fault signals corresponding to abnormal states into specific fault properties, influence ranges and fault reasons, then recording the results in logs of the electric power terminal system protected by the safety chip and informing operation and maintenance personnel, thereby completing the establishment of the risk early warning system in the electric power terminal system and realizing the control of the safety risk full life cycle of the electric power terminal system.
In this embodiment, the evaluation and early warning of the abnormal state by the damage evaluation module 1 in the power terminal system is mainly performed by using fault tree analysis and failure mode severity analysis, and first, the safety risks of each link of data, codes, business logic, maintenance strategies and logistics management are analyzed by using the fault tree and the failure mode severity based on the abnormal state existing in the power terminal system, wherein the fault tree analysis includes three aspects, (1) the comprehensive analysis of a plurality of abnormal state events; (2) long-time scale analysis, namely evaluating the current abnormal state of the equipment according to the frequency of the historical abnormal state alarm information of the equipment, carrying out long-time scale statistics on certain abnormal state alarm/abnormal events, positioning potential fault points of a system, and reminding operation and maintenance personnel to maintain and repair the device; (3) analyzing historical operating data, carrying out quantitative statistics on the service condition, service life and service times of each module of the equipment, judging the current service life of the equipment under the support of statistical data, analyzing possible consequences by combining a fault tree, and giving early warning; secondly, identifying various potential faults in the electric power terminal system according to the failure alarm information of the single fault and the fault tree analysis result of the multiple faults, and carrying out safety assessment and state classification on the electric power terminal system according to the various potential faults, wherein the state classification in the electric power terminal system comprises five levels of normal, abnormal, severe, serious and crisis; and finally, establishing a risk early warning system of the electric power terminal system based on space-time multidimensional fault analysis in a grading manner according to the evaluation result and the state of the abnormal state in the electric power terminal system, namely mapping various potential fault signals corresponding to the abnormal state into specific fault properties, influence ranges and fault reasons, recording the result in a log of the electric power terminal system protected by a safety chip and informing operation and maintenance personnel, thereby completing the establishment of the risk early warning system in the electric power terminal system and realizing the control of the safety risk of the electric power terminal system in the whole life cycle.
In this embodiment, a chip protection device that already has information such as fault description, fault cause, and processing measure of a single latent fault is set in the power terminal system, a fault signal library can be output to a configuration tool through the chip protection device, the configuration tool gives a basic attribute of the single latent fault signal and a result of comprehensive analysis of multiple latent fault signals and forms a fault tree, and the fault tree information specifically includes: (1) mapping a plurality of faults to a fault specific description; (2) a logical relationship of the plurality of fault signals; (3) a degree of harm of the plurality of fault signals; (4) causes and measures for a plurality of fault signals; (5) the possible impact range of multiple faults. Therefore, by combining the fault tree information, the chip protection device can monitor the occurrence of the fault in real time and monitor the service life of the equipment in real time, so that the fault risk early warning is carried out in advance.
As shown in fig. 4, a specific implementation manner of the step S3 includes:
s31, constructing an expert database comprising early warning description, early warning reasons and processing measures, and performing fault processing on abnormal states existing in the operation process of the power terminal system according to the expert database;
s32, establishing a plurality of state recovery blocks, selecting one of the state recovery blocks to recover the power terminal system, if the power terminal system does not recover to normal, continuing to call other recovery blocks to recover the power terminal system until the power terminal system recovers to normal or the state recovery blocks are used up, and reporting the recovery result to an operator;
and S33, resetting the whole power terminal system through the resetting mechanism to realize self-healing recovery of the power terminal system.
In this embodiment, the state recovery module 3 includes an expert database and a plurality of state recovery blocks, the constituent elements of the expert database include an early warning description, an early warning reason and a processing measure, and the abnormal state existing in the operation process of the power terminal system is processed according to the expert database, where the abnormal state fault processing measure is: when the chip protection device can automatically execute, reporting the fault report after automatic execution, and when the chip protection device can not automatically process, reporting the fault description and the suggested processing measures to the operator; establishing a plurality of state recovery blocks outside the expert database fault handling measures and trying to call the state recovery blocks to recover the power terminal system, verifying whether the power terminal system recovers to be normal or not by using an acceptance system, if the power terminal system does not recover to be normal, continuing to call other recovery blocks to recover until the power terminal system recovers to be normal or the state recovery blocks are used up, reporting a recovery result to an operator, and after abnormal state fault handling is completed, resetting the whole power terminal system by the power terminal system through abnormal process detection and resetting, chip interface resetting, watchdog timer or reboot resetting so as to help the power terminal system to recover from abnormal software system operation such as 'pointer runaway' and 'process stuck'.
It should be noted that, since each fault signal or a plurality of fault signals having a logical relationship need to configure the fault cause description and the fault handling measures, the fault signal library includes an attribute of an expert library.
As shown in fig. 5, the specific matters of step S4 include:
s41, logging abnormal states existing in the operation process of the power terminal system;
s42, performing sorting analysis on the log records of the abnormal state in the step S41 and forming an event report;
and S43, continuously serving the power terminal system.
In the embodiment, log recording is firstly carried out on various abnormal state data, module failures and various fault events identified in the operation process of the power terminal system, wherein the log records basic information such as specific executable programs, software/hardware modules, time, fault classification, processing measures and the like corresponding to the events according to a specified format; then, the logs of all relevant devices are sorted and analyzed to form an event report, specifically: firstly, the same event process (such as primary alarm, primary fault trip and the like) is backtracked on site; secondly, sequencing logs of wave recording, alarming, displacement and the like of the double sets of protection in time sequence, and analyzing the change of data in the occurrence time period of the double-disk event so as to analyze the abnormity of a certain set of protection equipment, the abnormity of a loop and the like; log of recording wave, warning, action, displacement and the like of the associated equipment are arranged in sequence, and information of loop integrity, accident positioning and the like can be analyzed and inferred; while continuing to service the power terminal system with the continuous service module 4.
The embedded intrusion tolerance fault-tolerant device and the processing method applied to the power terminal provided by the invention are described in detail above. The principles and embodiments of the present invention are explained herein using specific examples, which are presented only to assist in understanding the core concepts of the present invention. It should be noted that, for those skilled in the art, it is possible to make various improvements and modifications to the present invention without departing from the principle of the present invention, and those improvements and modifications also fall within the scope of the claims of the present invention.
Claims (8)
1. The utility model provides an embedded fault-tolerant device that invades that tolerates for electric power terminal which characterized in that, includes embedded error detection module, damage evaluation module, the state recovery module and the continuous service module of locating in the electric power terminal system, wherein:
the error detection module is used for checking the legality and the integrity of input data and judging whether an abnormal state exists in the operation process of the power terminal system;
the damage evaluation module is used for receiving the abnormal state judged by the error detection module and evaluating the damage range and the failure degree of the power terminal system;
the state recovery module is used for receiving the damage range and the failure degree information of the power terminal system evaluated by the damage evaluation module, performing failure self-healing repair management according to the failure mapping type and reporting a repair result to the power terminal system;
and the continuous service module is used for generating a system log of an abnormal state in the operation process of the electric power terminal system, performing off-line analysis on the generated system log and continuously providing service for the electric power terminal system.
2. An embedded intrusion tolerance fault-tolerant processing method applied to a power terminal is characterized by comprising the following steps:
s1, verifying the legality and integrity of the input data through the error detection module, and further judging whether the power terminal system has an abnormal state;
s2, evaluating and early warning a damage range and a failure degree caused by an abnormal state existing in the operation process of the power terminal system by using a damage evaluation module;
s3, repairing abnormal states existing in the operation process of the power terminal system by using the state recovery module and reporting a repairing result, if the repairing is successful, entering the step S4, and if the repairing is failed, returning to continue repairing until the repairing is successful;
and S4, continuously providing service for the electric power terminal system through the continuous service module, and simultaneously generating a system log and an event report of the abnormal state in the operation process of the electric power terminal system and performing offline analysis.
3. The embedded intrusion tolerance and fault tolerance processing method applied to the power terminal as claimed in claim 2, wherein the error detection module specifically checks the validity and integrity of the input data comprises: performing parity check on a data bus of a processor and a register of the processor in the power terminal system, and judging whether bit errors occur in short word length data in the storage process; storing a data-encrypted ECC code on the extra data bits for determining whether the data has an error; carrying out validity check on externally acquired data in a mode of setting a limit value; setting an expected task and a time value in software or hardware in a processor, and monitoring whether the expected task is completed within the set time by using a watchdog timer to judge whether the hardware or the software in the processor has errors; performing polynomial calculation detection on the externally transmitted data block by using CRC (cyclic redundancy check) and attaching a detection result to the back of the data frame, and then judging whether the data is in error in the transmission process according to whether the CRC passes or not; comparing the same data acquired by different external devices or different signal points, and judging whether the homologous redundant data is abnormal or not; and setting a reverse checking mechanism on the basis of logic gate checking to check the validity of the business logic.
4. The embedded intrusion tolerance fault-tolerant processing method applied to the power terminal as claimed in claim 3, wherein the specific implementation manner of the step S2 includes:
s21, analyzing the safety risks of each link of data, codes, business logic, maintenance strategies and logistics management by using a fault tree and failure mode severity based on the abnormal state existing in the power terminal system;
s22, identifying various potential faults in the electric power terminal system according to the analysis result of the safety risk in the step S21, and carrying out safety evaluation and state grading on the electric power terminal system according to the various potential faults;
and S23, establishing a risk early warning system of the power terminal system based on space-time multi-dimensional fault analysis.
5. The embedded intrusion tolerance processing method applied to the power terminal as claimed in claim 4, wherein the status classification in the power terminal system in the step S22 includes five stages of normal, abnormal, severe and crisis.
6. The embedded intrusion tolerance and fault tolerance processing method applied to the power terminal as claimed in claim 5, wherein the step S23 is specifically implemented as follows: firstly, various fault signals corresponding to abnormal states are mapped into specific fault properties, influence ranges and fault reasons, then the results are recorded in logs of the electric power terminal system protected by the safety chip and operation and maintenance personnel are notified, so that the establishment of a risk early warning system in the electric power terminal system is completed, and the control of the safety risk full life cycle of the electric power terminal system is realized.
7. The embedded fault-tolerant intrusion tolerance processing method applied to the power terminal as claimed in claim 6, wherein the state recovery module comprises an expert database and a state recovery block, and the specific implementation manner of the step S3 includes:
s31, constructing an expert database comprising early warning description, early warning reasons and processing measures, and performing fault processing on abnormal states existing in the operation process of the power terminal system according to the expert database;
s32, establishing a plurality of state recovery blocks, selecting one of the state recovery blocks to recover the power terminal system, if the power terminal system does not recover to normal, continuing to call other recovery blocks to recover the power terminal system until the power terminal system recovers to normal or the state recovery blocks are used up, and reporting the recovery result to an operator;
and S33, resetting the whole power terminal system through the resetting mechanism to realize self-healing recovery of the power terminal system.
8. The embedded intrusion tolerance and fault tolerance processing method applied to the power terminal as claimed in claim 7, wherein the specific items of the step S4 include:
s41, logging abnormal states existing in the operation process of the power terminal system;
s42, performing sorting analysis on the log records of the abnormal state in the step S41 and forming an event report;
and S43, continuously serving the power terminal system.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110056847.1A CN112804234A (en) | 2021-01-15 | 2021-01-15 | Embedded intrusion-tolerant fault-tolerant device applied to power terminal and processing method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110056847.1A CN112804234A (en) | 2021-01-15 | 2021-01-15 | Embedded intrusion-tolerant fault-tolerant device applied to power terminal and processing method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN112804234A true CN112804234A (en) | 2021-05-14 |
Family
ID=75809797
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110056847.1A Pending CN112804234A (en) | 2021-01-15 | 2021-01-15 | Embedded intrusion-tolerant fault-tolerant device applied to power terminal and processing method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN112804234A (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114876820A (en) * | 2022-04-10 | 2022-08-09 | 安徽卧龙泵阀股份有限公司 | Remote control system and method based on chemical pump |
| CN115098306A (en) * | 2022-08-03 | 2022-09-23 | 南方电网数字电网研究院有限公司 | Embedded fault-tolerant self-healing structure, method and system applied to power industrial control terminal |
| CN116049866A (en) * | 2022-06-27 | 2023-05-02 | 荣耀终端有限公司 | Data protection method, electronic equipment and chip system |
| CN116049866B (en) * | 2022-06-27 | 2024-06-28 | 荣耀终端有限公司 | Data protection method, electronic equipment and chip system |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101945009A (en) * | 2010-09-14 | 2011-01-12 | 国网电力科学研究院 | Positioning method and device of power communication network fault based on case and pattern matching |
| CN102404139A (en) * | 2011-10-21 | 2012-04-04 | 浪潮电子信息产业股份有限公司 | Method for increasing fault tolerance performance of application level of fault tolerance server |
| CN109992963A (en) * | 2019-04-12 | 2019-07-09 | 长沙理工大学 | The protecting information safety method and system of a kind of electric power terminal and its embedded system |
| CN111985558A (en) * | 2020-08-19 | 2020-11-24 | 安徽蓝杰鑫信息科技有限公司 | Electric energy meter abnormity diagnosis method and system |
-
2021
- 2021-01-15 CN CN202110056847.1A patent/CN112804234A/en active Pending
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101945009A (en) * | 2010-09-14 | 2011-01-12 | 国网电力科学研究院 | Positioning method and device of power communication network fault based on case and pattern matching |
| CN102404139A (en) * | 2011-10-21 | 2012-04-04 | 浪潮电子信息产业股份有限公司 | Method for increasing fault tolerance performance of application level of fault tolerance server |
| CN109992963A (en) * | 2019-04-12 | 2019-07-09 | 长沙理工大学 | The protecting information safety method and system of a kind of electric power terminal and its embedded system |
| CN111985558A (en) * | 2020-08-19 | 2020-11-24 | 安徽蓝杰鑫信息科技有限公司 | Electric energy meter abnormity diagnosis method and system |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114876820A (en) * | 2022-04-10 | 2022-08-09 | 安徽卧龙泵阀股份有限公司 | Remote control system and method based on chemical pump |
| CN114876820B (en) * | 2022-04-10 | 2024-05-03 | 安徽卧龙泵阀股份有限公司 | Remote control system and method based on chemical pump |
| CN116049866A (en) * | 2022-06-27 | 2023-05-02 | 荣耀终端有限公司 | Data protection method, electronic equipment and chip system |
| CN116049866B (en) * | 2022-06-27 | 2024-06-28 | 荣耀终端有限公司 | Data protection method, electronic equipment and chip system |
| CN115098306A (en) * | 2022-08-03 | 2022-09-23 | 南方电网数字电网研究院有限公司 | Embedded fault-tolerant self-healing structure, method and system applied to power industrial control terminal |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109783262B (en) | Fault data processing method, device, server and computer readable storage medium | |
| KR101856543B1 (en) | Failure prediction system based on artificial intelligence | |
| CN109992963B (en) | Information security protection method and system for power terminal and embedded system thereof | |
| US7774651B2 (en) | System and method to detect errors and predict potential failures | |
| CN109328340B (en) | Memory fault detection method and device and server | |
| US8108724B2 (en) | Field replaceable unit failure determination | |
| US5974576A (en) | On-line memory monitoring system and methods | |
| CN110825578A (en) | Method for automatically managing hardware error events occurring in a data center system | |
| CN112804234A (en) | Embedded intrusion-tolerant fault-tolerant device applied to power terminal and processing method | |
| CN102135925B (en) | Method and device for detecting error check and correcting memory | |
| CN111857555B (en) | Method, apparatus and program product for avoiding failure events for disk arrays | |
| US20030084376A1 (en) | Software crash event analysis method and system | |
| Du et al. | Predicting uncorrectable memory errors for proactive replacement: An empirical study on large-scale field data | |
| CN115794588A (en) | Memory fault prediction method, device and system and monitoring server | |
| Tsai et al. | A study of soft error consequences in hard disk drives | |
| CN117370970A (en) | Fault attack protection method based on random fault injection | |
| CN117076301A (en) | System performance test method and device and electronic equipment | |
| CN101271419B (en) | Random storage failure detecting and processing method, device and system | |
| CN114610560B (en) | System abnormality monitoring method, device and storage medium | |
| US10210033B2 (en) | Managing component errors with a common software sensor based diagnostic method | |
| CN115562918A (en) | Computer system fault testing method and device, electronic equipment and readable medium | |
| CN115098306A (en) | Embedded fault-tolerant self-healing structure, method and system applied to power industrial control terminal | |
| CN117874772B (en) | Application software vulnerability scanning method and system | |
| CN117873408B (en) | Cloud printer data recovery method and related device | |
| CN117076186B (en) | Memory fault detection method, system, device, medium and server |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20210514 |
|
| RJ01 | Rejection of invention patent application after publication |