CN115776175A - Dispatching automation data acquisition method and system based on security access area - Google Patents
Dispatching automation data acquisition method and system based on security access area Download PDFInfo
- Publication number
- CN115776175A CN115776175A CN202211504209.2A CN202211504209A CN115776175A CN 115776175 A CN115776175 A CN 115776175A CN 202211504209 A CN202211504209 A CN 202211504209A CN 115776175 A CN115776175 A CN 115776175A
- Authority
- CN
- China
- Prior art keywords
- channel
- command
- access area
- module
- data
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Remote Monitoring And Control Of Power-Distribution Networks (AREA)
Abstract
The invention provides a dispatching automation data acquisition method and a system based on a security access area, wherein the method comprises the following steps: configuring a security access area acquisition channel, and maintaining channel parameters according to a preset channel type; the production control area transmits the control command to the safety access area through the forward isolation device, and then sends various commands to the transformer substation, and sends the command processing result to the production control area through the reverse isolation device; packaging the received substation protocol data into a numbered data file by the security access area, and transmitting the numbered data file to the production control area through a reverse isolation device; and sequentially analyzing each data file by the production control area, and sending a serial number missing data retransmission request to the safety access area through the forward isolation device when the serial number of the data file is discontinuous, otherwise, submitting the transformer substation protocol data to the scada system. The invention not only ensures the security of the first region, but also realizes the real-time property and the stability of cross-region data acquisition.
Description
Technical Field
The invention relates to the technical field of power system automation, in particular to a dispatching automation data acquisition method and system based on a safety access area.
Background
The traditional data acquisition and monitoring of the main network dispatching system are all in a production control area (first area) of the power system, and the safety level requirement of the area is the highest. However, with the requirements of various new energy data access and emergency command, the scheduling data needs to be collected through a public network, and if one area is directly collected, it means that one area needs to be directly connected with an external network, and the network attack may be applied at any time, which is not favorable for safe operation of the scheduling system.
In order to improve the safety of a region, data acquisition of a main network scheduling system needs to be moved to other power system production large regions, and cross-region data transmission puts high requirements on the real-time performance and stability of the scheduling system.
Therefore, it is desirable to provide a scheduling automation data collection method that can ensure the security of a region and achieve the real-time performance and stability of cross-region data collection.
Disclosure of Invention
The invention aims to provide a dispatching automation data acquisition method based on a safety access area, which solves the application defects of the data acquisition method of the existing main network dispatching system, and can ensure the safety of one area and realize the instantaneity and stability of cross-area data acquisition at the same time under the background of uploading a large amount of data of a transformer substation.
In order to achieve the above objects, it is necessary to provide a method, a system, a computer device and a storage medium for scheduling automation data collection based on a secure access area.
In a first aspect, an embodiment of the present invention provides a method for scheduling automated data acquisition based on a secure access area, where the method includes the following steps:
configuring a security access area acquisition channel, and maintaining channel parameters according to a preset channel type;
responding to the issuing of the control command, transmitting various control commands to the safety access area by the production control area through a forward isolation device so that the safety access area issues various commands to the transformer substation, and sending an acquired command processing result to the production control area through a reverse isolation device; the control command comprises a set point command, a remote control command, a plan curve issuing command, a time setting command and a general calling command;
in response to access of the substation protocol data, sequentially packaging the substation protocol data by the security access area and generating numbered data files, and transmitting the data files to the production control area through the reverse isolation device; the format of the data file is CIM/E format;
and responding to the completion of the reception of the data files, sequentially analyzing each data file by the production control area, checking whether the serial numbers of the data files are continuous, if not, sending a serial number missing data retransmission request to the safety access area through the forward isolation device, otherwise, submitting the analyzed transformer substation protocol data to a scada system.
Further, the step of maintaining the channel parameters according to the preset channel type includes:
dividing the acquisition channels into a production control area channel and a safety access area channel according to the group number of the front-end processor corresponding to each acquisition channel;
and acquiring the running state of each acquisition channel in real time, and displaying the running state of each acquisition channel in a distinguishing manner according to the corresponding preset color according to the channel type.
Further, the step of issuing various instructions to the transformer substation by the security access area includes:
packaging various instructions by adopting a preset protocol to obtain corresponding protocol data packets;
and carrying out public network encryption processing on the protocol data packet to obtain an encrypted protocol data packet, and transmitting the encrypted protocol data packet to an RTU device in the transformer substation.
Further, the step of sending a request for missing number data to the security access area through the forward isolation device includes:
establishing tcp connection with the secure access area through a forward isolation device;
and sending the number missing data retransmission request to the safe access area through the tcp connection according to the missing file number.
Further, the method further comprises:
and responding to the change of the channel parameters, and transmitting the changed channel parameters to a safe access area by the production control area through the forward isolation device so that the safe access area loads the changed channel parameters.
Further, the step of loading the change channel parameter in the secure access area includes:
updating the changed channel parameters to the corresponding preposed memory base according to a pre-deployed channel parameter synchronization program and a memory file mapping technology of an operating system, loading the changed channel parameters through the corresponding preposed machine, and transmitting the obtained parameter change result to the production control area through the reverse isolation device.
In a second aspect, an embodiment of the present invention provides a system for scheduling automated data acquisition based on a secure access area, where the system includes:
the system comprises a production control area server, a forward isolation device, a reverse isolation device and a safety access area server;
the production control area server is used for transmitting a control command, a channel management command and a change channel parameter to the safety access area server through the forward isolation device and transmitting the control command, the channel management command and the change channel parameter to an RTU device of a transformer substation through the safety access area server; the control command comprises a set point command, a remote control command, a plan curve issuing command, a time setting command and a general calling command;
the safety access area server is used for acquiring a command processing result, a channel operation state, a parameter change result and transformer substation protocol data returned by the transformer substation, transmitting the command processing result, the channel operation state, the parameter change result and the transformer substation protocol data to the production control area server through the reverse isolation device, and submitting the transformer substation protocol data to a scada system through the production control area server.
Furthermore, the production control area server comprises a front-end processor interface module, a control service module, a first channel management module, a database, a first parameter synchronization module, a first command issuing module and a data unpacking module;
the front-end processor interface module is used for issuing the acquired channel management command to the first channel management module and carrying out interface display on the running state of each acquisition channel acquired by the first channel management module according to the channel type;
the control service module is used for issuing various control commands to the first command issuing module and acquiring instruction processing results corresponding to the operation instructions through the first command issuing module; the control commands comprise a set point command, a remote control command, a plan curve issuing command, a time setting command and a total calling command;
the first channel management module is used for managing each acquisition channel according to a channel management command issued by the front-end processor interface module, maintaining channel parameters according to preset channel types, acquiring the running state of each acquisition channel in real time and transmitting the running state to the front-end processor interface module;
the database management module is used for changing the channel parameters through a database management editing interface, storing the corresponding changed channel parameters into the database, sending the changed channel parameters to the first parameter synchronization module, and acquiring a parameter change result returned by the first parameter synchronization module;
the database is used for storing the channel parameters, the channel parameter change conditions and the corresponding parameter change results of all the acquisition channels;
the first parameter synchronization module is configured to transmit the change channel parameter to the secure access area server through a forward isolation device, receive a parameter change result returned by the secure access area server through a reverse isolation device, and transmit the parameter change result to the database management module through the database;
the first command issuing module is configured to transmit the control command to the security access area service through the forward isolation device, receive a command processing result returned by the security access area server through the reverse isolation device, and send the command processing result to the control service module;
the data unpacking module is used for acquiring the numbered data file transmitted by the server of the safe access area through the reverse isolation device, and submitting the obtained transformer substation protocol data to the scada system after analyzing and checking the data file; the format of the data file is CIM/E format;
the safety access area server comprises a second channel management module, a second command issuing module, a second parameter synchronization module, a protocol data packing module, a data reverse transmission module and a transformer substation communication module;
the second channel management module is used for receiving a channel management command transmitted by the production control area server, transmitting the channel management command to an RTU (remote terminal unit) device of a transformer substation through the transformer substation communication module, and transmitting the received running state of each acquisition channel returned by the transformer substation to the production control area server through the reverse isolation device;
the second command issuing module is used for receiving the control command transmitted by the production control area server, transmitting the control command to an RTU (remote terminal unit) device of a transformer substation through the transformer substation communication module, and transmitting a received command processing result returned by the transformer substation to the production control area server through the reverse isolation device;
the second parameter synchronization module is used for receiving the change channel parameters transmitted by the production control area server, transmitting the change channel parameters to an RTU (remote terminal unit) device of a transformer substation through the transformer substation communication module, and transmitting the received parameter change results returned by the transformer substation to the production control area server through the reverse isolation device;
the protocol data packing module is used for receiving the substation protocol data transmitted by the substation through the substation communication module, packing the substation protocol data in sequence, generating a numbered data file, and sending the data file to the data reverse transmission module;
the data reverse transmission module is used for establishing communication connection with the production control area server and transmitting the data file to the production control area server through the reverse isolation device;
and the transformer substation communication module is used for establishing communication connection between the safety access area server and the transformer substation and analyzing protocol data.
In a third aspect, an embodiment of the present invention further provides a computer device, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor, where the processor implements the steps of the method when executing the computer program.
In a fourth aspect, the present invention further provides a computer-readable storage medium, on which a computer program is stored, where the computer program is executed by a processor to implement the steps of the above method.
The application provides a dispatching automation data acquisition method, a system, computer equipment and a storage medium based on a security access area, through the method, channel parameter maintenance is carried out according to preset channel types after a security access area acquisition channel is configured, a production control area transmits a control command to the security access area through a forward isolation device, then the security access area transmits various commands to a transformer substation, a received command processing result is sent to the production control area through a reverse isolation device, the security access area packages received transformer substation protocol data to generate a data file with a serial number, the data file is transmitted to the production control area through the reverse isolation device, the production control area analyzes the data files in sequence, and when the serial number of the data file is discontinuous, a serial number missing data request is sent to the security access area through the forward isolation device, otherwise, the transformer substation protocol data is submitted to a scada system. Compared with the prior art, the dispatching automation data acquisition method based on the safe access area can access data of a new energy power plant or a conventional substation emergency channel in a mode of the safe access area on the premise of ensuring the safety of a production control area, improves the safety of power grid operation, has good compatibility, can coexist with a current dispatching data network access mode, is transparent to a scada system, avoids large upgrading and transformation, saves cost, realizes real-time, efficient and accurate and ordered transmission of data between the safe access area and the production control area by establishing a file information interaction channel, checking a file serial number and the like, ensures the real-time performance and stability of cross-area data acquisition, and further provides reliable guarantee for the safe operation of a dispatching system.
Drawings
Fig. 1 is a schematic flow chart of a method for dispatching automation data acquisition based on a security access area in an embodiment of the invention;
FIG. 2 is a block diagram of a group number of a front-end processor according to an embodiment of the present invention;
FIG. 3 is another schematic flow chart of a method for dispatching automation data acquisition based on a security access area in the embodiment of the invention;
FIG. 4 is a schematic structural diagram of a dispatching automation data acquisition system based on a security access area in an embodiment of the present invention;
FIG. 5 is a detailed structural diagram of a dispatching automation data acquisition system based on a security access area in an embodiment of the present invention;
fig. 6 is an internal structural diagram of a computer device in the embodiment of the present invention.
Detailed Description
In order to make the purpose, technical solution and advantages of the present invention more clearly apparent, the present invention is further described in detail below with reference to the accompanying drawings and embodiments, and it is obvious that the embodiments described below are part of the embodiments of the present invention, and are used for illustrating the present invention only, but not for limiting the scope of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
The dispatching automation data acquisition method based on the safety access area can be suitable for signals of a power grid main network dispatching monitoring station, reduces the risk of direct connection between a production control area and an external network, and realizes real-time and stable cross-area data acquisition; the following embodiments will describe the method for automated data acquisition based on scheduling of a security access area according to the present invention in detail.
In one embodiment, as shown in fig. 1, there is provided a method for automated data acquisition based on scheduling of a secure access area, comprising the steps of:
s11, configuring a security access area acquisition channel, and maintaining channel parameters according to a preset channel type; the configuration of the acquisition channel of the security access area can be understood as adding the acquisition channel of the security access area in a channel for communication between the transformer substation and the master station; when maintaining all channel parameters of an acquisition channel added to a secure access area, the channel types of different areas need to be divided, specifically, the step of maintaining the channel parameters according to the preset channel types includes:
dividing the acquisition channels into a production control area channel and a safety access area channel according to the group number of the front-end processor corresponding to each acquisition channel; the group number can be understood as the number of the front-end processor corresponding to the acquisition channels of the production control area and the safety access area, as shown in fig. 2, the front-end processors with the same group number belong to the same group, and the front-end processors of different groups operate in different areas;
and acquiring the running state of each acquisition channel in real time, and displaying the running state of each acquisition channel in a distinguishing manner according to the corresponding preset color according to the channel type.
S12, responding to the issuing of a control command, transmitting various control commands to the safety access area by the production control area through a forward isolation device so that the safety access area issues various commands to the transformer substation, and sending an obtained command processing result to the production control area through a reverse isolation device; the control commands include, but are not limited to: setting a point instruction, a remote control instruction, a plan curve issuing, a time setting instruction and a general calling instruction;
the safety access area is in charge of public network data communication with the transformer substation, and related protocol data of the transformer substation are collected and transmitted to the production control area; the production control area is used for collecting data of a private line network and a scheduling data network, all work such as collection channel parameter maintenance, issuing of control commands and the like is still completed in the production control area, the production control area transmits the data to the safety access area through physical isolation, the safety access area adopts a traditional protocol, and the data are encrypted through a public network and then transmitted to an RTU device in a transformer substation; specifically, the step of issuing various instructions to the transformer substation by the security access area includes:
packaging various instructions by adopting a preset protocol to obtain corresponding protocol data packets; the preset protocol may be a 101 protocol or a 104 protocol, and is selected according to the actual application requirements, which is not specifically limited herein;
and carrying out public network encryption processing on the protocol data packet to obtain an encrypted protocol data packet, and transmitting the encrypted protocol data packet to an RTU device in the transformer substation.
S13, responding to access of transformer substation protocol data, sequentially packaging the transformer substation protocol data by the security access area, generating a numbered data file, and transmitting the data file to the production control area through the reverse isolation device; the format of the data file is CIM/E format;
the substation protocol data can be understood as telemetry, telecommand, soe and other protocol data received by the security access area, and the corresponding protocol data packaging can be understood as the substation protocol data
Packaging and writing a data text file according to an E file format in the power industry, wherein the data file is named in a serial number mode in order to ensure real-time performance and reliability; it should be noted that, here, only the parsing protocol data is packed instead of packing all protocol message data, so that the isolation and transmission of too many meaningless flow messages can be effectively reduced, the data transmission efficiency and capacity are improved, and when the data files are transmitted to the production control area, the file buffer directories are also preset locally for backup, so as to prevent the problem of data file loss caused by unstable communication during the data transmission process.
S14, responding to the completion of the reception of the data files, sequentially analyzing the data files by the production control area, checking whether the serial numbers of the data files are continuous, if not, sending a serial number missing data retransmission request to the safety access area through the forward isolation device, otherwise, submitting the analyzed transformer substation protocol data to a scada system; the serial number of the data file is a serial number generated according to the sequence of the protocol data, and is reflected in the name of the data file; when the production control area analyzes each data file, if the file naming serial number is found to be discontinuous, the situation that the data file is lost exists, data transmission connection needs to be actively established with the security access area, the security access area is requested to retransmit the part of content according to the missing serial number, and if the serial number is continuous, the protocol data obtained through analysis only needs to be submitted to a scada system for use.
Specifically, the step of sending a request for missing number data to the security access area through the forward isolation device includes:
establishing tcp connection with the secure access area through a forward isolation device;
sending the number missing data retransmission request to the safe access area through the tcp connection according to the missing file number; the number missing data retransmission request comprises a missing file number needing to be retransmitted, after the safe access area receives the request, a file needing to be retransmitted can be found out from a backup file buffer directory according to the missing file number needing to be retransmitted and transmitted to the production control area again, and after the production control area completes analysis and number verification, the file is submitted to the scada system together with the previously received transformer substation protocol data and used for monitoring, analyzing and using of the scada system.
In addition, in order to ensure that the production control area can maintain the acquisition channel parameters of the secure access area in a unified manner, and facilitate cross-region maintenance of system parameters, in this embodiment, channel parameter synchronization programs are deployed in the production control area and the secure access area in a unified manner; specifically, as shown in fig. 3, the method further includes:
s15, responding to the change of the channel parameters, and transmitting the changed channel parameters to a safe access area by the production control area through the forward isolation device so that the safe access area loads the changed channel parameters;
when the production control area receives a channel parameter change message sent by a front-end database management interface, the production control area transmits the channel parameter change message to the safety access area through the forward isolation device, and the safety access area loads and changes the channel parameter and synchronizes the channel parameter change message to an RTU device of the transformer substation; specifically, the step of loading the change channel parameter in the secure access area includes:
updating the changed channel parameters to the corresponding preposed memory base according to a pre-deployed channel parameter synchronization program and a memory file mapping technology of an operating system, loading the changed channel parameters through the corresponding preposed machine, and transmitting the obtained parameter change result to the production control area through the reverse isolation device.
In the embodiment of the application, after the acquisition channel of the safety access area is configured, channel parameter maintenance is carried out according to the type of a preset channel, a control command is transmitted to the safety access area by the production control area through the forward isolating device, various commands are issued to a transformer substation by the safety access area, the received command processing result is transmitted to the production control area through the reverse isolating device, the received transformer substation protocol data is packaged by the safety access area to generate a data file with a serial number and transmitted to the production control area through the reverse isolating device, each data file is sequentially analyzed by the production control area, and when the serial number of the data file is discontinuous, a serial number missing data retransmission request is transmitted to the safety access area through the forward isolating device, otherwise, the technical scheme includes that substation protocol data are submitted to a scada system, on the premise that the safety of a production control area is guaranteed, the data of a new energy power plant or a conventional substation emergency channel are accessed in a safe access area mode, the safety of power grid operation is improved, good compatibility is achieved, the data can coexist with a current scheduling data network access mode, the scada system is transparent, large upgrading and transformation are avoided, cost is saved, a file information interaction channel is established, file serial numbers are checked, real-time, efficient and accurate and orderly transmission of data between the safe access area and the production control area is achieved, the instantaneity and stability of cross-area data collection are guaranteed, and reliable guarantee is provided for safe operation of a scheduling system.
In one embodiment, as shown in fig. 4, there is provided a safety access area based dispatch automated data collection system, the system comprising:
the system comprises a production control area server 1, a forward isolation device 2, a reverse isolation device 3 and a safety access area server 4;
the production control area server 1 is used for transmitting a control command, a channel management command and a change channel parameter to the safety access area server 4 through the forward isolation device 2 and transmitting the control command, the channel management command and the change channel parameter to an RTU device of a transformer substation through the safety access area server 4;
the safety access area server 2 is used for acquiring a command processing result, a channel operation state, a parameter change result and transformer substation protocol data returned by the transformer substation, transmitting the command processing result, the channel operation state, the parameter change result and the transformer substation protocol data to the production control area server 1 through the reverse isolation device 3, and submitting the transformer substation protocol data to a scada system through the production control area server 1;
specifically, as shown in fig. 5, the production control area server 1 includes a front-end processor interface module 11, a control service module 12, a first channel management module 13, a database management module 14, a database 15, a first parameter synchronization module 16, a first command issuing module 17, and a data unpacking module 18;
the front-end processor interface module 11 is configured to issue the acquired channel management command to the first channel management module 13, and perform interface display on the operation state of each acquisition channel acquired by the first channel management module 13 according to the channel type;
the control service module 12 is configured to issue various control commands to the first command issuing module 17, and obtain instruction processing results corresponding to each operation instruction through the first command issuing module 17; the control command comprises a set point command, a remote control command, a plan curve issuing command, a time setting command and a general calling command;
the first channel management module 13 is configured to manage each acquisition channel according to a channel management command issued by the front-end processor interface module 11, maintain channel parameters according to preset channel types, and obtain an operation state of each acquisition channel in real time and transmit the operation state to the front-end processor interface module 11; the channel management may be understood as being responsible for increasing management of the channels of the secure access area without affecting the channels of the original production control area, including creating different channel types, collecting node groups, channel state management, and the like, and the corresponding channel management command may be understood as a channel command such as channel enabling, channel disabling, channel ip switching, and the like, which is issued by the front interface of the production control area and transmitted to the first channel management module 13 when the channels of the secure access area need to be stopped, enabled, or the access channel ip needs to be switched. The first channel management module 13 is transmitted to the second channel management module 41 of the security access area server 4 through tcp connection of the forward isolation device 2; and the safety access area channel management module transmits the channel command to the substation communication module. The second channel management module 41 of the security access area server 4 generates a channel operation state file from the state change of the acquisition channel of the substation communication module 46, synchronizes the channel operation state file to the production control area server 1 through the reverse isolation device 3, analyzes the channel operation state file by the first channel management module 13 of the production control area server 1, feeds the channel operation state file back to the front-end processor interface module 11, and displays the channel operation state on the front-end processor interface according to the preset color of the corresponding channel type;
the database management module 14 is configured to manage and edit channel parameters through a database, store the corresponding changed channel parameters in the database 15, send the changed channel parameters to the first parameter synchronization module 16, and obtain a parameter change result returned by the first parameter synchronization module 16; the database management editing interface can be used for changing (adding, deleting and modifying) parameters of the channel of the secure access area according to requirements, informing the first parameter synchronization module 16 of transmitting the changed channel parameters to the second parameter synchronization module 43 of the server 4 of the secure access area through tcp connection of the forward isolation device 2, then updating the changed channel parameters to a preposed parameter memory bank of the server 4 of the secure access area by the second parameter synchronization module 43 of the server 4 of the secure access area, informing the communication module 46 of the transformer substation of loading corresponding changed channel parameters, generating a file by the second parameter synchronization module 43 of the server 4 of the secure access area according to the parameter change results, transmitting the file to the server 1 of the production control area through the reverse isolation device 3, and analyzing the parameter change results and feeding back the parameter change results to the database editing interface by the corresponding first parameter synchronization module 16; through the mutual cooperation of the first parameter synchronization module 16 of the production control area server 1 and the second parameter synchronization module 43 of the safety access area server 4, the cross-area maintenance of channel parameters is realized, and convenience is provided for the system parameter maintenance;
the database 15 is used for storing the channel parameters, the channel parameter change conditions and the corresponding parameter change results of all the acquisition channels;
the first parameter synchronization module 16 is configured to transmit the change channel parameter to the secure access area server 4 through the forward isolation device 2, receive a parameter change result returned by the secure access area server 4 through the reverse isolation device 3, and transmit the parameter change result to the database management module 14 through the database 15;
the first command issuing module 17 is configured to transmit the control command to the security access area service 4 through the forward isolation device 2, receive a command processing result returned by the security access area server 4 through the reverse isolation device 3, and send the command processing result to the control service module 12; specifically, for the commands such as point setting, remote control, plan curve and the like of the production control area, the first command issuing module 17 can transmit the command issued by the control service module 12 of the production control area device to the second command issuing module 42 of the security access area server 4 through tcp connection of the forward isolation device 2, then the second command issuing module 42 of the security access area server 4 transmits the control command to the substation communication module 46, and the substation communication module 46 issues the control command to the corresponding station through a protocol channel; the corresponding substation communication module 46 feeds back the command processing result to the second command issuing module 42 of the security access area server 4, and the second command issuing module sends the command processing result generation file to the production control area through the reverse isolation device 3; the first command issuing module 17 of the production control area server 1 analyzes the received command processing result file and feeds back the result file to the control service module 12, and finally feeds back the control result to the interface; it should be noted that the command processing result file is numbered in the same order as the protocol data file, and a loss retransmission mechanism is provided to ensure the smooth command processing process;
the data unpacking module 18 is configured to acquire the numbered data file transmitted by the security access area server 4 through the reverse isolation device 3, and submit the obtained substation protocol data to the scada system after analyzing and checking the data file; the format of the data file is CIM/E format; the analysis and verification can be understood as analyzing the data file, judging whether the serial number of the data file is normal or not, if the serial number of the data file is normal, submitting the data file to the scada system through a data submitting interface, otherwise, if the serial number of the data file is not continuous, establishing tcp connection with a data reverse transmission module 45 of the safe access area server 4 through the forward isolation device 2, sending a request for transmitting the missing serial number data file, waiting for receiving the missing serial number data file transmitted by the safe access area server 4, and submitting the missing serial number data file to the scada system for monitoring and analysis after analysis and verification;
the security access area server 4 comprises a second channel management module 41, a second command issuing module 42, a second parameter synchronization module 43, a protocol data packing module 44, a data reverse transmission module 45 and a transformer substation communication module 46;
the second channel management module 41 is configured to receive a channel management command transmitted by the production control area server 1, transmit the channel management command to an RTU device of a substation through the substation communication module 46, and transmit a received operation state of each acquisition channel returned by the substation to the production control area server 1 through the reverse isolation device 3;
the second command issuing module 42 is configured to receive a control command transmitted by the production control area server 1, transmit the control command to an RTU device of a substation through the substation communication module 46, and transmit a received command processing result returned by the substation to the production control area server 1 through the reverse isolation device 3;
the second parameter synchronization module 43 is configured to receive a change channel parameter transmitted by the production control area server 1, transmit the change channel parameter to an RTU device of a substation through the substation communication module 46, and transmit a received parameter change result returned by the substation to the production control area server 1 through the reverse isolation device 3;
the protocol data packing module 44 is configured to receive, through the substation communication module 46, substation protocol data transmitted by the substation, sequentially pack and generate numbered data files, and send the data files to the data reverse transmission module 45;
the data reverse transmission module 45 is configured to establish a communication connection with the production control area server 1, and transmit the data file to the production control area server 1 through the reverse isolation device 3; the process of transmitting the data file to the production control area server 1 through the reverse isolation device 3 can be understood as that the data reverse transmission module 45 moves the data file to the transmission directory of the reverse isolation device 3, and the reverse isolation device 3 transmits the data file to the production control area server 1;
the transformer substation communication module 46 is used for establishing communication connection between the security access area server 4 and the transformer substation and analyzing protocol data; the substation communication module 46 is deployed in a secure access area, and is mainly used for realizing data communication with a substation or a new energy power plant through a public network channel by adopting a traditional 101 or 104 protocol.
For specific limitations of the scheduling automation data acquisition system based on the security access area, reference may be made to the above limitations of the scheduling automation data acquisition method based on the security access area, and details are not described herein again. All or part of each module in the dispatching automation data acquisition system based on the safe access area can be realized by software, hardware and the combination thereof. The modules can be embedded in a hardware form or independent from a processor in the computer device, and can also be stored in a memory in the computer device in a software form, so that the processor can call and execute operations corresponding to the modules.
Fig. 6 shows an internal structure diagram of a computer device in one embodiment, and the computer device may be specifically a terminal or a server. As shown in fig. 6, the computer apparatus includes a processor, a memory, a network interface, a display, and an input device, which are connected through a system bus. Wherein the processor of the computer device is configured to provide computing and control capabilities. The memory of the computer device comprises a nonvolatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of an operating system and computer programs in the non-volatile storage medium. The network interface of the computer device is used for communicating with an external terminal through a network connection. The computer program is executed by a processor to implement a method for automated data acquisition for scheduling based on a secure access area. The display screen of the computer equipment can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer equipment can be a touch layer covered on the display screen, a key, a track ball or a touch pad arranged on the shell of the computer equipment, an external keyboard, a touch pad or a mouse and the like.
It will be appreciated by those of ordinary skill in the art that the architecture shown in FIG. 6 is a block diagram of only a portion of the architecture associated with the disclosed aspects and is not intended to limit the computing devices to which the disclosed aspects may be applied, as a particular computing device may include more or less components than those shown, or may combine certain components, or have a similar arrangement of components.
In one embodiment, a computer device is provided, comprising a memory, a processor and a computer program stored on the memory and executable on the processor, the steps of the above method being performed when the computer program is executed by the processor.
In an embodiment, a computer-readable storage medium is provided, on which a computer program is stored, which computer program, when being executed by a processor, carries out the steps of the above-mentioned method.
To sum up, the embodiment of the invention provides a method and a system for dispatching automation data acquisition based on a security access area, which implement channel parameter maintenance according to a preset channel type after configuring a security access area acquisition channel, a production control area transmits a control command to the security access area through a forward isolation device, the security access area issues various commands to a transformer substation, the received command processing result is transmitted to the production control area through a reverse isolation device, the security access area packages received transformer substation protocol data into a numbered data file, the numbered data file is transmitted to the production control area through the reverse isolation device, the production control area sequentially analyzes each data file, and transmits a number missing data retransmission request to the security access area through the forward isolation device when the number of the data file is discontinuous, otherwise, the transformer substation protocol data is submitted to a technical scheme of a scada system, the method can not only access new energy source data or emergency power plant data of the transformer substation through the security access area on the premise of ensuring the security of the production control area, improve the security of the power plant, improve the safety of the power plant, the safety of the system, and improve the safety of the safety access area, and the safety of the system, and the safety of the safety access area.
The embodiments in the present specification are described in a progressive manner, and all the embodiments are directly referred to the same or similar parts, and each embodiment is mainly described as different from the other embodiments. In particular, for the system embodiment, since it is substantially similar to the method embodiment, the description is simple, and for the relevant points, reference may be made to the partial description of the method embodiment. It should be noted that, the technical features of the embodiments may be arbitrarily combined, and for the sake of brevity, all possible combinations of the technical features in the embodiments are not described, but should be considered as the scope of the present specification as long as there is no contradiction between the combinations of the technical features.
The above-mentioned embodiments only express some preferred embodiments of the present application, and the description thereof is more specific and detailed, but not construed as limiting the scope of the invention. It should be noted that, for those skilled in the art, various modifications and substitutions can be made without departing from the technical principle of the present invention, and these should be construed as the protection scope of the present application. Therefore, the protection scope of the present patent shall be subject to the protection scope of the claims.
Claims (10)
1. A dispatching automation data acquisition method based on a safety access area is characterized by comprising the following steps:
configuring a security access area acquisition channel, and maintaining channel parameters according to a preset channel type;
responding to the issuing of the control command, transmitting various control commands to the safety access area by the production control area through a forward isolation device so that the safety access area issues various commands to the transformer substation, and sending an acquired command processing result to the production control area through a reverse isolation device; the control command comprises a set point command, a remote control command, a plan curve issuing command, a time setting command and a general calling command;
in response to the access of the substation protocol data, sequentially packaging the substation protocol data by the security access area and generating a numbered data file, and transmitting the data file to the production control area through the reverse isolation device; the format of the data file is CIM/E format;
and responding to the completion of the reception of the data files, sequentially analyzing each data file by the production control area, checking whether the serial numbers of the data files are continuous, if not, sending a serial number missing data retransmission request to the safety access area through the forward isolation device, otherwise, submitting the analyzed transformer substation protocol data to a scada system.
2. The method as claimed in claim 1, wherein the step of maintaining the channel parameters according to the preset channel type comprises:
dividing the acquisition channels into a production control area channel and a safety access area channel according to the group number of each acquisition channel corresponding to the front-end processor;
and acquiring the running state of each acquisition channel in real time, and displaying the running state of each acquisition channel in a distinguishing manner according to the corresponding preset color according to the channel type.
3. The method for dispatching automation data acquisition based on the safety access area as claimed in claim 1, wherein the step of the safety access area issuing various instructions to the substation comprises:
packaging various instructions by adopting a preset protocol to obtain corresponding protocol data packets;
and carrying out public network encryption processing on the protocol data packet to obtain an encrypted protocol data packet, and transmitting the encrypted protocol data packet to an RTU device in the transformer substation.
4. The method for automated data acquisition for scheduling based on a secure access area of claim 1, wherein the step of sending a request for missing-numbered data to the secure access area through a forward isolation device comprises:
establishing tcp connection with the secure access area through a forward isolation device;
and sending the retransmission request of the data with the missing number to the safe access area through the tcp connection according to the missing file number.
5. The method for automated data acquisition for secure access area based scheduling according to claim 1, wherein the method further comprises:
and responding to the change of the channel parameters, and transmitting the changed channel parameters to a safe access area by the production control area through the forward isolation device so that the safe access area loads the changed channel parameters.
6. The method as claimed in claim 5, wherein the step of loading the change channel parameters in the security access area comprises:
updating the changed channel parameters to the corresponding preposed memory base according to a pre-deployed channel parameter synchronization program and a memory file mapping technology of an operating system, loading the changed channel parameters through the corresponding preposed machine, and transmitting the obtained parameter change result to the production control area through the reverse isolation device.
7. A dispatching automation data acquisition system based on a safety access area is characterized by comprising a production control area server, a forward isolation device, a reverse isolation device and a safety access area server;
the production control area server is used for transmitting a control command, a channel management command and a change channel parameter to the safe access area server through the forward isolation device and transmitting the control command, the channel management command and the change channel parameter to an RTU device of a transformer substation through the safe access area server; the control commands comprise a set point command, a remote control command, a plan curve issuing command, a time setting command and a total calling command;
the safety access area server is used for acquiring a command processing result, a channel operation state, a parameter change result and transformer substation protocol data returned by the transformer substation, transmitting the command processing result, the channel operation state, the parameter change result and the transformer substation protocol data to the production control area server through the reverse isolation device, and submitting the transformer substation protocol data to a scada system through the production control area server.
8. The system according to claim 7, wherein the production control area server comprises a front-end processor interface module, a control service module, a first channel management module, a database, a first parameter synchronization module, a first command issuing module, and a data unpacking module;
the front-end processor interface module is used for issuing the acquired channel management command to the first channel management module and carrying out interface display on the running state of each acquisition channel acquired by the first channel management module according to the channel type;
the control service module is used for issuing various control commands to the first command issuing module and acquiring instruction processing results corresponding to the operation instructions through the first command issuing module; the control command comprises a set point command, a remote control command, a plan curve issuing command, a time setting command and a general calling command;
the first channel management module is used for managing each acquisition channel according to a channel management command issued by the front-end processor interface module, maintaining channel parameters according to preset channel types, acquiring the running state of each acquisition channel in real time and transmitting the running state to the front-end processor interface module;
the database management module is used for changing the channel parameters through a database management editing interface, storing the corresponding changed channel parameters into the database, sending the changed channel parameters to the first parameter synchronization module, and acquiring a parameter change result returned by the first parameter synchronization module;
the database is used for storing the channel parameters, the channel parameter change conditions and the corresponding parameter change results of all the acquisition channels;
the first parameter synchronization module is configured to transmit the parameter of the change channel to the secure access area server through a forward isolation device, receive a parameter change result returned by the secure access area server through a reverse isolation device, and transmit the parameter change result to the database management module through the database;
the first command issuing module is configured to transmit the control command to the security access area service through the forward isolation device, receive a command processing result returned by the security access area server through the reverse isolation device, and send the command processing result to the control service module;
the data unpacking module is used for acquiring the numbered data file transmitted by the server of the safe access area through the reverse isolation device, and submitting the obtained transformer substation protocol data to the scada system after analyzing and checking the data file; the format of the data file is CIM/E format;
the safety access area server comprises a second channel management module, a second command issuing module, a second parameter synchronization module, a protocol data packing module, a data reverse transmission module and a transformer substation communication module;
the second channel management module is used for receiving a channel management command transmitted by the production control area server, transmitting the channel management command to an RTU (remote terminal unit) device of a transformer substation through the transformer substation communication module, and transmitting the received running state of each acquisition channel returned by the transformer substation to the production control area server through the reverse isolation device;
the second command issuing module is used for receiving the control command transmitted by the production control area server, transmitting the control command to an RTU (remote terminal unit) device of a transformer substation through the transformer substation communication module, and transmitting a received command processing result returned by the transformer substation to the production control area server through the reverse isolation device;
the second parameter synchronization module is used for receiving the change channel parameters transmitted by the production control area server, transmitting the change channel parameters to an RTU (remote terminal unit) device of a transformer substation through the transformer substation communication module, and transmitting the received parameter change results returned by the transformer substation to the production control area server through the reverse isolation device;
the protocol data packing module is used for receiving the substation protocol data transmitted by the substation through the substation communication module, packing the substation protocol data in sequence, generating a numbered data file, and sending the data file to the data reverse transmission module;
the data reverse transmission module is used for establishing communication connection with the production control area server and transmitting the data file to the production control area server through the reverse isolation device;
and the transformer substation communication module is used for establishing communication connection between the security access area server and the transformer substation and analyzing protocol data.
9. A computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, characterized in that the steps of the method of any of claims 1 to 6 are implemented when the computer program is executed by the processor.
10. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, carries out the steps of the method of any one of claims 1 to 6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211504209.2A CN115776175A (en) | 2022-11-28 | 2022-11-28 | Dispatching automation data acquisition method and system based on security access area |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202211504209.2A CN115776175A (en) | 2022-11-28 | 2022-11-28 | Dispatching automation data acquisition method and system based on security access area |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN115776175A true CN115776175A (en) | 2023-03-10 |
Family
ID=85390460
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202211504209.2A Pending CN115776175A (en) | 2022-11-28 | 2022-11-28 | Dispatching automation data acquisition method and system based on security access area |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN115776175A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN117277589A (en) * | 2023-11-20 | 2023-12-22 | 云南电网有限责任公司 | Intelligent operation and maintenance management and control platform for electric power secondary system |
-
2022
- 2022-11-28 CN CN202211504209.2A patent/CN115776175A/en active Pending
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN117277589A (en) * | 2023-11-20 | 2023-12-22 | 云南电网有限责任公司 | Intelligent operation and maintenance management and control platform for electric power secondary system |
| CN117277589B (en) * | 2023-11-20 | 2024-04-19 | 云南电网有限责任公司 | Intelligent operation and maintenance management and control platform for electric power secondary system |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110012002A (en) | Message parsing method, device and server, computer readable storage medium | |
| CN104753817A (en) | Local analogy method and local analogy system for cloud computing message queue service | |
| CN102800015A (en) | Financial IC (Integrated Circuit) card long-distance individualized method and system | |
| CN108964264A (en) | The wireless realization of debugging method of intelligent substation site device | |
| CN101567861B (en) | Data synchronization method and application system between heterogeneous application systems | |
| CN106060176A (en) | Cloud computing application architecture and cloud computing service method based on mixed cloud | |
| CN110049137A (en) | A kind of instruction transmission method, collecting method and relevant apparatus | |
| CN103227828A (en) | Remote wireless data transmission system of rail vehicle | |
| CN115776175A (en) | Dispatching automation data acquisition method and system based on security access area | |
| CN114281790B (en) | Multi-type load resource aggregator access system and method | |
| CN108667817A (en) | Message converting system and message forwarding method | |
| CN104578422A (en) | Remote maintenance method for transformer substation telecontrol forwarding table | |
| CN106534272A (en) | System and method for processing parameters of coal-fired unit | |
| CN103559198A (en) | Data synchronizing method and equipment | |
| CN102724164A (en) | Multi-communication protocol transmission apparatus of electric power control system and method thereof | |
| CN105049162A (en) | Public network information high-efficiency transmission method based on Epoll model | |
| CN102752148B (en) | Management system and management method based on network element adaption subsystem | |
| CN101977165A (en) | Message transmission method and message bus system in cloud mode | |
| CN112583937A (en) | Visual convenient cloud resource deployment system combining public cloud and private cloud | |
| CN109525443B (en) | processing method and device for distributed pre-acquisition communication link and computer equipment | |
| CN102571412B (en) | Target machine server of embedded distributed system | |
| CN105978715A (en) | Data access interface uniform management method based on real time data center | |
| CN113297218B (en) | Multi-system data interaction method, device and system | |
| CN107330064A (en) | A kind of method and system that small documents are created based on CIFS agreements | |
| CN102801561A (en) | Method for managing network equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |