CN104486101A - On-line power telecontrol IEC (integrated ethernet chip) 104 transmission anomaly detection method - Google Patents
On-line power telecontrol IEC (integrated ethernet chip) 104 transmission anomaly detection method Download PDFInfo
- Publication number
- CN104486101A CN104486101A CN201410713633.7A CN201410713633A CN104486101A CN 104486101 A CN104486101 A CN 104486101A CN 201410713633 A CN201410713633 A CN 201410713633A CN 104486101 A CN104486101 A CN 104486101A
- Authority
- CN
- China
- Prior art keywords
- message
- frequency domain
- message number
- transmission
- remote
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses an on-line power telecontrol IEC (integrated ethernet chip) 104 transmission anomaly detection method and relates to a power dispatching telecontrol network transmission anomaly detection method. At present, an effective on-line monitoring, analysis and diagnosis method for operating IEC104 telecontrol communication is absent. The method comprises the following steps of (1) monitoring and capturing messages; (2) splicing the messages; (3) analyzing the messages by using an IEC104; (4) combining and counting sub-stations; (5) calculating multi-dimensional characteristic indexes; (6) diagnosing anomaly, wherein anomaly diagnosis comprises conventional transmission anomaly judgment and control transmission anomaly judgment. According to the technical scheme, working strength is reduced, and the power dispatching automatic operation maintenance level is improved; abnormal conditions in the control information transmission process can be actively discovered, and the normal operation of a power dispatching control system is ensured; transmission faults are intuitively and definitely detected, and invisible faults can be warned early; network faults or substation communication faults are judged.
Description
Technical field
The present invention relates to a kind of power scheduling network in telecontrol transmission abnormality detection method, espespecially a kind of online power remote IEC104 transmission abnormality detection method.
Background technology
Along with being gradually improved of dispatching of power netwoks technical development and automation equipment is reliable, the propelling of transformer station's " unattended operation; few man on duty " operational mode, dispatch automated system is more and more crucial as the effect of electric power netting safe running core support, and automated system becomes the key link ensureing power grid security, high-quality, reliable, stable operation day by day.The safe and reliable transmission of power remote information is the basic precondition that power automatic system normally runs, and in actual production work, for automation telecontrol system generation exception and fault distinguishing, often occurred just finding extremely by power grid application, and then carry out analysis and distinguishing by automatic operating personnel again, usually incur loss through delay failure diagnosis and the recovery of automation.How to avoid this " passive-type " O&M, automation telemechanical transportation level is carried out monitor fast, in time, effectively, differentiate telemechanical transmission fault, become the important subject improving power automation level.
Along with the construction of dispatch data net, get more and more between current scheduling main website and plant stand and adopt IEC104 communication protocol as primary, automated system information flow is all carried on power dispatch data network with message mode.For the supervision of dispatch data net, current general use network management system, the interruption situation of its main monitoring network devices communicating link and network layer flow information, most documents and patent also layer message flow all Network Based carry out anomalous discrimination, but these methods effectively cannot carry out supervision differentiation for the transmission of power remote business.
But reality is in power remote IEC104 runs, transmission fault is not only underlay network device fault, is often that Internet Transmission is normal, but business data transmission fault, there is similar " false online ", " remote regulating does not respond " or " remote control time-out " etc.The current existing supervision analysis for IEC104 agreement, mainly translates at the some point message protocol analytical analysis for communicating pair, or the protocol analysis of off-line.For the IEC104 telemechanical communication run, the supervision of the many plant stands particularly in actual motion, a large amount of channel transfer, does not also have effective in-service monitoring, analysis, diagnostic method at present.
Summary of the invention
The technical assignment of the technical problem to be solved in the present invention and proposition carries out improving to prior art and improves, and provides a kind of online power remote IEC104 transmission abnormality detection method, to reach the object of effective in-service monitoring, analysis, diagnosis.For this reason, the present invention takes following technical scheme.
A kind of online power remote IEC104 transmission abnormality detection method, is characterized in that comprising the following steps:
1) message is intercepted and is captured;
By switch network device port mirror image, realize the full mirror image collection of network traffics; And according to monitoring IP address bunch and the port of plant stand and scheduling station, capture the IP message of required supervision;
2) message splicing;
After obtaining the IP message of capturing, carry out IP/TCP Packet reassembling, abandon for the IP exceeding window period, complete message submits next step process;
3) IEC104 packet parsing;
Connecting user data for splicing the TCP recombinated, according to IEC104 agreement, carrying out simple packet parsing, distinguish type and the service traffics statistics of message; For invalid packet, when after the threshold range exceeding setting, carry out direct abnormality juding;
4) plant stand merges statistics;
Link merging is carried out, with the multidimensional characteristic amount of calculated for subsequent according to plant stand;
5) multidimensional characteristic index calculate;
When arriving the calculating monitoring window period preset, for each plant stand of supervision, calculate multidimensional characteristic index, multidimensional characteristic index comprises service traffics characteristic index, up-downgoing remote regulating message number ratio, remote control message response average delay time, TCP connection request message number;
6) abnormity diagnosis;
For each plant stand, when arriving calculating monitoring window, carry out normal transmissions exception and controls transfer anomalous discrimination respectively according to characteristic index amount:
Normal transmissions anomalous discrimination comprises:
601) the service traffics frequency domain direct current mould ratio r of typical message
flowdifferentiate
When direct current mould ratio r
flowbe greater than the threshold value t of normal transmission
flowtime, differentiate normal, when direct current mould ratio r
flowbe less than the threshold value t of normal transmission
flowtime, differentiate abnormal;
602) message number frequency domain direct current mould ratio r
message numberdifferentiate
When the message number frequency domain direct current mould ratio r of transmission
message numberbe greater than the threshold value t of normal transmission
message numbertime, differentiate normal, when the message number frequency domain direct current mould ratio r of transmission
message numberbe less than the threshold value t of normal transmission
message numbertime, differentiate abnormal;
603) TCP connection request message number differentiates
When TCP connection request message number index number exceedes the threshold value of corresponding setting, differentiate transmission abnormality;
Controls transfer anomalous discrimination comprises:
611) remote regulating up-downgoing message number compares r
remote regulatingdifferentiate
When remote regulating up-downgoing message number compares r
remote regulatingbe less than corresponding setting threshold, differentiate that remote regulating command transfer is made mistakes;
612) remote control message response t average delay time
remote control postponesdifferentiate
For each plant stand guidance command, as remote control message response t average delay time
remote control postponeswhen being greater than setting threshold, differentiate guidance command loading error occurring.
As improving further and supplementing technique scheme, the present invention also comprises following additional technical feature.
Service traffics characteristic index comprises typical message flow frequency domain direct current mould ratio;
Typical case's message flow frequency domain direct current mould ratio r
flowcomputational methods are:
I) computing service flow fs, service traffics f
s=∑
slen (P
aSDU)
Wherein: S is the sampling period, 5 seconds-10 seconds are got; Len (P
aSDU) be Application service data unit (ASDU) byte number in the typical services message that listens in the sampling period, adopt change remote measurement uplink message to be typical services message;
Ii) frequency domain components mould Mi is calculated, frequency domain components mould
Wherein: i=0,1,2 ..., N-1, N are the employing number that calculation window comprises, and get 16 or 32; a
i, b
ibe respectively service traffics sequence in calculation window
the real part of discrete Fourier transform (DFT) i-th component, the coefficient of imaginary part;
Iii) typical message flow frequency domain direct current mould ratio is calculated, typical message flow frequency domain direct current mould ratio value r
flow=M
0/ max
i=1,2 ..., N-1m
i, i.e. the DC component mould of frequency domain and the ratio of non-DC components mould maximum.
Service traffics characteristic index also comprises typical message number frequency domain direct current mould ratio; Typical case's message number frequency domain direct current mould ratio r
message numbercomputational methods be:
I) computing service message number C
s
Wherein: S is the sampling period, value 5 seconds-10 seconds; C
sfor the complete typical services message number listened in the sampling period;
Ii) frequency domain components mould is calculated, frequency domain components mould
Wherein: i=0,1,2 ..., N-1, N are the employing number that calculation window comprises, and generally get 16 or 32; a
i, b
ibe respectively service traffics sequence in calculation window
the real part of discrete Fourier transform (DFT) i-th component, the coefficient of imaginary part;
Iii) typical message number frequency domain direct current mould ratio is calculated, typical message number frequency domain direct current mould ratio r
message number=M
0/ max
i=1,2 ..., N-1m
i, i.e. the DC component mould of frequency domain and the ratio of non-DC components mould maximum.
Up-downgoing remote regulating message number compares r
remote regulating=C
order/ C
response, wherein, C
order, C
responsethe remote regulating command message number sent for main website in during calculation window and the up remote regulating response message number of corresponding plant stand.
Remote control message response t average delay time
remote control postpones=∑
n(t
response-t
order)/N, wherein t
order, t
responsefor interior guidance command time and corresponding up response message time during calculation window, N is the order number sent between window phase.
TCP connection request message number C
tCPthe TCP sent for main website during calculation window connects message number.
Beneficial effect: 1) the present invention is by analyzing IEC104 power business transmission feature, proposes the transmission feature index of the various dimensions based on plant stand, and provides the online passive analyzing monitoring method of many plant stands.Greatly can alleviate the working strength of operations staff, and improve power dispatching automation operation and maintenance level.
2) the present invention is according to control information host-host protocol feature, provide the characteristic index of network transport service aspect, carry out analysis and distinguishing from message number and time of delay respectively, initiatively can find the abnormal conditions in control information transmitting procedure, ensure that power scheduling control system is normally run.
3) the present invention proposes flow direct current mould ratio and the message number direct current mould ratio feature amount of typical transmission business, ocular and clear transmission fault is detected, and early warning can be carried out to hidden failures.
4) connect number of times statistics by monitoring window TCP, network failure or plant stand communication failure are judged.
Accompanying drawing explanation
Fig. 1 is anomalous discrimination flow chart of the present invention.
Fig. 2 is cycle message flow direct current frequency domain mould ratio calculation flow chart of the present invention.
Fig. 3 is typical cycle message time domain flow of the present invention, frequency domain mould comparison chart.
Fig. 4 is abnormity diagnosis typical flowchart of the present invention.
Embodiment
Below in conjunction with Figure of description, technical scheme of the present invention is described in further detail.
The remote transmission protocol of current power management and running is the IEC104 agreement based on TCP/IP Internet Transmission mostly, the 3 type forms that IEC104 protocol package contains, the function for monitoring (S form) of the information transmission of namely numbering (I form), numbering and unnumbered controlling functions (U form).In order to can the transmission of normal business do not affected, the present invention adopts mirror image to intercept mode and obtains message transmission, and by one group of various dimensions characteristic index, carries out online abnormality detection to the transmission of power dispatching automation telemechanical, and then realize the real-time monitoring of power remote, fault pre-alarming.
Wherein:
One, IEC104 communication multidimensional discriminant criterion
The present invention considers the actual transmissions feature of IEC104 agreement, connects message number four category feature respectively, carry out the design of communications abnormal index at service traffics, remote regulating up-downgoing message ratio, remote control time-out interval and TCP.
1) service traffics characteristic index
IEC104 agreement adopts balanced transmission pattern, when plant stand end changes data, adopt initiatively and send delta data mode, during conventional operation, the active of change telemetry is sent there is stronger periodic characteristic, be illustrated in figure 3 typical cycle message time domain flow, frequency domain mould comparison chart, provide a typical time domain, frequency domain comparison chart to show the implication of service traffics feature.Service traffics feature of the present invention includes:
A) typical message flow frequency domain direct current mould ratio r
flow,
As shown in Figure 2, type message flow frequency domain direct current mould ratio r
flowacquisition comprises: typical message flow sampling step, calculation window acquisition step, FFI shift step, flow frequency domain mould calculation procedure and flow direct current frequency domain mould ratio feature calculation procedure; In type message flow frequency domain direct current mould ratio r
flowin computational process:
Definition:
I) service traffics f
s=∑
slen (P
aSDU)
Wherein: S is the sampling period, desirable 5 seconds-10 seconds,
Len (P
aSDU) be Application service data unit (ASDU) byte number in the typical services message that listens in the sampling period, the present invention adopts change remote measurement uplink message to be typical services message;
Ii) frequency domain components mould
Wherein: i=0,1,2 ..., N-1, N are the employing number that calculation window comprises, and generally get 16 or 32.
A
i, b
ibe respectively service traffics sequence in calculation window
the real part of discrete Fourier transform (DFT) i-th component, the coefficient of imaginary part;
Iii) frequency domain direct current mould ratio r
flow=M
0/ max
i=1,2 ..., N-1m
i
The i.e. DC component mould of frequency domain and the ratio of non-DC components mould maximum.
B) typical message number frequency domain direct current mould ratio r
message number
Similar A) definition:
I) service message number C
s
Wherein: S is the sampling period, the same A of value),
C
sfor the complete typical services message number listened in the sampling period;
Ii) frequency domain components mould
Wherein: i=0,1,2 ..., N-1, N are the employing number that calculation window comprises, and generally get 16 or 32.
A
i, b
ibe respectively service traffics sequence in calculation window
the real part of discrete Fourier transform (DFT) i-th component, the coefficient of imaginary part;
Iii) frequency domain direct current mould ratio r
message number=M
0/ max
i=1,2 ..., N-1m
i
The i.e. DC component mould of frequency domain and the ratio of non-DC components mould maximum.
2) remote regulating up-downgoing message number compares r
remote regulating
Specify according to IEC104 agreement, for remote regulating order, typical condition is " order ↓-response ↑ " or " order ↓-response ↑-end ↑ ",
The present invention ignores the up response message of end of remote regulating, definition r
remote regulating=C
order/ C
response, wherein, C
order, C
responsethe remote regulating command message number sent for main website in during calculation window and the up remote regulating response message number of corresponding plant stand;
3) remote control message response t average delay time
remote control postpones
According to IEC104 agreement regulation, for guidance command, require that operating mode is " select command ↓-Response to selection ↑-fill order ↓-perform response ↑ ", for the order that each main website issues, not only need corresponding response, also must within the regular hour.
Definition remote control message t average delay time
remote control postpones=∑
n(t
response-t
order)/N, wherein t
order, t
responsefor interior guidance command time and corresponding up response message time during calculation window, N is the order number sent between window phase.
4) TCP connection request message number C
tCP
IEC104 protocols work mode is that in running, TCP links long-chain state work, when there is the software fault such as channel unit fault or host-host protocol sequence number mistake, needs to re-start TCP link.TCP connects message number C
tCPthe TCP sent for main website during calculation window connects message number;
Two, IEC104 communication abnormality differentiates process online
The present invention is mainly through switch network mirror image, obtain the communication message monitored between plant stand and main website, and according to each plant stand messaging parameter, all link network messages are analyzed, at application protocol layer, calculate multi-dimensional communication index, differentiate that whether the application layer communication of whether power remote is normal.
As shown in Figure 1, main process is:
1) message is intercepted and is captured
By switch network device port mirror image, realize the full mirror image collection of network traffics.And according to monitoring IP address bunch and the port of plant stand and scheduling station, capture the IP message of required supervision.
2) message splicing
In order to the business transmission carrying out power remote differentiates, after obtaining the IP message of capturing, carry out IP/TCP Packet reassembling, abandon for the IP exceeding window period, complete message submits next step process.
3) IEC104 packet parsing
Connecting user data for splicing the TCP recombinated, according to IEC104 agreement, carrying out simple packet parsing, distinguish type and the service traffics statistics of message.For invalid packet, when after the threshold range exceeding setting, carry out direct abnormality juding.
4) plant stand merges statistics
For each plant stand, may comprise standby machine in actual motion, and may be the network of two planes, therefore each plant stand and main website can be the IP linking communications possibilities of multi-to-multi.Due to power remote transmission feature, be subsequent calculations multidimensional characteristic amount, the present invention carries out link merging according to plant stand.
5) multidimensional characteristic index calculate
When arriving the calculating monitoring window period preset, for each plant stand of supervision, calculate the multidimensional characteristic index that the present invention proposes, i.e. service traffics feature index of correlation, up-downgoing remote regulating message number ratio, remote control message average delay time and TCP connection request message number.
6) abnormity diagnosis
As shown in Figure 4, for each plant stand, when arriving calculating monitoring window, the present invention carries out normal transmissions exception and controls transfer anomalous discrimination respectively according to characteristic index amount:
A) normal transmissions anomalous discrimination
Normal transmissions refers to that the business transmission feature of certain plant stand departs from normal transmission range extremely, and the present invention differentiates mainly through IEC104 service traffics feature and TCP connection request message number.Process is:
I) the service traffics frequency domain direct current mould ratio r of typical message
flowdifferentiate
The direct current mould ratio r flow of normal transmission should be greater than the threshold value of normal transmission
if be less than
differentiate abnormal.
Ii) message number frequency domain direct current mould ratio r
message numberdifferentiate
The message number frequency domain direct current mould ratio r of normal transmission
message numberthe threshold value of normal transmission should be greater than
if be less than
differentiate abnormal.
Iii) TCP connection request message number differentiates
Due in normal IEC104 transmission, TCP is in and often connects state, should not occur that TCP connects message, when this index number exceedes certain threshold value, transmission abnormality.
B) controls transfer anomalous discrimination
The control message of IEC104 transmission mainly comprises remote regulating order and guidance command, and the order of communication protocol requirements all main websites all needs corresponding response message, and differentiation process is:
I) remote regulating up-downgoing message number compares r
remote regulatingdifferentiate
Remote regulating order is generally main website transmitting order to lower levels in normal transmission, and plant stand receives rear transmission confirmation message, and therefore remote regulating up-downgoing message number compares r
remote regulatingtheory is 1, considers that the fault-tolerant of message is captured in monitoring, considers to work as r
remote regulatingbe less than setting threshold, differentiate that remote regulating command transfer is made mistakes.
Ii) remote control message response t average delay time
remote control postponesdifferentiate
Guidance command is generally manual activation transmission, is generally main website issues response command in normal transmission, and plant stand sends and confirms response message within level time second.Therefore for each plant stand guidance command, response t average delay time is differentiated
remote control postponeswhen being greater than setting threshold, differentiate guidance command loading error occurring.
Feature of the present invention
1) consider that current power telemechanical IEC104 transmits in actual motion, only webmaster mode can be passed through, the network equipment failure carrying out transmitting both sides differentiates, and cannot really to the present situation that business transmission fault is monitored, the present invention is by analyzing IEC104 power business transmission feature, propose the transmission feature index of the various dimensions based on plant stand, and provide the online passive analyzing monitoring method of many plant stands.Greatly can alleviate the working strength of operations staff, and improve power dispatching automation operation and maintenance level.
2) the remote control remote regulating for electric power transfer key controls message, the present invention is according to host-host protocol feature, provide the characteristic index of network transport service aspect, analysis and distinguishing is carried out respectively from message number and time of delay, initiatively can find the abnormal conditions in controls transfer process, ensure that power scheduling control system is normally run.
3) by transmitting real process analysis to normal IEC104, extract typical message and carry out service traffics, message number index, converted by frequency domain, the present invention proposes flow direct current mould ratio and the message number direct current mould ratio feature amount of typical transmission business, ocular and clear transmission fault is detected, and early warning can be carried out to hidden failures.
4) TCP chain feature during consideration IEC104 normal transmission, connects number of times statistics by monitoring window TCP, judges network failure or plant stand communication failure.
One shown in above Fig. 1-4 online power remote IEC104 transmission abnormality detection method is specific embodiments of the invention; substantive distinguishing features of the present invention and progress are embodied; can according to the use needs of reality; under enlightenment of the present invention; it is carried out to the equivalent modifications of the aspect such as shape, structure, all at the row of the protection range of this programme.
Claims (6)
1. an online power remote IEC104 transmission abnormality detection method, is characterized in that comprising the following steps:
1) message is intercepted and is captured;
By switch network device port mirror image, realize the full mirror image collection of network traffics; And according to monitoring IP address bunch and the port of plant stand and scheduling station, capture the IP message of required supervision;
2) message splicing;
After obtaining the IP message of capturing, carry out IP/TCP Packet reassembling, abandon for the IP exceeding window period, complete message submits next step process;
3) IEC104 packet parsing;
Connecting user data for splicing the TCP recombinated, according to IEC104 agreement, carrying out simple packet parsing, distinguish type and the service traffics statistics of message; For invalid packet, when after the threshold range exceeding setting, carry out direct abnormality juding;
4) plant stand merges statistics;
Link merging is carried out, with the multidimensional characteristic amount of calculated for subsequent according to plant stand;
5) multidimensional characteristic index calculate;
When arriving the calculating monitoring window period preset, for each plant stand of supervision, calculate multidimensional characteristic index, multidimensional characteristic index comprises service traffics characteristic index, up-downgoing remote regulating message number ratio, remote control message response average delay time, TCP connection request message number;
6) abnormity diagnosis;
For each plant stand, when arriving calculating monitoring window, carry out normal transmissions exception and controls transfer anomalous discrimination respectively according to characteristic index amount:
Normal transmissions anomalous discrimination comprises:
601) the service traffics frequency domain direct current mould ratio r of typical message
flowdifferentiate
When direct current mould ratio r
flowbe greater than the threshold value t of normal transmission
flowtime, differentiate normal, when direct current mould ratio r
flowbe less than the threshold value t of normal transmission
flowtime, differentiate abnormal;
602) message number frequency domain direct current mould ratio r
message numberdifferentiate
When the message number frequency domain direct current mould ratio r of transmission
message numberbe greater than the threshold value t of normal transmission
message numbertime, differentiate normal, when the message number frequency domain direct current mould ratio r of transmission
message numberbe less than the threshold value t of normal transmission
message numbertime, differentiate abnormal;
603) TCP connection request message number differentiates
When TCP connection request message number index number exceedes the threshold value of corresponding setting, differentiate transmission abnormality;
Controls transfer anomalous discrimination comprises:
611) remote regulating up-downgoing message number compares r
remote regulatingdifferentiate
When remote regulating up-downgoing message number compares r
remote regulatingbe less than corresponding setting threshold, differentiate that remote regulating command transfer is made mistakes;
612) remote control message response t average delay time
remote control postponesdifferentiate
For each plant stand guidance command, as remote control message response t average delay time
remote control postponeswhen being greater than setting threshold, differentiate guidance command loading error occurring.
2. one according to claim 1 online power remote IEC104 transmission abnormality detection method, is characterized in that: service traffics characteristic index comprises typical message flow frequency domain direct current mould ratio;
Typical case's message flow frequency domain direct current mould ratio r
flowcomputational methods are:
I) computing service flow fs, service traffics f
s=∑
slen (P
aSDU)
Wherein: S is the sampling period, 5 seconds-10 seconds are got; Len (P
aSDU) be Application service data unit (ASDU) byte number in the typical services message that listens in the sampling period, adopt change remote measurement uplink message to be typical services message;
Ii) frequency domain components mould Mi is calculated, frequency domain components mould
Wherein: i=0,1,2 ..., N-1, N are the employing number that calculation window comprises, and get 16 or 32; a
i, b
ibe respectively service traffics sequence in calculation window
the real part of discrete Fourier transform (DFT) i-th component, the coefficient of imaginary part;
Iii) typical message flow frequency domain direct current mould ratio is calculated, typical message flow frequency domain direct current mould ratio value r
flow=M
0/ max
i=1,2 ..., N-1m
i, i.e. the DC component mould of frequency domain and the ratio of non-DC components mould maximum.
3. one according to claim 2 online power remote IEC104 transmission abnormality detection method, is characterized in that: service traffics characteristic index also comprises typical message number frequency domain direct current mould ratio; Typical case's message number frequency domain direct current mould ratio r
message numbercomputational methods be:
I) computing service message number C
s
Wherein: S is the sampling period, value 5 seconds-10 seconds; C
sfor the complete typical services message number listened in the sampling period;
Ii) frequency domain components mould is calculated, frequency domain components mould
Wherein: i=0,1,2 ..., N-1, N are the employing number that calculation window comprises, and generally get 16 or 32; a
i, b
ibe respectively service traffics sequence in calculation window
the real part of discrete Fourier transform (DFT) i-th component, the coefficient of imaginary part;
Iii) typical message number frequency domain direct current mould ratio is calculated, typical message number frequency domain direct current mould ratio r
message number=M
0/ max
i=1,2 ..., N-1m
i, i.e. the DC component mould of frequency domain and the ratio of non-DC components mould maximum.
4. one according to claim 1 online power remote IEC104 transmission abnormality detection method, is characterized in that: up-downgoing remote regulating message number compares r
remote regulating=C
order=C
response, wherein, C
order, C
responsethe remote regulating command message number sent for main website in during calculation window and the up remote regulating response message number of corresponding plant stand.
5. one according to claim 1 online power remote IEC104 transmission abnormality detection method, is characterized in that: remote control message response t average delay time
remote control postpones=∑
n(t
response-t
order)/N, wherein t
order, t
responsefor interior guidance command time and corresponding up response message time during calculation window, N is the order number sent between window phase.
6. one according to claim 1 online power remote IEC104 transmission abnormality detection method, is characterized in that: TCP connection request message number C
tCPthe TCP sent for main website during calculation window connects message number.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410713633.7A CN104486101B (en) | 2014-11-28 | 2014-11-28 | A kind of online power remote IEC104 transmission abnormality detection methods |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410713633.7A CN104486101B (en) | 2014-11-28 | 2014-11-28 | A kind of online power remote IEC104 transmission abnormality detection methods |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104486101A true CN104486101A (en) | 2015-04-01 |
| CN104486101B CN104486101B (en) | 2018-03-06 |
Family
ID=52760609
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410713633.7A Active CN104486101B (en) | 2014-11-28 | 2014-11-28 | A kind of online power remote IEC104 transmission abnormality detection methods |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104486101B (en) |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107493193A (en) * | 2017-08-16 | 2017-12-19 | 广东电网有限责任公司揭阳供电局 | Method and device for on-site elimination of uplink communication fault of station terminal |
| CN108282482A (en) * | 2018-01-30 | 2018-07-13 | 电子科技大学 | A kind of IEC60870-5-104 anomalous traffic detection methods based on SVM |
| CN110417688A (en) * | 2018-04-26 | 2019-11-05 | 广东电网有限责任公司 | A kind of dispatch automated system multichannel message analysis processing system and method |
| CN110445685A (en) * | 2019-08-09 | 2019-11-12 | 云南电网有限责任公司电力科学研究院 | Remote motion signal all-round property testing method and system |
| CN111865656A (en) * | 2020-06-04 | 2020-10-30 | 广东电网有限责任公司 | Network channel fault analysis method based on combination of network message and telecontrol message |
| CN114124478A (en) * | 2021-11-08 | 2022-03-01 | 湖南大学 | Power system industrial control flow abnormity detection method and system |
| CN116192494A (en) * | 2023-02-13 | 2023-05-30 | 山东云天安全技术有限公司 | Method for determining abnormal data, electronic equipment and storage medium |
Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN201628558U (en) * | 2008-12-23 | 2010-11-10 | 胡广生 | Digital online monitoring system and monitoring device for power transmission lines |
| CN102495841A (en) * | 2011-11-14 | 2012-06-13 | 深圳市华力特电气股份有限公司 | Power supply system monitoring method and related device thereof |
| CN103379003A (en) * | 2013-07-08 | 2013-10-30 | 国家电网公司 | Detection system for DL 476 electric power communication protocol |
-
2014
- 2014-11-28 CN CN201410713633.7A patent/CN104486101B/en active Active
Patent Citations (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN201628558U (en) * | 2008-12-23 | 2010-11-10 | 胡广生 | Digital online monitoring system and monitoring device for power transmission lines |
| CN102495841A (en) * | 2011-11-14 | 2012-06-13 | 深圳市华力特电气股份有限公司 | Power supply system monitoring method and related device thereof |
| CN103379003A (en) * | 2013-07-08 | 2013-10-30 | 国家电网公司 | Detection system for DL 476 electric power communication protocol |
Cited By (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107493193A (en) * | 2017-08-16 | 2017-12-19 | 广东电网有限责任公司揭阳供电局 | Method and device for on-site elimination of uplink communication fault of station terminal |
| CN107493193B (en) * | 2017-08-16 | 2020-10-27 | 广东电网有限责任公司揭阳供电局 | Method and device for on-site elimination of uplink communication fault of station terminal |
| CN108282482A (en) * | 2018-01-30 | 2018-07-13 | 电子科技大学 | A kind of IEC60870-5-104 anomalous traffic detection methods based on SVM |
| CN108282482B (en) * | 2018-01-30 | 2020-12-01 | 电子科技大学 | SVM-based IEC60870-5-104 abnormal flow detection method |
| CN110417688A (en) * | 2018-04-26 | 2019-11-05 | 广东电网有限责任公司 | A kind of dispatch automated system multichannel message analysis processing system and method |
| CN110445685A (en) * | 2019-08-09 | 2019-11-12 | 云南电网有限责任公司电力科学研究院 | Remote motion signal all-round property testing method and system |
| CN111865656A (en) * | 2020-06-04 | 2020-10-30 | 广东电网有限责任公司 | Network channel fault analysis method based on combination of network message and telecontrol message |
| CN114124478A (en) * | 2021-11-08 | 2022-03-01 | 湖南大学 | Power system industrial control flow abnormity detection method and system |
| CN116192494A (en) * | 2023-02-13 | 2023-05-30 | 山东云天安全技术有限公司 | Method for determining abnormal data, electronic equipment and storage medium |
| CN116192494B (en) * | 2023-02-13 | 2023-10-20 | 山东云天安全技术有限公司 | Method for determining abnormal data, electronic equipment and storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN104486101B (en) | 2018-03-06 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104486101A (en) | On-line power telecontrol IEC (integrated ethernet chip) 104 transmission anomaly detection method | |
| CN102142720B (en) | Network communication recorder and network communication record analysis system | |
| CN110048507B (en) | Automatic inspection method and system for power distribution automation system | |
| CN105591826A (en) | Low voltage power line broadband carrier communication network fault diagnostic device and method | |
| CN106655522A (en) | Master station system suitable for operation and maintenance management of secondary equipment of power grid | |
| CN110456207A (en) | A kind of intelligent low-pressure method for diagnosing faults of open air | |
| CN103296755A (en) | Network online monitoring system for transformer substation | |
| CN110443037B (en) | Power monitoring network security situation perception method based on improved AHP method | |
| CN109040320B (en) | Multidimensional information acquisition system and method in textile production process | |
| CN104979908A (en) | Substation network online failure analysis method | |
| CN110493180A (en) | A kind of substation network communication flow real-time analysis method | |
| CN106287225A (en) | A kind of combustion gas on-line monitoring early warning system and detection control method thereof | |
| CN107742925A (en) | The hard pressing plate method for inspecting of transformer station based on three-level network | |
| CN109639529A (en) | The diagnostic method of intelligent substation remote control command exception | |
| CN112731827B (en) | Monitoring system for intelligent sensor for power equipment | |
| CN109587161A (en) | The monitoring method of smart grid remote control command transmission overall process information | |
| CN105657065A (en) | Remote elevator monitoring system | |
| CN109713791B (en) | Diagnostic method for remote control command abnormity of smart power grid | |
| CN117353444A (en) | Production transformer fault monitoring method and system | |
| CN106570613A (en) | Secondary equipment maintenance strategy generation method based on state monitoring | |
| CN104753734B (en) | A kind of method of automatic diagnosis power grid EMS system remote signalling data transmission fault | |
| CN211127301U (en) | Intelligent substation secondary equipment operation and maintenance management and control system | |
| CN103997121B (en) | The monitor method of intelligent substation real-time traffic information and monitoring device | |
| CN204086959U (en) | PREDICTIVE CONTROL realizes field produces well pattern intelligence managing and control system | |
| CN104979907A (en) | Substation automation device detection method based on D5000 system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |