CN108847968B - Monitoring accident and abnormal event identification and multidimensional analysis method - Google Patents
Monitoring accident and abnormal event identification and multidimensional analysis method Download PDFInfo
- Publication number
- CN108847968B CN108847968B CN201810565961.5A CN201810565961A CN108847968B CN 108847968 B CN108847968 B CN 108847968B CN 201810565961 A CN201810565961 A CN 201810565961A CN 108847968 B CN108847968 B CN 108847968B
- Authority
- CN
- China
- Prior art keywords
- information
- alarm
- signal
- time
- switch
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 230000002159 abnormal effect Effects 0.000 title claims abstract description 94
- 238000012544 monitoring process Methods 0.000 title claims abstract description 81
- 238000004458 analytical method Methods 0.000 title claims abstract description 31
- 230000005856 abnormality Effects 0.000 claims abstract description 33
- 238000012423 maintenance Methods 0.000 claims abstract description 29
- 238000002372 labelling Methods 0.000 claims abstract description 9
- 230000007246 mechanism Effects 0.000 claims abstract description 7
- 238000006073 displacement reaction Methods 0.000 claims description 82
- 230000009471 action Effects 0.000 claims description 36
- 230000007547 defect Effects 0.000 claims description 32
- 230000011664 signaling Effects 0.000 claims description 30
- 238000000034 method Methods 0.000 claims description 24
- 238000001914 filtration Methods 0.000 claims description 13
- 230000005540 biological transmission Effects 0.000 claims description 12
- 230000008859 change Effects 0.000 claims description 7
- 230000000295 complement effect Effects 0.000 claims description 6
- 230000001788 irregular Effects 0.000 claims description 6
- 238000005259 measurement Methods 0.000 claims description 6
- 238000010606 normalization Methods 0.000 claims description 6
- 230000000737 periodic effect Effects 0.000 claims description 6
- 230000003203 everyday effect Effects 0.000 claims description 4
- 239000013589 supplement Substances 0.000 claims description 4
- 238000003556 assay Methods 0.000 claims description 3
- 230000000903 blocking effect Effects 0.000 claims description 3
- 238000011065 in-situ storage Methods 0.000 claims description 3
- 230000008569 process Effects 0.000 claims description 3
- 230000002354 daily effect Effects 0.000 claims description 2
- 238000004141 dimensional analysis Methods 0.000 claims 2
- 230000002401 inhibitory effect Effects 0.000 claims 1
- 238000005516 engineering process Methods 0.000 abstract description 4
- 238000010276 construction Methods 0.000 abstract description 2
- 230000001629 suppression Effects 0.000 description 2
- 238000012300 Sequence Analysis Methods 0.000 description 1
- 238000012098 association analyses Methods 0.000 description 1
- 238000010219 correlation analysis Methods 0.000 description 1
- 239000000284 extract Substances 0.000 description 1
- 230000005764 inhibitory process Effects 0.000 description 1
- 238000010801 machine learning Methods 0.000 description 1
- 238000007726 management method Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000007639 printing Methods 0.000 description 1
- 238000011160 research Methods 0.000 description 1
- 238000007619 statistical method Methods 0.000 description 1
- 230000009466 transformation Effects 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0677—Localisation of faults
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Remote Monitoring And Control Of Power-Distribution Networks (AREA)
Abstract
A monitoring accident and abnormal event identification and multidimensional analysis method relates to an analysis method. With the continuous growth of power grid construction and the increase of power equipment, the accurate and rapid analysis of faults and abnormalities cannot be realized. The invention comprises the following steps: 1) establishing a fault and exception rule base; 2) performing labeling analysis; 3) identifying a fault event; 4) and recognizing the abnormal event. According to the technical scheme, an intelligent rechecking mechanism is established by monitoring alarm information, information such as alarm level, monitoring operation information, maintenance and the like is automatically labeled according to the information, a data labeling technology is utilized, effective alarm information is extracted, fault and abnormal information corresponding to the information are identified from mass data by combining a fault and abnormal information rule base, and meanwhile, the rest information is pushed to be manually rechecked for special analysis, so that the efficiency and the accuracy are effectively improved.
Description
Technical Field
The invention relates to an analysis method, in particular to a monitoring accident and abnormal event identification and multidimensional analysis method.
Background
With the continuous growth of power grid construction and the increase of power equipment, monitoring professionals face huge warning information amount, technical support for complete and normative management of monitoring information is lacked while real-time monitoring of the equipment is carried out, statistical analysis and intelligent decision on the running state of the monitoring equipment are lacked, and identification mechanisms and analysis methods for fault events, abnormal events and defect events are lacked.
Disclosure of Invention
The technical problem to be solved and the technical task provided by the invention are to perfect and improve the prior technical scheme and provide a monitoring accident and abnormal event identification and multidimensional analysis method so as to realize the purpose of accurately and quickly analyzing the faults and the abnormalities. Therefore, the invention adopts the following technical scheme.
The monitoring accident and abnormal event identification and multidimensional analysis method comprises the following steps:
1) establishing a fault and exception rule base; compiling a monitoring information alarm rule base of the typical fault abnormity of the substation equipment; the alarm rule base operation rule comprises the following steps:
101) according to the alarm rule base, a transformer substation is taken as a unit, and the principle of judging failure firstly and then abnormality secondly is taken as a judgment principle;
102) the equipment fault is judged by utilizing a monitoring information alarm rule base according to the alarm information of the accident and the switch displacement grade except for the equipment operation and maintenance, the alarm information of the accident, the abnormality and the displacement grade from the first T1 minutes to the last T2 minutes is taken as a data source, and the alarm information of the abnormality grade with the action returned in the period is taken as an accompanying alarm;
103) classifying the alarm based on the typical faults of different equipment types;
104) the equipment faults are judged according to the sequence of bus differential, main transformer differential gas, failure, main transformer backup, line protection, reclosing, spare power automatic switching and safe automatic device action;
105) the equipment abnormity takes abnormal level warning information of the same transformer substation T3 minutes with upper window marks as a data source, the monitoring information warning rule base of typical abnormity of transformer substation equipment is used for judging, and classification is carried out according to the abnormity of primary equipment and secondary equipment;
2) taged assay
Classifying the daily alarm information according to action reasons, establishing a label mechanism, removing invalid signals and interference signals through rules, adding standardized attribute labels to the valid signals, and identifying faults and abnormal events according to a fault and abnormal rule base, wherein the labels comprise defect labels, invalid labels, upper window labels, retired labels, suspicious labels, standby channel supplement labels, instant labels, overhaul labels, associated labels, operation labels, debugging labels, secondary working labels and frequent judgment labels;
3) fault event identification
Based on the effective signals after the labeling analysis and filtration, simultaneously associating a scheduling log and a monitoring log to perform event association, and finally realizing the accuracy of the fault event;
4) abnormal event identification
Based on the effective signals after the labeling analysis and filtration, inquiring abnormal signals of an upper window, and only taking action signals without including abnormal signals caused by faults, operations, concomitations and defects;
and (3) taking abnormal level alarm information of the same transformer substation with the window identification for T4 minutes as a data source, judging by utilizing a monitoring information alarm rule base of typical abnormality of transformer substation equipment, classifying according to the abnormality of primary equipment and secondary equipment, and recording the occurrence quantity of historical abnormality.
According to the technical scheme, an intelligent rechecking mechanism is established by monitoring alarm information, information such as alarm level, monitoring operation information, maintenance and the like is automatically labeled according to the information, a data labeling technology is utilized, effective alarm information is extracted, fault and abnormal information corresponding to the information are identified from mass data by combining a fault and abnormal information rule base, and meanwhile, the rest information is pushed to be manually rechecked for special analysis, so that the efficiency and the accuracy are effectively improved.
As a preferable technical means: in step 3), the fault event identification comprises the following steps:
301) inquiring the position of the knife switch in the interval at the moment when the upper window protection signal occurs, judging that the knife switch is caused by interval debugging when all the knife switch positions are in the open position, not considering the knife switch as a fault, and judging the next step if the knife switches are still in the closed position;
302) inquiring whether the remote signaling alarm information in the first 1 minute to the last 5 minutes has switch position division signals and interval accident total signals with the same interval, such as no switch position division signals or accident total signals, which are not regarded as faults, by taking the protection occurrence time as a reference; if the position division signal is caused by overhauling, operating, remote controlling and error signals, the position division signal is not considered as a fault;
303) inquiring whether active power and voltage in a recent interval have sudden changes or not by taking the occurrence time of protection as a reference, wherein if the frequency of telemetering data is too low, the measured sudden changes are not captured by the obtained telemetering data possibly, and the condition can only be used as auxiliary data for fault judgment and cannot be completely relied on;
304) when active power and voltage in a recent interval suddenly change, taking the first switch displacement alarm as a reference, taking accident, abnormality and displacement grade alarm information from the first 1 minute to the last 5 minutes as a data source, and taking abnormality grade alarm information with the action reset in the period as an accompanying alarm;
305) if a fault is determined, the fault is qualified according to the action sequence of a bus difference, main transformer differential gas, failure, main transformer backup, line protection, reclosing, spare power automatic switching and a safety automatic device, remote signaling alarm data of the plant station and the interval n hours before and after the time of the accident and the defect are compared by combining a typical fault rule base, and when the typical accident and defect signal association rule base exists and the plant station has signals which do not appear but exist in the signal points, the signal is judged to be missed;
306) when a fault of a line or a main transformer interval occurs, whether reclosing is operated within 5 minutes needs to be inquired, if the reclosing is not operated, the reclosing is not operated is prompted, and if the reclosing is protected, the reclosing is prompted; after reclosing action, judging whether the switch is successfully closed, if not, switching off again, determining that reclosing fails, and if not, switching off again, determining that reclosing succeeds;
307) when a fault occurs, whether the fault can be sent by force is judged by combining a fault rule base according to the fault category, and partial faults need to be combined with abnormal events, such as a bus difference, main transformer differential gas, failure and main transformer backup protection action tripping switch, do not have the condition of sending by force; the line switch interval has no forced feeding condition except the heater fault abnormal type and the knife switch abnormal type, and the line protection and measurement and control abnormal type has no forced feeding condition;
308) when the switch is tripped in an accident, if a closing signal exists within 3 hours, the circuit connected with the switch is in accordance with a one-time trial delivery condition; trial transmission is not carried out on reclosing, namely a switching-on signal within 1 minute after an accident is not calculated; trial delivery is not calculated for accident displacement which is not in a monitoring operation responsibility area; if the equipment is in a maintenance state during an accident, trial delivery is not calculated; for the wiring of the provincial dispatching side 3/2, a primary equipment monitoring alarm table is needed to be combined for judgment, namely, the alarm of equipment state quit is calculated to be sent in a trial mode when an accident occurs, and misjudgment of a trial-sending line is avoided.
As a preferable technical means: in step 2), the method for identifying the tag includes:
201) defect tag identification
A) Monitoring information classification correctness
The monitoring information alarm level is divided into five types of accidents, abnormity, out-of-limit, displacement and notification according to the severity and urgency, the monitoring information data is periodically checked with an information table and a typical information table, and a 'defect' label is added to the irregular information;
B) monitoring information naming normalization
Checking the naming normalization of the rechecked monitoring information regularly through the monitoring information data, the information table and the typical information table, and adding a defect label to the irregular information;
202) invalid tag identification
Checking whether the alarm time of the monitoring information data has the operations of corresponding equipment maintenance card placing or alarm suppression, blocking, manual number placing and the like on the signal, and if so, marking the signal as an invalid label;
203) upper window label
The upper window label indicates whether the optimized result corresponding to the alarm signal is upper window or not; event identification takes into account windowing information;
204) retirement label
The signal which is still transmitted by the equipment which is retired in the equipment ledger is marked as a retirement label;
205) suspicious label
If the alarm signal contains a suspicious word, the alarm signal is divided into a suspicious label;
206) spare channel patch label
The alarm signal contains a 'spare channel complement' word eye, and is divided into a 'spare channel complement' label;
207) instant label
The signal of the upper window in the remote signaling alarm information is marked with a 'timely' label within 15 minutes;
208) maintenance label
If the signal contains a 'overhaul' word eye, the signal is divided into overhauls, and information is extracted from the non-correspondence of the placement of the cards aiming at the condition that part of cards are missed;
209) companion label
A) Remote operation
By judging whether the switch displacement state contains a displacement/remote control type and is not subjected to AVC remote control, remote operation is calculated, and abnormal signals which act at the same interval and are reset within 30 seconds before and after the displacement occurrence time are marked as 'companion';
B) AVC remote control
The remote control operation alarm table contains the remote control variable AVC remote control of AVC; the switch name contains switch displacement of 'capacitance', 'low reactance', 'high reactance', 'capacitive reactance', 'combined capacitance' and 'combined reactance', the default is AVC remote control, and abnormal signals which act and return at the same interval within 30 seconds before and after the displacement occurrence time are marked as 'associated';
C) error signal
On the basis of eliminating remote operation and AVC remote control operation, judging that the time interval of any two switch displacements is smaller than a threshold value, and judging the signal as a false signal; judging whether displacement with the displacement frequency exceeding M exists in N minutes, and if so, calculating error signals, wherein the displacement of remote operation is not included in the error signal statistics;
D) switch, knife switch and grounding knife switch historical operation state identification
Reading all switch and disconnecting link displacement information in remote signaling displacement data, but not including a switch single-phase switching-on and switching-off alarm, taking displacement time as starting time, taking the next time of switching a disconnecting link as ending time, taking the switch and disconnecting link states in a time period as the switch remote signaling state of the starting time, and identifying abnormal signals which act and are reset within 30 seconds before and after the displacement occurrence time as 'companion' labels, and checking the remote signaling states of the switch, the disconnecting link and the grounding disconnecting link by using a profile file in consideration of the missing condition in the signal uploading process;
E) accident shift
Calculating accident deflection according to an opening and closing signal within 1 minute after the tripping of a switching accident, wherein the deflection state is that the deflection of reclosing and spare power automatic switching closing is also calculated into the accident deflection;
F) in situ operation
Switch displacement signals which do not meet the requirements of overhaul, remote operation, AVC remote control operation, error signals and accident displacement are all calculated into field operation, and abnormal signals which act and are reset within 30 seconds before and after 10 seconds of displacement occurrence time in the field operation period are marked as 'companion';
G) operation label
The basic judgment method comprises the following steps: if the two different disconnecting links are displaced and separated within half an hour at intervals, wherein the disconnecting links do not comprise grounding disconnecting links and are window-mounting signals, the start of maintenance operation is judged, until the displacement of the two different disconnecting links is changed into closing position, the matching is stopped, an 'operation' label is marked on the displacement signal in the period, and an 'associated' label is marked on the abnormal signal which acts and is reset;
and (4) judging by combining an operation ticket: reading operation ticket information, determining the starting time and the ending time of operation by combining historical state data of a switch and a disconnecting link according to instruction information of an operation ticket of the operation ticket, wherein the instruction information comprises an operation unit, command issuing time, finishing time and an operation instruction interval object, taking the following command time and finishing time as references, marking an 'operation' label on a remote signaling displacement signal at the same interval in the instruction execution time, and marking an 'operation' label on 'interval accident total information' and 'total station accident total signal' in the instruction execution time;
210) debugging label
When the operation ticket is rechecked, switching to mark a debugging label on the remote signaling deflection signal according to the running state at intervals; the secondary equipment generally has 2 or 4 or more instructions according to the condition that the reporting time when the instruction including 'tripping change to signal' is found in the instruction is debugging starting time, and the command time when the instruction including 'tripping change to signal' is found is debugging finishing time, and the primary equipment is mainly switched according to four conditions of 'operation', 'hot standby', 'cold standby', 'overhaul' to judge, and can be divided into two conditions; the first method starts maintenance by switching to a 'cold standby' state, takes the instruction reporting time of switching to the 'cold standby' state as debugging starting time, and takes the command issuing time when switching from the 'cold standby' state to other states as debugging finishing time; secondly, starting maintenance by switching to a maintenance state, taking the instruction report time of switching to the maintenance state as debugging starting time, taking the instruction issuing time when switching from the maintenance state to other states as debugging finishing time, and marking debugging labels on signals in the time periods;
211) secondary working label
In combination with a PMS secondary work ticket, according to the interval/total station and time information in the secondary work ticket, marking a 'secondary work' label on the work time content and the remote signaling alarm signal at the same interval/same station;
212) frequent judgement
On the basis of eliminating signals caused by remote operation, field operation, AVC operation, faults and defects, the signal transmitting frequency of signal points every day and every month is counted according to the signal points, and the action is calculated once again, if the transmitting number exceeds 35/month, the periodic frequency transmission is judged, and if the transmitting number exceeds 5/day, the periodic frequency transmission is judged.
As a preferable technical means: the method also comprises an information displaying step, wherein when the information is displayed:
the equipment monitoring information big data system equipment fault abnormal information display takes the same transformer substation at the same time as a unit, and the format comprises fault abnormal information introduction, an alarm information list, a false missing sending mark and a subsequent emergency disposal prompt.
The fault information introduction display format is as follows: the safety automatic device acts to trip the switch and closes the switch, and the time is the first switch displacement alarm time. The line should also mark the coincidence action condition, which is divided into three types of successful coincidence, unsuccessful coincidence and non-reclosing action.
Abnormal information introduction display format: year, month, day, substation, equipment, anomaly type.
The emergency disposal prompt mainly prompts whether the forced sending condition is met, and the equipment in the format of the format does not meet the forced sending condition due to the reason. And the switches of the bus differential, main transformer differential gas, failure and main transformer backup protection action tripping do not have forced transmission conditions. The line switch interval has no forced feeding condition except the heater fault abnormal type and the knife switch abnormal type, and the line protection and measurement and control abnormal type has no forced feeding condition.
As a preferable technical means: in step 102), the first switch displacement alarm is taken as a reference, and accident, abnormality and displacement grade alarm information from the first 1 minute to the last 5 minutes is taken as a data source.
As a preferable technical means: in the step 105), the equipment abnormality takes 2-minute abnormality level alarm information of the same substation with a window mark as a data source.
Has the advantages that:
by developing intelligent analysis of centralized monitoring information, collecting a plurality of system operation data, performing association comparison analysis on the monitoring equipment by using an intelligent association analysis technology, establishing an equipment fault handling model, developing intelligent prediction research on early signs and trends of the faults of the monitoring equipment, improving centralized monitoring operation efficiency and effectively guaranteeing operation safety of power grid equipment.
The technical scheme is the basic work of information rechecking, and the key point of the rechecking is that the alarm information is subjected to attribute marking by means of methods such as correlation analysis, time sequence analysis, frequency analysis, text analysis and the like, so that a foundation is laid for the analysis of big data in the future.
According to the technical scheme, a signal rule base is established according to rules for common signals generated by similar faults and abnormalities, the rule base is perfected through machine learning, so that unreasonable conditions such as missed hair, mistaken hair and multiple hair are identified, the reason for generating event signals is absorbed by monitoring analysts and monitoring full time, manual identification is avoided, and the effectiveness of fault and abnormality treatment is guaranteed.
Drawings
FIG. 1 is a flow chart of the present invention.
Detailed Description
The technical scheme of the invention is further explained in detail by combining the drawings in the specification.
As shown in fig. 1, the event and anomaly identification rule includes:
filtering the signal
1) Acquiring remote signaling alarm information, and filtering invalid signals, wherein the invalid signals comprise signals such as inhibition, blockage, artificial direct numbers and the like;
2) filtering a listing signal, wherein the listing signal comprises information with overhaul, spare channel supplement, defects and suspicious words, and marking a corresponding attribute label;
3) filtering defect signals, and checking classification, voltage grade and non-standard conditions in the preposed table according to a standard library;
4) filtering out decommissioning signals, wherein the decommissioning signals comprise signals sent by substations and equipment which are generated by decommissioning operation or are decommissioned;
5) filtering timely signals, and filtering signals which are in the upper window and confirmed within 10-15 min in the remote signaling alarm information;
6) obtaining an effective signal to be analyzed, and eliminating the effective signal after the interference signal is eliminated;
7) a remote control operation signal rule base;
8) re-determining the effective signal to be analyzed, and eliminating the effective signal after the interference signal sent by the operation event;
9) the accident information rule base is used for identifying accident incidents according to the accident information rule base which is arranged by the monitoring speciality, and marking a fault label and associated, mistakenly-sent and missed-sent labels;
10) re-determining effective signals to be analyzed, eliminating the effective signals after interference signals sent by fault events, and judging the abnormity and the defects;
11) associating with the duty record and the accident record, and identifying a defect event label;
12) re-determining effective signals to be analyzed, and eliminating interference signals sent by defect events to identify abnormal events;
13) judging an abnormal event according to an abnormal signal rule base which is arranged by a monitoring professional, and marking an abnormal label;
14) re-determining the effective signal to be analyzed, and eliminating the effective signal after the abnormal event sends the interference signal;
15) carrying out manual analysis on effective signals which cannot be subjected to eventing through a rule base;
16) manually matching the signal caused by the defect with the defect and the signal association, and printing a defect label;
17) and 6), associating corresponding work records, and identifying debugging, companion and secondary work labels.
The invention establishes an intelligent rechecking mechanism by monitoring alarm information, automatically labels information every day by using a data label technology according to information such as alarm grade, monitoring operation information, maintenance and the like, extracts effective alarm information, identifies fault and abnormal information corresponding to the information from mass data by combining a fault and abnormal information rule base, and simultaneously pushes the residual information to carry out manual rechecking for special analysis, and the specific logic is as follows:
1.1. fault and abnormal information rule base
In order to meet the requirement of unattended centralized monitoring of a transformer substation, the remote handling correctness and rapidity of the abnormal faults of a power grid and transformer substation equipment are improved, a monitoring information warning rule base of the typical abnormal faults of the transformer substation equipment is compiled according to information acquisition of 'transformer substation equipment monitoring information specification' (QGDW 11398-.
The method is characterized by comprising the steps of alarming, summarizing, combing, analyzing and summarizing according to the operation of 220 KV and above voltage level ring networks and the operation of 110 KV and below voltage level open loops of a power grid and the monitoring information of the state change of primary equipment and secondary equipment generated by the abnormal fault characteristics of substation equipment.
(I) alarm rule base operation rule
1) And according to the alarm rule base, a transformer substation is taken as a unit, and the principle of judging failure firstly and then abnormity is taken.
2) And judging the equipment faults by using the monitoring information alarm rule base of the typical faults of the substation equipment according to the alarm information of the accidents and the switch displacement grade except for the equipment operation and maintenance. And taking the first switch displacement alarm as a reference, taking accident, abnormality and displacement grade alarm information from the first 1 minute to the last 5 minutes as a data source, and taking the abnormality grade alarm information with the action restored in the period as an accompanying alarm.
3) Alarms are classified based on typical faults of different equipment types.
4) And equipment faults are judged according to the action sequence of a bus difference, main transformer differential gas, failure, main transformer backup, line protection, reclosing, spare power automatic switching and a safety automatic device.
5) And the equipment abnormity takes the 2-minute abnormity level alarm information of the same transformer substation with the upper window mark as a data source, utilizes the monitoring information alarm rule base of the typical abnormity of the transformer substation equipment to judge, and classifies the equipment abnormity according to the abnormity of primary and secondary equipment.
(II) display information format
1) The equipment monitoring information big data system equipment fault abnormal information display takes the same transformer substation at the same time as a unit, and the format comprises fault abnormal information introduction, an alarm information list, a false missing sending mark and a subsequent emergency disposal prompt.
2) The fault information introduction display format is as follows: the safety automatic device acts to trip the switch and closes the switch, and the time is the first switch displacement alarm time. The line should also mark the coincidence action condition, which is divided into three types of successful coincidence, unsuccessful coincidence and non-reclosing action.
3) Abnormal information introduction display format: year, month, day, substation, equipment, anomaly type.
4) The emergency disposal prompt mainly prompts whether the forced sending condition is met, and the equipment in the format of the format does not meet the forced sending condition due to the reason. And the switches of the bus differential, main transformer differential gas, failure and main transformer backup protection action tripping do not have forced transmission conditions. The line switch interval has no forced feeding condition except the heater fault abnormal type and the knife switch abnormal type, and the line protection and measurement and control abnormal type has no forced feeding condition.
1.2. Taged assay
Classifying the monitoring alarm information of the substation equipment according to action reasons, establishing a label mechanism, counting various labels for displaying, and analyzing the effectiveness of the monitoring alarm of the substation equipment. The method comprises the following steps of eliminating invalid signals and interference signals through rules, adding standardized attribute labels to the valid signals, and identifying faults and abnormal events according to a fault and abnormal rule base, wherein the specific label identification rules are as follows:
(I) Defect Label
1) Monitoring information classification correctness
The monitoring information alarm level is divided into five types of accidents, abnormity, out-of-limit, displacement and notification according to the severity and urgency, the monitoring information data is periodically checked with an information table and a typical information table, and a 'defect' label is added to the irregular information.
2) Monitoring information naming normalization
And regularly checking the naming normalization of the rechecked monitoring information through the monitoring information data, the information table and the typical information table, and adding a defect label to the irregular information.
(II) invalid label
And checking whether the alarm time of the monitoring information data has the operations of corresponding equipment maintenance card placing or alarm suppression, blocking, manual number placing and the like on the signal, and if so, marking the signal as an invalid label.
(III) Upper Window Label
The upper window label indicates whether the optimized result corresponding to the alarm signal is upper window. The D5000 or OPEN3000 system is automatically marked, and event identification only needs to consider window information.
(IV) retirement label
The signal still transmitted by the equipment which is retired in the equipment ledger is marked as a retirement label.
(V) suspicious tag
If the alarm signal contains the word 'suspicious', the alarm signal is classified as 'suspicious' label.
(VI) spare channel supplement label
The alarm signal contains a 'spare channel complement' word eye, and is divided into a 'spare channel complement' label.
(VII) timely Label
The signal of the upper window in the remote signaling alarm information is marked with a 'timely' label within 15 minutes.
(eighth) service tag
If the signal contains a word eye of 'overhaul', the signal is divided into overhaul, and information can be extracted from the condition that the cards are not correspondingly placed aiming at the condition that part of the cards are missed to be picked;
(nine) companion tag
1) Remote operation
By judging whether the switch displacement state contains a displacement (remote control) type and is not remote-controlled according to AVC, remote operation is calculated, and abnormal signals which act at the same interval and are reset within 30 seconds before and after 10 seconds before the displacement occurrence time are marked as 'companion';
2) AVC remote control
The remote control operation alarm table contains the remote control variable AVC remote control of AVC; the switch name contains switch displacement of 'capacitance', 'low reactance', 'high reactance', 'capacitive reactance', 'combined capacitance' and 'combined reactance', the default is AVC remote control, and abnormal signals which act and return at the same interval within 30 seconds before and after the displacement occurrence time are marked as 'associated';
3) error signal
On the basis of eliminating remote operation and AVC remote control operation, judging that the time interval of any two switch displacements is smaller than a door threshold (20 seconds as a default and available), and judging the signal as a false signal; judging whether displacement with the displacement frequency exceeding M exists in N minutes, and if so, calculating error signals, wherein the displacement of remote operation is not included in the error signal statistics;
4) switch, knife switch and grounding knife switch historical operation state identification
By reading all switch and disconnecting link displacement information in remote signaling displacement data, but not including switch single-phase switching-on and switching-off alarm, the displacement time is taken as the starting time, the next time of switching a disconnecting link is taken as the ending time, the states of the switch and the disconnecting link in a time period are the remote signaling states of the switch of the starting time, and abnormal signals which act and are reset within 30 seconds before and after the displacement occurrence time are marked as 'companion' labels, and the remote signaling states of the switch, the disconnecting link and the grounding disconnecting link can be verified by using a profile file in consideration of the missing condition in the signal uploading process.
5) Accident shift
Calculating accident deflection according to an opening and closing signal within 1 minute after the tripping of a switching accident, wherein the deflection state is that the deflection of reclosing and spare power automatic switching closing is also calculated into the accident deflection;
6) in situ operation
Switch displacement signals which do not meet the requirements of overhaul, remote operation, AVC remote control operation, error signals and accident displacement are calculated into field operation, and abnormal signals which act and reset within 30 seconds before and after 10 seconds of displacement occurrence time in the field operation period are marked as 'companion'.
(ten) operation tag
The basic judgment method comprises the following steps: if two different disconnecting links are displaced and separated (not including the grounding disconnecting link and being window-mounting signals) within half an interval, the maintenance operation is judged to be started, until the two different disconnecting links are displaced and are changed into closed positions, the matching is stopped, the operation label is marked on the displacement signals in the period, and the companion label is marked on the abnormal signals which are moved and reset, so that the method is suitable for most intervals.
And (4) judging by combining an operation ticket: reading operation ticket information, determining the start time and the end time of operation more accurately by using the instruction information (operation unit, command issuing time, completion time and operation instruction interval object) of the operation ticket and taking the following instruction time and the completion time as reference in combination with historical state data of a switch and a disconnecting link, and then marking an 'operation' label on a remote signaling displacement signal at the same interval in the instruction execution time, wherein the 'interval accident total information' and the 'total station accident total signal' in the instruction execution time can also be marked with the 'operation' label.
(eleven) debug tag
And when the operation ticket is rechecked, switching to mark a debugging label on the remote signaling deflection signal according to the running state at intervals. The secondary equipment is used as debugging starting time according to the fact that the reporting time when the instructions include 'tripping is changed into signals' is found in the instructions, the command sending time when the instructions include 'tripping is changed into tripping' is found to be debugging finishing time, the primary equipment generally has 2 or 4 or more instructions, and the primary equipment is mainly judged by switching four states of 'running', 'hot standby', 'cold standby' and 'overhaul', and the two conditions can be divided into two conditions. The first method starts maintenance by switching to a 'cold standby' state, takes the instruction reporting time of switching to the 'cold standby' state as debugging starting time, and takes the command issuing time when switching from the 'cold standby' state to other states as debugging finishing time; and the second method starts to overhaul by turning to the overhaul state, takes the instruction report time of turning to the overhaul state as the debugging start time, takes the command time when turning from overhaul to other states as the debugging end time, and marks on debugging labels on signals in the above time periods.
(twelve) Secondary working Label
And (4) marking a 'secondary work' label on a remote signaling alarm signal of the work time content and the same interval/same station according to the interval/total station and time information in the secondary work ticket by combining the PMS secondary work ticket.
(thirteen) frequent judgment
On the basis of eliminating signals caused by remote operation, field operation, AVC operation, faults and defects, the signal transmitting frequency of signal points every day and every month is counted according to the signal points, and the action is repeated once. If the number of the transmitted data exceeds 35, the periodic frequency transmission is judged per month, and if the number of the transmitted data exceeds 5, the periodic frequency transmission is judged per day.
1.3. Fault event identification
And based on the effective signals after the labeling analysis and filtration, simultaneously associating the scheduling log and the monitoring log to perform event association, and finally realizing the accuracy of the fault event. The specific decision rule is as follows:
1. inquiring the position of the knife switch (excluding the grounding knife switch) in the interval at the time of the occurrence of the upper window protection signal, if all the knife switch positions are in the open position, judging that the knife switch is caused by interval debugging and is not determined to be a fault, and if the knife switch is still in the closed position, judging the next step.
2. Inquiring whether the remote signaling alarm information in the first 1 minute to the last 5 minutes has switch position dividing signals and interval accident total (total station accident total) signals at the same interval, such as non-switch position dividing signals or accident total signals, which are not determined to be faults, by taking the protection occurrence time as a reference; if the position division signal is caused by overhauling, operation, remote control and error signals, the fault is not determined.
3. And inquiring whether active power, voltage and the like in the recent interval have sudden changes or not by taking the occurrence time of protection as a reference, wherein if the frequency of the telemetering data is too low, the measured sudden changes are not captured by the obtained telemetering data possibly, and the condition can only be used as auxiliary data for fault judgment and cannot be completely relied on.
4. If the condition 3 is met, taking the first switch displacement alarm as a reference, taking accident, abnormality and displacement grade alarm information from the first 1 minute to the last 5 minutes as a data source, and taking the abnormality grade alarm information with the action repeated in the period as an accompanying alarm.
5. If a fault is determined, the fault can be qualified according to the action sequence of a bus difference, main transformer differential gas, failure, main transformer backup, line protection, reclosing, spare power automatic switching and a safety automatic device, remote signaling alarm data of the plant station and the interval n hours before and after the time of the accident and the defect are compared by combining a typical fault rule base, if the typical accident and the defect exist in a signal association rule base, and signals which do not exist in the plant station but exist in the signal points, the signal missing can be judged.
6. When a fault of a line or a main transformer interval occurs, whether reclosing is operated within 5 minutes needs to be inquired, if the reclosing is not operated, the reclosing is not operated is prompted, and if the reclosing is protected, the reclosing is prompted; and after reclosing action, judging whether the switch is successfully closed, if not, switching off again, determining that reclosing fails, and if not, switching off again, and determining that reclosing succeeds.
7. And (4) when a fault occurs, judging whether the fault can be sent by force according to the fault category and by combining a fault rule base, wherein part of the faults need to be combined with abnormal events, and the switches of the bus difference, the main transformer differential gas, the failure and the main transformer backup protection action tripping do not have the condition of sending by force. The line switch interval has no forced feeding condition except the heater fault abnormal type and the knife switch abnormal type, and the line protection and measurement and control abnormal type has no forced feeding condition.
8. And when the switch is tripped in an accident, if a closing signal exists within 3 hours, the circuit connected with the switch is in accordance with a one-time trial delivery condition. Trial transmission is not carried out on reclosing, namely a switching-on signal within 1 minute after an accident is not calculated; trial delivery is not calculated for accident displacement which is not in a monitoring operation responsibility area; when in an accident, the equipment is not tried to be sent in a maintenance state (hanging a maintenance board or dividing knife switches on two sides, and remote signaling program transformation judgment); for the wiring of the provincial dispatching side 3/2, a primary equipment monitoring alarm table is needed to be combined for judgment, namely, the alarm of equipment state quit is calculated to be sent in a trial mode when an accident occurs, and misjudgment of a trial-sending line is avoided.
1.4. Abnormal event identification
And inquiring the abnormal signals of the upper window based on the effective signals after the labeling analysis and filtration, and only taking action signals without the abnormal signals caused by faults, operations, concomitations and defects.
And (3) taking 2-minute abnormal level alarm information of the same transformer substation with the window identification as a data source, judging by utilizing a monitoring information alarm rule base of typical abnormality of transformer substation equipment, classifying according to the abnormality of primary equipment and secondary equipment, and recording the occurrence quantity of historical abnormality.
The method for recognizing monitoring accident and abnormal event and multidimensional analysis shown in fig. 1 is a specific embodiment of the present invention, already embodies the essential features and progress of the present invention, and can make equivalent modifications in shape, structure, etc. according to the practical use requirements, all falling within the scope of protection of the present solution.
Claims (6)
1. The monitoring accident and abnormal event identification and multidimensional analysis method is characterized by comprising the following steps:
1) establishing a fault and exception rule base; compiling a monitoring information alarm rule base of the typical fault abnormity of the substation equipment; the alarm rule base operation rule comprises the following steps:
101) according to the alarm rule base, a transformer substation is taken as a unit, and the principle of judging failure firstly and then abnormality secondly is taken as a judgment principle;
102) the equipment fault is judged by utilizing a monitoring information alarm rule base according to the alarm information of the accident and the switch displacement grade except for the equipment operation and maintenance, the alarm information of the accident, the abnormality and the displacement grade from the first T1 minutes to the last T2 minutes is taken as a data source, and the alarm information of the abnormality grade with the action returned in the period is taken as an accompanying alarm;
103) classifying the alarm based on the typical faults of different equipment types;
104) the equipment faults are judged according to the sequence of bus differential, main transformer differential gas, failure, main transformer backup, line protection, reclosing, spare power automatic switching and safe automatic device action;
105) the equipment abnormity takes abnormal level warning information of the same transformer substation T3 minutes with upper window marks as a data source, the monitoring information warning rule base of typical abnormity of transformer substation equipment is used for judging, and classification is carried out according to the abnormity of primary equipment and secondary equipment;
2) taged assay
Classifying the daily alarm information according to action reasons, establishing a label mechanism, removing invalid signals and interference signals through rules, adding standardized attribute labels to the valid signals, and identifying faults and abnormal events according to a fault and abnormal rule base, wherein the labels comprise defect labels, invalid labels, upper window labels, retired labels, suspicious labels, standby channel supplement labels, instant labels, overhaul labels, associated labels, operation labels, debugging labels, secondary working labels and frequent judgment labels;
3) fault event identification
Based on the effective signals after the labeling analysis and filtration, simultaneously associating a scheduling log and a monitoring log to perform event association, and finally realizing the accuracy of the fault event;
4) abnormal event identification
Based on the effective signals after the labeling analysis and filtration, inquiring abnormal signals of an upper window, and only taking action signals without including abnormal signals caused by faults, operations, concomitations and defects;
and (3) taking abnormal level alarm information of the same transformer substation with the window identification for T4 minutes as a data source, judging by utilizing a monitoring information alarm rule base of typical abnormality of transformer substation equipment, classifying according to the abnormality of primary equipment and secondary equipment, and recording the occurrence quantity of historical abnormality.
2. A method for monitoring accidents, abnormal event identification and multidimensional analysis according to claim 1, wherein: in step 3), the fault event identification comprises the following steps:
301) inquiring the position of the knife switch in the interval at the moment when the upper window protection signal occurs, judging that the knife switch is caused by interval debugging when all the knife switch positions are in the open position, not considering the knife switch as a fault, and judging the next step if the knife switches are still in the closed position;
302) inquiring whether the remote signaling alarm information in the first 1 minute to the last 5 minutes has switch position division signals and interval accident total signals with the same interval, such as no switch position division signals or accident total signals, which are not regarded as faults, by taking the protection occurrence time as a reference; if the position division signal is caused by overhauling, operating, remote controlling and error signals, the position division signal is not considered as a fault;
303) inquiring whether active power and voltage in a recent interval have sudden changes or not by taking the occurrence time of protection as a reference, wherein if the frequency of telemetering data is too low, the measured sudden changes are not captured by the obtained telemetering data possibly, and the condition can only be used as auxiliary data for fault judgment and cannot be completely relied on;
304) when active power and voltage in a recent interval suddenly change, taking the first switch displacement alarm as a reference, taking accident, abnormality and displacement grade alarm information from the first 1 minute to the last 5 minutes as a data source, and taking abnormality grade alarm information with the action reset in the period as an accompanying alarm;
305) if a fault is determined, the fault is qualified according to the action sequence of a bus difference, main transformer differential gas, failure, main transformer backup, line protection, reclosing, spare power automatic switching and a safety automatic device, remote signaling alarm data of a corresponding plant station and at an interval n hours before and after the time of the accident and the defect are compared by combining a typical fault rule base, and when the typical accident and defect signal association rule base exists and the plant station has signals which do not appear but exist in the signal points, the signal is judged to be missed;
306) when a fault of a line or a main transformer interval occurs, whether reclosing is operated within 5 minutes needs to be inquired, if the reclosing is not operated, the reclosing is not operated is prompted, and if the reclosing is protected, the reclosing is prompted; after reclosing action, judging whether the switch is successfully closed, if not, switching off again, determining that reclosing fails, and if not, switching off again, determining that reclosing succeeds;
307) when a fault occurs, whether the fault can be sent by force is judged by combining a fault rule base according to the fault category, part of the faults need to be combined with abnormal events, and switches of a bus differential, main transformer differential gas, failure and main transformer backup protection action tripping do not have the condition of sending by force; the line switch interval has no forced feeding condition except the heater fault abnormal type and the knife switch abnormal type, and the line protection and measurement and control abnormal type has no forced feeding condition;
308) when the switch is tripped in an accident, if a closing signal exists within 3 hours, the circuit connected with the switch is in accordance with a one-time trial delivery condition; trial transmission is not carried out on reclosing, namely a switching-on signal within 1 minute after an accident is not calculated; trial delivery is not calculated for accident displacement which is not in a monitoring operation responsibility area; if the equipment is in a maintenance state during an accident, trial delivery is not calculated; for the wiring of the provincial dispatching side 3/2, a primary equipment monitoring alarm table is needed to be combined for judgment, namely, the alarm of equipment state quit is calculated to be sent in a trial mode when an accident occurs, and misjudgment of a trial-sending line is avoided.
3. A method for monitoring accidents, abnormal event identification and multidimensional analysis according to claim 2, wherein: in step 2), the method for identifying the tag includes:
201) defect tag identification
A) Monitoring information classification correctness
The monitoring information alarm level is divided into five types of accidents, abnormity, out-of-limit, displacement and notification according to the severity and urgency, the monitoring information data is periodically checked with an information table and a typical information table, and a 'defect' label is added to the irregular information;
B) monitoring information naming normalization
Checking the naming normalization of the rechecked monitoring information regularly through the monitoring information data, the information table and the typical information table, and adding a defect label to the irregular information;
202) invalid tag identification
Checking whether the alarm time of the monitoring information data has corresponding equipment maintenance card placing or alarm inhibiting, blocking and manual number placing operation on the signal, if so, marking the signal as an invalid label;
203) upper window label
The upper window label indicates whether the optimized result corresponding to the alarm signal is upper window or not; event identification takes into account windowing information;
204) retirement label
The signal which is still transmitted by the equipment which is retired in the equipment ledger is marked as a retirement label;
205) suspicious label
If the alarm signal contains a suspicious word, the alarm signal is divided into a suspicious label;
206) spare channel patch label
The alarm signal contains a 'spare channel complement' word eye, and is divided into a 'spare channel complement' label;
207) instant label
The signal of the upper window in the remote signaling alarm information is marked with a 'timely' label within 15 minutes;
208) maintenance label
If the signal contains a 'overhaul' word eye, the signal is divided into overhauls, and information is extracted from the non-correspondence of the placement of the cards aiming at the condition that part of cards are missed;
209) companion label
A) Remote operation
By judging whether the switch displacement state contains a displacement/remote control type and is not subjected to AVC remote control, remote operation is calculated, and abnormal signals which act at the same interval and are reset within 30 seconds before and after the displacement occurrence time are marked as 'companion';
B) AVC remote control
The remote control operation alarm table contains the remote control variable AVC remote control of AVC; the switch name contains switch displacement of 'capacitance', 'low reactance', 'high reactance', 'capacitive reactance', 'combined capacitance' and 'combined reactance', the default is AVC remote control, and abnormal signals which act and return at the same interval within 30 seconds before and after the displacement occurrence time are marked as 'associated';
C) error signal
On the basis of eliminating remote operation and AVC remote control operation, judging that the time interval of any two switch displacements is smaller than a threshold value, and judging the signal as a false signal; judging whether displacement with the displacement frequency exceeding M exists in N minutes, and if so, calculating error signals, wherein the displacement of remote operation is not included in the error signal statistics;
D) switch, knife switch and grounding knife switch historical operation state identification
Reading all switch and disconnecting link displacement information in remote signaling displacement data, but not including a switch single-phase switching-on and switching-off alarm, taking displacement time as starting time, taking the next time of switching a disconnecting link as ending time, taking the switch and disconnecting link states in a time period as the switch remote signaling state of the starting time, and identifying abnormal signals which act and are reset within 30 seconds before and after the displacement occurrence time as 'companion' labels, and checking the remote signaling states of the switch, the disconnecting link and the grounding disconnecting link by using a profile file in consideration of the missing condition in the signal uploading process;
E) accident shift
Calculating accident deflection according to an opening and closing signal within 1 minute after the tripping of a switching accident, wherein the deflection state is that the deflection of reclosing and spare power automatic switching closing is also calculated into the accident deflection;
F) in situ operation
Switch displacement signals which do not meet the requirements of overhaul, remote operation, AVC remote control operation, error signals and accident displacement are all calculated into field operation, and abnormal signals which act and are reset within 30 seconds before and after 10 seconds of displacement occurrence time in the field operation period are marked as 'companion';
G) operation label
The basic judgment method comprises the following steps: if the two different disconnecting links are displaced and separated within half an hour at intervals, wherein the disconnecting links do not comprise grounding disconnecting links and are window-mounting signals, the start of maintenance operation is judged, until the displacement of the two different disconnecting links is changed into closing position, the matching is stopped, an 'operation' label is marked on the displacement signal in the period, and an 'associated' label is marked on the abnormal signal which acts and is reset;
and (4) judging by combining an operation ticket: reading operation ticket information, judging through instruction information of the operation ticket, wherein the instruction information comprises an operation unit, command issuing time, finishing time and an operation instruction interval object, determining starting time and finishing time of operation by taking the following command time and the finishing time as reference and combining historical state data of a switch and a disconnecting link, then marking an 'operation' label on remote signaling displacement signals at the same interval in instruction execution time, and marking an 'operation' label on 'interval accident total information' and 'total station accident total signal' in the instruction execution time;
210) debugging label
When the operation ticket is rechecked, switching to mark a debugging label on the remote signaling deflection signal according to the running state at intervals; the secondary equipment generally has 2 or 4 or more instructions according to the condition that the reporting time when the instruction including 'tripping change to signal' is found in the instruction is debugging starting time, and the command time when the instruction including 'tripping change to signal' is found is debugging finishing time, and the primary equipment is mainly switched according to four conditions of 'operation', 'hot standby', 'cold standby', 'overhaul' to judge, and can be divided into two conditions; the first method starts maintenance by switching to a 'cold standby' state, takes the instruction reporting time of switching to the 'cold standby' state as debugging starting time, and takes the command issuing time when switching from the 'cold standby' state to other states as debugging finishing time; secondly, starting maintenance by switching to a maintenance state, taking the instruction report time of switching to the maintenance state as debugging starting time, taking the instruction issuing time when switching from the maintenance state to other states as debugging finishing time, and marking debugging labels on signals in the time periods;
211) secondary working label
In combination with a PMS secondary work ticket, according to the interval/total station and time information in the secondary work ticket, marking a 'secondary work' label on the work time content and the remote signaling alarm signal at the same interval/same station;
212) frequent judgement
On the basis of eliminating signals caused by remote operation, field operation, AVC operation, faults and defects, the signal transmitting frequency of signal points is counted every day and every month according to the signal points, the action is calculated again, the transmitting number exceeds 35/month and is judged to be periodic frequency transmission, and the transmitting number exceeds 5/day and is judged to be periodic frequency transmission.
4. A method for monitoring accidents, abnormal event identification and multidimensional analysis according to claim 3, wherein: the method also comprises an information displaying step, wherein when the information is displayed:
the equipment monitoring information big data system equipment fault abnormal information display takes the same transformer substation at the same time as a unit, and the format comprises fault abnormal information introduction, an alarm information list, a false missing sending mark and a subsequent emergency disposal prompt;
the fault information introduction display format is as follows: the operation of the safety automatic device is changed into the switch, and the time is changed into the first switch displacement alarm time;
the circuit also needs to mark the coincidence action condition, which is divided into three types of successful coincidence, unsuccessful coincidence and non-action of reclosing;
abnormal information introduction display format: year, month, day, substation, equipment, abnormal type;
the emergency disposal prompt mainly prompts whether the forced sending condition is met, and the equipment in the format of the emergency disposal prompt does not meet the forced sending condition due to the reason of the original number;
the switches of the bus differential, main transformer differential gas, failure and main transformer backup protection action tripping do not have forced transmission conditions;
the line switch interval has no forced feeding condition except the heater fault abnormal type and the knife switch abnormal type, and the line protection and measurement and control abnormal type has no forced feeding condition.
5. A method for accident monitoring, anomaly identification and multi-dimensional analysis according to claim 4, wherein: in step 102), the first switch displacement alarm is taken as a reference, and accident, abnormality and displacement grade alarm information from the first 1 minute to the last 5 minutes is taken as a data source.
6. A method for accident monitoring, anomaly identification and multi-dimensional analysis according to claim 5, wherein: in the step 105), the equipment abnormality takes 2-minute abnormality level alarm information of the same substation with a window mark as a data source.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201810565961.5A CN108847968B (en) | 2018-06-04 | 2018-06-04 | Monitoring accident and abnormal event identification and multidimensional analysis method |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201810565961.5A CN108847968B (en) | 2018-06-04 | 2018-06-04 | Monitoring accident and abnormal event identification and multidimensional analysis method |
Publications (2)
Publication Number | Publication Date |
---|---|
CN108847968A CN108847968A (en) | 2018-11-20 |
CN108847968B true CN108847968B (en) | 2021-06-01 |
Family
ID=64210161
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201810565961.5A Active CN108847968B (en) | 2018-06-04 | 2018-06-04 | Monitoring accident and abnormal event identification and multidimensional analysis method |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN108847968B (en) |
Families Citing this family (28)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US10255141B2 (en) * | 2015-10-22 | 2019-04-09 | Oracle International Corporation | Event batching, output sequencing, and log based state storage in continuous query processing |
CN110046782A (en) * | 2018-12-05 | 2019-07-23 | 国网江西省电力有限公司 | A kind of automatic identifying method of power grid accident tripping monitoring information problem |
CN111291774B (en) * | 2018-12-07 | 2022-08-23 | 国网江苏省电力有限公司南京供电分公司 | Power grid event sorting method and device based on Bayesian statistical decision |
CN109739825B (en) * | 2018-12-29 | 2021-04-30 | 优刻得科技股份有限公司 | Method, apparatus and storage medium for managing log |
CN109787834B (en) * | 2019-01-25 | 2021-10-22 | 广西电网有限责任公司电力科学研究院 | Calculation method for non-independent fault probability of nuclear power unit considering power grid operation parameters |
CN110348667A (en) * | 2019-05-21 | 2019-10-18 | 贵州电网有限责任公司 | A kind of power grid accident grade determination method drilled through based on multi-layer data and system |
CN110245168B (en) * | 2019-06-20 | 2021-08-31 | 国网江苏省电力有限公司南京供电分公司 | Method and system for extracting abnormal event characteristic signals in power grid historical alarm |
CN110336375B (en) * | 2019-06-26 | 2022-10-04 | 国网江苏省电力有限公司 | Processing method and system for power grid monitoring alarm information |
CN110263172B (en) * | 2019-06-26 | 2021-05-25 | 国网江苏省电力有限公司南京供电分公司 | Power grid monitoring alarm information evenized autonomous identification method |
CN110598180B (en) * | 2019-08-30 | 2022-09-09 | 国家电网有限公司 | Event detection method, device and system based on statistical analysis |
CN110806537A (en) * | 2019-10-11 | 2020-02-18 | 交控科技股份有限公司 | Method and system for monitoring state of air switch |
CN110867958A (en) * | 2019-11-08 | 2020-03-06 | 国网浙江省电力有限公司温州供电公司 | Automatic fault identification and alarm method for electric power system |
CN111274880A (en) * | 2020-01-10 | 2020-06-12 | 丽水正阳电力建设有限公司 | Video intelligent analysis auxiliary inspection and abnormity warning method |
CN111768076B (en) * | 2020-05-28 | 2023-12-01 | 国网浙江省电力有限公司绍兴供电公司 | Monitoring alarm signal clustering method taking power grid event as center |
CN114124652B (en) * | 2020-08-27 | 2023-09-22 | 中国移动通信集团广东有限公司 | Network operation and maintenance method and device and electronic equipment |
CN112347225B (en) * | 2020-10-19 | 2022-09-16 | 云南电网有限责任公司 | Processing method for transmitting data information across isolated network gate |
CN112677182A (en) * | 2020-12-22 | 2021-04-20 | 国网浙江省电力有限公司金华供电公司 | Intelligent abnormal fault diagnosis method based on robot operation |
CN112732716B (en) * | 2020-12-31 | 2023-11-07 | 广东电网有限责任公司佛山供电局 | Intelligent analysis method for fault SOE sequence formed by continuous actions of multiple power grid equipment |
CN114530944A (en) * | 2021-01-01 | 2022-05-24 | 谭世克 | Power network signal control system |
CN114697193A (en) * | 2021-01-01 | 2022-07-01 | 谭世克 | Communication network monitoring management system |
CN112906389B (en) * | 2021-02-04 | 2022-08-26 | 云南电网有限责任公司昆明供电局 | Fault trip discrimination method based on multi-dimensional data analysis |
CN113097981B (en) * | 2021-03-15 | 2022-03-25 | 国网江苏省电力有限公司南通供电分公司 | Method for judging missing of monitoring alarm signal of transformer substation |
CN113553358B (en) * | 2021-07-27 | 2022-12-06 | 国网天津市电力公司电力科学研究院 | Data mining-based power grid equipment invalid data identification method and device |
CN114039886A (en) * | 2021-10-19 | 2022-02-11 | 国网山东省电力公司日照供电公司 | Data correctness identification method and device based on four-differential and autocorrelation analysis |
CN114143164B (en) * | 2021-11-11 | 2023-06-13 | 北京银盾泰安网络科技有限公司 | Data alarm linkage platform |
CN115498594B (en) * | 2022-10-27 | 2023-08-22 | 国网安徽省电力有限公司滁州供电公司 | Online inspection analysis system for relay protection tripping and closing outlet loop of transformer substation |
CN116054416B (en) * | 2023-03-15 | 2023-09-22 | 扬州康德电气有限公司 | Intelligent monitoring operation and maintenance management system based on Internet of things |
CN117411188B (en) * | 2023-11-30 | 2024-06-11 | 中国长江电力股份有限公司 | Automatic operation method of hydropower station 500kV outgoing line route overhaul transfer operation monitoring system |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN103296757A (en) * | 2013-05-21 | 2013-09-11 | 国家电网公司 | Multi-parameter identification based secondary system fault diagnosing method for intelligent substation |
CN107680195A (en) * | 2017-11-13 | 2018-02-09 | 国网内蒙古东部电力有限公司 | A kind of transformer station intelligent robot inspection Computer Aided Analysis System and method |
CN107944655A (en) * | 2017-10-13 | 2018-04-20 | 国家电网公司 | Event level method for diagnosing faults based on Expert Rules storehouse and multi-source fault message |
Family Cites Families (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8893216B2 (en) * | 2011-06-15 | 2014-11-18 | Cisco Technology, Inc. | Security measures for the smart grid |
-
2018
- 2018-06-04 CN CN201810565961.5A patent/CN108847968B/en active Active
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN103296757A (en) * | 2013-05-21 | 2013-09-11 | 国家电网公司 | Multi-parameter identification based secondary system fault diagnosing method for intelligent substation |
CN107944655A (en) * | 2017-10-13 | 2018-04-20 | 国家电网公司 | Event level method for diagnosing faults based on Expert Rules storehouse and multi-source fault message |
CN107680195A (en) * | 2017-11-13 | 2018-02-09 | 国网内蒙古东部电力有限公司 | A kind of transformer station intelligent robot inspection Computer Aided Analysis System and method |
Non-Patent Citations (3)
Title |
---|
智能变电站智能告警与辅助决策的实现;刘伟 等;《电力系统保护与控制》;20110801;全文 * |
智能变电站间隔内的可疑数据实时辨识方法;万玉建 等;《电气技术》;20141231;全文 * |
智能电网调度控制系统综合智能告警研究及应用;闪鑫 等;《电力系统自动化》;20150110;全文 * |
Also Published As
Publication number | Publication date |
---|---|
CN108847968A (en) | 2018-11-20 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN108847968B (en) | Monitoring accident and abnormal event identification and multidimensional analysis method | |
CN109347202B (en) | Typical operation identification and multidimensional analysis method for monitoring equipment | |
CN102638100B (en) | District power network equipment abnormal alarm signal association analysis and diagnosis method | |
CN107294089B (en) | Intelligent correlation analysis and evaluation method for power grid events | |
CN106340818B (en) | Intelligent substation relay protection device maintenance peace arranges assistant analysis method for early warning | |
CN109639477B (en) | Secondary equipment online monitoring and analyzing system and method | |
CN111768076B (en) | Monitoring alarm signal clustering method taking power grid event as center | |
CN108876197B (en) | Power equipment cluster and group analysis system | |
CN111475122B (en) | Remote printing system and method for relay protection action message | |
CN113268590A (en) | Power grid equipment running state evaluation method based on equipment portrait and integrated learning | |
CN111830342B (en) | Multi-system fusion intelligent substation relay protection dynamic fixed inspection method | |
CN110867958A (en) | Automatic fault identification and alarm method for electric power system | |
CN110350660B (en) | Online monitoring method and system for relay protection function pressing plate | |
CN109767108B (en) | Accurate analysis method for line state of power dispatching system | |
CN112906389B (en) | Fault trip discrimination method based on multi-dimensional data analysis | |
CN112270555B (en) | Distribution network dispatching instruction ticket safety checking system and method | |
CN112018887B (en) | Distribution network feeder automatic operation process supervision and analysis method | |
CN104701993A (en) | Method and system for identifying overhaul data of relay protection device | |
CN113097981B (en) | Method for judging missing of monitoring alarm signal of transformer substation | |
CN114256976A (en) | Anti-misoperation management and control system and method for overall process of distribution network field operation | |
CN108923529B (en) | Intelligent substation secondary safety measure diagnosis method and system | |
CN110932391B (en) | Method and system for identifying tripping of feeder switch in station | |
CN112564033B (en) | Circuit breaker protection device abnormity identification method and system based on main and auxiliary data fusion | |
CN109450085B (en) | Equipment abnormity alarm signal processing system based on scheduling and control integration | |
CN110970995B (en) | Transmission type management and control system for key indexes of safe operation of power grid |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |