CN108847968B - Monitoring accident and abnormal event identification and multidimensional analysis method - Google Patents

Monitoring accident and abnormal event identification and multidimensional analysis method Download PDF

Info

Publication number
CN108847968B
CN108847968B CN201810565961.5A CN201810565961A CN108847968B CN 108847968 B CN108847968 B CN 108847968B CN 201810565961 A CN201810565961 A CN 201810565961A CN 108847968 B CN108847968 B CN 108847968B
Authority
CN
China
Prior art keywords
information
alarm
signal
time
switch
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201810565961.5A
Other languages
Chinese (zh)
Other versions
CN108847968A (en
Inventor
李英
钱建国
施正钗
朱炳铨
姚仲焕
王晓
陈家乾
赵玉成
江雯姬
袁楚楚
魏美兰
莫莉晖
杨兴超
莫建国
藏怡宁
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
State Grid Corp of China SGCC
State Grid Zhejiang Electric Power Co Ltd
Wenzhou Power Supply Co of State Grid Zhejiang Electric Power Co Ltd
Original Assignee
State Grid Corp of China SGCC
State Grid Zhejiang Electric Power Co Ltd
Wenzhou Power Supply Co of State Grid Zhejiang Electric Power Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by State Grid Corp of China SGCC, State Grid Zhejiang Electric Power Co Ltd, Wenzhou Power Supply Co of State Grid Zhejiang Electric Power Co Ltd filed Critical State Grid Corp of China SGCC
Priority to CN201810565961.5A priority Critical patent/CN108847968B/en
Publication of CN108847968A publication Critical patent/CN108847968A/en
Application granted granted Critical
Publication of CN108847968B publication Critical patent/CN108847968B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0631Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06Management of faults, events, alarms or notifications
    • H04L41/0677Localisation of faults

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Remote Monitoring And Control Of Power-Distribution Networks (AREA)

Abstract

A monitoring accident and abnormal event identification and multidimensional analysis method relates to an analysis method. With the continuous growth of power grid construction and the increase of power equipment, the accurate and rapid analysis of faults and abnormalities cannot be realized. The invention comprises the following steps: 1) establishing a fault and exception rule base; 2) performing labeling analysis; 3) identifying a fault event; 4) and recognizing the abnormal event. According to the technical scheme, an intelligent rechecking mechanism is established by monitoring alarm information, information such as alarm level, monitoring operation information, maintenance and the like is automatically labeled according to the information, a data labeling technology is utilized, effective alarm information is extracted, fault and abnormal information corresponding to the information are identified from mass data by combining a fault and abnormal information rule base, and meanwhile, the rest information is pushed to be manually rechecked for special analysis, so that the efficiency and the accuracy are effectively improved.

Description

Monitoring accident and abnormal event identification and multidimensional analysis method
Technical Field
The invention relates to an analysis method, in particular to a monitoring accident and abnormal event identification and multidimensional analysis method.
Background
With the continuous growth of power grid construction and the increase of power equipment, monitoring professionals face huge warning information amount, technical support for complete and normative management of monitoring information is lacked while real-time monitoring of the equipment is carried out, statistical analysis and intelligent decision on the running state of the monitoring equipment are lacked, and identification mechanisms and analysis methods for fault events, abnormal events and defect events are lacked.
Disclosure of Invention
The technical problem to be solved and the technical task provided by the invention are to perfect and improve the prior technical scheme and provide a monitoring accident and abnormal event identification and multidimensional analysis method so as to realize the purpose of accurately and quickly analyzing the faults and the abnormalities. Therefore, the invention adopts the following technical scheme.
The monitoring accident and abnormal event identification and multidimensional analysis method comprises the following steps:
1) establishing a fault and exception rule base; compiling a monitoring information alarm rule base of the typical fault abnormity of the substation equipment; the alarm rule base operation rule comprises the following steps:
101) according to the alarm rule base, a transformer substation is taken as a unit, and the principle of judging failure firstly and then abnormality secondly is taken as a judgment principle;
102) the equipment fault is judged by utilizing a monitoring information alarm rule base according to the alarm information of the accident and the switch displacement grade except for the equipment operation and maintenance, the alarm information of the accident, the abnormality and the displacement grade from the first T1 minutes to the last T2 minutes is taken as a data source, and the alarm information of the abnormality grade with the action returned in the period is taken as an accompanying alarm;
103) classifying the alarm based on the typical faults of different equipment types;
104) the equipment faults are judged according to the sequence of bus differential, main transformer differential gas, failure, main transformer backup, line protection, reclosing, spare power automatic switching and safe automatic device action;
105) the equipment abnormity takes abnormal level warning information of the same transformer substation T3 minutes with upper window marks as a data source, the monitoring information warning rule base of typical abnormity of transformer substation equipment is used for judging, and classification is carried out according to the abnormity of primary equipment and secondary equipment;
2) taged assay
Classifying the daily alarm information according to action reasons, establishing a label mechanism, removing invalid signals and interference signals through rules, adding standardized attribute labels to the valid signals, and identifying faults and abnormal events according to a fault and abnormal rule base, wherein the labels comprise defect labels, invalid labels, upper window labels, retired labels, suspicious labels, standby channel supplement labels, instant labels, overhaul labels, associated labels, operation labels, debugging labels, secondary working labels and frequent judgment labels;
3) fault event identification
Based on the effective signals after the labeling analysis and filtration, simultaneously associating a scheduling log and a monitoring log to perform event association, and finally realizing the accuracy of the fault event;
4) abnormal event identification
Based on the effective signals after the labeling analysis and filtration, inquiring abnormal signals of an upper window, and only taking action signals without including abnormal signals caused by faults, operations, concomitations and defects;
and (3) taking abnormal level alarm information of the same transformer substation with the window identification for T4 minutes as a data source, judging by utilizing a monitoring information alarm rule base of typical abnormality of transformer substation equipment, classifying according to the abnormality of primary equipment and secondary equipment, and recording the occurrence quantity of historical abnormality.
According to the technical scheme, an intelligent rechecking mechanism is established by monitoring alarm information, information such as alarm level, monitoring operation information, maintenance and the like is automatically labeled according to the information, a data labeling technology is utilized, effective alarm information is extracted, fault and abnormal information corresponding to the information are identified from mass data by combining a fault and abnormal information rule base, and meanwhile, the rest information is pushed to be manually rechecked for special analysis, so that the efficiency and the accuracy are effectively improved.
As a preferable technical means: in step 3), the fault event identification comprises the following steps:
301) inquiring the position of the knife switch in the interval at the moment when the upper window protection signal occurs, judging that the knife switch is caused by interval debugging when all the knife switch positions are in the open position, not considering the knife switch as a fault, and judging the next step if the knife switches are still in the closed position;
302) inquiring whether the remote signaling alarm information in the first 1 minute to the last 5 minutes has switch position division signals and interval accident total signals with the same interval, such as no switch position division signals or accident total signals, which are not regarded as faults, by taking the protection occurrence time as a reference; if the position division signal is caused by overhauling, operating, remote controlling and error signals, the position division signal is not considered as a fault;
303) inquiring whether active power and voltage in a recent interval have sudden changes or not by taking the occurrence time of protection as a reference, wherein if the frequency of telemetering data is too low, the measured sudden changes are not captured by the obtained telemetering data possibly, and the condition can only be used as auxiliary data for fault judgment and cannot be completely relied on;
304) when active power and voltage in a recent interval suddenly change, taking the first switch displacement alarm as a reference, taking accident, abnormality and displacement grade alarm information from the first 1 minute to the last 5 minutes as a data source, and taking abnormality grade alarm information with the action reset in the period as an accompanying alarm;
305) if a fault is determined, the fault is qualified according to the action sequence of a bus difference, main transformer differential gas, failure, main transformer backup, line protection, reclosing, spare power automatic switching and a safety automatic device, remote signaling alarm data of the plant station and the interval n hours before and after the time of the accident and the defect are compared by combining a typical fault rule base, and when the typical accident and defect signal association rule base exists and the plant station has signals which do not appear but exist in the signal points, the signal is judged to be missed;
306) when a fault of a line or a main transformer interval occurs, whether reclosing is operated within 5 minutes needs to be inquired, if the reclosing is not operated, the reclosing is not operated is prompted, and if the reclosing is protected, the reclosing is prompted; after reclosing action, judging whether the switch is successfully closed, if not, switching off again, determining that reclosing fails, and if not, switching off again, determining that reclosing succeeds;
307) when a fault occurs, whether the fault can be sent by force is judged by combining a fault rule base according to the fault category, and partial faults need to be combined with abnormal events, such as a bus difference, main transformer differential gas, failure and main transformer backup protection action tripping switch, do not have the condition of sending by force; the line switch interval has no forced feeding condition except the heater fault abnormal type and the knife switch abnormal type, and the line protection and measurement and control abnormal type has no forced feeding condition;
308) when the switch is tripped in an accident, if a closing signal exists within 3 hours, the circuit connected with the switch is in accordance with a one-time trial delivery condition; trial transmission is not carried out on reclosing, namely a switching-on signal within 1 minute after an accident is not calculated; trial delivery is not calculated for accident displacement which is not in a monitoring operation responsibility area; if the equipment is in a maintenance state during an accident, trial delivery is not calculated; for the wiring of the provincial dispatching side 3/2, a primary equipment monitoring alarm table is needed to be combined for judgment, namely, the alarm of equipment state quit is calculated to be sent in a trial mode when an accident occurs, and misjudgment of a trial-sending line is avoided.
As a preferable technical means: in step 2), the method for identifying the tag includes:
201) defect tag identification
A) Monitoring information classification correctness
The monitoring information alarm level is divided into five types of accidents, abnormity, out-of-limit, displacement and notification according to the severity and urgency, the monitoring information data is periodically checked with an information table and a typical information table, and a 'defect' label is added to the irregular information;
B) monitoring information naming normalization
Checking the naming normalization of the rechecked monitoring information regularly through the monitoring information data, the information table and the typical information table, and adding a defect label to the irregular information;
202) invalid tag identification
Checking whether the alarm time of the monitoring information data has the operations of corresponding equipment maintenance card placing or alarm suppression, blocking, manual number placing and the like on the signal, and if so, marking the signal as an invalid label;
203) upper window label
The upper window label indicates whether the optimized result corresponding to the alarm signal is upper window or not; event identification takes into account windowing information;
204) retirement label
The signal which is still transmitted by the equipment which is retired in the equipment ledger is marked as a retirement label;
205) suspicious label
If the alarm signal contains a suspicious word, the alarm signal is divided into a suspicious label;
206) spare channel patch label
The alarm signal contains a 'spare channel complement' word eye, and is divided into a 'spare channel complement' label;
207) instant label
The signal of the upper window in the remote signaling alarm information is marked with a 'timely' label within 15 minutes;
208) maintenance label
If the signal contains a 'overhaul' word eye, the signal is divided into overhauls, and information is extracted from the non-correspondence of the placement of the cards aiming at the condition that part of cards are missed;
209) companion label
A) Remote operation
By judging whether the switch displacement state contains a displacement/remote control type and is not subjected to AVC remote control, remote operation is calculated, and abnormal signals which act at the same interval and are reset within 30 seconds before and after the displacement occurrence time are marked as 'companion';
B) AVC remote control
The remote control operation alarm table contains the remote control variable AVC remote control of AVC; the switch name contains switch displacement of 'capacitance', 'low reactance', 'high reactance', 'capacitive reactance', 'combined capacitance' and 'combined reactance', the default is AVC remote control, and abnormal signals which act and return at the same interval within 30 seconds before and after the displacement occurrence time are marked as 'associated';
C) error signal
On the basis of eliminating remote operation and AVC remote control operation, judging that the time interval of any two switch displacements is smaller than a threshold value, and judging the signal as a false signal; judging whether displacement with the displacement frequency exceeding M exists in N minutes, and if so, calculating error signals, wherein the displacement of remote operation is not included in the error signal statistics;
D) switch, knife switch and grounding knife switch historical operation state identification
Reading all switch and disconnecting link displacement information in remote signaling displacement data, but not including a switch single-phase switching-on and switching-off alarm, taking displacement time as starting time, taking the next time of switching a disconnecting link as ending time, taking the switch and disconnecting link states in a time period as the switch remote signaling state of the starting time, and identifying abnormal signals which act and are reset within 30 seconds before and after the displacement occurrence time as 'companion' labels, and checking the remote signaling states of the switch, the disconnecting link and the grounding disconnecting link by using a profile file in consideration of the missing condition in the signal uploading process;
E) accident shift
Calculating accident deflection according to an opening and closing signal within 1 minute after the tripping of a switching accident, wherein the deflection state is that the deflection of reclosing and spare power automatic switching closing is also calculated into the accident deflection;
F) in situ operation
Switch displacement signals which do not meet the requirements of overhaul, remote operation, AVC remote control operation, error signals and accident displacement are all calculated into field operation, and abnormal signals which act and are reset within 30 seconds before and after 10 seconds of displacement occurrence time in the field operation period are marked as 'companion';
G) operation label
The basic judgment method comprises the following steps: if the two different disconnecting links are displaced and separated within half an hour at intervals, wherein the disconnecting links do not comprise grounding disconnecting links and are window-mounting signals, the start of maintenance operation is judged, until the displacement of the two different disconnecting links is changed into closing position, the matching is stopped, an 'operation' label is marked on the displacement signal in the period, and an 'associated' label is marked on the abnormal signal which acts and is reset;
and (4) judging by combining an operation ticket: reading operation ticket information, determining the starting time and the ending time of operation by combining historical state data of a switch and a disconnecting link according to instruction information of an operation ticket of the operation ticket, wherein the instruction information comprises an operation unit, command issuing time, finishing time and an operation instruction interval object, taking the following command time and finishing time as references, marking an 'operation' label on a remote signaling displacement signal at the same interval in the instruction execution time, and marking an 'operation' label on 'interval accident total information' and 'total station accident total signal' in the instruction execution time;
210) debugging label
When the operation ticket is rechecked, switching to mark a debugging label on the remote signaling deflection signal according to the running state at intervals; the secondary equipment generally has 2 or 4 or more instructions according to the condition that the reporting time when the instruction including 'tripping change to signal' is found in the instruction is debugging starting time, and the command time when the instruction including 'tripping change to signal' is found is debugging finishing time, and the primary equipment is mainly switched according to four conditions of 'operation', 'hot standby', 'cold standby', 'overhaul' to judge, and can be divided into two conditions; the first method starts maintenance by switching to a 'cold standby' state, takes the instruction reporting time of switching to the 'cold standby' state as debugging starting time, and takes the command issuing time when switching from the 'cold standby' state to other states as debugging finishing time; secondly, starting maintenance by switching to a maintenance state, taking the instruction report time of switching to the maintenance state as debugging starting time, taking the instruction issuing time when switching from the maintenance state to other states as debugging finishing time, and marking debugging labels on signals in the time periods;
211) secondary working label
In combination with a PMS secondary work ticket, according to the interval/total station and time information in the secondary work ticket, marking a 'secondary work' label on the work time content and the remote signaling alarm signal at the same interval/same station;
212) frequent judgement
On the basis of eliminating signals caused by remote operation, field operation, AVC operation, faults and defects, the signal transmitting frequency of signal points every day and every month is counted according to the signal points, and the action is calculated once again, if the transmitting number exceeds 35/month, the periodic frequency transmission is judged, and if the transmitting number exceeds 5/day, the periodic frequency transmission is judged.
As a preferable technical means: the method also comprises an information displaying step, wherein when the information is displayed:
the equipment monitoring information big data system equipment fault abnormal information display takes the same transformer substation at the same time as a unit, and the format comprises fault abnormal information introduction, an alarm information list, a false missing sending mark and a subsequent emergency disposal prompt.
The fault information introduction display format is as follows: the safety automatic device acts to trip the switch and closes the switch, and the time is the first switch displacement alarm time. The line should also mark the coincidence action condition, which is divided into three types of successful coincidence, unsuccessful coincidence and non-reclosing action.
Abnormal information introduction display format: year, month, day, substation, equipment, anomaly type.
The emergency disposal prompt mainly prompts whether the forced sending condition is met, and the equipment in the format of the format does not meet the forced sending condition due to the reason. And the switches of the bus differential, main transformer differential gas, failure and main transformer backup protection action tripping do not have forced transmission conditions. The line switch interval has no forced feeding condition except the heater fault abnormal type and the knife switch abnormal type, and the line protection and measurement and control abnormal type has no forced feeding condition.
As a preferable technical means: in step 102), the first switch displacement alarm is taken as a reference, and accident, abnormality and displacement grade alarm information from the first 1 minute to the last 5 minutes is taken as a data source.
As a preferable technical means: in the step 105), the equipment abnormality takes 2-minute abnormality level alarm information of the same substation with a window mark as a data source.
Has the advantages that:
by developing intelligent analysis of centralized monitoring information, collecting a plurality of system operation data, performing association comparison analysis on the monitoring equipment by using an intelligent association analysis technology, establishing an equipment fault handling model, developing intelligent prediction research on early signs and trends of the faults of the monitoring equipment, improving centralized monitoring operation efficiency and effectively guaranteeing operation safety of power grid equipment.
The technical scheme is the basic work of information rechecking, and the key point of the rechecking is that the alarm information is subjected to attribute marking by means of methods such as correlation analysis, time sequence analysis, frequency analysis, text analysis and the like, so that a foundation is laid for the analysis of big data in the future.
According to the technical scheme, a signal rule base is established according to rules for common signals generated by similar faults and abnormalities, the rule base is perfected through machine learning, so that unreasonable conditions such as missed hair, mistaken hair and multiple hair are identified, the reason for generating event signals is absorbed by monitoring analysts and monitoring full time, manual identification is avoided, and the effectiveness of fault and abnormality treatment is guaranteed.
Drawings
FIG. 1 is a flow chart of the present invention.
Detailed Description
The technical scheme of the invention is further explained in detail by combining the drawings in the specification.
As shown in fig. 1, the event and anomaly identification rule includes:
filtering the signal
1) Acquiring remote signaling alarm information, and filtering invalid signals, wherein the invalid signals comprise signals such as inhibition, blockage, artificial direct numbers and the like;
2) filtering a listing signal, wherein the listing signal comprises information with overhaul, spare channel supplement, defects and suspicious words, and marking a corresponding attribute label;
3) filtering defect signals, and checking classification, voltage grade and non-standard conditions in the preposed table according to a standard library;
4) filtering out decommissioning signals, wherein the decommissioning signals comprise signals sent by substations and equipment which are generated by decommissioning operation or are decommissioned;
5) filtering timely signals, and filtering signals which are in the upper window and confirmed within 10-15 min in the remote signaling alarm information;
6) obtaining an effective signal to be analyzed, and eliminating the effective signal after the interference signal is eliminated;
7) a remote control operation signal rule base;
8) re-determining the effective signal to be analyzed, and eliminating the effective signal after the interference signal sent by the operation event;
9) the accident information rule base is used for identifying accident incidents according to the accident information rule base which is arranged by the monitoring speciality, and marking a fault label and associated, mistakenly-sent and missed-sent labels;
10) re-determining effective signals to be analyzed, eliminating the effective signals after interference signals sent by fault events, and judging the abnormity and the defects;
11) associating with the duty record and the accident record, and identifying a defect event label;
12) re-determining effective signals to be analyzed, and eliminating interference signals sent by defect events to identify abnormal events;
13) judging an abnormal event according to an abnormal signal rule base which is arranged by a monitoring professional, and marking an abnormal label;
14) re-determining the effective signal to be analyzed, and eliminating the effective signal after the abnormal event sends the interference signal;
15) carrying out manual analysis on effective signals which cannot be subjected to eventing through a rule base;
16) manually matching the signal caused by the defect with the defect and the signal association, and printing a defect label;
17) and 6), associating corresponding work records, and identifying debugging, companion and secondary work labels.
The invention establishes an intelligent rechecking mechanism by monitoring alarm information, automatically labels information every day by using a data label technology according to information such as alarm grade, monitoring operation information, maintenance and the like, extracts effective alarm information, identifies fault and abnormal information corresponding to the information from mass data by combining a fault and abnormal information rule base, and simultaneously pushes the residual information to carry out manual rechecking for special analysis, and the specific logic is as follows:
1.1. fault and abnormal information rule base
In order to meet the requirement of unattended centralized monitoring of a transformer substation, the remote handling correctness and rapidity of the abnormal faults of a power grid and transformer substation equipment are improved, a monitoring information warning rule base of the typical abnormal faults of the transformer substation equipment is compiled according to information acquisition of 'transformer substation equipment monitoring information specification' (QGDW 11398-.
The method is characterized by comprising the steps of alarming, summarizing, combing, analyzing and summarizing according to the operation of 220 KV and above voltage level ring networks and the operation of 110 KV and below voltage level open loops of a power grid and the monitoring information of the state change of primary equipment and secondary equipment generated by the abnormal fault characteristics of substation equipment.
(I) alarm rule base operation rule
1) And according to the alarm rule base, a transformer substation is taken as a unit, and the principle of judging failure firstly and then abnormity is taken.
2) And judging the equipment faults by using the monitoring information alarm rule base of the typical faults of the substation equipment according to the alarm information of the accidents and the switch displacement grade except for the equipment operation and maintenance. And taking the first switch displacement alarm as a reference, taking accident, abnormality and displacement grade alarm information from the first 1 minute to the last 5 minutes as a data source, and taking the abnormality grade alarm information with the action restored in the period as an accompanying alarm.
3) Alarms are classified based on typical faults of different equipment types.
4) And equipment faults are judged according to the action sequence of a bus difference, main transformer differential gas, failure, main transformer backup, line protection, reclosing, spare power automatic switching and a safety automatic device.
5) And the equipment abnormity takes the 2-minute abnormity level alarm information of the same transformer substation with the upper window mark as a data source, utilizes the monitoring information alarm rule base of the typical abnormity of the transformer substation equipment to judge, and classifies the equipment abnormity according to the abnormity of primary and secondary equipment.
(II) display information format
1) The equipment monitoring information big data system equipment fault abnormal information display takes the same transformer substation at the same time as a unit, and the format comprises fault abnormal information introduction, an alarm information list, a false missing sending mark and a subsequent emergency disposal prompt.
2) The fault information introduction display format is as follows: the safety automatic device acts to trip the switch and closes the switch, and the time is the first switch displacement alarm time. The line should also mark the coincidence action condition, which is divided into three types of successful coincidence, unsuccessful coincidence and non-reclosing action.
3) Abnormal information introduction display format: year, month, day, substation, equipment, anomaly type.
4) The emergency disposal prompt mainly prompts whether the forced sending condition is met, and the equipment in the format of the format does not meet the forced sending condition due to the reason. And the switches of the bus differential, main transformer differential gas, failure and main transformer backup protection action tripping do not have forced transmission conditions. The line switch interval has no forced feeding condition except the heater fault abnormal type and the knife switch abnormal type, and the line protection and measurement and control abnormal type has no forced feeding condition.
1.2. Taged assay
Classifying the monitoring alarm information of the substation equipment according to action reasons, establishing a label mechanism, counting various labels for displaying, and analyzing the effectiveness of the monitoring alarm of the substation equipment. The method comprises the following steps of eliminating invalid signals and interference signals through rules, adding standardized attribute labels to the valid signals, and identifying faults and abnormal events according to a fault and abnormal rule base, wherein the specific label identification rules are as follows:
(I) Defect Label
1) Monitoring information classification correctness
The monitoring information alarm level is divided into five types of accidents, abnormity, out-of-limit, displacement and notification according to the severity and urgency, the monitoring information data is periodically checked with an information table and a typical information table, and a 'defect' label is added to the irregular information.
2) Monitoring information naming normalization
And regularly checking the naming normalization of the rechecked monitoring information through the monitoring information data, the information table and the typical information table, and adding a defect label to the irregular information.
(II) invalid label
And checking whether the alarm time of the monitoring information data has the operations of corresponding equipment maintenance card placing or alarm suppression, blocking, manual number placing and the like on the signal, and if so, marking the signal as an invalid label.
(III) Upper Window Label
The upper window label indicates whether the optimized result corresponding to the alarm signal is upper window. The D5000 or OPEN3000 system is automatically marked, and event identification only needs to consider window information.
(IV) retirement label
The signal still transmitted by the equipment which is retired in the equipment ledger is marked as a retirement label.
(V) suspicious tag
If the alarm signal contains the word 'suspicious', the alarm signal is classified as 'suspicious' label.
(VI) spare channel supplement label
The alarm signal contains a 'spare channel complement' word eye, and is divided into a 'spare channel complement' label.
(VII) timely Label
The signal of the upper window in the remote signaling alarm information is marked with a 'timely' label within 15 minutes.
(eighth) service tag
If the signal contains a word eye of 'overhaul', the signal is divided into overhaul, and information can be extracted from the condition that the cards are not correspondingly placed aiming at the condition that part of the cards are missed to be picked;
(nine) companion tag
1) Remote operation
By judging whether the switch displacement state contains a displacement (remote control) type and is not remote-controlled according to AVC, remote operation is calculated, and abnormal signals which act at the same interval and are reset within 30 seconds before and after 10 seconds before the displacement occurrence time are marked as 'companion';
2) AVC remote control
The remote control operation alarm table contains the remote control variable AVC remote control of AVC; the switch name contains switch displacement of 'capacitance', 'low reactance', 'high reactance', 'capacitive reactance', 'combined capacitance' and 'combined reactance', the default is AVC remote control, and abnormal signals which act and return at the same interval within 30 seconds before and after the displacement occurrence time are marked as 'associated';
3) error signal
On the basis of eliminating remote operation and AVC remote control operation, judging that the time interval of any two switch displacements is smaller than a door threshold (20 seconds as a default and available), and judging the signal as a false signal; judging whether displacement with the displacement frequency exceeding M exists in N minutes, and if so, calculating error signals, wherein the displacement of remote operation is not included in the error signal statistics;
4) switch, knife switch and grounding knife switch historical operation state identification
By reading all switch and disconnecting link displacement information in remote signaling displacement data, but not including switch single-phase switching-on and switching-off alarm, the displacement time is taken as the starting time, the next time of switching a disconnecting link is taken as the ending time, the states of the switch and the disconnecting link in a time period are the remote signaling states of the switch of the starting time, and abnormal signals which act and are reset within 30 seconds before and after the displacement occurrence time are marked as 'companion' labels, and the remote signaling states of the switch, the disconnecting link and the grounding disconnecting link can be verified by using a profile file in consideration of the missing condition in the signal uploading process.
5) Accident shift
Calculating accident deflection according to an opening and closing signal within 1 minute after the tripping of a switching accident, wherein the deflection state is that the deflection of reclosing and spare power automatic switching closing is also calculated into the accident deflection;
6) in situ operation
Switch displacement signals which do not meet the requirements of overhaul, remote operation, AVC remote control operation, error signals and accident displacement are calculated into field operation, and abnormal signals which act and reset within 30 seconds before and after 10 seconds of displacement occurrence time in the field operation period are marked as 'companion'.
(ten) operation tag
The basic judgment method comprises the following steps: if two different disconnecting links are displaced and separated (not including the grounding disconnecting link and being window-mounting signals) within half an interval, the maintenance operation is judged to be started, until the two different disconnecting links are displaced and are changed into closed positions, the matching is stopped, the operation label is marked on the displacement signals in the period, and the companion label is marked on the abnormal signals which are moved and reset, so that the method is suitable for most intervals.
And (4) judging by combining an operation ticket: reading operation ticket information, determining the start time and the end time of operation more accurately by using the instruction information (operation unit, command issuing time, completion time and operation instruction interval object) of the operation ticket and taking the following instruction time and the completion time as reference in combination with historical state data of a switch and a disconnecting link, and then marking an 'operation' label on a remote signaling displacement signal at the same interval in the instruction execution time, wherein the 'interval accident total information' and the 'total station accident total signal' in the instruction execution time can also be marked with the 'operation' label.
(eleven) debug tag
And when the operation ticket is rechecked, switching to mark a debugging label on the remote signaling deflection signal according to the running state at intervals. The secondary equipment is used as debugging starting time according to the fact that the reporting time when the instructions include 'tripping is changed into signals' is found in the instructions, the command sending time when the instructions include 'tripping is changed into tripping' is found to be debugging finishing time, the primary equipment generally has 2 or 4 or more instructions, and the primary equipment is mainly judged by switching four states of 'running', 'hot standby', 'cold standby' and 'overhaul', and the two conditions can be divided into two conditions. The first method starts maintenance by switching to a 'cold standby' state, takes the instruction reporting time of switching to the 'cold standby' state as debugging starting time, and takes the command issuing time when switching from the 'cold standby' state to other states as debugging finishing time; and the second method starts to overhaul by turning to the overhaul state, takes the instruction report time of turning to the overhaul state as the debugging start time, takes the command time when turning from overhaul to other states as the debugging end time, and marks on debugging labels on signals in the above time periods.
(twelve) Secondary working Label
And (4) marking a 'secondary work' label on a remote signaling alarm signal of the work time content and the same interval/same station according to the interval/total station and time information in the secondary work ticket by combining the PMS secondary work ticket.
(thirteen) frequent judgment
On the basis of eliminating signals caused by remote operation, field operation, AVC operation, faults and defects, the signal transmitting frequency of signal points every day and every month is counted according to the signal points, and the action is repeated once. If the number of the transmitted data exceeds 35, the periodic frequency transmission is judged per month, and if the number of the transmitted data exceeds 5, the periodic frequency transmission is judged per day.
1.3. Fault event identification
And based on the effective signals after the labeling analysis and filtration, simultaneously associating the scheduling log and the monitoring log to perform event association, and finally realizing the accuracy of the fault event. The specific decision rule is as follows:
1. inquiring the position of the knife switch (excluding the grounding knife switch) in the interval at the time of the occurrence of the upper window protection signal, if all the knife switch positions are in the open position, judging that the knife switch is caused by interval debugging and is not determined to be a fault, and if the knife switch is still in the closed position, judging the next step.
2. Inquiring whether the remote signaling alarm information in the first 1 minute to the last 5 minutes has switch position dividing signals and interval accident total (total station accident total) signals at the same interval, such as non-switch position dividing signals or accident total signals, which are not determined to be faults, by taking the protection occurrence time as a reference; if the position division signal is caused by overhauling, operation, remote control and error signals, the fault is not determined.
3. And inquiring whether active power, voltage and the like in the recent interval have sudden changes or not by taking the occurrence time of protection as a reference, wherein if the frequency of the telemetering data is too low, the measured sudden changes are not captured by the obtained telemetering data possibly, and the condition can only be used as auxiliary data for fault judgment and cannot be completely relied on.
4. If the condition 3 is met, taking the first switch displacement alarm as a reference, taking accident, abnormality and displacement grade alarm information from the first 1 minute to the last 5 minutes as a data source, and taking the abnormality grade alarm information with the action repeated in the period as an accompanying alarm.
5. If a fault is determined, the fault can be qualified according to the action sequence of a bus difference, main transformer differential gas, failure, main transformer backup, line protection, reclosing, spare power automatic switching and a safety automatic device, remote signaling alarm data of the plant station and the interval n hours before and after the time of the accident and the defect are compared by combining a typical fault rule base, if the typical accident and the defect exist in a signal association rule base, and signals which do not exist in the plant station but exist in the signal points, the signal missing can be judged.
6. When a fault of a line or a main transformer interval occurs, whether reclosing is operated within 5 minutes needs to be inquired, if the reclosing is not operated, the reclosing is not operated is prompted, and if the reclosing is protected, the reclosing is prompted; and after reclosing action, judging whether the switch is successfully closed, if not, switching off again, determining that reclosing fails, and if not, switching off again, and determining that reclosing succeeds.
7. And (4) when a fault occurs, judging whether the fault can be sent by force according to the fault category and by combining a fault rule base, wherein part of the faults need to be combined with abnormal events, and the switches of the bus difference, the main transformer differential gas, the failure and the main transformer backup protection action tripping do not have the condition of sending by force. The line switch interval has no forced feeding condition except the heater fault abnormal type and the knife switch abnormal type, and the line protection and measurement and control abnormal type has no forced feeding condition.
8. And when the switch is tripped in an accident, if a closing signal exists within 3 hours, the circuit connected with the switch is in accordance with a one-time trial delivery condition. Trial transmission is not carried out on reclosing, namely a switching-on signal within 1 minute after an accident is not calculated; trial delivery is not calculated for accident displacement which is not in a monitoring operation responsibility area; when in an accident, the equipment is not tried to be sent in a maintenance state (hanging a maintenance board or dividing knife switches on two sides, and remote signaling program transformation judgment); for the wiring of the provincial dispatching side 3/2, a primary equipment monitoring alarm table is needed to be combined for judgment, namely, the alarm of equipment state quit is calculated to be sent in a trial mode when an accident occurs, and misjudgment of a trial-sending line is avoided.
1.4. Abnormal event identification
And inquiring the abnormal signals of the upper window based on the effective signals after the labeling analysis and filtration, and only taking action signals without the abnormal signals caused by faults, operations, concomitations and defects.
And (3) taking 2-minute abnormal level alarm information of the same transformer substation with the window identification as a data source, judging by utilizing a monitoring information alarm rule base of typical abnormality of transformer substation equipment, classifying according to the abnormality of primary equipment and secondary equipment, and recording the occurrence quantity of historical abnormality.
The method for recognizing monitoring accident and abnormal event and multidimensional analysis shown in fig. 1 is a specific embodiment of the present invention, already embodies the essential features and progress of the present invention, and can make equivalent modifications in shape, structure, etc. according to the practical use requirements, all falling within the scope of protection of the present solution.

Claims (6)

1. The monitoring accident and abnormal event identification and multidimensional analysis method is characterized by comprising the following steps:
1) establishing a fault and exception rule base; compiling a monitoring information alarm rule base of the typical fault abnormity of the substation equipment; the alarm rule base operation rule comprises the following steps:
101) according to the alarm rule base, a transformer substation is taken as a unit, and the principle of judging failure firstly and then abnormality secondly is taken as a judgment principle;
102) the equipment fault is judged by utilizing a monitoring information alarm rule base according to the alarm information of the accident and the switch displacement grade except for the equipment operation and maintenance, the alarm information of the accident, the abnormality and the displacement grade from the first T1 minutes to the last T2 minutes is taken as a data source, and the alarm information of the abnormality grade with the action returned in the period is taken as an accompanying alarm;
103) classifying the alarm based on the typical faults of different equipment types;
104) the equipment faults are judged according to the sequence of bus differential, main transformer differential gas, failure, main transformer backup, line protection, reclosing, spare power automatic switching and safe automatic device action;
105) the equipment abnormity takes abnormal level warning information of the same transformer substation T3 minutes with upper window marks as a data source, the monitoring information warning rule base of typical abnormity of transformer substation equipment is used for judging, and classification is carried out according to the abnormity of primary equipment and secondary equipment;
2) taged assay
Classifying the daily alarm information according to action reasons, establishing a label mechanism, removing invalid signals and interference signals through rules, adding standardized attribute labels to the valid signals, and identifying faults and abnormal events according to a fault and abnormal rule base, wherein the labels comprise defect labels, invalid labels, upper window labels, retired labels, suspicious labels, standby channel supplement labels, instant labels, overhaul labels, associated labels, operation labels, debugging labels, secondary working labels and frequent judgment labels;
3) fault event identification
Based on the effective signals after the labeling analysis and filtration, simultaneously associating a scheduling log and a monitoring log to perform event association, and finally realizing the accuracy of the fault event;
4) abnormal event identification
Based on the effective signals after the labeling analysis and filtration, inquiring abnormal signals of an upper window, and only taking action signals without including abnormal signals caused by faults, operations, concomitations and defects;
and (3) taking abnormal level alarm information of the same transformer substation with the window identification for T4 minutes as a data source, judging by utilizing a monitoring information alarm rule base of typical abnormality of transformer substation equipment, classifying according to the abnormality of primary equipment and secondary equipment, and recording the occurrence quantity of historical abnormality.
2. A method for monitoring accidents, abnormal event identification and multidimensional analysis according to claim 1, wherein: in step 3), the fault event identification comprises the following steps:
301) inquiring the position of the knife switch in the interval at the moment when the upper window protection signal occurs, judging that the knife switch is caused by interval debugging when all the knife switch positions are in the open position, not considering the knife switch as a fault, and judging the next step if the knife switches are still in the closed position;
302) inquiring whether the remote signaling alarm information in the first 1 minute to the last 5 minutes has switch position division signals and interval accident total signals with the same interval, such as no switch position division signals or accident total signals, which are not regarded as faults, by taking the protection occurrence time as a reference; if the position division signal is caused by overhauling, operating, remote controlling and error signals, the position division signal is not considered as a fault;
303) inquiring whether active power and voltage in a recent interval have sudden changes or not by taking the occurrence time of protection as a reference, wherein if the frequency of telemetering data is too low, the measured sudden changes are not captured by the obtained telemetering data possibly, and the condition can only be used as auxiliary data for fault judgment and cannot be completely relied on;
304) when active power and voltage in a recent interval suddenly change, taking the first switch displacement alarm as a reference, taking accident, abnormality and displacement grade alarm information from the first 1 minute to the last 5 minutes as a data source, and taking abnormality grade alarm information with the action reset in the period as an accompanying alarm;
305) if a fault is determined, the fault is qualified according to the action sequence of a bus difference, main transformer differential gas, failure, main transformer backup, line protection, reclosing, spare power automatic switching and a safety automatic device, remote signaling alarm data of a corresponding plant station and at an interval n hours before and after the time of the accident and the defect are compared by combining a typical fault rule base, and when the typical accident and defect signal association rule base exists and the plant station has signals which do not appear but exist in the signal points, the signal is judged to be missed;
306) when a fault of a line or a main transformer interval occurs, whether reclosing is operated within 5 minutes needs to be inquired, if the reclosing is not operated, the reclosing is not operated is prompted, and if the reclosing is protected, the reclosing is prompted; after reclosing action, judging whether the switch is successfully closed, if not, switching off again, determining that reclosing fails, and if not, switching off again, determining that reclosing succeeds;
307) when a fault occurs, whether the fault can be sent by force is judged by combining a fault rule base according to the fault category, part of the faults need to be combined with abnormal events, and switches of a bus differential, main transformer differential gas, failure and main transformer backup protection action tripping do not have the condition of sending by force; the line switch interval has no forced feeding condition except the heater fault abnormal type and the knife switch abnormal type, and the line protection and measurement and control abnormal type has no forced feeding condition;
308) when the switch is tripped in an accident, if a closing signal exists within 3 hours, the circuit connected with the switch is in accordance with a one-time trial delivery condition; trial transmission is not carried out on reclosing, namely a switching-on signal within 1 minute after an accident is not calculated; trial delivery is not calculated for accident displacement which is not in a monitoring operation responsibility area; if the equipment is in a maintenance state during an accident, trial delivery is not calculated; for the wiring of the provincial dispatching side 3/2, a primary equipment monitoring alarm table is needed to be combined for judgment, namely, the alarm of equipment state quit is calculated to be sent in a trial mode when an accident occurs, and misjudgment of a trial-sending line is avoided.
3. A method for monitoring accidents, abnormal event identification and multidimensional analysis according to claim 2, wherein: in step 2), the method for identifying the tag includes:
201) defect tag identification
A) Monitoring information classification correctness
The monitoring information alarm level is divided into five types of accidents, abnormity, out-of-limit, displacement and notification according to the severity and urgency, the monitoring information data is periodically checked with an information table and a typical information table, and a 'defect' label is added to the irregular information;
B) monitoring information naming normalization
Checking the naming normalization of the rechecked monitoring information regularly through the monitoring information data, the information table and the typical information table, and adding a defect label to the irregular information;
202) invalid tag identification
Checking whether the alarm time of the monitoring information data has corresponding equipment maintenance card placing or alarm inhibiting, blocking and manual number placing operation on the signal, if so, marking the signal as an invalid label;
203) upper window label
The upper window label indicates whether the optimized result corresponding to the alarm signal is upper window or not; event identification takes into account windowing information;
204) retirement label
The signal which is still transmitted by the equipment which is retired in the equipment ledger is marked as a retirement label;
205) suspicious label
If the alarm signal contains a suspicious word, the alarm signal is divided into a suspicious label;
206) spare channel patch label
The alarm signal contains a 'spare channel complement' word eye, and is divided into a 'spare channel complement' label;
207) instant label
The signal of the upper window in the remote signaling alarm information is marked with a 'timely' label within 15 minutes;
208) maintenance label
If the signal contains a 'overhaul' word eye, the signal is divided into overhauls, and information is extracted from the non-correspondence of the placement of the cards aiming at the condition that part of cards are missed;
209) companion label
A) Remote operation
By judging whether the switch displacement state contains a displacement/remote control type and is not subjected to AVC remote control, remote operation is calculated, and abnormal signals which act at the same interval and are reset within 30 seconds before and after the displacement occurrence time are marked as 'companion';
B) AVC remote control
The remote control operation alarm table contains the remote control variable AVC remote control of AVC; the switch name contains switch displacement of 'capacitance', 'low reactance', 'high reactance', 'capacitive reactance', 'combined capacitance' and 'combined reactance', the default is AVC remote control, and abnormal signals which act and return at the same interval within 30 seconds before and after the displacement occurrence time are marked as 'associated';
C) error signal
On the basis of eliminating remote operation and AVC remote control operation, judging that the time interval of any two switch displacements is smaller than a threshold value, and judging the signal as a false signal; judging whether displacement with the displacement frequency exceeding M exists in N minutes, and if so, calculating error signals, wherein the displacement of remote operation is not included in the error signal statistics;
D) switch, knife switch and grounding knife switch historical operation state identification
Reading all switch and disconnecting link displacement information in remote signaling displacement data, but not including a switch single-phase switching-on and switching-off alarm, taking displacement time as starting time, taking the next time of switching a disconnecting link as ending time, taking the switch and disconnecting link states in a time period as the switch remote signaling state of the starting time, and identifying abnormal signals which act and are reset within 30 seconds before and after the displacement occurrence time as 'companion' labels, and checking the remote signaling states of the switch, the disconnecting link and the grounding disconnecting link by using a profile file in consideration of the missing condition in the signal uploading process;
E) accident shift
Calculating accident deflection according to an opening and closing signal within 1 minute after the tripping of a switching accident, wherein the deflection state is that the deflection of reclosing and spare power automatic switching closing is also calculated into the accident deflection;
F) in situ operation
Switch displacement signals which do not meet the requirements of overhaul, remote operation, AVC remote control operation, error signals and accident displacement are all calculated into field operation, and abnormal signals which act and are reset within 30 seconds before and after 10 seconds of displacement occurrence time in the field operation period are marked as 'companion';
G) operation label
The basic judgment method comprises the following steps: if the two different disconnecting links are displaced and separated within half an hour at intervals, wherein the disconnecting links do not comprise grounding disconnecting links and are window-mounting signals, the start of maintenance operation is judged, until the displacement of the two different disconnecting links is changed into closing position, the matching is stopped, an 'operation' label is marked on the displacement signal in the period, and an 'associated' label is marked on the abnormal signal which acts and is reset;
and (4) judging by combining an operation ticket: reading operation ticket information, judging through instruction information of the operation ticket, wherein the instruction information comprises an operation unit, command issuing time, finishing time and an operation instruction interval object, determining starting time and finishing time of operation by taking the following command time and the finishing time as reference and combining historical state data of a switch and a disconnecting link, then marking an 'operation' label on remote signaling displacement signals at the same interval in instruction execution time, and marking an 'operation' label on 'interval accident total information' and 'total station accident total signal' in the instruction execution time;
210) debugging label
When the operation ticket is rechecked, switching to mark a debugging label on the remote signaling deflection signal according to the running state at intervals; the secondary equipment generally has 2 or 4 or more instructions according to the condition that the reporting time when the instruction including 'tripping change to signal' is found in the instruction is debugging starting time, and the command time when the instruction including 'tripping change to signal' is found is debugging finishing time, and the primary equipment is mainly switched according to four conditions of 'operation', 'hot standby', 'cold standby', 'overhaul' to judge, and can be divided into two conditions; the first method starts maintenance by switching to a 'cold standby' state, takes the instruction reporting time of switching to the 'cold standby' state as debugging starting time, and takes the command issuing time when switching from the 'cold standby' state to other states as debugging finishing time; secondly, starting maintenance by switching to a maintenance state, taking the instruction report time of switching to the maintenance state as debugging starting time, taking the instruction issuing time when switching from the maintenance state to other states as debugging finishing time, and marking debugging labels on signals in the time periods;
211) secondary working label
In combination with a PMS secondary work ticket, according to the interval/total station and time information in the secondary work ticket, marking a 'secondary work' label on the work time content and the remote signaling alarm signal at the same interval/same station;
212) frequent judgement
On the basis of eliminating signals caused by remote operation, field operation, AVC operation, faults and defects, the signal transmitting frequency of signal points is counted every day and every month according to the signal points, the action is calculated again, the transmitting number exceeds 35/month and is judged to be periodic frequency transmission, and the transmitting number exceeds 5/day and is judged to be periodic frequency transmission.
4. A method for monitoring accidents, abnormal event identification and multidimensional analysis according to claim 3, wherein: the method also comprises an information displaying step, wherein when the information is displayed:
the equipment monitoring information big data system equipment fault abnormal information display takes the same transformer substation at the same time as a unit, and the format comprises fault abnormal information introduction, an alarm information list, a false missing sending mark and a subsequent emergency disposal prompt;
the fault information introduction display format is as follows: the operation of the safety automatic device is changed into the switch, and the time is changed into the first switch displacement alarm time;
the circuit also needs to mark the coincidence action condition, which is divided into three types of successful coincidence, unsuccessful coincidence and non-action of reclosing;
abnormal information introduction display format: year, month, day, substation, equipment, abnormal type;
the emergency disposal prompt mainly prompts whether the forced sending condition is met, and the equipment in the format of the emergency disposal prompt does not meet the forced sending condition due to the reason of the original number;
the switches of the bus differential, main transformer differential gas, failure and main transformer backup protection action tripping do not have forced transmission conditions;
the line switch interval has no forced feeding condition except the heater fault abnormal type and the knife switch abnormal type, and the line protection and measurement and control abnormal type has no forced feeding condition.
5. A method for accident monitoring, anomaly identification and multi-dimensional analysis according to claim 4, wherein: in step 102), the first switch displacement alarm is taken as a reference, and accident, abnormality and displacement grade alarm information from the first 1 minute to the last 5 minutes is taken as a data source.
6. A method for accident monitoring, anomaly identification and multi-dimensional analysis according to claim 5, wherein: in the step 105), the equipment abnormality takes 2-minute abnormality level alarm information of the same substation with a window mark as a data source.
CN201810565961.5A 2018-06-04 2018-06-04 Monitoring accident and abnormal event identification and multidimensional analysis method Active CN108847968B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201810565961.5A CN108847968B (en) 2018-06-04 2018-06-04 Monitoring accident and abnormal event identification and multidimensional analysis method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201810565961.5A CN108847968B (en) 2018-06-04 2018-06-04 Monitoring accident and abnormal event identification and multidimensional analysis method

Publications (2)

Publication Number Publication Date
CN108847968A CN108847968A (en) 2018-11-20
CN108847968B true CN108847968B (en) 2021-06-01

Family

ID=64210161

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201810565961.5A Active CN108847968B (en) 2018-06-04 2018-06-04 Monitoring accident and abnormal event identification and multidimensional analysis method

Country Status (1)

Country Link
CN (1) CN108847968B (en)

Families Citing this family (28)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10255141B2 (en) * 2015-10-22 2019-04-09 Oracle International Corporation Event batching, output sequencing, and log based state storage in continuous query processing
CN110046782A (en) * 2018-12-05 2019-07-23 国网江西省电力有限公司 A kind of automatic identifying method of power grid accident tripping monitoring information problem
CN111291774B (en) * 2018-12-07 2022-08-23 国网江苏省电力有限公司南京供电分公司 Power grid event sorting method and device based on Bayesian statistical decision
CN109739825B (en) * 2018-12-29 2021-04-30 优刻得科技股份有限公司 Method, apparatus and storage medium for managing log
CN109787834B (en) * 2019-01-25 2021-10-22 广西电网有限责任公司电力科学研究院 Calculation method for non-independent fault probability of nuclear power unit considering power grid operation parameters
CN110348667A (en) * 2019-05-21 2019-10-18 贵州电网有限责任公司 A kind of power grid accident grade determination method drilled through based on multi-layer data and system
CN110245168B (en) * 2019-06-20 2021-08-31 国网江苏省电力有限公司南京供电分公司 Method and system for extracting abnormal event characteristic signals in power grid historical alarm
CN110336375B (en) * 2019-06-26 2022-10-04 国网江苏省电力有限公司 Processing method and system for power grid monitoring alarm information
CN110263172B (en) * 2019-06-26 2021-05-25 国网江苏省电力有限公司南京供电分公司 Power grid monitoring alarm information evenized autonomous identification method
CN110598180B (en) * 2019-08-30 2022-09-09 国家电网有限公司 Event detection method, device and system based on statistical analysis
CN110806537A (en) * 2019-10-11 2020-02-18 交控科技股份有限公司 Method and system for monitoring state of air switch
CN110867958A (en) * 2019-11-08 2020-03-06 国网浙江省电力有限公司温州供电公司 Automatic fault identification and alarm method for electric power system
CN111274880A (en) * 2020-01-10 2020-06-12 丽水正阳电力建设有限公司 Video intelligent analysis auxiliary inspection and abnormity warning method
CN111768076B (en) * 2020-05-28 2023-12-01 国网浙江省电力有限公司绍兴供电公司 Monitoring alarm signal clustering method taking power grid event as center
CN114124652B (en) * 2020-08-27 2023-09-22 中国移动通信集团广东有限公司 Network operation and maintenance method and device and electronic equipment
CN112347225B (en) * 2020-10-19 2022-09-16 云南电网有限责任公司 Processing method for transmitting data information across isolated network gate
CN112677182A (en) * 2020-12-22 2021-04-20 国网浙江省电力有限公司金华供电公司 Intelligent abnormal fault diagnosis method based on robot operation
CN112732716B (en) * 2020-12-31 2023-11-07 广东电网有限责任公司佛山供电局 Intelligent analysis method for fault SOE sequence formed by continuous actions of multiple power grid equipment
CN114530944A (en) * 2021-01-01 2022-05-24 谭世克 Power network signal control system
CN114697193A (en) * 2021-01-01 2022-07-01 谭世克 Communication network monitoring management system
CN112906389B (en) * 2021-02-04 2022-08-26 云南电网有限责任公司昆明供电局 Fault trip discrimination method based on multi-dimensional data analysis
CN113097981B (en) * 2021-03-15 2022-03-25 国网江苏省电力有限公司南通供电分公司 Method for judging missing of monitoring alarm signal of transformer substation
CN113553358B (en) * 2021-07-27 2022-12-06 国网天津市电力公司电力科学研究院 Data mining-based power grid equipment invalid data identification method and device
CN114039886A (en) * 2021-10-19 2022-02-11 国网山东省电力公司日照供电公司 Data correctness identification method and device based on four-differential and autocorrelation analysis
CN114143164B (en) * 2021-11-11 2023-06-13 北京银盾泰安网络科技有限公司 Data alarm linkage platform
CN115498594B (en) * 2022-10-27 2023-08-22 国网安徽省电力有限公司滁州供电公司 Online inspection analysis system for relay protection tripping and closing outlet loop of transformer substation
CN116054416B (en) * 2023-03-15 2023-09-22 扬州康德电气有限公司 Intelligent monitoring operation and maintenance management system based on Internet of things
CN117411188B (en) * 2023-11-30 2024-06-11 中国长江电力股份有限公司 Automatic operation method of hydropower station 500kV outgoing line route overhaul transfer operation monitoring system

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103296757A (en) * 2013-05-21 2013-09-11 国家电网公司 Multi-parameter identification based secondary system fault diagnosing method for intelligent substation
CN107680195A (en) * 2017-11-13 2018-02-09 国网内蒙古东部电力有限公司 A kind of transformer station intelligent robot inspection Computer Aided Analysis System and method
CN107944655A (en) * 2017-10-13 2018-04-20 国家电网公司 Event level method for diagnosing faults based on Expert Rules storehouse and multi-source fault message

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8893216B2 (en) * 2011-06-15 2014-11-18 Cisco Technology, Inc. Security measures for the smart grid

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103296757A (en) * 2013-05-21 2013-09-11 国家电网公司 Multi-parameter identification based secondary system fault diagnosing method for intelligent substation
CN107944655A (en) * 2017-10-13 2018-04-20 国家电网公司 Event level method for diagnosing faults based on Expert Rules storehouse and multi-source fault message
CN107680195A (en) * 2017-11-13 2018-02-09 国网内蒙古东部电力有限公司 A kind of transformer station intelligent robot inspection Computer Aided Analysis System and method

Non-Patent Citations (3)

* Cited by examiner, † Cited by third party
Title
智能变电站智能告警与辅助决策的实现;刘伟 等;《电力系统保护与控制》;20110801;全文 *
智能变电站间隔内的可疑数据实时辨识方法;万玉建 等;《电气技术》;20141231;全文 *
智能电网调度控制系统综合智能告警研究及应用;闪鑫 等;《电力系统自动化》;20150110;全文 *

Also Published As

Publication number Publication date
CN108847968A (en) 2018-11-20

Similar Documents

Publication Publication Date Title
CN108847968B (en) Monitoring accident and abnormal event identification and multidimensional analysis method
CN109347202B (en) Typical operation identification and multidimensional analysis method for monitoring equipment
CN102638100B (en) District power network equipment abnormal alarm signal association analysis and diagnosis method
CN107294089B (en) Intelligent correlation analysis and evaluation method for power grid events
CN106340818B (en) Intelligent substation relay protection device maintenance peace arranges assistant analysis method for early warning
CN109639477B (en) Secondary equipment online monitoring and analyzing system and method
CN111768076B (en) Monitoring alarm signal clustering method taking power grid event as center
CN108876197B (en) Power equipment cluster and group analysis system
CN111475122B (en) Remote printing system and method for relay protection action message
CN113268590A (en) Power grid equipment running state evaluation method based on equipment portrait and integrated learning
CN111830342B (en) Multi-system fusion intelligent substation relay protection dynamic fixed inspection method
CN110867958A (en) Automatic fault identification and alarm method for electric power system
CN110350660B (en) Online monitoring method and system for relay protection function pressing plate
CN109767108B (en) Accurate analysis method for line state of power dispatching system
CN112906389B (en) Fault trip discrimination method based on multi-dimensional data analysis
CN112270555B (en) Distribution network dispatching instruction ticket safety checking system and method
CN112018887B (en) Distribution network feeder automatic operation process supervision and analysis method
CN104701993A (en) Method and system for identifying overhaul data of relay protection device
CN113097981B (en) Method for judging missing of monitoring alarm signal of transformer substation
CN114256976A (en) Anti-misoperation management and control system and method for overall process of distribution network field operation
CN108923529B (en) Intelligent substation secondary safety measure diagnosis method and system
CN110932391B (en) Method and system for identifying tripping of feeder switch in station
CN112564033B (en) Circuit breaker protection device abnormity identification method and system based on main and auxiliary data fusion
CN109450085B (en) Equipment abnormity alarm signal processing system based on scheduling and control integration
CN110970995B (en) Transmission type management and control system for key indexes of safe operation of power grid

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant