CN111211923A - Power industry control system and control method - Google Patents
Power industry control system and control method Download PDFInfo
- Publication number
- CN111211923A CN111211923A CN201911381545.0A CN201911381545A CN111211923A CN 111211923 A CN111211923 A CN 111211923A CN 201911381545 A CN201911381545 A CN 201911381545A CN 111211923 A CN111211923 A CN 111211923A
- Authority
- CN
- China
- Prior art keywords
- alarm information
- power distribution
- power
- network communication
- information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
- 238000000034 method Methods 0.000 title claims abstract description 19
- 238000004891 communication Methods 0.000 claims abstract description 103
- 238000009826 distribution Methods 0.000 claims abstract description 75
- 238000004519 manufacturing process Methods 0.000 claims abstract description 31
- 230000002159 abnormal effect Effects 0.000 claims abstract description 19
- 238000003860 storage Methods 0.000 claims description 17
- 238000002955 isolation Methods 0.000 claims description 8
- 230000003993 interaction Effects 0.000 claims description 5
- 238000012544 monitoring process Methods 0.000 description 3
- 230000007547 defect Effects 0.000 description 2
- 238000007689 inspection Methods 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000012360 testing method Methods 0.000 description 2
- 241000700605 Viruses Species 0.000 description 1
- 230000006399 behavior Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/06—Management of faults, events, alarms or notifications
- H04L41/0631—Management of faults, events, alarms or notifications using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
-
- H—ELECTRICITY
- H02—GENERATION; CONVERSION OR DISTRIBUTION OF ELECTRIC POWER
- H02H—EMERGENCY PROTECTIVE CIRCUIT ARRANGEMENTS
- H02H7/00—Emergency protective circuit arrangements specially adapted for specific types of electric machines or apparatus or for sectionalised protection of cable or line systems, and effecting automatic switching in the event of an undesired change from normal working conditions
- H02H7/26—Sectionalised protection of cable or line systems, e.g. for disconnecting a section on which a short-circuit, earth fault, or arc discharge has occured
- H02H7/28—Sectionalised protection of cable or line systems, e.g. for disconnecting a section on which a short-circuit, earth fault, or arc discharge has occured for meshed systems
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
- H04L43/0876—Network utilisation, e.g. volume of load or congestion level
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L43/00—Arrangements for monitoring or testing data switching networks
- H04L43/16—Threshold monitoring
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02B—CLIMATE CHANGE MITIGATION TECHNOLOGIES RELATED TO BUILDINGS, e.g. HOUSING, HOUSE APPLIANCES OR RELATED END-USER APPLICATIONS
- Y02B70/00—Technologies for an efficient end-user side electric power management and consumption
- Y02B70/30—Systems integrating technologies related to power network operation and communication or information technologies for improving the carbon footprint of the management of residential or tertiary loads, i.e. smart grids as climate change mitigation technology in the buildings sector, including also the last stages of power distribution and the control, monitoring or operating management systems at local level
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02B—CLIMATE CHANGE MITIGATION TECHNOLOGIES RELATED TO BUILDINGS, e.g. HOUSING, HOUSE APPLIANCES OR RELATED END-USER APPLICATIONS
- Y02B90/00—Enabling technologies or technologies with a potential or indirect contribution to GHG emissions mitigation
- Y02B90/20—Smart grids as enabling technology in buildings sector
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y04—INFORMATION OR COMMUNICATION TECHNOLOGIES HAVING AN IMPACT ON OTHER TECHNOLOGY AREAS
- Y04S—SYSTEMS INTEGRATING TECHNOLOGIES RELATED TO POWER NETWORK OPERATION, COMMUNICATION OR INFORMATION TECHNOLOGIES FOR IMPROVING THE ELECTRICAL POWER GENERATION, TRANSMISSION, DISTRIBUTION, MANAGEMENT OR USAGE, i.e. SMART GRIDS
- Y04S20/00—Management or operation of end-user stationary applications or the last stages of power distribution; Controlling, monitoring or operating thereof
- Y04S20/20—End-user application control systems
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y04—INFORMATION OR COMMUNICATION TECHNOLOGIES HAVING AN IMPACT ON OTHER TECHNOLOGY AREAS
- Y04S—SYSTEMS INTEGRATING TECHNOLOGIES RELATED TO POWER NETWORK OPERATION, COMMUNICATION OR INFORMATION TECHNOLOGIES FOR IMPROVING THE ELECTRICAL POWER GENERATION, TRANSMISSION, DISTRIBUTION, MANAGEMENT OR USAGE, i.e. SMART GRIDS
- Y04S40/00—Systems for electrical power generation, transmission, distribution or end-user application management characterised by the use of communication or information technologies, or communication or information technology specific aspects supporting them
- Y04S40/12—Systems for electrical power generation, transmission, distribution or end-user application management characterised by the use of communication or information technologies, or communication or information technology specific aspects supporting them characterised by data transport means between the monitoring, controlling or managing units and monitored, controlled or operated electrical equipment
- Y04S40/128—Systems for electrical power generation, transmission, distribution or end-user application management characterised by the use of communication or information technologies, or communication or information technology specific aspects supporting them characterised by data transport means between the monitoring, controlling or managing units and monitored, controlled or operated electrical equipment involving the use of Internet protocol
Abstract
The invention discloses a power industry control system and a control method, comprising the following steps: a plurality of power distribution terminals, a network communication module, a safety access module, a main control station and a production control module, the flow data size of the network communication message of each power distribution terminal is identified through the security access module, generating first alarm information for the flow data which does not meet the requirement, identifying the target network address of each power distribution terminal, second alarm information is generated for the target network address which does not meet the requirement, so that the information safety of a safety access module in the power industry control system can be ensured, the potential safety hazard in the power industry control system is reduced, thereby ensuring the normal work of the power industry control system, identifying the abnormal power grid control command through the production control module to determine the power grid control command which does not meet the requirement, and then, third alarm information is generated, so that whether potential safety hazards exist in power grid control instructions issued by the main control station or not can be ensured.
Description
Technical Field
The invention relates to the technical field of power industry control, in particular to a power industry control system and a control method.
Background
With the rapid development of the power network technology, the power industry control system can realize the quality inspection test of the automation equipment or the quality inspection test of the communication equipment or the industrial monitoring of the operation control of the power distribution network or the power grid operation terminal, thereby meeting the diversified power service requirements of regional users.
At present, along with the interaction between a power distribution terminal and an electric power industry control system is more and more frequent, the power distribution terminal with illegal identity logs in or illegally operates or illegally accesses the electric power industry control system, and then the electric power industry control system is illegally attacked by malicious behaviors, so that the electric power industry control system is seriously damaged, and therefore, the electric power industry control system is finally caused to have serious potential safety hazards, and the normal work of the electric power industry control system is influenced.
Disclosure of Invention
Therefore, the technical problem to be solved by the embodiment of the invention is to overcome the defect that the power industry control system in the prior art has serious potential safety hazard and influences the normal operation of the power industry control system, thereby providing the power industry control system.
Therefore, the embodiment of the invention provides the following technical scheme:
an embodiment of the present invention provides an electric power industry control system, including:
the power distribution system comprises a plurality of power distribution terminals, a plurality of network terminals and a plurality of user terminals, wherein the power distribution terminals are distributed in different areas and used for carrying out power grid information interaction with the user terminals in the areas to which the power distribution terminals belong;
the network communication module is connected with each power distribution terminal;
the safety access module is connected with each power distribution terminal through the network communication module and used for acquiring a network communication message uploaded by each power distribution terminal, identifying whether the flow data size of the network communication message exceeds a preset threshold value in preset time and identifying whether a target communication website of each power distribution terminal belongs to a preset communication website, generating first alarm information and downloading the first alarm information when the flow data size of the network communication message exceeds the preset threshold value in preset time, and generating second alarm information and downloading the second alarm information when the target communication website of each power distribution terminal does not belong to the preset communication website;
the main control station is connected with each power distribution terminal through the network communication module and used for issuing power grid control instructions to each power distribution station;
the production control module is connected with the main control station through the network communication module and used for acquiring the power grid control instruction sent by the main control station and identifying whether data information corresponding to the power grid control instruction is abnormal or not, and when the data information corresponding to the main control instruction is abnormal, third alarm information is generated and downloaded;
the electric power industry management platform is used for acquiring first alarm information, second alarm information and third alarm information which are respectively downloaded by the safety access module and are respectively prompted by the first alarm information, the second alarm information and the third alarm information.
With reference to the first aspect, in a first implementation manner of the first aspect, the power industry control system further includes:
and the isolation module is arranged between the safety access module and the production control module, is respectively connected with the safety access module and the production control module and is used for safety isolation.
With reference to the first aspect, in a second implementation manner of the first aspect, the secure access module includes:
the first information exchange port is connected with the network communication module and used for carrying out first information exchange on the network communication message;
and the first information switch is connected with the first information switch port and used for configuring first network parameters.
With reference to the second implementation manner of the first aspect, in a third implementation manner of the first aspect, the secure access module includes:
and the first physical storage unit is connected with the first information switch and used for storing the network communication message.
With reference to the third implementation manner of the first aspect, in a fourth implementation manner of the first aspect, the secure access module includes:
and the first control chip is connected with the first physical storage unit and used for identifying the size of the flow data of the network message, respectively determining the flow data meeting the requirement in the network communication message and determining each power distribution terminal with the target communication address meeting the requirement, and respectively generating first alarm information according to the flow data not meeting the requirement and generating second alarm information according to each power distribution terminal not meeting the requirement.
With reference to the first aspect, in a fifth embodiment of the first aspect, the production control module includes:
the second information exchange port is connected with the network communication module and used for carrying out second information exchange on the network communication message;
and the second information switch port are used for configuring second network parameters.
With reference to the first aspect, in a sixth implementation of the first aspect, the production control module includes:
and the second physical storage unit is connected with the second information switch and is used for storing the power grid control instruction.
With reference to the first aspect, in a seventh implementation manner of the first aspect, the production control module further includes:
and the second control chip is connected with the second physical storage unit and used for determining the abnormal power grid control instruction and generating third alarm information.
According to a second aspect, an embodiment of the present invention provides a power industry control method, which is applied to the secure access module described in the first aspect, the first implementation manner of the first aspect, the second implementation manner of the first aspect, the third implementation manner of the first aspect, or the fourth implementation manner of the first aspect, and includes:
acquiring network communication messages uploaded by each power distribution terminal;
identifying whether the flow data size of the network communication message exceeds a preset threshold value in preset time;
when the flow data size of the network communication message exceeds a preset threshold value, sending first alarm information to an electric power industry management platform;
identifying whether the target communication website of each power distribution terminal belongs to a preset communication website or not;
and when the target communication website of each power distribution terminal does not belong to the preset communication website, sending second alarm information to the electric power industry management platform.
According to a second aspect, an embodiment of the present invention provides a power industry control method, for a production control module described in the first aspect, or the fifth embodiment of the first aspect, or the sixth embodiment of the first aspect, or the seventh embodiment of the first aspect, including:
acquiring a power grid control instruction issued by a main control station;
identifying whether data information corresponding to the power grid control command is abnormal or not;
and when the data information corresponding to the main control instruction is abnormal, sending third alarm information to the electric power industry management platform.
The technical scheme of the embodiment of the invention has the following advantages:
the invention provides a power industry control system and a control method, comprising the following steps: a plurality of power distribution terminals, a network communication module, a safety access module, a main control station and a production control module, the flow data size of the network communication message of each power distribution terminal is identified through the security access module, generating first alarm information for the flow data which does not meet the requirement, identifying the target network address of each power distribution terminal, second alarm information is generated for the target network address which does not meet the requirement, so that the information safety of a safety access module in the power industry control system can be ensured, the potential safety hazard in the power industry control system is reduced, thereby ensuring the normal work of the power industry control system, identifying the abnormal power grid control command through the production control module to determine the power grid control command which does not meet the requirement, and then, third alarm information is generated, so that whether potential safety hazards exist in power grid control instructions issued by the main control station or not can be ensured.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, and it is obvious that the drawings in the following description are some embodiments of the present invention, and other drawings can be obtained by those skilled in the art without creative efforts.
FIG. 1 is a block diagram of an embodiment of a power industry control system;
FIG. 2 is a first flowchart of a power industry control method according to an embodiment of the present invention;
fig. 3 is a second flowchart of the power industry control method according to the embodiment of the present invention.
Detailed Description
The technical solutions of the embodiments of the present invention will be described clearly and completely with reference to the accompanying drawings, and it is to be understood that the described embodiments are some, but not all embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
In the description of the embodiments of the present invention, it should be noted that the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inner", "outer", and the like indicate orientations or positional relationships based on the orientations or positional relationships shown in the drawings, and are only for convenience in describing the embodiments of the present invention and simplifying the description, but do not indicate or imply that the referred devices or elements must have specific orientations, be configured in specific orientations, and operate, and thus, should not be construed as limiting the present invention. Furthermore, the terms "first," "second," and "third" are used for descriptive purposes only and are not to be construed as indicating or implying relative importance.
In the description of the embodiments of the present invention, it should be noted that, unless explicitly stated or limited otherwise, the terms "mounted," "connected," and "connected" are to be construed broadly, and may be, for example, fixedly connected, detachably connected, or integrally connected; can be mechanically or electrically connected; the two elements may be directly connected or indirectly connected through an intermediate medium, or may be communicated with each other inside the two elements, or may be wirelessly connected or wired connected. The specific meanings of the above terms in the present invention can be understood in specific cases to those skilled in the art.
In addition, the technical features involved in the different embodiments of the present invention described below may be combined with each other as long as they do not conflict with each other.
Example 1
An embodiment of the present invention provides an electric power industry control system, as shown in fig. 1, including:
the system comprises a plurality of power distribution terminals 1, a network communication module 2, a safety access module 3, a main control station 4, a production control module 5 and an electric power industry management platform 6.
The power distribution system comprises a plurality of power distribution terminals 1, wherein the power distribution terminals 1 are distributed in different areas, and each power distribution terminal 1 is used for carrying out power grid information interaction with a user terminal in the area to which the power distribution terminal belongs. The power distribution terminal 1 serves as a boundary point between a power supply department and a user terminal, and therefore can be considered as a terminal point for information interaction of a power distribution network.
And a network communication module 2 connected to each of the distribution terminals 1. The network communication module 2 may be a wireless network communication module 2, and may be a wireless communication network.
In particular, the security access module 3 serves as an important part of the power industry control system as an access point for grid security information. Because, at present, the power industry control system faces a serious network security challenge, and the complexity, software and hardware failures, design defects, and threats such as viruses and trojans of the system also affect the safe and stable operation of the system. Therefore, it is necessary to perform security detection on the secure access module 3.
The safety access module 3 is connected with each power distribution terminal 1 through the network communication module 2 and is used for acquiring a network communication message uploaded by each power distribution terminal 1, identifying whether the flow data size of the network communication message exceeds a preset threshold value in preset time and identifying whether a target communication website of each power distribution terminal 1 belongs to a preset communication website, generating first alarm information and downloading the first alarm information when the flow data size of the network communication message exceeds the preset threshold value in preset time, and generating second alarm information and downloading the second alarm information when the target communication website of each power distribution terminal 1 does not belong to the preset communication website.
In an embodiment, in the power industry control system according to the embodiment of the present invention, the security access module 3, in fig. 1, further includes: the system comprises an isolation module 7, a first information exchange port 31, a first information exchanger 32, a first physical storage unit 33 and a first control chip 34.
Wherein, the isolation module 7 is arranged between the safety access module 3 and the production control module 5, is respectively connected with the safety access module 3 and the production control module 5, and is used for safety isolation. The safety access module 3 and the production control module 5 can be safely isolated by the isolation module 7, so that the safety access module 3 and the production control module 5 can work independently.
The first information exchange port 31 is connected to the network communication module 2, and is configured to perform first information exchange on the network communication packet. The first information exchange port 31 may be a mirror port of the switch, or may be a common information exchange port.
In an embodiment, in the power industry control system according to the embodiment of the present invention, the security access module 3, in fig. 1, further includes:
the first information switch 32 is connected to the first information switch port 31, and is configured to configure the first network parameter. The first information exchange 32 here serves as information exchange means.
And the first physical storage unit 33 is connected with the first information switch 32 and used for storing the network communication message. The first physical storage unit 33 here is actually equivalent to a physical storage network card for storing the network communication messages uploaded by each power distribution terminal 1.
And the first control chip 34 is connected to the first physical storage unit 33, and is configured to identify a traffic data size of the network message, determine traffic data in the network communication message that meets requirements, determine each power distribution terminal 1 whose target communication address meets requirements, generate first alarm information according to the traffic data that does not meet the requirements, and generate second alarm information according to each power distribution terminal 1 that does not meet the requirements. Specifically, whether the network communication message meets the required flow data is identified according to a preset standard threshold corresponding to the flow data size of the network communication message within a preset period time; the first control chip 34 in the security access module 3 identifies the flow data size of each power distribution terminal 1, where the flow data generally refers to the uplink flow of the network, determines the power distribution terminal 1 corresponding to the condition that the flow data size of the network communication message exceeds the preset standard threshold within the preset cycle time, and generates the first alarm information according to the network communication message uploaded by the power distribution terminal 1 that does not meet the requirement. And identifying whether the target communication address of each power distribution terminal 1 meets the requirement according to the preset communication website, specifically, verifying whether the target IP of each power distribution terminal 1 is in a white list, generating second alarm information according to each power distribution terminal 1 which does not meet the requirement, and uploading the second alarm information to the power industry management platform 6.
The flow data size of the network communication message of each power distribution terminal 1 is identified through the safety access module 3, first alarm information is generated for the flow data size which does not meet the requirements, the target network address of each power distribution terminal 1 is identified, and second alarm information is generated for the target network address which does not meet the requirements, so that the information safety of the safety access module 3 in the power industry control system can be ensured, the potential safety hazard in the power industry system is reduced, and the normal work of the power industry system is ensured.
The main control station 4 is connected with each power distribution terminal 1 through the network communication module 2 and is used for issuing power grid control instructions to each power distribution station; the main control station 4 is mainly used for issuing power grid control instruction information to each power distribution terminal 1.
And the production control module 5 is connected with the main control station 4 through the network communication module 2, and is used for acquiring a power grid control instruction issued by the main control station 4 and identifying whether data information corresponding to the power grid control instruction is abnormal or not, and when the data information corresponding to the main control instruction is abnormal, generating third alarm information and downloading the third alarm information.
In a specific embodiment, the production control module 5 in the embodiment of the present invention includes: a second information exchange port 51 and a second information exchange 52.
The second information exchange port 51 is connected to the network communication module 2, and is configured to perform second information exchange on the network communication packet. The second information exchange port 51 may be a mirror port of the switch, or may be a common information exchange port.
And a second information switch 52 and a second information switch port 51, configured to configure a second network parameter. The second information exchange 52 here serves as information exchange means.
In a specific embodiment, the production control module 5 in the embodiment of the present invention further includes:
and the second physical storage unit 53 is connected with the second information exchanger 52 and is used for storing the power grid control instruction. The second physical storage unit 53 is actually equivalent to a physical storage network card, and is used for storing the network communication messages uploaded by each power distribution terminal 1.
And the second control chip 54 is connected with the second physical storage unit 53, and is used for determining a power grid control instruction with an abnormal occurrence and generating third alarm information. Specifically, whether the power grid control instruction issued by the main control station 4 is correct is verified according to the power grid control instruction of the preset standard, and if the power grid control instruction does not meet the requirement, third alarm information is generated and issued to the power industry management platform 6.
In the power industry control system in the embodiment of the invention, the abnormal power grid control instruction is identified by the production control module 5 to determine the power grid control instruction which does not meet the requirement, and then the third alarm information is generated, so that whether the potential safety hazard exists in the power grid control instruction issued by the main control station 4 can be ensured.
Electric power industry management platform 6 among the above-mentioned is connected with safety access module 3 and production control module 5 respectively through network communication module 2 for acquire the first alarm information, the second alarm information that safety access module 3 downloaded respectively and the third alarm information that production control module 5 downloaded, and remind first alarm information, second alarm information and third alarm information respectively. The electric power industry management platform 6 can graphically display the first alarm information, the second alarm information and the third alarm information, and is convenient for attracting attention of power grid workers.
Example 2
An embodiment of the present invention provides a power industry control method, which is applied to a security access module in embodiment 1, and as shown in fig. 2, the method includes:
step S21: and acquiring the network communication message uploaded by each power distribution terminal.
Step S22: and identifying whether the flow data size of the network communication message exceeds a preset threshold value in preset time. Specifically, the size of the flow data of the network communication message corresponds to a preset standard threshold within a preset period time; when the flow data size of the network communication message does not exceed the preset threshold, the flow data size of the network communication message meets the requirement, and the network communication message meets the safety standard.
Step S23: and when the flow data size of the network communication message exceeds a preset threshold value, sending first alarm information to the electric power industry management platform. And sending first alarm information to the power industry management platform for the network communication message which does not meet the requirement.
Step S24: and identifying whether the target communication website of each power distribution terminal belongs to a preset communication website. And when the target communication website meets the requirements, the target communication website of each power distribution terminal belongs to the safety information.
Step S25: and when the target communication website of each power distribution terminal does not belong to the preset communication website, sending second alarm information to the electric power industry management platform. And sending first alarm information to the power industry management platform for the target communication website which does not meet the requirement.
The steps S22-S23 are not in sequence with the steps S24-S25.
The specific safety monitoring content of the power industry control method in this embodiment is described in detail in embodiment 1 for the specific description of the safety access module, and is not described herein again. According to the method and the device, the flow data size of the network communication message of each power distribution terminal is identified in the safety access module, the first alarm information is generated for the flow data size which does not meet the requirements, the target network address of each power distribution terminal is identified, and the second alarm information is generated for the target network address which does not meet the requirements, so that the information safety of the safety access module in the power industry control system can be ensured, the potential safety hazard in the power industry control system is reduced, and the normal work of the power industry control system is ensured.
Example 3
An embodiment of the present invention provides a power industry control method, which is applied to a production control module in embodiment 1, and as shown in fig. 3, the method includes:
step S31: and acquiring a power grid control instruction issued by the main control station.
Step S32: and identifying whether the data information corresponding to the power grid control command is abnormal.
Step S33: and when the data information corresponding to the main control instruction is abnormal, sending third alarm information to the electric power industry management platform.
The electric power industry control method in the embodiment of the present invention, and specific security monitoring contents of the electric power industry control method in the embodiment are described in detail in embodiment 1 for specific description of the security access module, and are not described herein again. The abnormal power grid control instruction is identified through the production control module to determine the power grid control instruction which does not meet the requirements, and then third alarm information is generated, so that whether the potential safety hazard exists in the power grid control instruction issued by the main control station or not can be ensured.
It should be understood that the above examples are only for clarity of illustration and are not intended to limit the embodiments. Other variations and modifications will be apparent to persons skilled in the art in light of the above description. And are neither required nor exhaustive of all embodiments. And obvious variations or modifications therefrom are within the scope of the invention.
Claims (10)
1. An electric power industry control system, comprising:
the power distribution system comprises a plurality of power distribution terminals, a plurality of network terminals and a plurality of user terminals, wherein the power distribution terminals are distributed in different areas and used for carrying out power grid information interaction with the user terminals in the areas to which the power distribution terminals belong;
the network communication module is connected with each power distribution terminal;
the safety access module is connected with each power distribution terminal through the network communication module and used for acquiring a network communication message uploaded by each power distribution terminal, identifying whether the flow data size of the network communication message exceeds a preset threshold value in preset time and identifying whether a target communication website of each power distribution terminal belongs to a preset communication website, generating first alarm information and downloading the first alarm information when the flow data size of the network communication message exceeds the preset threshold value in preset time, and generating second alarm information and downloading the second alarm information when the target communication website of each power distribution terminal does not belong to the preset communication website;
the main control station is connected with each power distribution terminal through the communication module and used for issuing power grid control instructions to each power distribution station;
the production control module is connected with the main control station through the network communication module and used for acquiring the power grid control instruction sent by the main control station and identifying whether data information corresponding to the power grid control instruction is abnormal or not, and when the data information corresponding to the main control instruction is abnormal, third alarm information is generated and downloaded;
the electric power industry management platform is used for acquiring first alarm information, second alarm information and third alarm information which are respectively downloaded by the safety access module and are respectively prompted by the first alarm information, the second alarm information and the third alarm information.
2. The power industry control system of claim 1, further comprising:
and the isolation module is arranged between the safety access module and the production control module, is respectively connected with the safety access module and the production control module and is used for safety isolation.
3. The power industry control system of claim 1, wherein the secure access module comprises:
the first information exchange port is connected with the network communication module and used for carrying out first information exchange on the network communication message;
and the first information switch is connected with the first information switch port and used for configuring first network parameters.
4. The power industry control system of claim 3, wherein the secure access module comprises:
and the first physical storage unit is connected with the first information switch and used for storing the network communication message.
5. The power industry control system of claim 4, wherein the secure access module comprises:
and the first control chip is connected with the first physical storage unit and used for identifying the size of the flow data of the network message, respectively determining the flow data meeting the requirement in the network communication message and determining each power distribution terminal with the target communication address meeting the requirement, and respectively generating first alarm information according to the flow data not meeting the requirement and generating second alarm information according to each power distribution terminal not meeting the requirement.
6. The power industry control system of claim 1 wherein the production control module comprises:
the second information exchange port is connected with the network communication module and used for carrying out second information exchange on the network communication message;
and the second information switch port are used for configuring second network parameters.
7. The power industry control system of claim 6 wherein the production control module comprises:
and the second physical storage unit is connected with the second information switch and is used for storing the power grid control instruction.
8. The power industry control system of claim 7 wherein the production control module further comprises:
and the second control chip is connected with the second physical storage unit and used for determining the abnormal power grid control instruction and generating third alarm information.
9. A power industry control method for a secure access module according to any one of claims 1 to 5, comprising:
acquiring network communication messages uploaded by each power distribution terminal;
identifying whether the flow data size of the network communication message exceeds a preset threshold value in preset time;
when the flow data size of the network communication message exceeds a preset threshold value, sending first alarm information to an electric power industry management platform;
identifying whether the target communication website of each power distribution terminal belongs to a preset communication website or not;
and when the target communication website of each power distribution terminal does not belong to the preset communication website, sending second alarm information to the electric power industry management platform.
10. A power industry control method for a production control module according to any one of claims 1 or 6 to 8, comprising:
acquiring a power grid control instruction issued by a main control station;
identifying whether data information corresponding to the power grid control command is abnormal or not;
and when the data information corresponding to the main control instruction is abnormal, sending third alarm information to the electric power industry management platform.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911381545.0A CN111211923A (en) | 2019-12-27 | 2019-12-27 | Power industry control system and control method |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911381545.0A CN111211923A (en) | 2019-12-27 | 2019-12-27 | Power industry control system and control method |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN111211923A true CN111211923A (en) | 2020-05-29 |
Family
ID=70786998
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201911381545.0A Pending CN111211923A (en) | 2019-12-27 | 2019-12-27 | Power industry control system and control method |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN111211923A (en) |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20120272319A1 (en) * | 2011-04-21 | 2012-10-25 | Barracuda Inc. | Apparatus, and system for determining and cautioning users of Internet connected clients of potentially malicious software and method for operating such |
| CN107241224A (en) * | 2017-06-09 | 2017-10-10 | 珠海市鸿瑞软件技术有限公司 | The network risks monitoring method and system of a kind of transformer station |
| CN108063753A (en) * | 2017-11-10 | 2018-05-22 | 全球能源互联网研究院有限公司 | A kind of information safety monitoring method and system |
| CN110224894A (en) * | 2019-06-18 | 2019-09-10 | 国网四川省电力公司内江供电公司 | A kind of transformer station process layer network management system for monitoring |
| CN110516442A (en) * | 2019-08-29 | 2019-11-29 | 南方电网科学研究院有限责任公司 | A kind of power distribution network safety defense system, method, apparatus, equipment and storage medium |
-
2019
- 2019-12-27 CN CN201911381545.0A patent/CN111211923A/en active Pending
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20120272319A1 (en) * | 2011-04-21 | 2012-10-25 | Barracuda Inc. | Apparatus, and system for determining and cautioning users of Internet connected clients of potentially malicious software and method for operating such |
| CN107241224A (en) * | 2017-06-09 | 2017-10-10 | 珠海市鸿瑞软件技术有限公司 | The network risks monitoring method and system of a kind of transformer station |
| CN108063753A (en) * | 2017-11-10 | 2018-05-22 | 全球能源互联网研究院有限公司 | A kind of information safety monitoring method and system |
| CN110224894A (en) * | 2019-06-18 | 2019-09-10 | 国网四川省电力公司内江供电公司 | A kind of transformer station process layer network management system for monitoring |
| CN110516442A (en) * | 2019-08-29 | 2019-11-29 | 南方电网科学研究院有限责任公司 | A kind of power distribution network safety defense system, method, apparatus, equipment and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105897860B (en) | Network device and information processing method | |
| CN107919995B (en) | Intelligent transportation operation and maintenance terminal based on internet of things technology | |
| CN108512870A (en) | Access method, platform of internet of things and the internet of things equipment of platform of internet of things | |
| US10305324B2 (en) | Smart meter, supply control method, operating method, integrated circuit, system, and program | |
| JP2015156786A (en) | Secure power supply related to industrial control system | |
| KR20090122508A (en) | Apparatus and method for goose message detecting | |
| CN111696335A (en) | Centralized meter for automated metering management of power distribution services | |
| CN110881186B (en) | Illegal device identification method and device, electronic device and readable storage medium | |
| CN106604316B (en) | Method, device and system for positioning fault of wireless access equipment | |
| CN113225342B (en) | Communication abnormality detection method and device, electronic equipment and storage medium | |
| CN102905290B (en) | base station maintenance method and apparatus | |
| CN111211923A (en) | Power industry control system and control method | |
| CN108156602A (en) | For the method, apparatus and wireless access points with terminal equipment in communication | |
| CN108333449A (en) | Substation equipment on-line monitoring method and device | |
| CN110048909B (en) | Network operation and maintenance method and device | |
| CN114338074B (en) | Automatic detection method and detection system for IP white list of power distribution terminal | |
| CN111866003B (en) | Risk assessment method and device for terminal | |
| WO2015121389A1 (en) | Method and hardware device for remotely connecting to and controlling a private branch exchange | |
| CN115001772A (en) | Power transmission line Internet of things gateway control method, control system and computer readable storage medium | |
| CN106950460A (en) | Fault detection method, device and high voltage distribution box | |
| CN103812678B (en) | Reach the standard grade indicating means, apparatus and system | |
| CN106714076A (en) | MTC equipment triggering method and device | |
| KR101622386B1 (en) | Method for Test Protocol of WiBro Access System, and System therefor | |
| CN113728239A (en) | Detecting energy consumption fraud in power distribution services | |
| CN106153095B (en) | The collaboration method and device of a kind of electronic equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20200529 |
|
| RJ01 | Rejection of invention patent application after publication |