CN112910089A

CN112910089A - Transformer substation secondary equipment fault logic visualization method and system

Info

Publication number: CN112910089A
Application number: CN202110097663.XA
Authority: CN
Inventors: 魏振; 陈明; 安树怀; 段京平; 栾春朋; 郭德胜; 孔泊涵; 宋佳; 赵先超; 窦王会
Original assignee: State Grid Corp of China SGCC; Qingdao Power Supply Co of State Grid Shandong Electric Power Co Ltd; State Grid Materials Co Ltd
Current assignee: State Grid Corp of China SGCC; Qingdao Power Supply Co of State Grid Shandong Electric Power Co Ltd; State Grid Materials Co Ltd
Priority date: 2021-01-25
Filing date: 2021-01-25
Publication date: 2021-06-04

Abstract

The utility model provides a substation secondary equipment fault logic visualization method and a system, comprising the following steps: acquiring real-time state data of each primary device and each secondary device to obtain logic loops of all secondary devices; comparing the acquired real-time state data with preset parameters to obtain fault states of all logic loops of the secondary equipment, and displaying each logic loop and the fault state in real time; the preset parameters at least comprise protection logic, action events, fault parameters and operation fixed values; the method and the device visually display the logic loop hidden in the link, comprehensively and directly embody the physical connection and the logic relation among facilities, are convenient for maintenance personnel to know the interactive information among the devices, and greatly reduce the debugging risk of the devices.

Description

Transformer substation secondary equipment fault logic visualization method and system

Technical Field

The disclosure relates to the technical field of transformer substation monitoring, in particular to a transformer substation secondary equipment fault logic visualization method and system.

Background

The statements in this section merely provide background information related to the present disclosure and may not necessarily constitute prior art. Along with the rapid development of the intelligent power grid, the intellectualization of the secondary equipment of the transformer substation is improved to a higher level, the number of the secondary equipment is increased rapidly, and higher requirements are provided for the management, operation, maintenance and overhaul personnel of the equipment. For example, the intelligent substation adopts digital information to replace analog quantity information of a conventional substation, adopts optical fiber communication to replace conventional cable communication, and adopts the digital information processing technology of the intelligent substation, so that a secondary circuit which can be actually operated by the substation is changed into editable text information, and the visible and touchable cable connection is changed into invisible and touchless virtual connection. In the eyes of operation and maintenance personnel, a substation capable of detecting can be operated, and the substation is changed from real to virtual. However, from a conventional transformer substation to an intelligent transformer substation, due to the adoption of new equipment and new technology, the self-checking capability and the communication capability of the equipment are changed from weak to strong, the provided information is more comprehensive, and the information between the equipment and people can be fully interacted, so that operation and maintenance personnel can more accurately master the operation condition of the equipment.

The inventor of the present disclosure finds that, at present, with the aim of ensuring the good state of the foundation of the device and the loop, several operation and maintenance modes of regular inspection, full inspection (life cycle inspection) and special dimension (high fidelity test) are generally performed on the secondary equipment. However, when the number of devices is increased greatly and new technologies are introduced greatly, the operation and maintenance personnel and the maintenance personnel are relatively fixed to compile, and the maintenance time is often short for improving the power supply reliability, a large number of operation and maintenance tasks are required to be completed within a limited time, which will cause great challenges and also bring problems, such as insufficient maintenance (project not repaired), excessive maintenance (project not repaired), advanced maintenance (device not damaged, repair damaged), delayed maintenance (repair is performed only when damaged, and the purpose of preventive maintenance cannot be achieved), and blind maintenance (repair is not known and repair is performed when time is reached). Especially, in order to grasp the running state of the equipment in time and deal with the abnormal running state of the existing intelligent station and achieve the purpose of tracking and controlling the equipment, a large amount of manpower and material resources are still needed to carry out daily inspection, professional inspection and the like on the substation equipment. With the continuous improvement of fine management requirements, the traditional operation and maintenance mode cannot meet the operation and maintenance requirements of the smart power grid.

The inventor of the present disclosure finds that, compared with the traditional transformer substation, the hardware of the intelligent transformer substation has significant development and progress, and facilities such as a merging unit, an intelligent terminal and a process layer network switch are introduced, meanwhile, a three-layer two-network structure is used, the traditional method of connecting analog quantity and switching quantity signal cables is replaced by a digital signal network communication mode, the current secondary drawings of the intelligent station are designed on the basis of a GOOSE/SV configuration table, a secondary virtual terminal loop diagram, a process layer network architecture diagram, a switch port information flow diagram and the like, and do not clearly distinguish the network mining link connection and the direct mining link connection related to the loop, especially, communication devices and virtual logic connections hidden in the SCD file are difficult to visualize, a secondary system is based on the SCD file, and a secondary loop (a virtual terminal and a virtual loop) becomes a black box; the secondary system product at the present stage does not effectively solve the maintainability problem of the secondary system of the intelligent substation, and has extremely complex management and large safety risk.

Disclosure of Invention

In order to solve the defects of the prior art, the method and the system for visualizing the fault logic of the secondary equipment of the transformer substation visually display the logic circuit hidden in the link, comprehensively and directly embody the physical connection and the logic connection among facilities, are convenient for maintenance personnel to know the interactive information among the equipment, and greatly reduce the debugging risk of the equipment.

In order to achieve the purpose, the following technical scheme is adopted in the disclosure:

the first aspect of the disclosure provides a substation secondary equipment fault logic visualization method.

A substation secondary equipment fault logic visualization method comprises the following steps:

acquiring real-time state data of each primary device and each secondary device to obtain logic loops of all secondary devices;

comparing the acquired real-time state data with preset parameters to obtain fault states of all logic loops of the secondary equipment, and displaying each logic loop and the fault state in real time;

the preset parameters at least comprise protection logic, action events, fault parameters, waveforms and operation fixed values.

As some possible implementation manners, the static information expressed by the SCD and the real-time dynamic message information of the station control layer and the process layer are visualized online by a dynamic and static combination method;

the method comprises the steps of collecting events, alarms and telecommand deflection information of relay protection equipment in real time, calling the information of the spacer layer protection equipment through a station control layer according to needs, and carrying out relevance analysis on key events of the intelligent substation to realize fault identification.

By way of further limitation, the substation static data includes SCL syntax and substation configuration files, and the substation dynamic data includes MMS, GOOSE and SV network messages.

As possible implementation manners, a probability model of parameter change and fault damage is established according to a historical database through a key parameter set corresponding to any event, and is compared with a current parameter probability state space to judge the current health state and analyze the trend;

quantitative damage judgment is carried out through comparison of the current parameter space and the damage state probability space, and trend analysis and fault prediction are carried out based on the historical information.

As possible implementation modes, mining the primary data and the secondary data of the power system by adopting a fuzzy comprehensive evaluation method based on a data mining association rule;

and analyzing each monitoring data during the fault by using an association rule mining algorithm to obtain the relation between the fault phenomenon and the fault category, thereby realizing the quick judgment of the fault category.

As some possible implementation manners, for network acquisition or network hop loops, link abnormality is located according to link alarm messages sent by each device by monitoring the states of links between a sender and a plurality of receivers through comparison.

As some possible implementation manners, for the direct acquisition loop, all possible fault points are listed through pre-configuration, the network acquisition loop conditions of each secondary device are integrated, the probabilities of various fault points are given, and fault location is performed by an alarm sent by a relay protection device.

As possible implementation manners, comparing a double AD sampling value uploaded by the relay protection device through MMS with two sets of relay protection sampling values, if the relative error between the double AD sampling values and the two sets of relay protection sampling values is within a threshold range and the relay protection device has no alarm of inconsistent sampling, determining that the double AD sampling is consistent or the states of two relay protection alternating current secondary circuits are in normal states;

if the relative error exceeds the threshold value and the relay protection device does not send out the alarm of inconsistent sampling, judging that at least one set of relay protection alternating current loop is abnormal, and giving an abnormal secondary loop corresponding to the relay protection device.

As possible implementation manners, comparing SV of the network message recording and analyzing device with sampling values uploaded by an MMS (multimedia messaging service) of the relay protection device, and if the maximum error of the SV and the sampling values is within a threshold range and the network message recording and analyzing device and the relay protection device have no SV chain breakage alarm, determining that an SV secondary sampling loop is in a normal state;

when the sampling loop of the relay protection device is normal, but the sampling value error between the network distribution device and the protection device exceeds a threshold value, the AC sampling loop of the network message recording and analyzing device is judged to be abnormal, and an abnormal secondary loop corresponding to the network message recording and analyzing device is provided.

As some possible implementations, when multiple protection devices exist, the correctness and the time characteristic of the action behavior of the relay protection device are diagnosed by checking the consistency of the action behaviors of the sets of protection devices.

As some possible implementation manners, when a single protection device exists, the state of the alternating current loop is monitored by comparing the analog quantity of the network message recording and analyzing device with the analog quantity of the network message recording and analyzing device;

monitoring the state of the switching value loop by comparing the position signal with the position signal of the measurement and control device;

the change of the analog quantity is combined with the action logic of the single protection, and the correctness of the protection action is comprehensively analyzed.

As some possible implementation manners, the secondary equipment serial number is analyzed according to the SCD file to form a secondary equipment set;

forming a virtual wiring set by each secondary device according to virtual wirings formed by input elements;

according to the state file sent by the network message recording and analyzing device, the state of a virtual loop between each secondary device can be obtained, the possibility of the fault of the corresponding channel node is eliminated by means of a normal communication link, and the fault positioning range is narrowed;

determining the AND-OR relation among all links according to the correlation among the secondary devices to form a link on-off diagnosis table;

and calculating the most possible fault node of the fault through the link on-off diagnosis table.

As some possible implementation manners, video images of a visible light video monitor and an infrared thermal imager of the same device are acquired in real time, and the running state of the device is monitored and synchronously displayed by integrating images in two aspects.

As some possible implementations, after an event occurs, additional reliability is obtained by retransmitting the same data, specifically:

the original messages sent at fixed time intervals are cancelled, and only the messages with the time intervals of T1, T2 and T3 are sent;

t1 is the shortest transmission time after the event happens, T2 is 2 times of T1 time, and T3 is 2 times of T2 time;

when the periodic sending time is met, the secondary equipment continuously sends messages, wherein the Event Timestamp of each message needs to be marked with a new time mark, and the time mark is used as the sending time of the secondary equipment by the monitoring device;

the survival allowable time needs to be set to be longer than the preset time, so that the GOOSE connection is not interrupted under the condition that no T0 message exists.

As some possible implementation manners, the single time setting error time is obtained by subtracting the GOOSE message sending time from the local time when the monitoring device receives the GOOSE message, and then subtracting the accumulated network delay.

The second aspect of the disclosure provides a substation secondary equipment fault logic visualization system.

A substation secondary equipment fault logic visualization system comprising:

a data acquisition module configured to: acquiring real-time state data of each primary device and each secondary device to obtain logic loops of all secondary devices;

a fault identification display module configured to: comparing the acquired real-time state data with preset parameters to obtain fault states of all logic loops of the secondary equipment, and displaying each logic loop and the fault state in real time;

A third aspect of the present disclosure provides a medium having stored thereon a program which, when being executed by a processor, carries out the steps of the method for visualizing fault logic of a substation secondary equipment according to the first aspect of the present disclosure.

A fourth aspect of the present disclosure provides an electronic device, including a memory, a processor, and a program stored on the memory and executable on the processor, where the processor executes the program to implement the steps in the substation secondary device fault logic visualization method according to the first aspect of the present disclosure.

Compared with the prior art, the beneficial effect of this disclosure is:

1. according to the method, the system, the medium and the electronic equipment, the logic loop hidden in the link model is visually displayed, physical connection and logic connection among facilities are comprehensively and directly embodied, so that maintenance personnel can conveniently know interactive information among the equipment, and the equipment debugging risk is greatly reduced.

2. The method, the system, the medium and the electronic equipment are characterized in that an SCD visual simulation platform is established on the basis of SCD file basic data of an intelligent substation, safety measure experience is automatically analyzed, a safety measure rule base is established, online safety analysis and check are carried out by simulating and previewing on the simulation platform and combining information acquisition of secondary equipment and a secondary circuit, and a safety warning prompt is given; the safety measure instruction ticket is intelligently generated during simulation, and standardized management of the whole process from command receiving to restoration is achieved, so that the safety and effectiveness of each process are guaranteed.

3. According to the method, the system, the medium and the electronic equipment, the operation state of the electrical equipment is evaluated on line and the residual service life is predicted on line through the real-time state online monitoring and fault diagnosis of the secondary equipment, so that a theoretical basis and a practical criterion are provided for the state maintenance of the system, and the safety, the reliability and the economy of the operation of a power grid are greatly improved.

4. The method, the system, the medium and the electronic equipment realize one-to-one comparative analysis and visualization of protection actions, fault parameters, waveforms and operation fixed values, can visually display protection logics and action processes, and greatly improve timeliness and accuracy of operation and maintenance.

5. The method, the system, the medium and the electronic equipment disclosed by the disclosure can be used for establishing various abnormal message monitoring models by analyzing abnormal messages in a communication network in real time and analyzing abnormal data contained in the messages, so as to realize monitoring of the communication state of the secondary equipment.

Drawings

The accompanying drawings, which are included to provide a further understanding of the disclosure, illustrate embodiments of the disclosure and together with the description serve to explain the disclosure and are not to limit the disclosure.

Fig. 1 is a schematic flow diagram of a substation secondary device fault logic visualization method provided in embodiment 1 of the present disclosure.

Fig. 2 is a schematic diagram of a relay protection SV and GOOSE link diagnosis strategy provided in embodiment 1 of the present disclosure.

Fig. 3 is a schematic diagram of an ac loop state strategy provided in embodiment 1 of the present disclosure.

Fig. 4 is a schematic diagram of a single protection information diagnosis policy provided in embodiment 1 of the present disclosure.

Fig. 5 is a schematic diagram of a virtual circuit set provided in embodiment 1 of the present disclosure.

Fig. 6 is a schematic diagram of a diagnostic result provided in embodiment 1 of the present disclosure.

Fig. 7 is a schematic diagram of a basic workflow of a dual-view real-time online monitoring intelligent early warning system provided in embodiment 1 of the present disclosure.

Fig. 8 is a schematic view of a topology structure of a dual-view real-time online monitoring intelligent early warning system provided in embodiment 1 of the present disclosure.

Fig. 9 is a schematic diagram of a hardware network structure of a dual-view real-time online monitoring intelligent early warning system provided in embodiment 1 of the present disclosure.

Detailed Description

The present disclosure is further described with reference to the following drawings and examples.

It should be noted that the following detailed description is exemplary and is intended to provide further explanation of the disclosure. Unless defined otherwise, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this disclosure belongs.

It is noted that the terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of example embodiments according to the present disclosure. As used herein, the singular forms "a", "an" and "the" are intended to include the plural forms as well, and it should be understood that when the terms "comprises" and/or "comprising" are used in this specification, they specify the presence of stated features, steps, operations, devices, components, and/or combinations thereof, unless the context clearly indicates otherwise.

The embodiments and features of the embodiments in the present disclosure may be combined with each other without conflict.

Example 1:

as shown in fig. 1, an embodiment 1 of the present disclosure provides a substation secondary device fault logic visualization method, including the following steps:

The in-station scheme mainly comprises:

static information expressed by SCD and real-time messages of a station control layer and a process layer are combined dynamically and statically to realize online visualization, active uploading information such as relay protection equipment events, alarms and telecommand deflection is collected in real time, the information of the spacer layer protection equipment can be called through the station control layer according to needs, relevance analysis is carried out on key events of the intelligent substation such as tripping, faults and alarms, and real reasons of the events are found rapidly. The device is beneficial to timely discovering the abnormity generated during the operation of the device, the protective performance of the device is improved, a special tool is created for the daily operation and maintenance and the overhaul of the secondary device, the aims of visual operation and maintenance overhaul and intelligent operation and maintenance overhaul are achieved, and the operation and maintenance pressure, the overhaul working pressure and the working strength are reduced.

The method mainly comprises the following steps:

s1: fault logic visualization

The relay protection device is used as an important component of a power system, and fault equipment is quickly cut off when the system fails, so that the safe operation of the system is ensured, and the system is also damaged if the relay protection device does not act correctly. The fault analysis and the relay protection action evaluation of the power system are always problems faced by relay protection workers. The traditional fault analysis method generally comprises the steps of printing an action report and an action recorder of the protection device, and checking the record of the fault recorder for analysis, so that the traditional fault analysis method is complex, only the final action state of the protection device can be seen, and the internal working condition and potential problems of the protection device cannot be analyzed;

according to the embodiment, the background analysis software is used for realizing one-to-one comparison analysis and visualization of protection actions, fault parameters, waveforms and operation fixed values, the protection logic and the action process are visually displayed, and the timeliness and the accuracy of operation and maintenance are greatly improved.

S2: self-checking information on-line monitoring

The secondary equipment of the currently running intelligent substation contains rich self-checking information, such as CPU temperature and power supply voltage, and the self-checking information is the embodiment of the running state of the equipment. And acquiring an information model of the secondary equipment by analyzing the configuration file of the transformer substation, and then dynamically reading self-checking information representing the running state of the secondary equipment.

S3: on-line monitoring of time setting state

The precision requirement of the intelligent substation on the time of the secondary equipment is very high, and the accuracy and the uniformity of the time are the basis for realizing the functions of the intelligent equipment and are important measures for ensuring the safety of a power system.

Monitoring the time synchronization state of the secondary equipment from two aspects, on one hand, collecting the time synchronization monitoring information automatically generated by the equipment by using the self-checking function of the secondary equipment, introducing the self-checking data types of the clock equipment and the time service equipment, and simultaneously establishing an information model of the self-checking data: and calculating the clock deviation of the secondary equipment by using time mark information carried by the round-trip time-setting messages by combining an SNTP clock precision monitoring principle, and measuring the clock deviation by using an SODCET communication technology.

S4: on-line monitoring of communication messages

The intelligent substation is based on the transmission of communication messages with various functions, and the communication messages contain parameters representing the communication states of secondary equipment and a communication network.

The abnormal message in the communication network is analyzed in real time, abnormal data contained in the message is analyzed, various abnormal message abnormal monitoring models are established, and the monitoring of the communication state of the secondary equipment is realized.

And analyzing the causal relationship between various abnormal data and fault equipment on the basis of information acquired by online monitoring, and establishing a comprehensive fault diagnosis model based on self-checking information, time setting state information and abnormal message information.

S5: panoramic visualization

With the large-scale popularization of the intelligent transformer substation, the problems of early design, equipment and application of the intelligent transformer substation are gradually exposed. The secondary system is additionally provided with a merging unit, an intelligent terminal and a large number of switches, so that the structure of the secondary system is more complex; the cable connection is replaced by the optical cable, the whole secondary system is based on the SCD file, and a secondary loop (a virtual terminal and a virtual loop) becomes a black box;

the virtual circuit between the intelligent devices is visually displayed in a graphical mode. Supporting virtual terminal display: visually displaying input and output terminals of the intelligent device in a graphical mode, and displaying external information related to the terminals; and displaying the real-time online state of the secondary equipment on the SCD graph. The method comprises the steps of concentrating on equipment state visualization, SCD management visualization, virtual terminal visualization, fault logic visualization, secondary circuit visualization and the like.

S6: one-key type overhaul

The writing of the safety measure ticket still stays in a handwriting state, and information such as safety measure equipment, work content and safety measures is manually filled. Firstly, due to work negligence, the sequence of safety measures is not considered, and intelligent protection locking can be caused; when the soft pressing plate is withdrawn, the SV soft pressing plate is withdrawn by mistake at an operation interval, so that differential protection action is caused; frequent fiber pulling and redundancy, and easily causes the damage of an optical port or a fiber head; secondly, because writing is not perfect, the workload is large, and errors such as loop numbers, virtual terminal numbers or working contents can often occur. Thirdly, the execution efficiency of the handwritten safety measure ticket is low, the circulation speed is low, and the storage, the statistics and the management of the ticket are not facilitated.

According to the embodiment, the automatic generation of the operation instruction and the safety measure instruction are realized in the panoramic visual image, the safety measure instruction ticket is generated by one key, the error analysis and check are prevented, and the safety measure work is effectively carried out.

The intelligent generation of the safety measure ticket not only can improve the working efficiency, avoid the risk caused by handwriting of the safety measure ticket, but also can shorten the circulation time of the safety measure ticket, carry out standardization and standardization management and further improve the operation management level of a power grid.

The master station scheme comprises the following contents:

the dispatching end has the whole network data of corresponding levels, and comprehensive statistical analysis, intelligent diagnosis and state evaluation can be realized. From the aspect of operation and maintenance, the displayed information needs to be oriented to a use object, and the information is provided according to different application needs of various professionals such as scheduling personnel, operating personnel, overhaul personnel, protection, automation, communication and the like.

According to different function positioning of various kinds of work such as operation, maintenance and overhaul, which information needs to be sent on the station side and which information needs to be displayed is determined.

The intelligent transformer substation protection system is mainly distributed and deployed, operation conditions of intelligent transformer substation protection systems required by transformer substation operation inspection personnel and regulation and control mechanism relay protection professionals are inconsistent due to different duties and different work divisions, the intelligent transformer substation protection system is adaptive to protocols and equipment of different transformer substations, and is respectively deployed for scheduling and operation inspection, an all-dimensional online visualization tool is provided, visualization, online and intelligentization of the protection system are really realized, and a professional regulation and control integrated operation mode and an operation and maintenance integrated operation mode are constructed.

And the system at the transformer station side acquires data from the data acquisition unit and the station control layer network, analyzes and processes the data, realizes the functions of online monitoring and diagnosis, and uploads diagnosis information to the scheduling master station through DL/T860 or DL/T476-2012.

The study method mainly adopted in this example is as follows:

(1) network full-scene analysis platform

The intelligent substation network full scene information is substation configuration information and network messages which reflect steady state, transient state and dynamic data of the operation of a substation power system and the operation state of substation equipment. The method mainly comprises static data and dynamic data, wherein the static data comprises SCL grammar and substation configuration files; the dynamic data comprises MMS, GOOSE and SV main transformer substation network messages.

(2) Panoramic online monitoring

The panoramic monitoring is layered and graded according to the importance and the characteristics of the secondary equipment, the health state data of the secondary equipment is provided to realize intelligent warning of the state of the secondary equipment, and meanwhile, the state data of the secondary equipment provides support for maintenance.

(3) One-key type overhaul

The operation simulation of a secondary visual interface is researched, the primitive state and the loop information are intelligently identified, the operation task is quickly decomposed, the operation and maintenance instruction and the safety measure instruction are automatically generated, the operation intensity of operation and maintenance personnel and the working intensity of overhaul personnel are reduced, and the operation content is standardized.

(4) State awareness and scene real-time detection

And sensing the state of the safety measure item influencing the associated item in real time after the safety measure, detecting a result scene preset by a safety measure configuration module in real time, if a corresponding scene is detected, considering that the safety measure is normally executed, and otherwise, giving an alarm for prompting.

(5) Numerical analysis method

In the embodiment, a threshold diagnosis method is adopted as a diagnosis mode for physical examination and evaluation of the health state of the equipment. Taking normal and attention values of various parameters specified in the pre-test protocol as reference criteria for setting forth value diagnosis, a fault is considered to exist when a test measurement value exceeds a threshold.

The closed value diagnosis is simple and convenient, but due to the imperfection of the measuring method and the measuring error, the possibility of wrong judgment exists. The main disadvantage of this method is that the processing of the boundary is too precise, and sometimes the inter-phase comparison, year-round comparison, etc. of the pretest data are very helpful for health status assessment.

Therefore, in single item evaluation, fuzzy mathematics is firstly utilized to carry out fuzzification processing on values in a regulation range, then the idea of fuzzy comprehensive evaluation is utilized to synthesize the influence of various factors, and the health state of the equipment is evaluated in comprehensive evaluation, so that the evaluation is used as a relatively applicable data analysis method.

(6) Probabilistic trend analysis model

The method and the device are used for predicting the life of the electric power equipment. And establishing a probability model (degradation probability track) of parameter change and fault damage according to a historical database through a key parameter set corresponding to a field phenomenon, comparing the probability model with a current multi-parameter probability state space, and judging the current health state and analyzing the trend.

Quantitative damage judgment is carried out through interference of the current parameter space and the intention damage state probability space, and trend analysis and fault prediction are carried out based on the past historical information.

(7) In the embodiment, the chart components with powerful functions are integrated in the aspect of chart display functions, the graph display characteristics of the system are improved by utilizing the powerful chart design functions, and the analysis result desired by the user is obtained through convenient, intuitive and flexible operation.

(8) Incremental exchange of data updates

By adopting an event subscription and notification mechanism, the system can better solve the updating requirements of directly different graphic models of the system and the communication requirements of each module of the decoupling system, and particularly can better solve the incremental exchange problem of partial updating of data by aiming at the design of a partial updating mechanism of the graphic models.

(9) Correlation analysis method

The embodiment is a fuzzy comprehensive evaluation method based on an improved data mining association rule, and primary data and secondary data of an electric power model are mined by the method. The association rule mining algorithm is used for analyzing each monitoring data during the fault, and the relation between the fault phenomenon and the fault category can be found, so that scientific basis is provided for equipment fault detection.

(10) Intelligent learning of fault data

For complex faults in the debugging and testing process, the research continuously and automatically collects and arranges the information of the known faults each time in the running process, and continuously learns and strengthens through a neural network and an expert system, so that the capability of the system for quickly identifying the faults is continuously improved.

(11) Intelligent analysis model

The electric wire netting is complicated changeable and rapid development, and the user needs often adjust electric wire netting operation mode, simultaneously all kinds of novel primary equipment, secondary device and novel acquisition signal also constantly emerge along with the development of technique, for satisfying the development needs of electric wire netting and new equipment, system requirement can accumulate and self-defining intelligent analysis model, can enrich gradually system analysis model according to the development of electric wire netting and the accumulation of experience.

In detail, the following contents are included:

s1: fault logic visualization

S1.1: on-line monitoring and fault diagnosis technology

S1.1.1: SV/GOOSE link diagnosis principle

For the GOOSE and SV signals in the process layer, when the receiving end device does not receive valid GOOSE and SV information within a certain time, a corresponding alarm is generated.

For example: when the SV link of the relay protection device is abnormal, the relay protection device can not obtain normal received data, corresponding link disconnection warning messages can be sent through a station control layer MMS, and the network message recording and analyzing device can obtain the warning messages.

Aiming at the network acquisition and network hop loop, because the devices have a uniform system observation source, the state of the links between the sender and the receivers can be monitored by comparing, and the corresponding link abnormity can be positioned according to the link alarm message sent by each device.

For a direct mining loop, different from an SV port of a network mining device, link comparison monitoring cannot be carried out, so that a specific fault point is difficult to accurately position, but all possible fault points can be listed through pre-configuration, network mining loop conditions of other secondary devices are synthesized, probabilities of various fault points are given, and a direct jump loop can only carry out fault positioning through an alarm sent by a relay protection device because the relevant comparison information cannot be obtained. The diagnostic strategy is shown in figure 2.

S1.1.2: AC loop state diagnosis principle

For the online monitoring of the alternating current of the secondary circuit, the comprehensive judgment of the alternating current collected by the network message recording and analyzing device and the relay protection device can be utilized.

The intelligent station generally adopts double AD sampling and is provided with double protection, and by comparing double AD sampling values uploaded by the relay protection device through MMS with two sets of protected sampling values, if the relative error between the double AD sampling values and the two sets of protected sampling values is within a threshold range and the relay protection device has no alarm of sampling inconsistency, the double AD sampling consistency or the states of two protected alternating current secondary circuits are considered to be in a normal state;

and if the relative error exceeds the threshold value and the relay protection device does not send out the alarm of inconsistent sampling, judging at least one set.

And the alternating current circuit of the relay protection is abnormal, and an abnormal secondary circuit corresponding to the relay protection device is provided. Comparing SV of the network message record analysis device with a sampling value uploaded by a relay protection device MMS, and if the maximum error of the SV and the sampling value is within a threshold range and the network message record analysis device and the relay protection device have no SV broken link alarm, considering that an SV secondary sampling loop is in a normal state; when the sampling loop of the relay protection device is normal, but the sampling value error between the network distribution device and the protection device exceeds a threshold value, the AC sampling loop of the network message recording and analyzing device is judged to be abnormal, and an abnormal secondary loop corresponding to the network message recording and analyzing device is provided. The ac loop state strategy is shown in fig. 3.

S1.1.3: diagnostic principle of protective action

(1) Dual configuration protection device

And the correctness and the time characteristic of the action behavior of the relay protection device are diagnosed by checking the action behavior consistency of the AB sleeve protection device. The checking content is the action element and the exit time, the exit time difference is calculated according to the time of the switching value in the GOOSE, the action elements in the protection are compared, and the correctness of the protection action is comprehensively analyzed.

(2) Protection device for simplex configuration

And for the protection device with single configuration, the state of the alternating current loop is monitored by comparing with the analog quantity of the network message recording and analyzing device, and the state of the switching value loop is monitored by comparing with the position signal of the measurement and control device. Meanwhile, the change of the analog quantity is combined with the action logic of the single protection, and the correctness of the protection action is comprehensively analyzed. As shown in fig. 4.

S1.1.4. network information abnormal state and early warning strategy

In the intelligent substation, an SCD file describes SV and GOOSE data sets issued by all secondary devices, sampling or signal input required by each secondary device for realizing each function is described by defining input elements of logical nodes LN0 under each functional logical device of the secondary devices, and external signal input is realized by mapping relation between external access data object references and internal data object attributes.

And traversing ConnectedAP elements of the IED process layer to obtain an IED name, an access point name, a physical port number and an optical fiber identifier connected with the port, and traversing input elements of the IED process layer to obtain a virtual terminal connecting line to form a virtual loop. The serial numbers of the IED devices analyzed according to the SCD file form a secondary device set, which can be marked as X:

X＝{x₁，x₂，...，x_n}

in the formula, x₁，x₂，x_nRepresenting IED devices.

The virtual connections formed by the IEDs according to the Inputs elements form a virtual connection set, which can be denoted as Y.

In the formula: g₁(x₁，x₂) Represents t₁The virtual terminal link communication state of the IED corresponding to the moment is not sent up when a chain breakage alarm is not sent at present, the communication state is normal, and the communication state is set to be 0; when a chain breakage alarm exists, the communication state is abnormal and is set to 1; null indicates meaningless and does not participate in link diagnostics.

Therefore, according to the state file sent by the network message recording and analyzing device, the state of the virtual circuit between the IEDs can be obtained, the possibility of the fault of the corresponding channel node is eliminated by means of the normal communication link, and the fault positioning range is narrowed. Forming a virtual loop set according to the above, which is recorded as:

g(t₁)＝{g₁(x₁，x₂)，g₁(x₁，x₃)，...，(x_n，x_n)}

and determining the AND-OR relation among all links according to the correlation among the secondary devices to form a link on-off diagnosis table, which is recorded as K:

K＝{1，0，1，...，0}^T

therefore, the most probable fault node can be calculated through the K value. In view of at a fixed time t

The sending state may cause information of a part of links to be lost, meanwhile, the problem of collection of the device itself may cause the information to be sent in error or delayed, a fault-tolerant mechanism is introduced in diagnosis, and the information sent in the T0 time period is taken to be comprehensively valued.

Wherein:

T₀＝Δt·N

n is a settable setting value, and the possibility EH of a fault node is shown as the following formula:

EH＝g(t₁)×K

taking a virtual terminal sub-graph composed of a typical merging unit, a relay protection device, a network message recording and analyzing device, a measurement and control device and an intelligent terminal as an example, it is assumed that a station control layer receives a piece of alarm information from the relay protection, that is, "a link of a certain line merging SV _ A network is wrong", and no alarm is generated by other devices. With the above structure, 5 virtual terminal graphs can be generated from the secondary device and a fault node combination is shown in fig. 5.

X₁-X₅And the virtual terminal sub-graph sets respectively correspond to the merging unit, the measurement and control device, the relay protection device, the network message recording and analyzing device and the intelligent terminal. A-D respectively correspond to the fault point sets of the merging unit outlet A, the relay protection receiving end B, the measurement and control device receiving end C, the network tap receiving end D and the intelligent terminal outlet E.

As shown in fig. 6, the diagnosis result shows that when the EH is {0, 3, 1, 1, 0}, the probability of the fault point B is the highest, and the fault point B is the protection receiving end fault after the multi-loop comprehensive evaluation.

S1.2: observability study of secondary equipment running state and logic

In an intelligent substation, the key to realizing online monitoring and fault diagnosis of a secondary circuit lies in information acquisition and comprehensive analysis.

The whole system consists of a master station system and a station end device, wherein the master station system is arranged at a provincial dispatching end, equipment is not added on the basis of the existing intelligent substation architecture, the implementation is convenient, and the station end utilizes a network message recording and analyzing device as a data acquisition source end. And for the newly-built intelligent station, the protection online monitoring and diagnosis device is directly used as a data acquisition source end, and data is transmitted to the area II from the D5000 platform through the network shutdown machine of the area I. The device at the station end is responsible for information acquisition, configuration, pre-arrangement and filtration. When the communication network is abnormal, the device quickly diagnoses and collects relevant abnormal information, and sends the information to the master station system of the dispatching end in a file form, and the master station system is responsible for collecting various abnormal information sent by the device of the station end, carrying out comprehensive diagnosis and displaying on an interface.

S1.3: tripping and closing loop fault location

The tripping and closing fault positioning function is as follows: realize the diagnosis function of tripping/closing loop

S1.4: secondary circuit fault location

And performing secondary circuit fault location according to optical fiber interface monitoring information of equipment such as a device and a switch and link abnormity warning information, and supporting visual display of a fault location result.

S2: self-checking information on-line monitoring

S2.1: double-vision monitoring inspection technology

As shown in fig. 7, 8 and 9, a specific dual view monitoring method is provided.

The double-vision monitoring inspection system generally utilizes a non-refrigeration long-wave focal plane infrared thermal imager, once an object enters the inside of an instrument view field, the temperature distribution state of the object can be monitored, and imaging is carried out through a display screen. The infrared thermal imager has very high sensitivity, and can accurately distinguish the 1% temperature difference on the surface of object equipment in all directions so as to accurately diagnose the thermal state change of an object.

The double-vision monitoring inspection system does not need to contact objects through the thermal infrared imager, so that even a large-scale transformer substation, a large-scale generator set, a series compensation platform and other electrical equipment can be monitored. The infrared thermal imager can not receive any influence under electromagnetic wave interference, even under the strong electromagnetic field state, positions such as power transmission substation and high-voltage line all can use infrared thermal imager to monitor.

The double-vision monitoring inspection system can synchronously display on the observation screen through the heat distribution state of the detected equipment and detect the temperature data information of a fault point, and a background computer of the system can quickly analyze and process data images. The temperature data image can be repeatedly used in the computer system for multiple times, so that more favorable resources are provided for early warning of power equipment faults as a basis.

The double-vision monitoring inspection system can install the visible light video monitor and the infrared thermal imager on the same platform, monitoring information can be transmitted to the monitoring center based on a network, then images are converted, the running state of the equipment is comprehensively monitored and synchronously displayed, the specific situation of diversified alarm monitoring can be selected, unattended operation is realized, and labor cost is greatly saved.

Regarding the transformer substation and the line with larger load, the regular infrared temperature measurement statistical data is compared and analyzed, the abnormity of equipment and a wire can be found, and for lightning striking of the tower wire, when various conditions such as power failure and the like can not be arranged on the line, the related components are tested through the thermal imager, the motion state of the related components is further judged according to the test result, and once the problem is found, measures are taken in time to eliminate potential safety hazards.

Based on the double-vision monitoring inspection system, the alarm condition and the abnormal image are recorded in detail by means of a computer network system, historical data information resources can be provided for inquiry, the customized cruising route, the timed cruising and the times and the like are supported, the organic integration of local monitoring and remote monitoring can be realized, and the seamless connection with other related systems is realized.

S2.3: secondary equipment interchange

S2.3.1: interchangeable spacer layer protection measuring and controlling device

The relay protection device of the bay level equipment is realized by adopting different protection principles and logics aiming at different protection objects, the difference of hardware module composition is larger, and the conditions of multiple plug-in models and flexible and diverse hardware selection also exist in the same manufacturer. Each broadcast of the protection device is composed of three layers, i.e., hardware, firmware (operating system + protection program), configuration file (virtual secondary loop), and the like, and particularly, the configuration files such as CID, CCD, and the like have great differences corresponding to each device instance.

(1) Unified device interface information

The relay protection devices are preferably classified according to protection objects, and hardware interfaces of each type of protection devices are unified and standard.

For example, the transformer protection device regulates various voltage levels of main wiring forms, merging unit access port names and GOOSE output ports on all sides, and appendix G of document [13] gives reference specifications to interface information of the intelligent substation protection device, such as 750kV transformer protection MMS interface number of 2, SV interface number of 9, GOOSE interface number of 9 ports in total for 6 point-to-point 3 networks, and the like.

(2) Unified configuration file and configuration tool

In the intelligent substation, the matching relationship between the ICD, SCD, CID, CCD and other files and the configuration tool and device should comply with the requirements of the technical specification of the intelligent substation relay protection configuration tool. The interchange of the relay protection devices is realized, the configuration specifications, the modeling principle, the naming specifications and the description rules of equipment and logic nodes in ICDs, SCDs and CCDs of the relay protection devices of various manufacturers are standardized, the calculation rules of CRC check codes of files are standardized, the privatized configuration files are cancelled, the configuration files of a station control layer and a process layer adopt a uniform format, and the downloading mode of the configuration files is unified. In addition, the unique expression of the information point number is standardized, and the safety and the reliability are realized when the user-defined functions of different manufacturers are processed, so that the original functions and the performance are not influenced by the exchanged equipment and other equipment. In the technical specification of the relay protection engineering file of the intelligent substation, which is discussed and formulated at present, the above contents are unified and standardized, so as to provide support for improving the interchangeability of relay protection and sharing the standard specification.

(3) Fixed value parameter normalization

The method realizes the interchange of the same kind of relay protection devices of different manufacturers, and the fixed value, the control word, the soft pressing plate and the input quantity name of the protection device need to be standardized and unified. For devices that do not fully display the standard names, the manufacturer should provide a reference table corresponding to the standard names in the specification for quick and automatic matching of the interchange process.

In addition, the protection device realizes interchangeability, and needs to unify software version identification, unify logic functions of remote operation of the hard pressure plate, unify logic functions of protection and maintenance of the hard pressure plate, and standardize the name of the hard pressure plate to be consistent with that of the soft pressure plate, the arrangement sequence of a fixed value list and other specifications in many details. Due to the factors of clear functions, simple internal logic, few fixed value parameters, high hardware consistency of different manufacturers and the like, the measurement and control device of the bay level equipment of the intelligent substation is relatively easy to exchange. The ICD model and the system-hardware interface are unified among different manufacturers, and the interchange of the measurement and control devices can be basically realized.

S2.3.2: station-controlled layer equipment interchange

For the station control layer equipment of the intelligent substation, the realization of interoperation requires unified operating systems and universal hardware. At present, SCD files of different manufacturers achieve high interoperability, and as long as a database and system software can be normally installed and operated on different hardware, the interchange of station control layer equipment can be basically realized. However, the debugging workload is inevitably large after the station control layer equipment is exchanged, and all the station control layer information points need to be debugged to point, so that the back side can consider the exchange to be completed after the information is correct.

S2.3.3: interchange of other secondary devices

In other secondary equipment in the intelligent substation, fault recording devices, network analyzers and switch equipment have clear functions, unified hardware interfaces and high equipment consistency of manufacturers, and are easy to exchange. Compared with the traditional metering system, the digital electric energy meter avoids the influence of a loop and external interference on secondary current and voltage, and has great technical advantage. The digital electric energy meter has clear functions and can be easily exchanged by different manufacturers, but at present, because the downloading modes of the 61850 configuration files and the electric meter parameters of the electric energy meter manufacturers are not unified, inconvenience in fixed distance is brought to the electric energy meter exchanging work, and the work load is increased. At present, the on-line monitoring equipment is not enough in standardization, and a complete standard system is not provided, so that the realization of interchangeability has a long way to go.

S3: time tick status on-line monitoring

S3.1: GOOSE frame parsing and analysis

The secondary equipment sends the time setting state to the monitoring device by using a subscription/release mechanism of the GOOSE, and the sent GOOSE message consists of two parts of a General Substation Event (GSE) management frame structure and an Application Protocol Data Unit (APDU) frame structure and is completely packaged according to an annex C format of the IEC61850-8-1 standard. According to the special requirement of the scheme, the partial member variables in the frame structure are defined as follows:

1) the source address selects the MAC address of the secondary equipment sending network port, and the monitoring device can identify the device sending the information according to the uniqueness of the MAC address in the transformer substation.

2) The GOOSE control block name is defined as gocbTmMon according to the national grid company standard naming convention.

3) The GOOSE dataset name is defined as dsTmMon according to the national grid company standard naming convention.

4) The Event Timestamp does not represent the time of data displacement but represents the time of sending the time setting message, and the time of software operation of the device is removed, so that the time setting error is calculated more accurately.

5) The data contains only 1 boolean value indicating the success of the device pair.

S3.2: retransmission mechanism

The IEC61850 standard makes it possible to transmit input and output data values quickly and reliably in a system wide, using a special retransmission scheme to obtain a suitable level of reliability, i.e. after an event, additional reliability is obtained by retransmitting the same data.

According to the characteristics of event retransmission and the principle of low utilization rate of the whole substation network, a retransmission mechanism is specified as follows:

1) the original message sent at a fixed time interval T0 (transmission time under stable conditions) is cancelled, and only the messages with the time intervals of T1, T2 and T3 are sent.

2) T1 is the shortest transmission time after the event, T2 is 2 times of T1 time, and T3 is 2 times of T2 time.

3) And when the periodic sending time is met, the secondary equipment continuously sends the messages, wherein the eventtistat of each message needs to mark a new time mark, and the time mark is used as the sending time of the secondary equipment by the monitoring device.

4) The survival allowable time needs to be set to be more than 5min, and it is ensured that the GOOSE connection is not interrupted under the condition that no T0 message exists.

S3.3: time synchronization error algorithm

Through the session layer, the transmission layer and the network layer, data are directly mapped to the data link layer, and communication delay between the layers is reduced. In addition, the transmission time is the time for sending the GOOSE message, and the message organizing time and the device software operation time are removed, so that the time setting error is more accurate. The single time setting error time T D is obtained by subtracting GOOSE message sending time T S from local time T R when the monitoring device receives the GOOSE message, and then subtracting cumulative network delay TALL, that is:

t R and T S are obtained directly from device and interactive messages, and the cumulative network delay consists of 4 parts: storing forwarding delay, switching delay, frame queuing delay and optical fiber transmission delay;

1) and (3) storage forwarding delay: the frame length is divided by the transmission rate. Taking 100Mbit/s as an example, the frame length of the scheme does not exceed 150B, and the longest delay of store-and-forward is 12 us.

2) Switching delay: the switching delay is a fixed value and depends on the speed of the switch chip for processing functions such as an MAC address table, a VLAN, priority and the like. The exchange delay of a general industrial grade switch does not exceed 10 upss.

3) Frame queuing delay: when frame collision occurs, the frames are sequentially transmitted in a queuing mode, which brings uncertainty to time delay. Consider the most unfavorable case where all ports of the switch (K) send messages simultaneously. Ignoring the time interval between frames, the average queuing delay is (K-1) K SF/2.

4) Optical fiber transmission delay: calculated as the cable length divided by the cable speed of light (approximately 2/3 times the speed of light). Taking 1000 m as an example, the optical cable transmission delay is about 5 us. According to the current situation of engineering, the network in the station adopts a star structure and two-stage cascade, a 100Mbit/s and 16-port switch is adopted, and the length of the optical fiber is not more than 1000 m.

The accumulated network delay under the average network load of the scheme is as follows:

T_ALL＝2×(12+10+I5×12/2)+5

＝229vs

and further calculating single time setting error, and adding error values of 5 continuous frames to obtain an average time setting error of the device within 10 min.

The online time setting state monitoring can reliably provide accurate time information, online time setting state is monitored in real time, and clock synchronization of devices in the station is guaranteed.

S4: on-line monitoring of communication messages

S4.1: online monitoring information analysis

The secondary equipment operation state information comprises SV/GOOSE/MMS link abnormal signals of the device and self-checking information of the device. According to the requirements of online monitoring and fault diagnosis of the secondary circuit and aiming at the characteristics of different types of intelligent secondary equipment in the intelligent substation, the online monitoring information is divided into operation state information, alarm signal information, protection action information and the like of the device.

S4.1.1: operational status information of a device

The running state information of the device comprises software and hardware self-checking information, a sampling value and switching value information of the device. The software and hardware self-checking information comprises the running temperature, the light intensity of the channel and the power supply voltage information of the device. The sampling value and the switching value information comprise each branch current, differential current and important switching value state. The information is monitored and counted for a long time, and basic data and a maintenance basis are provided for condition maintenance.

S4.1.2: alarm information

The alarm information comprises a sampling value, a switching value abnormity alarm and a device abnormity alarm. The sampling value abnormal alarm comprises CT/PT disconnection, SV quality abnormity, SV link interruption and SV overhaul state inconsistency. The alarm for the abnormal input quantity comprises abnormal input quantity, GOOSE link interruption and inconsistent GOOSE maintenance. The device abnormal alarm comprises power loss alarm and locking. When the secondary circuit has important alarms, fault diagnosis and state evaluation are rapidly carried out, and a strategy of 'rapidly positioning after abnormity and state evaluation before abnormity' is adopted. The intelligent station maintenance guidance system provides effective guidance for operation and inspection personnel and improves maintenance convenience of the intelligent station.

S4.1.3: protective action

The protection operation information includes a protection operation signal (protection start, protection operation element) and an operation exit signal (exit phase, entire group operation time).

S4.1.4: SV/GOOSE running state information

The running state information of SV/GOOSE refers to message state and abnormal format information. The SV message state comprises amplitude precision, phase precision, double AD consistency, message equal interval, maintenance state, synchronous state, data validity and synchronous signal loss. The abnormal message format refers to the message frame format errors of SV/GOOSE message, such as incomplete, overlong, messy codes and the like caused by equipment failure.

S4.2: information acquisition method

Because the on-line monitoring information is collected by the network message recording and analyzing device, the data volume of the network messages between the process layer and the station control layer is huge, a large amount of redundant and non-important information exists, and great pressure is caused to a scheduling data network. In order to realize rapid and effective online monitoring and fault diagnosis, the station-side device needs to perform association, filtering and screening of data after acquiring the data. According to the system and research requirements, online monitoring information is divided into a steady state file, a transient state file and a state file, wherein the transient state file refers to a file generated by arranging all link information corresponding to the APPID at the moment when important alarms (such as circuit disconnection and the like) occur in a link.

The steady state file is a file for recording long-time monitoring information (such as temperature, light intensity, voltage and current and the like), and the state file is a file for monitoring the real-time on-off state of a link. In the practical application process, the network message recording and analyzing device regularly sends the state files and the steady-state files according to a certain time interval, and actively sends the transient-state files when important alarm data exists in the station control layer, the variation exceeds 5 percent or the analysis state changes. And the master station end inquires the corresponding conditions of the uploaded data and each secondary device in real time.

The information sent by the storage station end of the secondary loop on-line monitoring and fault diagnosis system is subjected to real-time diagnosis and analysis, meanwhile, the long-term change rule of the state information is counted and analyzed, the state characteristics of the device in abnormal conditions are combined, the health condition is evaluated, and a diagnosis decision is made.

By improving the functions of the network distribution device in the intelligent power station, the message monitoring and alarm information uploading based on the communication network monitoring device is realized, so that the accurate fault diagnosis can be carried out through other related alarm information under the condition that the communication network and the network distribution alarm information are missing, meanwhile, the missing alarm information is deduced, and the accuracy of the diagnosis result is assisted to be checked.

The function of the network split device is improved, the alarm is combed and screened and sent to the dispatching end to be comprehensively analyzed, and the on-line monitoring and fault diagnosis analysis of the relay protection equipment in the whole network can be effectively realized.

S5: distributed deployment

The industrial process controller designed by the embodiment adopts a main-standby redundancy scheme, and the I/0 unit adopts an A/B network redundancy scheme. The main controller communicates with the I/0 station through an I/O A/B redundant network, but only the main controller sends a control command to the I/0 station through an A/B network, and the controller sends heartbeat data to the I/0 station through the A/B network to judge the connection and disconnection of a link. When the controller is upgraded to the main controller, the original main controller does not send the control message any more, and the newly upgraded main controller sends the control message.

The A/B network of the main controller simultaneously sends heartbeat messages to the I/0 station, and the I/0 station needs to judge whether the heartbeat messages are the A network heartbeat or the B network heartbeat after receiving the heartbeat messages and then respectively carries out heartbeat response. The A/B network of the main controller simultaneously sends G0OSE control messages to the I/0 station, and the I/0 station needs to judge whether to execute the messages after receiving the control messages.

S5.1: design of Goose message sending mechanism

The GOOSE communication protocol designed in this embodiment uses a single board card as a data set for data transmission, that is, when the controller issues a control instruction and the board card sends collected data, the data of the whole board card is used as a communication unit. GOOSE communication employs a subscription/publication mechanism, different from a request/response mechanism, and the starting point of such design is based on transmission rate and network resource considerations.

In order to prevent loss of GOOSE messages caused by excessive network load, a GOOSE message retransmission mechanism is adopted to ensure reliability of data transmission. When GOOSE message is transmitted, the GOOSE message is continuously transmitted for 5 times at intervals of 0ms, 1ms, 2ms, 4ms and 8 ms. If the variable is not changed in the next time, periodically sending data at intervals of 5 s; if there is a change, the data is transmitted again at intervals of 0ms, 1ms, 2ms, 4ms and 8 ms. In the GOOSE message, the StateNumber sequence number represents the update of the transmission data, and the sequence number represents the retransmission times of the same message.

S5.2: GOOSE message acceptance mechanism design

Since the industrial process controller and the I/O unit designed in this embodiment communicate with each other through the a/B dual network, when the controller or the I/O unit receives data, it is necessary to determine whether the data is received by the a network or the B network, and whether the data is repeatedly received needs to be determined. Based on the above requirement, the embodiment modifies the Reserved field (Reserved1) of GOOSE protocol, which represents the sequence number of the sent message. When the controller or the I/O unit receives the GOOSE message, the field data is compared with the locally stored data, if the received data is not equal to the local data, the data is updated, and if not, the receiving is repeated. According to the sending mechanism of the GOOSE message, the GOOSE adopts a retransmission mechanism to prevent the message from being lost. Therefore, the received data is double checked again by using StateNumber and sequence number.

S5.3: platform design

S5.3.1: platform architecture design

The platform design is divided into 5 levels of data sources, data collection, data preprocessing and storage, data analysis and data display according to the data processing flow. The data source is the input original data source of the whole system, which is the bottommost layer of the network security analysis system, and includes mirror flow, NetFlow, Syslog logs (security devices such as firewall, IPS, IDS, etc.) of the core switch, alarm data of other security monitoring systems, and the like, and in addition, the data source also includes configuration information (such as asset library) and external intelligence (such as vulnerability library, virus library, reputation library, etc.) of all assets in the information network. The input data enter a data collection layer according to different types, a distributed data collection component flash is adopted to collect unstructured data, and the collected data are temporarily cached in a Kafka component for subsequent data processing. And collecting the structured data through the Webservice and storing the structured data in MySQL. The data preprocessing and storage layer adopts a flow calculation component Storm to preprocess collected data, including data standardization, data deduplication, data reinforcement and the like. The data storage comprises two parts of structured storage and unstructured storage. The data analysis layer mainly comprises a big data calculation part and a big data analysis part.

The analysis part comprises visualization assisted analysis realized by a graphical data mining tool, data search analysis realized by ElasticSearch and Lucense, and fusion summary analysis of structured and unstructured data stored everywhere in a scattered manner by a data fusion component Candy. The big data calculation part comprises mining of offline historical data by the Nana component and real-time calculation of data streams by the Storm component. And the data display layer mainly adopts a configurable graphic analysis tool to provide rich visual display and display functions, including the current network security situation and some early warning information display and the like.

S5.3.1: platform data flow design

And the external system and the original flow are respectively collected by sys-log. web service, sftp and netflow, the collected data are transmitted into a data processing queue kafka through the flash or the ftpd, and the collected files are directly stored into the HBase. The data queue stores the original data queue for local buffer storage for subsequent processing.

When data enters stream calculation, firstly, analyzing and converting; then, data is reinforced according to requirements, such as supplementary asset numbers, geographic information and the like; after the data is enhanced, creating an index and storing the data, wherein the data volume is increased to a certain extent and the data is stored in HBase for a long time in a real-time index ElasticSearch; and simultaneously, triggering the alarm according with the rule based on the alarm triggering of the rule.

The enhanced data are slightly summarized according to the rules defined in the safety model, the data generated by the slight summarization enter HBase for storage, and the data volume is reduced to a certain extent because the data are processed; alarm data can be generated after the alarm information is triggered, and the alarm data can be stored in the data long-term storage HBase and alarm processing is carried out on the display layer. And the other part of enhanced data can enter a machine learning module for automatic analysis, and the result of more intelligent security association analysis machine learning is stored in HBase through the module, so that the data volume can be reduced due to the fact that the data are processed.

Machine learning is the target that manual analysis is difficult to accomplish through machine learning in the more advanced technique of present international. Common machine learning algorithms are clustering, gradient descent, K-means and the like, and the use of the algorithms can greatly help analysts to find detailed points in data or perform data mining more quickly.

And directly storing the data generated by the intelligence system into the MySQL structured data. When severe summarization is carried out, fusion processing is carried out on HBase, Nana and MySQL through Candy, and the result after the severe summarization is stored in HBase, and a configurable graphical analysis tool provides information display such as index query, summarization display, alarm handling and threat early warning.

S6: panoramic visualization

S6.1: platform technical route

Firstly, static information and message events fed back by an SCD configuration model can be fused, and the state of an interactive interface between the substation IED and external information is detected in real time, so that the problems existing in a secondary system of the substation are solved. Secondly, the service flows such as the protection and remote control processes are detected in an all-round mode. Thirdly, carrying out relevance exploration on key events of the transformer substation, obtaining main reasons causing secondary equipment faults, and debugging the fault events by using a scientific and reasonable operation technology. The state information of the equipment is visually and vividly described, so that maintenance personnel can effectively analyze the running state of the equipment.

The big data storage, analysis and mining, decision expert base construction and the like in the system are novel technical breakthroughs, the application achievement of the big data in the Internet industry is utilized, the function development is carried out by combining the service requirements in the field of power grids, and a novel technical architecture and a solution are provided for the analysis and application of the big data regulation and control of the smart power grids, wherein the analysis and mining algorithm based on the big data processing technology is a general technology and can be applied or reused by other service systems; the intelligent decision expert library is a service-oriented application, supports the calling of other products, and is a basic component which can be shared by other products.

S6.2: information data platform design

The intelligent substation secondary system state information data platform mainly comprises secondary equipment state online detection and offline data information. The intelligent substation secondary equipment state on-line detection can detect relevant contents such as a fusion unit, a communication system, relay protection and the like, and transmits information to a data platform based on a communication network. The offline data mainly consists of the shortages of historical data and attributes, wherein the historical data comprises state inspection data, equipment fault records, equipment maintenance data and the like. On the basis of the intelligent substation secondary system state information data platform, the equipment operation condition of the secondary system and the risks in the secondary system can be analyzed in real time, so that the optimal scheme is obtained, and the real-time debugging and testing of the secondary system are realized.

S6.3: intelligent decision-making expert database constructed based on big data technology

The expert database is a way of simulating the behavior of a human in solving the actual problems, and automatic judgment and decision making are realized by adopting an automatic means, so that the business problems are solved efficiently. The main research fields are expert system, natural language understanding, robotics and pattern recognition. The expert system is an intelligent computer program which solves the specific problem in the specific field by using an expert level, generally comprises a knowledge base, a database, an inference engine, an interpreter and a knowledge acquisition part, and is one of important branches of artificial intelligence. The development of artificial intelligence creates a new means for the expert system, the success of the expert system breaks through the tedious situation of artificial intelligence research, and the two promote each other and develop together.

The equipment monitoring signal analysis not only analyzes the alarm information content, but also combines the historical operation data, the management data and the auxiliary data of the power grid to carry out modeling according to the incidence relation, adopts a big data technology to analyze a large amount of historical operation data, power grid faults and accidents, signal alarms, emergency plans and other information, and sets the limit value of the power grid risk point according to the business needs. The expert database comprises preset rules such as equipment defect rule definition, signal alarm threshold value definition, equipment association rule definition and the like and a rule-based checking algorithm. And finally, defining a power grid data change trend, defining an alarm threshold value, matching a disposal plan and a decision suggestion for association, and intelligently providing a corresponding plan and a disposal suggestion once similar conditions in an expert library occur according to expert rules so as to provide decision support for managers.

(1) Expert library rule definition

And establishing a monitoring intelligent aid decision expert library, and changing the experience of a monitor for analyzing signals into an expert library rule. And defining an accident trip rule, an out-of-limit threshold rule, an alarm rule, a protection switch action and the like, and further satisfying the requirement of expert library analysis and judgment on whether an alarm signal is an accident alarm.

(2) Abnormal alarm information and reason analysis thereof

According to the causal logic analysis between the fault equipment and the protection and the switch, the following information is listed as abnormal alarm information, and an attendant is required to check and confirm again, wherein the action protection which can not determine the specific reason or the protection or switch information which is possibly missed to report lists the serious tidal current and voltage change condition and the tidal current and voltage out-of-limit condition as the reference of accident treatment.

(3) Decision diagnosis result pushing

The method comprises the steps of managing data based on equipment monitoring application, wherein the data comprises equipment defects, defect handling processes and the like, providing equipment data support for a scheduling management process by correlating and matching the monitoring data with a decision expert library, automatically pushing and inquiring equipment monitoring information in the process, and realizing a synchronous perception function of equipment states. And automatically initiating a monitoring device disposal flow when the device defect is found, and providing device state support for device related flow management through association of a device scheduling name and a scheduling management monitoring device defect disposal flow.

If the equipment maintenance plan management is carried out, when the equipment maintenance plan flow is signed, if the equipment has a defect which is not treated yet, giving an equipment defect prompt, pushing a defect state identifier of the equipment to a maintenance system, simultaneously supporting and judging whether the equipment has a remote control real transmission mark, and storing a returned processing result after the equipment defect processing is finished. And after the judgment based on the expert database is finished, the system automatically generates a diagnosis report. The system may provide a formatted report that displays the diagnostic results to the user. And evaluating the reason and suggestion of each switch action, the reclosing action condition and screened abnormal information and reasons.

S6.4: visual online monitoring of total station secondary equipment

The SCD file is used as a data source to automatically draw a physical connection diagram of a process layer of the total station, the diagram can visually reflect the online state, the overhaul state, the alarm state, the broken link fault state, the state of an equipment optical fiber port and the state of an optical fiber channel, and each indicator lamp can reflect the state of operating equipment in real time, so that maintainers can be effectively helped to quickly master the operation condition of the total station, and response measures can be quickly taken.

S7: one-button interoperability service

S7.1: typical secondary safety measure ticket

1) And the maintenance-related protection function soft pressing plate is withdrawn.

2) And the service-related GOOSE receiving/sending soft pressing plate is quitted.

3) And (4) withdrawing from the outlet hard pressing plate related to maintenance.

4) And the SV relevant to the overhaul receives the soft pressing plate.

5) And putting the hard maintenance pressing plate into the maintenance device.

6) And disconnecting CT and PT loop connecting sheets relevant to maintenance.

For SV, GOOSE optical fiber loop which can not realize isolation by throwing or withdrawing the soft pressing plate, the optical fiber can be selectively pulled out to realize the isolation. The safety measure isolation measures and the typical secondary safety measure tickets of the intelligent station are the basis for forming the safety measure rule base of the intelligent station.

S7.2: expert system maintenance safety measure rule base

The secondary safety measure rule of the intelligent station is as follows:

rule 1: and withdrawing the maintenance equipment protection function pressing plate.

Rule 2: and withdrawing the starting failure soft pressing plate of the maintenance equipment and the operation equipment.

Rule 3: and withdrawing the failed joint-jump soft pressing plate between the operating equipment and the maintenance equipment.

Rule 4: and other tripping soft pressing plates of the operation equipment and the maintenance equipment are withdrawn.

Rule 5: and withdrawing the hard pressing plate at the outlet of the maintenance equipment.

Rule 6: and withdrawing the running equipment to receive the soft pressing plate for the SV of the overhaul equipment.

Rule 7: and putting in maintenance pressing plates of all maintenance equipment and the like.

In order to make the computer recognize the rule, the rule is processed by using production rule programming, and the decision rule can be defined as if-Conditions the Result, and the operation statement after the if is activated only when the condition part of the if is satisfied. The condition part is composed of a plurality of conditions together, the relation between the conditions is only expressed by the polarity of ' and ' (and) ', and the conclusion part is kept unique.

For example, rule 2 is programmed as follows:

if (device i is a maintenance device > and < device j is an operating device > and < device i is associated with device j > and < the circuit is a startup failure circuit >) the (startup failure pressing plate for disconnecting the startup failure circuit/exiting the device i; the priority level is 2000+ i x 10); the intelligent station safety measure rule base constructed by the method is a main basis for reasoning of a reasoning mechanism.

S7.4: automatic generation technology of safety measure ticket

The safety measure ticket automatic generation technology obtains maintenance related information through traversing the configuration database, and is arranged in

Matching in the rule base, finally arranging the matching results according to the priority level, and automatically generating the required safety measure

Ticket, the procedure is as follows.

1) An IED state-association matrix is constructed. The IED state-association matrix describes the state of the IED and the association relationship between the IEDs.

The diagonally upper elements in the matrix represent the IED states, where:

the non-diagonal elements in the matrix represent the association between two IEDs, where

2) And extracting maintenance related information. And determining the overhaul IEDs in the overhaul task, arranging the overhaul IEDs according to a protection device, a merging unit, an intelligent terminal and the like, traversing and searching relevant information of the overhaul IEDs in a system configuration database for 1ED in sequence, and arranging and storing obtained results according to a certain rule. In order to facilitate rule matching, safety measure operation objects (soft and hard pressing plates, air switches, loop terminals and the like) in the extracted maintenance related information are coded.

3) And (6) matching the rules. And sequentially carrying out rule matching on each piece of information of the IED to be overhauled in the rule base according to the arranged sequence to obtain safety measure rules, wherein each safety measure rule contains priority level information, and the obtained safety measure rules are orderly arranged according to the priority levels to obtain the required safety measure ticket.

S8: power system key information extraction

S8.1: XML parsing

The substation configuration file adopts a strict XML schema mode, and in engineering application, an SCL file needs to be subjected to XML analysis, and a data set (dataSet) required by engineering is extracted. The SCL follows the syntax provision of XML1.0 and includes various objects involved in substation configuration. Therefore, the most common method for parsing XML documents at the present stage is as follows.

(1) And resolving in a stacking mode. Because each element in the XML file contains more attributes, when a certain layer is analyzed, the attributes contained in the element of the layer are pushed until the layer is analyzed. Due to frequent stack input/output, the requirements on the memory and the operation speed are high.

(2) The XML file is completely written into the memory, and the elements and the attributes thereof can be well expressed completely by utilizing the tree structure. The XML file can be classified into a Document Object Model (DOM) and an XML Simple application program interface (SAX) according to whether the XML file is completely mapped into a tree structure. The DOM parser is used as an XML document syntactic analysis tool, converts the SCL document into an object node tree containing various attributes, namely the DOM node tree, and the parsed content of the SCL document is completely stored in the memory in the form of the DOM node tree. The application may operate on the data in the SCL document by extracting the DOM tree residing in memory. SAX responds to the requirement of XML data analysis through an event processor in a stream analysis mode, does not need to write the whole XML document into a memory, does not cause memory leakage caused by overlarge files, and is not suitable for reading and writing XML.

S8.2: SCL data extraction

In practical engineering application, IEC61850 adopts 2 communication modes of client-server side and publisher-subscriber. The method respectively corresponds to a Sampled Measurement Value (SMV) technology and a Generic Object Oriented Substation Event (GOOSE) technology.

In the substation configuration file, if a certain intelligent node relates to the 2 transmission technologies, GSEControl, SampledValueControl keys and input keys associated with communication with other stations need to be configured for G1, S1 and M1 at the accessPoint of the IED.

In order to be able to group and package data, IEC61850 introduces the concept of data sets. However, both in the client-server communication mode and in the publisher-subscriber mode, both parties to the communication need to know in advance which members are contained in the data set, the order in which the members are arranged, and the type of data they belong to. A data set is a series of data references or a collection of data attribute references, as defined in IEC 61850. In practical applications, the references in the dataset are not necessarily all needed, which requires extraction of the references in the dataset.

S8.3: SCD file data association analysis

In the configuration file of the whole station, all references and types in the data set corresponding to an IED are extracted, and the association of data in the SCD needs to be cleaned. The association of data takes IED nodes as units, and data sets related to GOOSE and SMV are searched from the IED nodes. In the configuration file of the whole station, all references and types contained in a data set required for communication in a certain IED need to be extracted completely.

(1) In the SCD configuration file, the IED is clear, the accessPoint is extracted according to the clear IED, and the extraction can be divided into 4 directions according to the type of the accessPoint and the type of the accessPoint child node: GSE (general substation event class), SMV, Ref: GSE, Ref: SMV.

(2) After determining the type, the data related to the Communication and the content of the data set are extracted in Communication and dataSet, respectively, according to the keywords in the node.

(3) From which the data extraction into the logical nodes is continued, and the type of DO (I data class instance) and the type of DA (data attribute) are extracted from the data template (DataTypeTemplates), according to the data set.

(4) For SMV types, the same extraction method as for GSE types is used.

(5) And for Ref, GSE and Ref, SMV types, extracting all IEDs in input nodes in the types, and calling the GSE and SMV extraction process to extract data according to the IEDs.

S8.4: fixed value checking

The fixed value is automatically or manually called periodically and is checked with the fixed value stored in the database, and an alarm is provided if the fixed value and the fixed value are different.

Example 2:

the embodiment 2 of the present disclosure provides a substation secondary device fault logic visualization system, including:

The working method of the system is the same as the substation secondary equipment fault logic visualization method provided in embodiment 1, and details are not repeated here.

Example 3:

the embodiment 3 of the present disclosure provides a medium, on which a program is stored, and when the program is executed by a processor, the method for visualizing the fault logic of the secondary equipment of the substation according to the embodiment 1 of the present disclosure is implemented.

Example 4:

the embodiment 4 of the present disclosure provides an electronic device, which includes a memory, a processor, and a program stored in the memory and executable on the processor, and when the processor executes the program, the steps in the method for visualizing the fault logic of the secondary device in the substation according to embodiment 1 of the present disclosure are implemented.

The above description is only a preferred embodiment of the present disclosure and is not intended to limit the present disclosure, and various modifications and changes may be made to the present disclosure by those skilled in the art. Any modification, equivalent replacement, improvement and the like made within the spirit and principle of the present disclosure should be included in the protection scope of the present disclosure.

Claims

1. A transformer substation secondary equipment fault logic visualization method is characterized by comprising the following steps:

the preset parameters at least comprise protection logic, action events, fault parameters and operation fixed values.

2. The substation secondary equipment fault logic visualization method according to claim 1, wherein static information expressed by the substation SCD and real-time dynamic message information of a station control layer and a process layer are visualized on line by a dynamic and static combination method;

3. The substation secondary equipment fault logic visualization method of claim 2, wherein the substation static data includes SCL syntax and substation configuration files, and the substation dynamic data includes MMS, GOOSE and SV network messages.

4. The substation secondary equipment fault logic visualization method of claim 1, wherein a probability model of each parameter change and fault damage is established according to a historical database through a key parameter set corresponding to any event, and is compared with a current parameter probability state space to perform current health state judgment and trend analysis;

5. The substation secondary equipment fault logic visualization method of claim 1, characterized in that mining primary and secondary data of the power system is performed by a fuzzy comprehensive evaluation method based on data mining association rules;

6. The substation secondary equipment fault logic visualization method according to claim 1, characterized in that for a network acquisition or network hop loop, link anomalies are located according to link alarm messages sent on each device by monitoring the state of links between a sender and a plurality of receivers by comparison;

alternatively, the first and second electrodes may be,

for a direct-current circuit, enumerating all possible fault points through pre-configuration, integrating network acquisition circuit conditions of each secondary device, giving probabilities of various fault points, and carrying out fault positioning through an alarm sent by a relay protection device;

alternatively, the first and second electrodes may be,

comparing the double AD sampling values uploaded by the relay protection device through the MMS with the two sets of relay protection sampling values, and if the relative error between the double AD sampling values and the two sets of relay protection sampling values is within a threshold range and the relay protection device has no alarm of inconsistent sampling, determining that the double AD sampling is consistent or the states of the two relay protection alternating current secondary circuits are in a normal state;

if the relative error exceeds the threshold value and the relay protection device does not send out the alarm of inconsistent sampling, judging that at least one set of relay protection alternating current loop is abnormal, and giving an abnormal secondary loop corresponding to the relay protection device;

alternatively, the first and second electrodes may be,

comparing SV of the network message record analysis device with a sampling value uploaded by a relay protection device MMS, and if the maximum error of the SV and the sampling value is within a threshold range and the network message record analysis device and the relay protection device have no SV broken link alarm, considering that an SV secondary sampling loop is in a normal state;

when a sampling loop of the relay protection device is normal, but a sampling value error between the network sub-device and the protection device exceeds a threshold value, judging that an alternating current sampling loop of the network message recording and analyzing device is abnormal, and providing an abnormal secondary loop corresponding to the network message recording and analyzing device;

alternatively, the first and second electrodes may be,

when multiple protection devices exist, the correctness and the time characteristic of the action behavior of the relay protection device are diagnosed by checking the action behavior consistency of each set of protection devices;

alternatively, the first and second electrodes may be,

when a single protection device exists, the state of the alternating current loop is monitored by comparing the analog quantity of the network message recording and analyzing device;

the change of the analog quantity is combined with the action logic of the simplex protection, and the correctness of the protection action is comprehensively analyzed;

alternatively, the first and second electrodes may be,

the secondary equipment serial number is analyzed according to the SCD file to form a secondary equipment set;

calculating the most possible fault node of the fault through a link on-off diagnosis table;

alternatively, the first and second electrodes may be,

acquiring video images of a visible light video monitor and an infrared thermal imager aiming at the same equipment in real time, and integrating the two images to monitor and synchronously display the running state of the equipment;

alternatively, the first and second electrodes may be,

after an event occurs, additional reliability is obtained by retransmitting the same data, specifically:

the survival allowable time needs to be set to be longer than the preset time, so that the GOOSE connection is not interrupted under the condition that no T0 message exists;

alternatively, the first and second electrodes may be,

the single time setting error time is the local time when the monitoring device receives the GOOSE message minus the GOOSE message sending time minus the accumulated network delay.

7. A substation secondary equipment fault logic visualization system is characterized by comprising:

8. A medium having a program stored thereon, characterized in that the program, when being executed by a processor, carries out the steps of the method for visualizing fault logic of a substation secondary equipment according to any one of claims 1-6.

9. An electronic device comprising a memory, a processor and a program stored on the memory and executable on the processor, characterized in that the processor, when executing the program, carries out the steps of the substation secondary device fault logic visualization method according to any one of claims 1-6.