CN217693361U

CN217693361U - Telecontrol communication isolating device and system based on FPGA and bypass control

Info

Publication number: CN217693361U
Application number: CN202220819939.0U
Authority: CN
Inventors: 王彬筌; 蒋亚坤; 何馨; 蒋渊; 林旭; 李伟琦; 宋为; 韩熙媛
Original assignee: Yunnan Power Grid Co Ltd
Current assignee: Yunnan Power Grid Co Ltd
Priority date: 2022-04-11
Filing date: 2022-04-11
Publication date: 2022-10-28
Anticipated expiration: 2032-04-11

Abstract

The utility model discloses a telemechanical communication isolating device and system based on FPGA and bypass control, which comprises an isolating unit, a first processing mainboard and a second processing mainboard, wherein the first processing mainboard and the second processing mainboard establish two unidirectional data channels which are not connected with a network through an FPGA module; the bypass unit is switched with the isolation unit for use; and the isolation unit and the bypass unit are arranged inside the shell. After the device is adopted by a dispatching network, the network connection of the substation-side telemechanical data acquisition and forwarding and the dispatching center-side main station system equipment is successfully blocked, the normal data interaction of the two types of equipment is not interfered, and the original protocol communication can be maintained.

Description

Telecontrol communication isolating device and system based on FPGA and bypass control

Technical Field

The utility model relates to a communication isolation technical field, especially a telemechanical communication isolating device and system based on FPGA and bypass control.

Background

With the rapid development of the power grid scale in recent years, it is very important to protect network devices and communication links from being damaged by human beings through a network isolation technology (which means that two or more computers or networks realize information exchange and resource sharing on the basis of disconnection). The network safety situation of the dispatching network is severe, a network safety device is needed to isolate the telecontrol data acquisition and forwarding device at the transformer substation side from the dispatching master station device of the dispatching center, and meanwhile, the requirements that the telecontrol data processing at the dispatching master station side and the original network communication can be guaranteed not to be influenced under the condition that the device at the transformer substation side is thrown away or fails are met.

The two-side equipment is constructed into two independent network safety zones in a network isolation mode. When any one of the devices is infected by the intrusion and virus, the normal operation of the device on the other side cannot be influenced, and the safety of data exchange is ensured to the maximum extent.

SUMMERY OF THE UTILITY MODEL

This section is for the purpose of summarizing some aspects of embodiments of the invention and to briefly introduce some preferred embodiments. Some simplifications or omissions may be made in this section as well as in the abstract and the title of the present application to avoid obscuring the purpose of this section, the abstract and the title of the present application, and such simplifications or omissions cannot be used to limit the scope of the present invention.

In order to solve the technical problem, the utility model provides a following technical scheme: the utility model provides a telemechanical communication isolating device based on FPGA and bypass control, its includes, the casing, support piece is installed to the casing bottom, support piece includes connecting rod and bracing piece, connecting rod fixed mounting in the casing bottom, connecting rod one end is rotated with the bracing piece and is connected.

As a telecontrol communication isolating device's an preferred scheme based on FPGA and bypass control, wherein: two groups of power supply interfaces are arranged on one side of the front part of the shell

As a telecontrol communication isolating device's an preferred scheme based on FPGA and bypass control, wherein: the support piece comprises a connecting rod and a supporting rod, the connecting rod is fixedly installed at the bottom of the shell, and one end of the connecting rod is rotatably connected with the supporting rod.

As a telecontrol communication isolating device's an preferred scheme based on FPGA and bypass control, wherein: the connecting rod middle part is rotated and is installed the regulation pole, adjusts the pole tip and is provided with the butt piece, the multiunit butt groove has been seted up on the bracing piece.

As a telecontrol communication isolating device's an preferred scheme based on FPGA and bypass control, wherein: and an anti-skidding sleeve is arranged on the outer side of the supporting rod.

A telecontrol communication isolation system based on FPGA and bypass control comprises an isolation unit, a first processing main board and a second processing main board, wherein the first processing main board and the second processing main board establish two non-network-connected unidirectional data channels through an FPGA module; the bypass unit is switched with the isolation unit for use; and the isolation unit and the bypass unit are arranged in the shell.

As a telecontrol communication isolated system's an optimal selection scheme based on FPGA and bypass control, wherein: the first processing mainboard is externally connected with a first network interface, the second processing mainboard is externally connected with a second network interface, and the bypass unit is externally connected with a third network interface and a fourth network interface.

As a preferred scheme of telemechanical communication isolated system based on FPGA and bypass control, wherein: the bypass unit is formed by connecting three groups of switches in series, two ends of the middle group of switches are respectively connected with the third network interface and the fourth network interface, and the switches at two sides are respectively connected with the first processing mainboard and the second processing mainboard.

As a telecontrol communication isolated system's an optimal selection scheme based on FPGA and bypass control, wherein: the FPGA module comprises a first one-way data channel and a second one-way data channel which are connected in parallel, a communicating switch is arranged on each of the two one-way data channels, the first processing mainboard is connected with a receiving end of the first one-way data channel and a sending end of the second one-way data channel, and the second processing mainboard is connected with a sending end of the first one-way data channel and a receiving end of the second one-way data channel.

The utility model discloses beneficial effect does: after the device is adopted by a dispatching network, the network connection of the substation-side telemechanical data acquisition and forwarding and the dispatching center-side main station system equipment is successfully blocked, the normal data interaction of the two types of equipment is not interfered, and the original protocol communication can be maintained.

Drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required to be used in the description of the embodiments will be briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art that other drawings can be obtained according to these drawings without inventive labor. Wherein:

fig. 1 is a schematic view of the shell structure of the present invention.

Fig. 2 is a schematic structural view of the supporting member of the present invention.

Fig. 3 is a schematic view of the internal structure of the present invention.

Fig. 4 is a schematic diagram of the internal structure of the isolation unit of the present invention.

Fig. 5 is a schematic diagram of the implementation and deployment of the present invention.

Detailed Description

In order to make the aforementioned objects, features and advantages of the present invention more comprehensible, embodiments of the present invention are described in detail with reference to the accompanying drawings.

In the following description, numerous specific details are set forth in order to provide a thorough understanding of the present invention, but the present invention may be implemented in other ways different from the specific details set forth herein, and one skilled in the art may similarly generalize the present invention without departing from the spirit of the present invention, and therefore the present invention is not limited to the specific embodiments disclosed below.

Furthermore, the references herein to "one embodiment" or "an embodiment" refer to a particular feature, structure, or characteristic that may be included in at least one implementation of the invention. The appearances of the phrase "in one embodiment" in various places in the specification are not necessarily all referring to the same embodiment, nor are separate or alternative embodiments mutually exclusive of other embodiments.

Example 1

Referring to fig. 1 to 2, for the first embodiment of the present invention, this embodiment provides a telecontrol communication isolating device based on FPGA and bypass control, which includes a casing 300, a supporting member 302 is installed at the bottom of the casing 300, and the supporting member 302 is used to lift the casing 200 to a certain extent, so as to facilitate the heat dissipation thereof.

Further, the supporting member 302 includes a connecting rod 302a and a supporting rod 302b, the connecting rod 302a is fixedly installed at the bottom of the housing 300, and one end of the connecting rod 302a is rotatably connected with the supporting rod 302b through a rotating shaft. An adjusting rod 302c is rotatably mounted in the middle of the connecting rod 302a, a butting block 302d is arranged at the end of the adjusting rod 302c, and a plurality of groups of butting grooves 302e are formed in the supporting rod 302 b.

In the normal state, the support 302 is in a folded state so as not to increase the volume of the housing 200. When the isolating device needs to be used, the isolating device is arranged on a rack, the connecting rod 302a is rotated upwards, so that the lifting height and the angle of the shell 200 are adjusted, after the adjustment is finished, the adjusting rod 302c in the middle of the connecting rod 302a is rotated, the abutting block 302d at the end part of the adjusting rod 302c is inserted into the abutting groove 302e in the supporting rod 302b, and the fixing of the adjusting state of the supporting piece 302 can be realized, namely the fixing of the lifting height and the angle of the isolating device is facilitated, the heat dissipation of the isolating device is facilitated, the isolating device inclines upwards, and the working state of the isolating device is facilitated to be observed. The outer side of the support rod 302b is provided with an anti-slip sleeve, and the anti-slip sleeve is used for ensuring the stability of the support of the shell 200.

Example 2

Referring to fig. 1 and fig. 3, for the second embodiment of the present invention, this embodiment provides a telecontrol communication isolation system based on FPGA and bypass control, which includes AN isolation unit 100, including a first processing motherboard 101 and a second processing motherboard 102, the first processing motherboard 101 and the second processing motherboard 102 establish two unidirectional data channels of non-network connection through AN FPGA module 103, the FPGA module 103 adopts AN ALINX dual-channel high-speed development board AN9238, the isolation unit 100 is used to block the network connection between a scheduling network data forwarding device and a scheduling master station device, and meanwhile, the normal data interaction between the devices is not interfered, and the original protocol communication can also be maintained; the bypass unit 200 is used in parallel with the isolation unit 100 for switching, and when the isolation unit 100 fails or is switched off, the bypass unit 200 is switched to be started to forward network data; the housing 300, the isolation unit 100 and the bypass unit 102 are installed inside the housing 300.

When the device is used, the scheduling network message forwarding device transmits DL/T634.5104 protocol data to the first processing mainboard 101, the first processing mainboard 101 changes the protocol message into non-network data through a data format conversion method, the FPGA module 103 opens 2 unidirectional data channels to serve as a non-network connected FPGA dedicated DL/T634.5104 bidirectional communication channel between the first processing mainboard 101 and the second processing mainboard 102 in the device, the FPGA module 103 adds channel number information to the DL/T634.5104 channel message to be transmitted, data is aggregated in one FPGA channel through a data coding method, and simultaneously DL/T634.5104 inspection and ACPI processing are performed, the non-target protocol message is filtered, and finally the data is decoded and restored into data to be transmitted to the second processing mainboard 102, after the second processing mainboard 102 receives the non-network data, the second processing mainboard 102 reproduces the non-network data into DL/T634.5104 network data through a data restoration method, then forwards the corresponding data, and transmits the restored data to the scheduling system protocol.

When the isolation unit 100 fails or is switched off, the bypass unit 200 is switched to be started, the input network data is forwarded through the bypass unit 200, the bypass unit 200 only identifies the DL/T634.5104 message in the network data and does not process the message, and the identified message is forwarded to the corresponding device on the other side.

After the device is adopted by a dispatching network, the network connection of the substation-side telemechanical data acquisition and forwarding and the dispatching center-side main station system equipment is successfully blocked, the normal data interaction of the two types of equipment is not interfered, and the original protocol communication can be maintained. Normal production operation is not affected under the condition of enhancing the management and control strength of equipment safety, and even if the device is abnormal, the continuous operation mode of the whole scheduling network before network isolation can be maintained to the maximum extent. The safety, the real-time performance and the reliability of the dispatching network transformer substation side and the dispatching center side are greatly enhanced while the production efficiency is improved.

Example 3

Referring to fig. 1 to 5, a second embodiment of the present invention is different from the second embodiment in that: the first processing motherboard 101 is externally connected with a first network interface 101a, the second processing motherboard 102 is externally connected with a second network interface 102a, and the bypass unit 200 is externally connected with a third network interface 201 and a fourth network interface 202. The third network interface 201 and the fourth network interface 202 are both located at the front of the housing 300.

Further, the bypass unit 200 is formed by connecting three sets of switches in series, two ends of the middle set of switches are respectively connected to the third network interface 201 and the fourth network interface 202, and two switches are respectively connected to the first processing motherboard 101 and the second processing motherboard 102. In a normal state, the switches on the two sides are in an on state, the middle switch is in an off state, the data of the third network interface 201 and the fourth network interface 202 are transmitted to the first processing main board 101 and the second processing main board 102 via the switches on the two sides, when the isolation unit 100 fails or goes back, the switches on the two sides are turned off, the middle switch is turned on at the same time, the bypass unit 200 is switched on, and the network data are forwarded through the bypass unit 200.

Furthermore, the FPGA module 103 includes a first unidirectional data channel and a second unidirectional data channel connected in parallel, two unidirectional data channels are provided with a communicating switch, one of the two unidirectional data channels is selected to be open, the first processing motherboard 101 connects the receiving end of the first unidirectional data channel and the transmitting end of the second unidirectional data channel, and the second processing motherboard 102 connects the transmitting end of the first unidirectional data channel and the receiving end of the second unidirectional data channel, thereby realizing unidirectional transmission of data. Two sets of power interfaces 301 are provided on one side of the front of the housing 300. The first processing mainboard 101 and the second processing mainboard 102 comprise a CPU, a memory and a network controller, the CPU adopts an AMD ruilong R55600XCPU processor, the CPU changes a protocol message into non-network data by a data format conversion method, the memory assists the CPU to perform conversion operation and store the data as temporary storage data of a buffer pool, and the CPU expands a network interface through the network controller.

When the device is used, a set of device is added in the transformer substation A and the transformer substation B, and the same installation and wiring modes are adopted. Firstly, the device is put on a rack, a dual power supply is connected, then a remote data transmission port of a remote terminal host of the transformer substation is connected with a first network interface 101a of a first processing mainboard 101 in the device, and a remote data transmission port of a remote terminal standby machine is connected with a third network interface 201, which is positioned on the side of the first processing mainboard 101, in a bypass unit 200. The second network interface 102a of the second processing motherboard 102 and the fourth network interface 202 of the bypass unit 200 on the second processing motherboard 102 side are connected to the switch for collecting and forwarding in the substation by the scheduling network. And after the wiring work is finished, parameter configuration is carried out on the device according to the network parameters of the equipment on the two sides.

The first processing main board 101 processes a network DL/T634.5104 message input by the RTU device into non-network data, and performs DL/T634.5104 inspection and ACPI processing on a DL/T634.5104 channel message of a substation to be transmitted through the FPGA module 103 inside the device, filters a non-target protocol message, and transmits the non-target protocol message to the second processing main board 102, the second processing main board 102 restores the received data into a DL/T634.5104 network message, and forwards the network message to a router connected thereto, and the bypass unit 200 is in a standby state and does not forward the network data. Once the isolation unit 100 is tripped or fails, the bypass unit 200 in a standby state is activated, and the network message received by one side is directly transmitted to the device on the other side.

Meanwhile, a set of device is added on the network side of the dispatching master station system, and the device is firstly put on a rack and is connected with a dual power supply. And then, respective telecontrol data transmission ports of the main unit and the standby unit of the scheduling main station device are connected with a first network interface 101a of a first processing main board 101 in the device and a third network interface 201 which is positioned at the side of the first processing main board 101 in a bypass unit 200. The second network interface 102a of the second processing motherboard 102 and the fourth network interface 202 of the bypass unit 200 on the second processing motherboard 102 side are connected to the switch in the telecontrol data forwarding network. And after the work is finished, the device is configured according to the network parameters of the equipment at the two sides.

The second processing mainboard 102 processes network DL/T634.5104 messages input by the substation a and the substation B through the telecontrol message forwarding equipment into non-network data, adds channel number information to DL/T634.5104 channel messages of a plurality of substations which need to be transmitted through the FPGA module 103 inside the device, aggregates the data in one FPGA channel in a data coding mode, simultaneously performs inspection and ACPI processing of the DL/T634.5104, filters the non-target protocol messages, finally sends the non-target protocol messages to the first processing mainboard 101, converts the received non-network data into the original DL/T634.5104 network messages through the processing unit, and forwards the network messages to the scheduling master station system connected with the processing unit. Once the isolation unit 100 is switched off or fails, the bypass unit 200 in a standby state is activated, and the network message received by one side is directly transmitted to the device on the other side.

It should be noted that the above embodiments are only used for illustrating the technical solutions of the present invention and not for limiting, and although the present invention is described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solutions of the present invention can be modified or substituted by equivalents without departing from the spirit and scope of the technical solutions of the present invention, which should be covered by the scope of the claims of the present invention.

Claims

1. The utility model provides a telemechanical communication isolating device based on FPGA and bypass control which characterized in that: comprises the steps of (a) preparing a substrate,

the support piece (302) is installed to casing (300), support piece (302) is installed to casing (300) bottom, support piece (302) are including connecting rod (302 a) and bracing piece (302 b), connecting rod (302 a) fixed mounting in casing (300) bottom, connecting rod (302 a) one end is rotated with bracing piece (302 b) and is connected.

2. The FPGA and bypass control based telemechanical communication isolation device of claim 1, wherein: the middle of the connecting rod (302 a) is rotatably provided with an adjusting rod (302 c), the end part of the adjusting rod (302 c) is provided with a butt joint block (302 d), and the supporting rod (302 b) is provided with a plurality of groups of butt joint grooves (302 e).

3. The FPGA and bypass control based telemechanical communication isolation device of claim 2, wherein: two groups of power interfaces (301) are arranged on one side of the front part of the shell (300).

4. The FPGA and bypass control based telemechanical communication isolation device of claim 3, wherein: and an anti-skidding sleeve is arranged on the outer side of the supporting rod (302 b).

5. A system using the FPGA-based and bypass control telemechanical communication isolation device of any one of claims 1-4, wherein: comprises the steps of (a) preparing a mixture of a plurality of raw materials,

the isolation unit (100) comprises a first processing main board (101) and a second processing main board (102), wherein the first processing main board (101) and the second processing main board (102) are connected through an FPGA module (103);

and a bypass unit (200) connected in parallel to the isolation unit (100), wherein the isolation unit (100) and the bypass unit (200) are installed inside the housing (300).

6. The FPGA and bypass control based telemechanical communication isolation system of claim 5, wherein: the first processing main board (101) is externally connected with a first network interface (101 a), the second processing main board (102) is externally connected with a second network interface (102 a), and the bypass unit (200) is externally connected with a third network interface (201) and a fourth network interface (202).

7. The FPGA and bypass control based telemechanical communication isolation system of claim 6, wherein: the bypass unit (200) is formed by connecting a first switch (203), a second switch (204) and a third switch (205) in series, two ends of the second switch (204) are respectively connected with the third network interface (201) and the fourth network interface (202), the first switch (203) is connected with the first processing main board (101), and the third switch (205) is connected with the second processing main board (102).

8. The FPGA and bypass control based telemechanical communication isolation system of claim 7, wherein: the FPGA module (103) comprises a first one-way data channel and a second one-way data channel which are connected in parallel, two one-way data channels are provided with a communicating switch, the first processing mainboard (101) is connected with the receiving end of the first one-way data channel and the sending end of the second one-way data channel, and the second processing mainboard (102) is connected with the sending end of the first one-way data channel and the receiving end of the second one-way data channel.