Anomaly detection method specific to IEC61850 protocol SV (Sample Value) message

Abstract

The invention discloses an anomaly detection method specific to an IEC61850 protocol SV (Sample Value) message. The method comprises the following steps: firstly, detecting a format and configuration information of a frame of SV message, and ending subsequent detection if any of the format and the configuration information is wrong; if the format and the configuration information of the SV message are correct, continuing to perform logic analysis on an smpCnt value to judge whether abnormal phenomena such as disorder, loss and repetition of the message occur or not; if the smpCnt value is free from a logic error, continuing to detect state information of the SV message in order to detect whether the SV message is in an interrupt state or a synchronous state; and finally, if the message is not in an abnormal state, continuing to detect quality values (test and validity) of the message, and judging whether a quality factor of the message is abnormal or not. The method has the advantages of comprehensive analysis and clear logic, is simple, clear and efficient, and can be applied to online data analysis and anomaly detection of transformer substations.

Description

technical field [0001] The invention belongs to the technical field of power communication systems and industrial control safety, and relates to an abnormal detection method of an industrial control network protocol, in particular to an abnormal detection method of IEC61850 protocol messages. Background technique [0002] With the breakthrough of optoelectronic technology in the field of sensor applications, electronic transformers have gradually moved from the experimental stage to the engineering application stage. The application of electronic transformers has realized the digitization of the electrical data acquisition link. The voltage and current of the primary system are converted into digital signals, which are transmitted to the secondary equipment through optical fibers or networks, and the electrical communication between the primary equipment and the secondary equipment is realized. isolation. However, this technological innovation also faces the problem of inte...

AI Technical Summary

Problems solved by technology

At present, in the process of substation operation detection, there is no comprehensive detection method for the abnormality of the IEC61850 protocol SV message, which mainly relies on the manual analysis of the staff, which is inefficient and prone to omissions

Images