Remote operation and maintenance method for secondary equipment of transformer substation

Abstract

The invention discloses a remote operation and maintenance method for substation secondary equipment, and belongs to the technical field of substation automation. The method comprises the following steps: establishing a communication channel between a remote operation and maintenance master station and a security operation and maintenance gateway; establishing a connection between the security operation and maintenance gateway and the operation and maintenance target equipment, and returning a connection result to the remote operation and maintenance master station; the remote operation and maintenance master station encapsulates the message to be operated and maintained according to the structure of a preset protocol proxy message to obtain the message to be operated and maintained, and sends the message to be operated and maintained to a security operation and maintenance gateway; the security operation and maintenance gateway unpacks the to-be-operated and maintained message to obtain an unpacked to-be-operated and maintained message, and sends the unpacked to-be-operated and maintained message to an operation and maintenance target device; and according to a preset operation and maintenance protocol type, the remote operation and maintenance master station carries out remote operation and maintenance on the unpacked message to be operated and maintained.

Description

Technical Field

[0001] The present invention relates to the technical field of substation automation, and in particular to a remote operation and maintenance method for secondary equipment of a substation. Background Art

[0002] At present, the operation and maintenance of secondary equipment in substations is still mainly based on on-site operation and maintenance, which requires maintenance personnel to inspect and maintain secondary equipment on-site regularly or at selected times according to relevant operating instructions. With the increasing workload of substation secondary equipment operation and maintenance, the shortcomings of this mode, which is time-consuming, labor-intensive and inefficient, are becoming increasingly prominent; in addition, on-site operation and maintenance is prone to network security risks due to the lack of effective remote supervision and management.

[0003] With the continuous development of computer communication technology, combined with network security risk management technology, realizing remote operation and maintenance of substation secondary equipment with integrated master and substation is an important development direction in the field of substation automation. However, efficient and comprehensive operation and maintenance of substation secondary equipment has not yet been achieved to ensure its safer and more stable operation and improve the safe and reliable operation quality of the power system. Summary of the invention

[0004] The purpose of the present invention is to overcome the deficiencies in the prior art and provide a remote operation and maintenance method for substation secondary equipment, which can realize automation on the substation side and remote operation and maintenance of protection secondary equipment on the master station side without changing the existing dispatching master station-substation network structure.

[0005] To achieve the above object, the present invention is implemented by adopting the following technical solutions: The present invention provides a remote operation and maintenance method for substation secondary equipment, comprising: Establish a communication channel between the remote operation and maintenance master station and the security operation and maintenance gateway; Establish a connection between the security operation and maintenance gateway and the operation and maintenance target device, and return the connection result to the remote operation and maintenance master station; The remote operation and maintenance master station encapsulates the message to be operated and maintained according to the structure of the preset protocol proxy message to obtain the message to be operated and maintained, and sends the message to be operated and maintained to the secure operation and maintenance gateway; The secure operation and maintenance gateway unpacks the message to be operated and maintained to obtain the unpacked message to be operated and maintained, and sends the unpacked message to be operated and maintained to the operation and maintenance target device; According to the preset operation and maintenance protocol type, the remote operation and maintenance master station performs remote operation and maintenance on the unpacked message to be operated and maintained.

[0006] Optionally, establishing a communication channel between the remote operation and maintenance master station and the security operation and maintenance gateway includes: The remote operation and maintenance main station serves as the client, and the secure operation and maintenance gateway serves as the server. The client initiates a connection request to the server, and the server responds to the connection request to establish a communication channel between the remote operation and maintenance main station and the secure operation and maintenance gateway.

[0007] Optionally, establishing a connection between the secure operation and maintenance gateway and the operation and maintenance target device includes: The remote operation and maintenance master station encapsulates the source port, the target port and the target IP according to the structure of the preset protocol proxy message to obtain a connection message, and sends the connection message to the security operation and maintenance gateway; The secure operation and maintenance gateway unpacks the connection message and sends it to the operation and maintenance target device to obtain the connection result between the secure operation and maintenance gateway and the operation and maintenance target device.

[0008] Optionally, before the secure operation and maintenance gateway unpacks the connection message, the method further includes: The security operation and maintenance gateway decrypts the connection message and verifies whether the decrypted connection message is compliant; When the verification is compliant, the secure operation and maintenance gateway unpacks the connection message and returns a connection success message to the remote operation and maintenance master station; When the verification fails, a connection failure message is returned to the remote operation and maintenance main station.

[0009] Optionally, the preset operation and maintenance protocol types include at least SSH protocol, VNC protocol, RDP protocol and TCP protocol.

[0010] Optionally, the operation and maintenance target equipment includes a plant monitoring background and an intelligent recorder.

[0011] Optionally, according to a preset operation and maintenance protocol type, the remote operation and maintenance master station performs remote operation and maintenance on the unpacked message to be operated and maintained, including: According to the preset operation and maintenance protocol type, open the unified or proprietary maintenance tool deployed on the operation and maintenance target device through the command line or graphical tool to perform operation and maintenance of the parameters, configuration, and setting information of the automation equipment and protection equipment.

[0012] Optionally, the protocol proxy message is encrypted using a national encryption algorithm.

[0013] Compared with the prior art, the present invention has the following beneficial effects: (1) The master-substation integrated remote operation and maintenance method of the substation secondary equipment of the present invention realizes automation on the substation side and protects the secondary equipment for remote operation and maintenance on the master station side without changing the existing dispatching master station-substation vertical authentication network structure; based on agent control and agent communication technology, it can realize the agent forwarding of conventional operation and maintenance protocols and private protocols; the security of protocol agent communication is ensured by national secret algorithm encryption and multi-factor verification; the compliance of operation and maintenance operations is ensured by operation and maintenance process control; (2) Compared with the traditional remote operation and maintenance mode, the method of the present invention has both security and convenience, and solves the insecurity problem of remote operation and maintenance of plain text SSH protocol, VNC protocol, and RDP protocol; supports proxy forwarding of various private TCP protocols, and has the scalability of remote operation and maintenance protocols; the operation and maintenance objects supported include but are not limited to various types of secondary equipment such as automation and protection of substations, which solves the limitation of traditional remote operation and maintenance systems that only support operation and maintenance of a certain type of substation secondary equipment, and is of great significance to supporting the integrated, efficient and reliable operation and maintenance of substation secondary equipment. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] Figure 1 The figure is a flow chart of a remote operation and maintenance method for a substation secondary device according to an embodiment of the present invention; Figure 2 The figure shows a schematic diagram of the principle of a remote operation and maintenance method for substation secondary equipment in one embodiment of the present invention. DETAILED DESCRIPTION

[0015] The technical solution of the present invention is described in detail below through the accompanying drawings and specific embodiments. It should be understood that the embodiments of the present invention and the specific features in the embodiments are detailed descriptions of the technical solution of the present invention, rather than limitations on the technical solution of the present invention. The embodiments of the present invention and the technical features in the embodiments may be combined with each other unless there is a conflict.

[0016] The term "and / or" is only a description of the association relationship between related objects, indicating that there can be three relationships. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " generally indicates that the related objects are in an "or" relationship.

[0017] Example 1

[0018] like Figure 1 As shown, this embodiment introduces a remote operation and maintenance method for substation secondary equipment. The working principle is as follows Figure 2 As shown, the method specifically comprises the following steps: Step 1: Establish a communication channel between the remote operation and maintenance master station and the security operation and maintenance gateway, specifically: The remote operation and maintenance main station serves as the client, and the secure operation and maintenance gateway serves as the server. The client initiates a connection request to the server, and the server responds to the connection request to establish a communication channel between the remote operation and maintenance main station and the secure operation and maintenance gateway.

[0019] In this embodiment, the port number of the communication channel between the remote operation and maintenance master station and the secure operation and maintenance gateway is 8808.

[0020] Step 2: Establish a connection between the secure operation and maintenance gateway and the operation and maintenance target device, and return the connection result to the remote operation and maintenance master station, specifically: The remote operation and maintenance master station encapsulates the source port, the target port and the target IP according to the structure of the preset protocol proxy message to obtain a connection message, and sends the connection message to the security operation and maintenance gateway; The security operation and maintenance gateway decrypts the connection message and verifies whether the decrypted connection message is compliant; When the verification is compliant, the secure operation and maintenance gateway unpacks the connection message, sends it to the operation and maintenance target device, and returns a connection success message to the remote operation and maintenance master station; When the verification fails to comply with the regulations, a connection failure message is returned to the remote operation and maintenance main station. Table 1 is a structure table of the protocol proxy message of this embodiment.

[0021] Table 1 Structure of protocol proxy message

[0022] The structure of each field of the protocol proxy message is described in detail as follows: Protocol header: 8 bytes, used for message header identification; Action type: 4 bytes, based on the network connection process, different type codes are used to indicate the states of establishing connection, data transmission, and disconnection; Execution result: 4 bytes, custom error type code. When a network connection error occurs, the corresponding error information is sent to the remote operation and maintenance master station. Data length: 4 bytes, the length of the operation and maintenance data content carried by each frame message; Gateway IP: 4 bytes, security operation and maintenance gateway IP address; Target IP: 4 bytes, the IP address of the substation target asset for which the remote operation and maintenance master station applies for operation and maintenance; Source port: 4 bytes, the source port number used when the remote operation and maintenance master station initiates a connection; Target port: 4 bytes, the port number of the substation target asset for which the remote operation and maintenance master station applies for operation and maintenance; Protocol type: 2 bytes, custom proxy protocol type code, such as SSH, VNC, RDP, etc. Encryption type: 2 bytes, custom encryption type code, which can include SM2, SM4 and other types; Extension area: 4 bytes, used for subsequent protocol extension; Operation and maintenance data content: It is of variable length and corresponds to the actual operation message of the SSH protocol, VNC protocol, RDP protocol and private TCP protocol.

[0023] Step 3: After establishing the connection between the secure operation and maintenance gateway and the operation and maintenance target device, the remote operation and maintenance master station encapsulates the message to be operated and maintained according to the structure of the preset protocol proxy message to obtain the message to be operated and maintained, and sends the message to be operated and maintained to the secure operation and maintenance gateway.

[0024] Step 4: The secure operation and maintenance gateway receives and unpacks the message to be operated and maintained to obtain the unpacked message to be operated and maintained, and sends the unpacked message to be operated and maintained to the operation and maintenance target device.

[0025] Step 5: According to the preset operation and maintenance protocol type, the remote operation and maintenance master station performs remote operation and maintenance on the unpacked operation and maintenance message, specifically: According to the preset operation and maintenance protocol type, open the unified or proprietary maintenance tool deployed on the operation and maintenance target device through the command line or graphical tool to perform operation and maintenance of the parameters, configuration, and setting information of the automation equipment and protection equipment.

[0026] The preset operation and maintenance protocol types include at least SSH protocol, VNC protocol, RDP protocol and TCP protocol, which are not elaborated here; the encryption method of the protocol proxy message adopts the national secret algorithm, and the national secret SM2 algorithm or the national secret SM4 algorithm can be adopted in this embodiment.

[0027] In this embodiment, the operation and maintenance target equipment includes the plant monitoring background system and the intelligent recorder system. The unified or proprietary operation and maintenance tools deployed by the plant monitoring background system are used to remotely operate and maintain the intelligent telecontrol, measurement and control devices and other automated secondary equipment; the unified or proprietary operation and maintenance tools deployed by the intelligent recorder system are used to remotely operate and maintain the protection secondary equipment such as protection devices and intelligent terminals.

[0028] Example 2

[0029] This embodiment, through proxy control and proxy communication, can realize the proxy forwarding of conventional operation and maintenance protocols such as SSH protocol, VNC protocol, RDP protocol and private TCP protocol, and realize the automation of substation side and the remote operation and maintenance of secondary equipment on the master station side without changing the existing dispatching master station-substation vertical authentication network structure. Compared with the traditional on-site operation and maintenance mode, the method described in the present invention has both safety and convenience, and the master-substation channel of the general TCP protocol is opened through the protocol proxy, which can support the efficient and reliable operation of substation secondary equipment.

[0030] This embodiment ensures data transmission security through encryption and authentication using the national secret algorithm, manages the operated and maintained equipment through identity authentication and whitelist technology, and encrypts the remote operation and maintenance protocol proxy message using the national secret SM2 and SM4 algorithms. The secure operation and maintenance gateway verifies whether the source address, destination IP, and target port of the protocol proxy message are in compliance with the operation and maintenance target. Only after the verification is passed can a connection to the operation and maintenance target be initiated.

[0031] Figure 1 In a specific embodiment, the process of remote operation and maintenance of substation secondary equipment includes: S201, select the IP and port of the target device for operation and maintenance; The remote operation and maintenance master station selects the operation and maintenance target device according to work requirements and specifies the target IP and target port for the connection.

[0032] S202, establishing a connection with a security operation and maintenance gateway; Establish a connection between the remote operation and maintenance master station and the secure operation and maintenance gateway in advance.

[0033] S203, according to the target IP, target port and source port, send the security operation and maintenance gateway a connection request to the operation and maintenance target device; After the remote operation and maintenance master station establishes a connection with the secure operation and maintenance gateway, it initiates a connection request to the secure operation and maintenance gateway for the target IP, target port, and source port.

[0034] S204, verify whether the target equipment for operation and maintenance is compliant; The security operation and maintenance gateway verifies whether the target IP, target port and source address are compliant.

[0035] S205, returning a connection failure message; If the security operation and maintenance gateway fails to verify, a connection failure message will be directly returned to the remote operation and maintenance master station.

[0036] S206, initiating a connection to the operation and maintenance target; If the security operation and maintenance gateway is verified successfully, a connection with the operation and maintenance target device is established based on the target IP and target port.

[0037] S207, determining whether the operation and maintenance target device is successfully connected; Determine the connection status of the target device for operation and maintenance.

[0038] S208, returning a connection failure message; If the connection to the operation and maintenance target device fails, a connection failure message is returned to the remote operation and maintenance master station.

[0039] S209, return a connection success message; If the operation and maintenance target device is connected successfully, a connection success message is returned to the remote operation and maintenance master station.

[0040] S210, using the corresponding protocol to treat the operation and maintenance message to perform operation and maintenance; After the operation and maintenance target device is successfully connected, the remote operation and maintenance master station can use SSH protocol, VNC protocol, RDP protocol and other protocols to treat the operation and maintenance messages for operation and maintenance.

[0041] S211, operation and maintenance completed or terminated; The remote operation and maintenance master station completes the operation and maintenance work or the operation and maintenance work is terminated for some reason.

[0042] S212, closing the connection with the operation and maintenance target device; After the operation and maintenance is completed or terminated, the remote operation and maintenance master station closes the connection with the operation and maintenance target device.

[0043] S213, close the connection with the security operation and maintenance gateway; After the operation and maintenance is completed or terminated, the remote operation and maintenance master station closes the connection with the secure operation and maintenance gateway.

[0044] At this point, the overall process of remote operation and maintenance of substation secondary equipment is completed.

[0045] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0046] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0047] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0048] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0049] The embodiments of the present invention are described above in conjunction with the accompanying drawings, but the present invention is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the enlightenment of the present invention, ordinary technicians in this field can also make many forms without departing from the scope of protection of the purpose of the present invention and the claims, which all fall within the protection of the present invention.

Claims

1. A remote operation and maintenance method for substation secondary equipment, characterized in that: include: Establish a communication channel between the remote operation and maintenance master station and the security operation and maintenance gateway; Establish a connection between the security operation and maintenance gateway and the operation and maintenance target device, and return the connection result to the remote operation and maintenance master station; The remote operation and maintenance master station encapsulates the message to be operated and maintained according to the structure of the preset protocol proxy message to obtain the message to be operated and maintained, and sends the message to be operated and maintained to the secure operation and maintenance gateway; The secure operation and maintenance gateway unpacks the message to be operated and maintained to obtain the unpacked message to be operated and maintained, and sends the unpacked message to be operated and maintained to the operation and maintenance target device; According to the preset operation and maintenance protocol type, the remote operation and maintenance master station performs remote operation and maintenance on the unpacked message to be operated and maintained.

2. The remote operation and maintenance method of substation secondary equipment according to claim 1, characterized in that: The establishment of a communication channel between the remote operation and maintenance master station and the security operation and maintenance gateway includes: The remote operation and maintenance main station serves as a client, and the secure operation and maintenance gateway serves as a server. The client initiates a connection request to the server, and the server responds to the connection request to establish a communication channel between the remote operation and maintenance main station and the secure operation and maintenance gateway.

3. The remote operation and maintenance method of substation secondary equipment according to claim 1, characterized in that: The establishing of a connection between the security operation and maintenance gateway and the operation and maintenance target device includes: The remote operation and maintenance master station encapsulates the source port, the target port and the target IP according to the structure of the preset protocol proxy message to obtain a connection message, and sends the connection message to the security operation and maintenance gateway; The secure operation and maintenance gateway unpacks the connection message and sends it to the operation and maintenance target device to obtain the connection result between the secure operation and maintenance gateway and the operation and maintenance target device.

4. The remote operation and maintenance method of substation secondary equipment according to claim 3 is characterized in that: Before the secure operation and maintenance gateway unpacks the connection message, the method further includes: The security operation and maintenance gateway decrypts the connection message and verifies whether the decrypted connection message is compliant; When the verification is compliant, the secure operation and maintenance gateway unpacks the connection message and returns a connection success message to the remote operation and maintenance master station; When the verification fails, a connection failure message is returned to the remote operation and maintenance main station.

5. The remote operation and maintenance method of substation secondary equipment according to claim 1, characterized in that: The preset operation and maintenance protocol types include at least SSH protocol, VNC protocol, RDP protocol and TCP protocol.

6. The remote operation and maintenance method of substation secondary equipment according to claim 1, characterized in that: The operation and maintenance target equipment includes the plant monitoring background and the intelligent recorder.

7. The remote operation and maintenance method of substation secondary equipment according to claim 1, characterized in that: According to the preset operation and maintenance protocol type, the remote operation and maintenance master station performs remote operation and maintenance on the unpacked message to be operated and maintained, including: According to the preset operation and maintenance protocol type, open the unified or proprietary maintenance tool deployed on the operation and maintenance target device through the command line or graphical tool to perform operation and maintenance of the parameters, configuration, and setting information of the automation equipment and protection equipment.

8. The remote operation and maintenance method of substation secondary equipment according to claim 1, characterized in that: The protocol proxy message is encrypted using the national encryption algorithm.

Images