Method, system, storage medium and computing device for evaluating abnormal impact of stabilization control device

Abstract

The present invention discloses a method, system, storage medium and computing device for evaluating the impact of abnormalities on a stabilizing and controlling device. The present invention obtains an expected fault set of a power grid based on a control strategy model and an expected abnormal combination, identifies an expected fault subset that loses defense and an expected fault subset that continues to be defended in the expected fault set of the power grid after the abnormal combination occurs, obtains an on-duty strategy for each expected fault in the expected fault subset that continues to be defended, counts the controllable quantity change and the implementable evaluation status of the on-duty strategy, and then determines the safety level of the impact of the abnormal combination on the control function of the stabilizing and controlling device, providing technical support for handling abnormal operation and maintenance arrangements of the stabilizing and controlling device.

Description

Technical Field

[0001] The invention relates to a method, system, storage medium and computing equipment for evaluating the abnormal impact of a stabilizing control device, and belongs to the technical field of power system dispatching automation. Background Art

[0002] The power grid safety and stability control system and device (the power grid safety and stability control system is referred to as the stability control system, the power grid safety and stability control device is referred to as the stability control device, the stability control system includes multiple sites, and each site is connected to multiple stability control devices) is an important secondary equipment to ensure the safe and stable operation of the power system. The operation mode of the power grid is closely related to the operating status of the stability control system and the device.

[0003] In daily dispatching and operation management, dispatching and operation control personnel not only need to monitor the operating status of the stability control system and the device in real time, but also need to know online whether the control function of the stability control system can be performed normally. On this basis, it is also necessary to further understand the impact of abnormal operation of some stability control devices on the control function of the stability control system, and provide technical support for the abnormal operation handling and maintenance arrangement of the stability control device.

[0004] Whether the control function of the stability control system can be executed normally is generally achieved by online simulation of the on-duty strategy of the stability control system to prevent faults, and judging whether the required control quantity and the required control object of various measures of the on-duty strategy can be fully executed under the specified power grid operating conditions. However, there is currently no method to evaluate the impact of abnormal stability control devices on the control function of stability control devices. Summary of the invention

[0005] The present invention provides a method, system, storage medium and computing device for evaluating the abnormal impact of a stabilization control device, which solve the problems disclosed in the background technology.

[0006] In order to solve the above technical problems, the technical solution adopted by the present invention is:

[0007] The abnormal impact assessment method of the stabilization and control device includes:

[0008] According to the control strategy model of the stabilization control device and the expected abnormal combination, the expected power grid fault set that the abnormal stabilization control device set should defend is obtained; wherein the abnormal combination is the abnormal combination of the stabilization control device;

[0009] From the expected fault set of the power grid, identify the expected fault subset that loses defense after the abnormal combination occurs and the expected fault subset that continues to be defended;

[0010] For each expected failure in the expected failure subset to be continuously defended, identify the on-duty strategy before and after the abnormal combination occurs, and count the controllable quantity change of the control measures in the on-duty strategy and the implementable evaluation status of the on-duty strategy after the abnormal combination occurs;

[0011] Based on preset rules, changes in controllable quantities, implementable assessment states, and a subset of anticipated failures that lose defense, the safety level of the impact of abnormal combinations on the control function of the stabilization and control device is determined.

[0012] According to the control strategy model of the stabilization device and the expected abnormal combination, the expected power grid fault set that the abnormal stabilization device set should defend against is obtained. The specific process is as follows:

[0013] According to the expected abnormal combination, obtain the abnormal stability control device set;

[0014] According to the abnormal stabilizing control device set and the control strategy model of the stabilizing control device, the expected power grid fault set that the abnormal stabilizing control device set should defend against is obtained.

[0015] The abnormal combination includes abnormal locking of the stabilizing control device and abnormal communication between the stabilizing control devices;

[0016] The abnormal stabilization control device set includes a stabilization control device A for blocking abnormalities and stabilization control devices B at both ends of the communication abnormality channel;

[0017] The set of anticipated power grid faults includes anticipated power grid faults defended by stabilization device A, anticipated power grid faults defended by stabilization device B, anticipated faults of obtaining data from stabilization device A and stabilization device B, and anticipated faults of sending control commands to stabilization device A and stabilization device B.

[0018] The possible assessment states include insufficient control, sufficient control, and no control required.

[0019] According to the preset rules, the change of controllable quantity, the status of feasible assessment and the subset of anticipated failures that lose defense, the safety level of the impact of abnormal combination on the control function of the stabilization and control device is determined. The specific process is as follows:

[0020] Determine the safety level of each anticipated fault's impact on the control function of the stabilization and control device based on preset rules, controllable quantity changes, implementable assessment states, and a subset of anticipated faults that lose defense;

[0021] The safety level of the impact of abnormal combinations on the control function of the stabilization and control device is determined based on the safety level of the impact of each anticipated fault on the control function of the stabilization and control device.

[0022] The default rules are:

[0023] If the expected failure subset F loses the defense e is non-empty, then the expected fault subset F e Each expected fault in e The safety level of the impact on the control function of the stabilization and control device is warning;

[0024] If the expected failure is the expected failure subset F that continues to defend nA predicted fault f in which the controllable quantity decreases n , and the expected fault f n If the feasible evaluation status of the on-duty strategy is insufficient control quantity, then the expected fault f n The safety level of the impact on the control function of the stabilization control device is warning; wherein the controllable quantity decreases means that the controllable quantity before the abnormal combination occurs is greater than the controllable quantity after the abnormal combination occurs;

[0025] The case where the subset of expected failures that lose defense is empty:

[0026] If the expected fault is a subset of the expected fault F n A predicted fault f in which the controllable quantity decreases n , and the expected fault f n If the feasible evaluation status of the on-duty strategy is that the control quantity is sufficient or no control is required, then the expected fault f n The safety level of the impact on the control function of the stabilization and control device is warning;

[0027] If the expected fault is a subset of the expected fault F n A predicted fault f in which the controllable quantity does not decrease n , then the expected fault f n The safety level of the impact on the control function of the stabilization device is normal.

[0028] According to the safety level of each expected fault on the control function of the stabilization and control device, the safety level of the abnormal combination on the control function of the stabilization and control device is determined. The specific formula is:

[0029] S=max{S(i),1≤i≤n}

[0030] Among them, S is the safety level of the impact of abnormal combination on the control function of the stabilization control device, S(i) is the safety level of the impact of the i-th expected fault on the control function of the stabilization control device, and n is the number of expected faults.

[0031] The abnormal impact assessment system of the stabilization device includes:

[0032] A set acquisition module is used to acquire the expected power grid fault set that the abnormal stabilization control device set should defend against according to the control strategy model of the stabilization control device and the expected abnormal combination; wherein the abnormal combination is the abnormal combination of the stabilization control device;

[0033] Subset identification module: used to identify the expected fault subsets that lose defense after the abnormal combination occurs and the expected fault subsets that continue to defend from the expected fault set of the power grid;

[0034] Identification and statistics module: for each expected fault in the expected fault subset to be continuously defended, identify the on-duty strategy before and after the abnormal combination occurs, and count the controllable quantity change of the control measures in the on-duty strategy and the implementable evaluation status of the on-duty strategy after the abnormal combination occurs;

[0035] Safety level module: used to determine the safety level of the impact of abnormal combinations on the control function of the stabilization and control device based on preset rules, controllable quantity changes, feasible assessment states and a subset of anticipated failures that lose defense.

[0036] The security level modules include:

[0037] The first level determination module is used to determine the safety level of each expected fault on the control function of the stabilization control device according to preset rules, controllable quantity changes, implementable evaluation status and the subset of expected faults that lose defense;

[0038] The second level determination module is used to determine the safety level of the impact of abnormal combinations on the control function of the stabilization and control device based on the safety level of the impact of each expected fault on the control function of the stabilization and control device.

[0039] A computer-readable storage medium storing one or more programs, wherein the one or more programs include instructions, which, when executed by a computing device, cause the computing device to execute a method for evaluating the abnormal impact of a stabilization control device.

[0040] A computing device includes one or more processors, one or more memories, and one or more programs, wherein the one or more programs are stored in the one or more memories and are configured to be executed by the one or more processors, and the one or more programs include instructions for executing a method for evaluating the abnormal impact of a stabilization control device.

[0041] The beneficial effects achieved by the present invention are as follows: the present invention obtains a set of anticipated power grid faults based on a control strategy model and anticipated abnormal combinations, identifies a subset of anticipated faults that lose defense and a subset of anticipated faults that continue to be defended in the anticipated power grid fault set after the occurrence of the abnormal combination, obtains the on-duty strategy for each anticipated fault in the subset of anticipated faults that continue to be defended, counts the controllable quantity changes and the implementable evaluation status of the on-duty strategy, and then determines the safety level of the impact of the abnormal combination on the control function of the stabilization and control device, providing technical support for the handling of operational abnormalities and maintenance arrangements of the stabilization and control device. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] Figure 1 Flow chart of the method of the present invention. DETAILED DESCRIPTION

[0043] The present invention will be further described below in conjunction with the accompanying drawings. The following embodiments are only used to more clearly illustrate the technical solution of the present invention, and cannot be used to limit the protection scope of the present invention.

[0044] like Figure 1 As shown, the method for evaluating the abnormal impact of a stabilization control device includes the following steps:

[0045] Step 1: According to the control strategy model of the stabilization and control device and the expected abnormal combination, the expected power grid fault set that the abnormal stabilization and control device set should defend is obtained; wherein the abnormal combination is the abnormal combination of the stabilization and control device;

[0046] Step 2: From the expected fault set of the power grid, identify the expected fault subset that loses defense after the abnormal combination occurs and the expected fault subset that continues to be defended;

[0047] Step 3: for each expected fault in the expected fault subset to be continuously defended, identify the on-duty strategy before and after the abnormal combination occurs, and count the controllable quantity change of the control measures in the on-duty strategy and the implementable evaluation status of the on-duty strategy after the abnormal combination occurs;

[0048] Step 4: Determine the safety level of the impact of abnormal combinations on the control function of the stabilization and control device based on preset rules, controllable quantity changes, implementable assessment states, and a subset of anticipated failures that lose defense.

[0049] The above method is based on the control strategy model and the expected abnormal combination, obtains the expected fault set of the power grid, identifies the expected fault subset that loses defense and the expected fault subset that continues to be defended in the expected fault set of the power grid after the abnormal combination occurs, obtains the on-duty strategy for each expected fault in the expected fault subset that continues to be defended, counts the controllable quantity change and the implementable evaluation status of the on-duty strategy, and then determines the safety level of the impact of the abnormal combination on the control function of the stabilization and control device, providing technical support for the abnormal operation handling and maintenance arrangement of the stabilization and control device.

[0050] Currently common abnormal combinations include abnormal locking of stabilization and control devices and abnormal communication between stabilization and control devices. Abnormal stabilization and control devices can be obtained through abnormal combinations, thus forming an abnormal stabilization and control device set.

[0051] The abnormal stabilization control device is a stabilization control device that has a control association with any component element in the abnormal combination, specifically including a stabilization control device A for locking the abnormality and a stabilization control device B at both ends of the communication abnormality channel.

[0052] According to the set of abnormal stabilization and control devices and the control strategy model of the stabilization and control devices obtained from the power grid dispatching automation system, the set of anticipated power grid faults that the abnormal stabilization and control device set should defend against can be obtained, specifically including the anticipated power grid faults defended by stabilization and control device A, the anticipated power grid faults defended by stabilization and control device B, the anticipated faults of obtaining data from stabilization and control device A and stabilization and control device B, and the anticipated faults of sending control commands to stabilization and control device A and stabilization and control device B.

[0053] After the abnormal combination occurs, some of the expected faults in the above power grid expected fault set will lose defense, while some can continue to be defended. Therefore, the expected fault subset that loses defense after the abnormal combination occurs and the expected fault subset that continues to be defended are identified.

[0054] Taking the locking of the stabilizing control device as an example, the locking of the stabilizing control device here mainly includes the locking of the stabilizing control device due to abnormal locking, and the locking of the related stabilizing control device due to communication abnormality. After the stabilizing control device is locked, the expected failure of its defense will lose defense, and the failure that is not related to it will continue to defend.

[0055] For the identified subset of anticipated faults that continue to be defended, based on the power grid operating conditions, for each anticipated fault, identify the on-duty strategy before and after the abnormal combination occurs, and count the controllable quantity changes of the control measures in the on-duty strategy and the implementable evaluation status of the on-duty strategy after the abnormal combination occurs.

[0056] The controllable change is the change in controllable quantity before and after the abnormal combination occurs. The feasible evaluation states include insufficient control quantity, sufficient control quantity and no need for control; insufficient control quantity means that at least one type of control measure in the on-duty strategy has a required control quantity greater than its corresponding controllable quantity; sufficient control quantity means that the required control quantity of all control measure types in the on-duty strategy is less than or equal to its corresponding controllable quantity; sufficient control quantity means that the required control quantity of all control measure types in the on-duty strategy is zero.

[0057] In the above step 4, before determining the safety level of the abnormal combination affecting the control function of the stabilization control device, it is necessary to determine the safety level of the impact of each expected fault on the control function of the stabilization control device. Therefore, the specific process of step 4 is as follows:

[0058] 41) Determine the safety level of each anticipated fault's impact on the control function of the stabilization and control device based on preset rules, controllable quantity changes, implementable assessment states, and a subset of anticipated faults that lose defense;

[0059] The default rules are:

[0060] 1) If the expected failure subset F of the defense is lost e is non-empty, then the expected fault subset F e Each expected fault in e The safety level of the impact on the control function of the stabilization and control device is warning;

[0061] 2) If the expected fault is a subset of expected faults that continue to be defended, F n A predicted fault f in which the controllable quantity decreases n , and the expected fault f n If the feasible evaluation status of the on-duty strategy is insufficient control quantity, then the expected fault f n The safety level of the impact on the control function of the stabilization control device is warning; wherein the controllable quantity decreases means that the controllable quantity before the abnormal combination occurs is greater than the controllable quantity after the abnormal combination occurs;

[0062] 3) The case where the subset of expected failures that lose defense is empty:

[0063] If the expected fault is a subset of the expected fault F n A predicted fault f in which the controllable quantity decreases n , and the expected fault f n If the feasible evaluation status of the on-duty strategy is that the control quantity is sufficient or no control is required, then the expected fault f n The safety level of the impact on the control function of the stabilization and control device is warning;

[0064] If the expected fault is a subset of the expected fault F n A predicted fault f in which the controllable quantity does not decrease n , then the expected fault f n The safety level of the impact on the control function of the stabilization device is normal.

[0065] Therefore, the process of determining the safety level of the impact of the expected fault on the control function of the stabilization control device is as follows:

[0066] S1) If the expected failure subset F is lost e is non-empty, for the expected fault subset F e Each expected fault f e , set its abnormal impact type to reduced defense range, set its safety level to warning, and add it to the associated expected fault set R;

[0067] S2) If we continue to defend against the expected failure subset F n Non-empty, for the expected fault subset F n Each expected fault f n , the controllable quantity before and after the abnormal combination occurs remains unchanged, then the abnormal impact type is set to no impact and the safety level is set to normal; if the controllable quantity of at least one type of control measure decreases, go to S3); otherwise, add the related expected faults with the abnormal impact type of no impact to the associated expected fault set R;

[0068] S3) If the on-duty strategy after the occurrence of the abnormal combination is evaluated to be insufficient control quantity, then the abnormal impact type is set to reduced controllable quantity and the safety level is set to warning; if the on-duty strategy after the occurrence of the abnormal combination is evaluated to be sufficient control quantity or no control is required, then the abnormal impact type is set to reduced controllable quantity and the safety level is set to warning; and the related expected faults with abnormal impact type of reduced controllable quantity are added to the associated expected fault set R.

[0069] 42) According to the safety level of each expected fault affecting the control function of the stabilization and control device, determine the safety level of the abnormal combination affecting the control function of the stabilization and control device and the associated expected fault set, i.e., the associated expected fault set R;

[0070] The specific formula is:

[0071] S=max{S(i),1≤i≤n}

[0072] Among them, S is the safety level of the influence of abnormal combination on the control function of the stabilization and control device; S(i) is the safety level of the influence of the i-th expected fault on the control function of the stabilization and control device; S(i) = 0, 1 or 2; among them, 0 means no influence, which is at the normal level; 1 means that the controllable amount is reduced, but it does not lead to a smaller defense range or insufficient control amount, and it is at the warning level; 2 means that the defense range is reduced or the controllable amount is reduced, and at the same time, the control amount is insufficient, which is at the alarm level, and n is the number of expected faults.

[0073] The above method is mainly aimed at analyzing and evaluating the impact of abnormalities in stabilization and control devices on control functions. Although the control function has the characteristics of complex control logic and customization, whether the on-duty strategy changes before and after the abnormality occurs, and whether the affected on-duty strategy can be fully executed after the abnormality occurs, whether the control function is affected is evaluated, thereby providing technical support for abnormal handling and maintenance arrangements of the stabilization and control device.

[0074] The abnormal impact assessment system of the stabilization device includes:

[0075] A set acquisition module is used to acquire the expected power grid fault set that the abnormal stabilization control device set should defend against according to the control strategy model of the stabilization control device and the expected abnormal combination; wherein the abnormal combination is the abnormal combination of the stabilization control device;

[0076] Subset identification module: used to identify the expected fault subsets that lose defense after the abnormal combination occurs and the expected fault subsets that continue to defend from the expected fault set of the power grid;

[0077] Identification and statistics module: for each expected fault in the expected fault subset to be continuously defended, identify the on-duty strategy before and after the abnormal combination occurs, and count the controllable quantity change of the control measures in the on-duty strategy and the implementable evaluation status of the on-duty strategy after the abnormal combination occurs;

[0078] Safety level module: used to determine the safety level of the impact of abnormal combinations on the control function of the stabilization and control device based on preset rules, controllable quantity changes, feasible assessment states and a subset of anticipated failures that lose defense.

[0079] The security level modules include:

[0080] The first level determination module is used to determine the safety level of each expected fault on the control function of the stabilization control device according to preset rules, controllable quantity changes, implementable evaluation status and the subset of expected faults that lose defense;

[0081] The second level determination module is used to determine the safety level of the impact of abnormal combinations on the control function of the stabilization and control device based on the safety level of the impact of each expected fault on the control function of the stabilization and control device.

[0082] A computer-readable storage medium storing one or more programs, wherein the one or more programs include instructions, which, when executed by a computing device, cause the computing device to execute a method for evaluating the abnormal impact of a stabilization control device.

[0083] A computing device includes one or more processors, one or more memories, and one or more programs, wherein the one or more programs are stored in the one or more memories and are configured to be executed by the one or more processors, and the one or more programs include instructions for executing a method for evaluating the abnormal impact of a stabilization control device.

[0084] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0085] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1A device that provides the functions specified in a block or multiple blocks.

[0086] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0087] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0088] The above are merely embodiments of the present invention and are not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention are included in the scope of the claims of the present invention to be approved.

Claims

1. A method for evaluating the impact of abnormality on a stabilization control device, characterized in that: include: According to the control strategy model of the stabilization control device and the expected abnormal combination, the expected power grid fault set that the abnormal stabilization control device set should defend is obtained; wherein the abnormal combination is the abnormal combination of the stabilization control device; From the expected fault set of the power grid, identify the expected fault subset that loses defense after the abnormal combination occurs and the expected fault subset that continues to be defended; For each expected fault in the expected fault subset to be continuously defended, identify the on-duty strategy before and after the abnormal combination occurs, and count the change in the controllable quantity of the control measures in the on-duty strategy and the feasible evaluation status of the on-duty strategy after the abnormal combination occurs; the feasible evaluation status includes insufficient control quantity, sufficient control quantity and no need for control; According to preset rules, controllable quantity changes, implementable evaluation states and subsets of anticipated faults that lose defense, determine the safety level of each anticipated fault's impact on the control function of the stabilization and control device, and take the safety level with the greatest impact of the anticipated fault on the control function of the stabilization and control device as the safety level of the impact of the abnormal combination on the control function of the stabilization and control device; The preset rules are: If the defense is lost, the expected failure subset F e If is non-empty, the expected fault subset F e Predictable failures in f e The safety level of the impact on the control function of the stabilization and control device is warning; If the expected failure is a subset of the expected failures that continue to be defended F n A predicted fault in which the controllable quantity decreases f n , and the expected failure f n If the feasible evaluation status of the on-duty strategy is insufficient control quantity, then the expected fault f n The safety level of the impact on the control function of the stabilization control device is warning; wherein the controllable quantity decreases means that the controllable quantity before the abnormal combination occurs is greater than the controllable quantity after the abnormal combination occurs; The case where the subset of expected failures that lose defense is empty: If the expected fault is a subset of the expected fault F n A predicted fault in which the controllable quantity decreases f n , and the expected failure f n If the feasible evaluation status of the on-duty strategy is that the control quantity is sufficient or no control is required, then the expected fault f n The safety level of the impact on the control function of the stabilization and control device is warning; If the expected fault is a subset of the expected fault F n A predicted fault in which the controllable quantity does not decrease f n , then the expected fault f n The safety level of the impact on the control function of the stabilization device is normal.

2. The method for evaluating the abnormal impact of a stabilization control device according to claim 1, characterized in that: According to the control strategy model of the stabilization device and the expected abnormal combination, the expected power grid fault set that the abnormal stabilization device set should defend against is obtained. The specific process is as follows: According to the expected abnormal combination, obtain the abnormal stability control device set; According to the abnormal stabilizing control device set and the control strategy model of the stabilizing control device, the expected power grid fault set that the abnormal stabilizing control device set should defend against is obtained.

3. The method for evaluating the abnormal impact of a stabilization device according to claim 1 or 2, characterized in that: The abnormal combination includes abnormal locking of the stabilizing control device and abnormal communication between the stabilizing control devices; The abnormal stabilization control device set includes a stabilization control device A for blocking abnormalities and stabilization control devices B at both ends of the communication abnormality channel; The set of anticipated power grid faults includes anticipated power grid faults defended by stabilization device A, anticipated power grid faults defended by stabilization device B, anticipated faults of obtaining data from stabilization device A and stabilization device B, and anticipated faults of sending control commands to stabilization device A and stabilization device B.

4. The abnormal impact assessment system of the stabilization device is characterized by: include: A set acquisition module is used to acquire the expected power grid fault set that the abnormal stabilization control device set should defend against according to the control strategy model of the stabilization control device and the expected abnormal combination; wherein the abnormal combination is the abnormal combination of the stabilization control device; Subset identification module: used to identify the expected fault subsets that lose defense after the abnormal combination occurs and the expected fault subsets that continue to defend from the expected fault set of the power grid; Identification and statistics module: for each expected fault in the expected fault subset to be continuously defended, identify the on-duty strategy of the expected fault before and after the abnormal combination occurs, and count the change in the controllable quantity of the control measures in the on-duty strategy and the feasible evaluation status of the on-duty strategy after the abnormal combination occurs; the feasible evaluation status includes insufficient control quantity, sufficient control quantity and no need for control; Safety level module: Determine the safety level of each expected fault on the control function of the stabilization and control device according to preset rules, controllable quantity changes, implementable evaluation status and expected fault subsets that lose defense, and take the safety level with the greatest impact of the expected fault on the control function of the stabilization and control device as the safety level of the abnormal combination on the control function of the stabilization and control device; The preset rules are: If the defense is lost, the expected failure subset F e If is non-empty, the expected fault subset F e Predictable failures in f e The safety level of the impact on the control function of the stabilization and control device is warning; If the expected failure is a subset of the expected failures that continue to be defended F n A predicted fault in which the controllable quantity decreases f n , and the expected failure f n If the feasible evaluation status of the on-duty strategy is insufficient control quantity, then the expected fault f n The safety level of the impact on the control function of the stabilization control device is warning; wherein the controllable quantity decreases means that the controllable quantity before the abnormal combination occurs is greater than the controllable quantity after the abnormal combination occurs; The case where the subset of expected failures that lose defense is empty: If the expected fault is a subset of the expected fault F n A predicted fault in which the controllable quantity decreases f n , and the expected failure f n If the feasible evaluation status of the on-duty strategy is that the control quantity is sufficient or no control is required, then the expected fault f n The safety level of the impact on the control function of the stabilization and control device is warning; If the expected fault is a subset of the expected fault F n A predicted fault in which the controllable quantity does not decrease f n , then the expected fault f n The safety level of the impact on the control function of the stabilization device is normal.

5. A computer-readable storage medium storing one or more programs, characterized in that: The one or more programs include instructions which, when executed by a computing device, cause the computing device to perform any one of the methods according to claims 1 to 3.

6. A computing device, characterized in that include: One or more processors, one or more memories, and one or more programs, wherein the one or more programs are stored in the one or more memories and are configured to be executed by the one or more processors, and the one or more programs include instructions for executing any of the methods according to claims 1 to 3.

Images