A thermal power plant security control system and control method based on microservices

Abstract

A thermal power plant security control system and control method based on microservices, including a security equipment unit, a security control unit, and a thermal power plant business service unit. The security equipment unit is connected to the security control unit through the TCP network protocol, and its function is to upload the collected security equipment data to the security control unit; the thermal power plant business service unit is connected to the security control unit through a gateway to provide the thermal power plant staff with the function of viewing and operating various security equipment; wherein the security control unit includes an equipment management module, a storage module, an equipment connection module, an equipment control module, and a functional service module, and each module is developed and deployed on a server in a microservice manner; the security equipment in the security equipment unit includes a camera device, an access control security device, and a speed radar device. The present invention is based on the SpringCloud microservice framework through this platform, and is built by the lightweight component SpringBoot. It can be expanded by adding service nodes, and has high reliability and scalability.

Description

Technical Field

[0001] The present invention belongs to the field of security control of thermal power plants, and in particular relates to a microservice-based security control system and a control method for thermal power plants. Background Art

[0002] The power industry is driving the continuous development of the social economy, and power safety production is a process-based and continuous production process, so it is extremely important to ensure the stable operation of the power plant. At present, the equipment monitoring method of thermal power plants is mainly manpower-based, but there are many loopholes and defects in the manual supervision method, and the slightest negligence will cause uncontrollable consequences, which makes the safety of power production face serious "threats".

[0003] With the rapid development of computer technology, computer communication has penetrated into social life and played a decisive role in the development of social economy, and thermal power plants are also constantly developing towards informatization and intelligence. In recent years, the application of security systems in thermal power plants has gradually increased, which has played a positive role in improving the comprehensive management and control level and efficiency of thermal power plants. However, various security system equipment in the plant area (such as cameras, security access control, speed radar, etc.) and the business system of the thermal power plant are independent of each other and used separately. There is no unified integration, and different staff have to operate on different systems, which is cumbersome and consumes staff energy and time. Summary of the invention

[0004] In order to solve the deficiencies in the prior art, the object of the present invention is to provide a thermal power plant security control system and control method based on microservices.

[0005] The present invention adopts the following technical solution.

[0006] A microservice-based thermal power plant security control system, including a security equipment unit, a security control unit, and a thermal power plant business service unit.

[0007] The security equipment unit is connected to the security control unit via the TCP network protocol to upload the collected security equipment data to the security control unit;

[0008] The business service unit of the thermal power plant is connected to the security control unit through a gateway, providing the thermal power plant staff with the functions of viewing and operating various security equipment;

[0009] The security control unit includes a device management module, a storage module, a device connection module, a device control module and a functional service module. Each module is developed and deployed on the server in a microservice manner. The security equipment in the security equipment unit includes camera equipment, access control security equipment and speed radar equipment.

[0010] The equipment management module is used to maintain all security equipment stored in the security equipment unit, including camera equipment, access control security equipment and speed radar equipment. The security equipment data is stored in the storage module, and a data interface and maintenance page are provided. The power plant business system can maintain the above security equipment data through the data interface, and the staff can maintain the above security equipment data through the maintenance page.

[0011] The security equipment data includes the equipment code, equipment name, equipment type, thermal power plant area to which the equipment belongs, and the coordinates of the equipment's location.

[0012] The device connection module connects to the security device unit through the TCP network protocol, collects security device data, monitors the security device and obtains the personnel entry and exit records collected by the access control device and the vehicle passage data collected by the speed radar; the device connection module transmits the collected security device data, personnel entry and exit records and vehicle passage data to the storage module.

[0013] The storage module is connected to the device control module and the device management module respectively, and is used to store security equipment data, equipment log information, personnel entry and exit records, vehicle traffic data, and call record data of each service interface, and obtains and provides data to the device management module when needed.

[0014] The device control module is used to receive the device control request from the functional service module and send execution instructions to the security devices in the security device unit.

[0015] The execution instructions include access control authorization instructions, access control permission release instructions, camera rotation control instructions, access control opening control instructions and access control closing control instructions. The corresponding device will give corresponding actions after receiving the instructions.

[0016] The access control authorization command uses the A* algorithm to plan the route from outside the factory to the target work area;

[0017] The formula of the A* algorithm is: f*(n)=g*(n)+h*(n),

[0018] In the formula,

[0019] n is the current arbitrary state encountered in the search,

[0020] f*(n) is the minimum cost estimate from the initial state to the target state via state n,

[0021] g*(n) is the minimum cost from the initial state to state n in the state space,

[0022] h*(n) is the minimum estimated cost of the path from state n to the goal state.

[0023] The functional service module connects the equipment control module, the equipment management module and the equipment connection module, and connects to the thermal power plant business service unit through a gateway; the functions of the functional service module include: registering events; providing a functional interface for viewing and controlling security equipment for the thermal power plant business service unit.

[0024] The business service unit of a thermal power plant includes a personnel management module, a work management module, user terminals and a thermal power plant business system server, wherein the user terminals include PC terminals, mobile terminals and large display screens.

[0025] A microservice-based thermal power plant security control method comprises the following steps:

[0026] Step 1: Collect security equipment data, staff information, time period information and work area information;

[0027] Step 2: Screen out temporary external personnel who do not have access control permissions;

[0028] Step 3: Plan a route from outside the factory to the target work area and collect access control information along the route;

[0029] Step 4: Grant the temporary external personnel access rights to the planned route within the time period information described in step 1.

[0030] The beneficial effect of the present invention is that, compared with the prior art, the functions of the thermal power plant business system and the security system are integrated. When the user operates the thermal power plant business system on the user terminal, he can directly view and operate various security equipment without logging into the security system on the PC to view and operate, which makes it more convenient to realize the intelligent control of unlimited distance and venue. Moreover, this design also has the function of real-time event reminder alarm to relevant personnel, which the original security system cannot do, and improves the efficiency and availability of security management.

[0031] The beneficial effects of the present invention also include the following aspects:

[0032] 1. Intelligent safety management of thermal power plants is achieved by connecting camera videos, access control management and speed radar to the security platform, so that managers can grasp the environment, personnel, vehicles and other conditions of the plant in real time, thus improving the management level;

[0033] 2. After the work list is approved, the system intelligently assigns corresponding access control permissions to relevant staff members to prevent them from entering other irrelevant areas and effectively prevent safety accidents;

[0034] 3. The functional service module provides an external functional API interface. The third-party business system of the thermal power plant can access the functions of the security control system through the API, thereby improving the scope of application of the power plant's security work;

[0035] 4. This system is developed and deployed in a microservices approach. Each submodule is deployed on the server individually or in a cluster, which facilitates service expansion and advance deployment of future business to avoid the problem of high server pressure. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] Figure 1 This is a schematic diagram of an application of a microservice-based thermal power plant security control system of the present invention;

[0037] Figure 2 This is a schematic diagram of the structure of a thermal power plant security control system based on microservices of the present invention;

[0038] Figure 3 It is a flow chart of a method for realizing partial security control by a microservice-based thermal power plant security control system of the present invention. DETAILED DESCRIPTION

[0039] The present application is further described below in conjunction with the accompanying drawings. The following embodiments are only used to more clearly illustrate the technical solution of the present invention, and cannot be used to limit the protection scope of the present application.

[0040] like Figure 1 As shown, the present invention provides a microservice-based thermal power plant security control system, including a security equipment unit, a security control unit, and a thermal power plant business service unit; wherein the security equipment in the security equipment unit is connected to the security control unit via a TCP network protocol, and its function is to upload the collected security equipment data used by the system to the security control unit; the thermal power plant business service unit is connected to the security control unit via a gateway, and provides the thermal power plant staff with the function of viewing and operating various security equipment.

[0041] The security control unit is connected to the security equipment unit and the thermal power plant business service unit to obtain security equipment data, send equipment information to the thermal power plant service unit, and receive instructions from the thermal power plant service unit and instruct the security equipment in the security equipment unit to respond.

[0042] The security equipment in the security equipment unit includes, but is not limited to, camera equipment, access control security equipment, and speed radar equipment. The authentication and opening method of the access control equipment supports RFID smart cards and facial recognition.

[0043] The security control unit includes a device management module, a storage module, a device connection module, a device control module, and a functional service module. Each module in the security control unit is developed and deployed in a microservice manner. Each module can be deployed on the server individually or in a cluster to facilitate service expansion and to make advance deployment for the problem of excessive service pressure caused by the addition of related equipment and related business volume that may arise in the future.

[0044] The equipment management module is used to maintain all security equipment stored in the security equipment unit, including camera equipment, access control security equipment, speed radar equipment, and store the security equipment data such as the code, name, type, location, and location coordinates of these equipment through the storage module; the equipment management module also provides corresponding data interfaces and maintenance pages. The business service unit of the thermal power plant can maintain the above equipment data through the data interface, and the security management personnel can maintain the above security equipment data through the maintenance page, thereby realizing unified management of the equipment;

[0045] The device connection module connects to the security device unit through the TCP network protocol. Its functions include: collecting device data of the security device, including device code, device name, and device type, and storing the collected data in the storage module; monitoring the security device in real time and obtaining the personnel entry and exit records collected by the access control device and the vehicle passage data collected by the speed radar in real time, and transmitting the collected personnel entry and exit records and vehicle passage data to the storage module;

[0046] The function of the storage module is to store the device data transmitted from the device control module and the business data transmitted from the device management module in the database; the stored data will also be provided to other modules in need. For example, the data stored in the security control unit (security equipment information, equipment log information, personnel access data recorded by access control, vehicle traffic data detected by radar), local log storage data (called record data of each service interface), when the device management module needs it, it will obtain data from the storage module and provide it to it;

[0047] The function of the device control module is to receive the device control request from the functional service module and send execution instructions to the devices in the security device unit. Its functions include access authorization, access permission release, camera rotation control, access opening and closing control. The corresponding device will give the corresponding action after receiving the instruction.

[0048] The functional service module connects the equipment control module, equipment management module, equipment connection module, and connects to the business service unit of the thermal power plant through a gateway. Its functions include: registering events, providing the business service unit of the thermal power plant with a functional interface for viewing and controlling security equipment. The functional service module provides a functional API interface to the outside world. The third-party business system of the thermal power plant can access the functions of the security control system through the API, thereby improving the scope of application of the power plant's security work.

[0049] The business service unit of a thermal power plant includes a personnel management module, a work management module, user terminals and a thermal power plant business system server, wherein the user terminals include PC terminals, mobile terminals and large display screens.

[0050] like Figure 2 The figure shows the connection relationship between the management modules in the system of the present invention.

[0051] The input end of the device connection module of this system connects to the security equipment in the security system through the TCP network protocol, reads the device information of the security equipment (including name, code, type, etc.), and the device information is classified and sorted through the device management module. Its output end is connected to the storage module, which then stores it in the database.

[0052] Example 1 provides a process for business personnel of a thermal power plant to obtain security equipment data through the security control system provided by the present invention. The business personnel of the thermal power plant uses the user terminal of the business service unit of the thermal power plant to issue a request for obtaining security equipment data. The business system service end of the thermal power plant accesses the functional service module of the security control unit of this system. The functional service module transmits the business personnel's request to the equipment management module. The equipment management module retrieves the saved security equipment data that meets the conditions from the storage module, and returns the obtained security equipment data to the business service unit of the thermal power plant through the functional service module.

[0053] Example 2 provides a process for the business personnel of a thermal power plant to obtain the video images provided by the camera device through the security control system provided by the present invention. When the business personnel need to view the video images, they first access the functional service module of the security control unit, and then the system connects to the specified security device through the device connection module to obtain the video playback address, and then returns the address to the external business system. The external terminal can use this address to play the images captured by the camera. When the external system wants to control the security device, such as access control authorization, camera rotation, etc., it also first accesses the functional service module, and then the system operates the specified security device through the device control module. After completion, the operation result is returned to the thermal power plant service unit to complete the device control operation.

[0054] The system internally calls the device connection module to obtain the camera video playback address, and then returns it to the user terminal for playback. The device control module controls the camera rotation to realize the control function of the user terminal.

[0055] The present invention also provides a microservice-based thermal power plant security control method, comprising the following steps:

[0056] Step 1: Collect security equipment data, staff information, time period information and work area information;

[0057] Step 2: Screen out temporary external personnel who do not have access control permissions;

[0058] Step 3: Plan a route from outside the factory to the target work area and collect access control information along the route;

[0059] Step 4: Grant the temporary external personnel access rights to the planned route within the time period information described in step 1.

[0060] Example 3 provides a thermal power plant that uses the security control system of the present invention to achieve intelligent management of business personnel entering and leaving the plant. In the thermal power plant, the plant area is divided into different levels of areas according to region and function. Each area also contains multiple levels of sub-areas. The passages between the areas have access control systems. When granting access control permissions to staff members, the system will exclude other irrelevant access control permissions based on the work situation and only grant them necessary access control permissions. When a certain work in the service unit of a thermal power plant requires some employees including temporary external personnel to complete it within a certain period of time, after approval by the plant leaders, the business unit in the plant will automatically send all the information of the participants, time period information and work area information of the work to this system. This system will first use the A* algorithm to plan the route from outside the plant to the work area, find out the area through which this route passes, and combine the access control area information in the equipment management module to find out the access control to be passed on this route, and then compare the personnel permissions of these access control, and filter out temporary external personnel without access control permissions (the equipment connection module in this system can query the personnel permissions of each access control, and by comparing with the information of the participants of this work, the personnel without access control permissions can be filtered out), and then combined with the time period information, the equipment control module of this system grants these temporary external personnel access control permissions during this period, thereby realizing the function that all work participants can enter the designated work place of the factory during this work. This design method of this system does not need to manually grant access control permissions to temporary external personnel on the security system, and realizes the intelligent management of personnel entering the plant.

[0061] The A* (A-Star) algorithm is the most effective direct search method for solving the shortest path in a static road network. The formula is: f*(n) = g*(n) + h*(n), where n is the current arbitrary state encountered in the search, f*(n) is the minimum cost estimate from the initial state via state n to the target state, g*(n) is the minimum cost from the initial state to state n in the state space, and h*(n) is the minimum estimated cost of the path from state n to the target state. If h(n) is always less than or equal to the shortest path cost from n to the target state, then the algorithm is considered acceptable.

[0062] like Figure 3As shown, the device connection module inside the system is connected to the security device unit, and the interface address of the system is configured in the security device unit. Through the interface, the real-time record information of the access control, speed radar and other equipment can be obtained, and these record information can be stored in the database through the storage module. During the above work (approved and executed in the thermal power plant), the supervisor of the work can also subscribe to the entry and exit events of the work through the event subscription function provided by this system. The system will push the access control entry and exit record information of all employees involved in the work to the supervisor's mobile phone in real time, so that the supervisor can accurately control the personnel situation at work.

[0063] This system monitors the security equipment unit through the device connection module and obtains the personnel entry and exit records of the access control device and the vehicle traffic data of the speed radar in real time, and stores the records through the storage module. When the user terminal needs to know the personnel entry and exit events or vehicle speeding events in real time, it can register the corresponding events through the functional service module of this system. After the identity is verified and the registration is successful, when the event that meets the conditions occurs, this system can push messages or send text messages according to the reminder method when the user registered to notify the designated person in real time.

[0064] When the user terminal wants to control the opening and closing of the access control and grant access control permissions to employees, it connects to the functional service module of this system. After the identity is verified by this system, the internal control module controls the authorization or opening and closing of the access control, thereby realizing the control function of the user terminal.

[0065] The beneficial effects of the present invention include the following aspects:

[0066] 1. Intelligent safety management of thermal power plants is achieved by connecting camera videos, access control management and speed radar to the security platform, enabling managers to understand the plant environment, personnel, vehicles and other conditions in real time, thus improving management levels.

[0067] 2. After the work list is approved, the system intelligently assigns corresponding access control permissions to relevant staff to prevent personnel from entering other irrelevant areas and effectively prevent safety accidents.

[0068] 3. The functional service module provides a functional API interface to the outside world. The third-party business system of the thermal power plant can access the functions of the security control system through the API to enhance the scope of application of the power plant's security work.

[0069] 4. This system is developed and deployed in a microservices approach. Each submodule is deployed on the server individually or in a cluster, which facilitates service expansion and advance deployment of future business to avoid the problem of high server pressure.

[0070] The applicant of the present invention has made a detailed explanation and description of the implementation examples of the present invention in conjunction with the drawings in the specification. However, those skilled in the art should understand that the above implementation examples are only preferred implementation schemes of the present invention, and the detailed description is only to help readers better understand the spirit of the present invention, but not to limit the scope of protection of the present invention. On the contrary, any improvements or modifications based on the inventive spirit of the present invention should fall within the scope of protection of the present invention.

Claims

1. A microservice-based thermal power plant security control system, comprising a security equipment unit, a security control unit, and a thermal power plant business service unit, characterized in that: The security device unit is connected to the security control unit via the TCP network protocol, and is used to upload the collected security device data to the security control unit; The business service unit of the thermal power plant is connected to the security control unit through a gateway, providing the thermal power plant staff with the functions of viewing and operating various security equipment; The security control unit includes a device management module, a storage module, a device connection module, a device control module and a functional service module. Each module is developed and deployed on the server in a microservice manner. The security equipment in the security equipment unit includes camera equipment, access control security equipment and speed radar equipment. The device management module is used to maintain all security devices stored in the security device unit, including camera devices, access control security devices and speed radar devices, store security device data in the storage module, and provide a data interface and a maintenance page. The power plant business system can maintain the above security device data through the data interface, and the staff can maintain the above security device data through the maintenance page; the device connection module connects to the security device unit through the TCP network protocol, the device connection module collects security device data, the device connection module monitors the security device and obtains the personnel entry and exit records collected by the access control device and the vehicle passage data collected by the speed radar; the device connection module transmits the collected security device data, personnel entry and exit records and vehicle passage data to the storage module.

2. The microservice-based thermal power plant security control system according to claim 1 is characterized in that: The security equipment data includes the equipment code, equipment name, equipment type, thermal power plant area to which the equipment belongs, and the coordinates of the location of the equipment.

3. The microservice-based thermal power plant security control system according to claim 1 is characterized in that: The storage module is connected to the device control module and the device management module respectively, and is used to store security equipment data, equipment log information, personnel entry and exit records, vehicle traffic data, and call record data of each service interface, and obtains and provides data to the device management module when needed.

4. The microservice-based thermal power plant security control system according to claim 1, characterized in that: The device control module is used to receive the device control request from the functional service module and send execution instructions to the security devices in the security device unit.

5. The microservice-based thermal power plant security control system according to claim 4 is characterized in that: The execution instructions include access control authorization instructions, access control authority release instructions, camera rotation control instructions, access control opening instructions and access control closing instructions. The corresponding device gives corresponding actions after receiving the instructions.

6. The microservice-based thermal power plant security control system according to claim 5, characterized in that: The access control authorization instruction uses the A* algorithm to plan a route from outside the factory to the target work area; The formula of the A* algorithm is: f*(n)=g*(n)+h*(n), In the formula, n is the current arbitrary state encountered in the search, f*(n) is the minimum cost estimate from the initial state to the target state via state n, g*(n) is the minimum cost from the initial state to state n in the state space, h*(n) is the minimum estimated cost of the path from state n to the goal state.

7. The microservice-based thermal power plant security control system according to claim 1, characterized in that: The functional service module connects the equipment control module, the equipment management module and the equipment connection module, and connects to the thermal power plant business service unit through a gateway; the functions of the functional service module include: registering events; providing a functional interface for viewing and controlling security equipment for the thermal power plant business service unit.

8. The microservice-based thermal power plant security control system according to claim 1, characterized in that: The thermal power plant business service unit includes a personnel management module, a work management module, a user terminal and a thermal power plant business system service terminal, wherein the user terminal includes a PC terminal, a mobile terminal and a large display screen.

9. A microservice-based thermal power plant security control method based on the microservice-based thermal power plant security control system according to any one of claims 1 to 8, characterized in that: The following steps are involved: Step 1: Collect security equipment data, staff information, time period information and work area information; Step 2: Screen out temporary external personnel who do not have access control permissions; Step 3: Plan a route from outside the factory to the target work area and collect access control information along the route; Step 4: Grant the temporary external personnel access rights to the planned route within the time period information described in step 1.

Images