Method, device, equipment and storage medium for determining abnormality of situation awareness terminal

Abstract

The present invention discloses a method, device, equipment and storage medium for determining the abnormality of a situation awareness terminal. The method includes: determining the regional center corresponding to each situation awareness terminal; determining the median power consumption in the current time window according to the power consumption parameters of each situation awareness terminal belonging to the same regional center; determining the power consumption change parameter according to the median power consumption of the situation awareness terminal at the current moment and the historical power consumption parameters at the start moment in the current time window; if the power consumption abnormality parameter is greater than the preset abnormality parameter threshold, determining the variable energy value of each situation awareness terminal belonging to the same regional center; for at least one variable energy value, determining the target abnormal situation awareness terminal, solving the problem of low accuracy of abnormal monitoring caused by determining whether data is abnormal based on data comparison in the prior art, achieving the improvement of data transmission effectiveness, improving the accuracy of data detection, and achieving the effect of ensuring the safe operation of the power grid.

Description

Technical Field

[0001] The present invention relates to the field of computer processing technology, and in particular to a method, device, equipment and storage medium for determining abnormality of a situation awareness terminal. Background Art

[0002] With the development of information and communication technology, in order to accurately and in real time grasp the operating characteristics of the distribution network, situational awareness terminals are usually deployed in the power grid. Based on the Internet of Things, the power data of all situational awareness terminals are transmitted, and the power data is used to detect the security of the power grid in real time and grasp the operating characteristics of the distribution network. However, during the transmission process, the data is exposed to the public network environment, and the transmission data is prone to tampering. Therefore, it is particularly important to detect the data in a timely and accurate manner and detect anomalies in a timely manner.

[0003] At present, the data detection method is usually to compare the data received from a certain situational awareness terminal with the preset power value. If a certain data is inconsistent with the preset data, it is considered that the transmitted data is abnormal and there may be data attack behavior. The data detection of this method is relatively one-sided, resulting in low accuracy in determining data anomalies, which seriously threatens the security of the power grid. Summary of the invention

[0004] The present invention provides a method, device, equipment and storage medium for determining abnormalities of a situation awareness terminal, so as to improve the accuracy of abnormal data detection while improving the effectiveness of data transmission, thereby achieving the technical effect of ensuring the safe operation of a power grid.

[0005] According to one aspect of the present invention, a method for determining an abnormality of a situation awareness terminal is provided, the method comprising:

[0006] Determine the regional center corresponding to each situation awareness terminal, and deploy electronic equipment at the regional center to receive the power consumption parameters sent by the corresponding situation awareness terminal based on the electronic equipment;

[0007] For each situation awareness terminal belonging to the same regional center, determine the median power consumption of the situation awareness terminal in the current time window according to the power consumption parameters of the situation awareness terminal; wherein the current time window is determined according to the current time and the preset window duration;

[0008] Determine the power consumption change parameter of the situation awareness terminal according to the median power consumption of the situation awareness terminal at the current moment and the historical power consumption parameter corresponding to the starting moment in the current time window;

[0009] If the power consumption abnormality parameter is greater than the preset abnormal parameter threshold, then determine the change energy value corresponding to each time window within a preset number before the current moment for each situation awareness terminal belonging to the same regional center as the situation awareness terminal device;

[0010] For at least one variable energy value corresponding to each situation awareness terminal, a target abnormal situation awareness terminal is determined.

[0011] According to another aspect of the present invention, there is provided a device for determining an abnormality of a situation awareness terminal, the device comprising:

[0012] A regional center determination module, used to determine the regional center corresponding to each situation awareness terminal, and deploy electronic equipment at the regional center to receive the power consumption parameters sent by the corresponding situation awareness terminal based on the electronic equipment;

[0013] A power consumption median determination module is used to determine the power consumption median of each situation awareness terminal belonging to the same regional center in a current time window according to the power consumption parameters of the situation awareness terminal; wherein the current time window is determined according to the current time and the preset window duration;

[0014] A power consumption change parameter determination module, used to determine the power consumption change parameter of the situation awareness terminal according to the power consumption parameter of the situation awareness terminal at the current moment and the starting power consumption parameter at the starting moment within the current time window;

[0015] A variable energy value determination module is used to determine the variable energy values ​​corresponding to each time window within a preset number before the current moment for each situation awareness terminal belonging to the same regional center as the situation awareness terminal device if the abnormal power consumption parameter is greater than a preset abnormal parameter threshold;

[0016] The abnormal situation awareness terminal determination module is used to determine the target abnormal situation awareness terminal for at least one variable energy value corresponding to each situation awareness terminal.

[0017] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0018] at least one processor; and

[0019] a memory communicatively connected to the at least one processor; wherein,

[0020] The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the method for determining an abnormality of a situation awareness terminal described in any embodiment of the present invention.

[0021] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the method for determining an abnormality of a situation awareness terminal described in any embodiment of the present invention when executed.

[0022] The technical solution of the embodiment of the present invention determines the regional center corresponding to each situation awareness terminal and deploys electronic equipment in the regional center; for each situation awareness terminal belonging to the same regional center, determines the median power consumption of the situation awareness terminal in the current time window according to the power consumption parameters of the situation awareness terminal; determines the power consumption abnormality parameter of the situation awareness terminal according to the median power consumption of the situation awareness terminal at the current moment and the historical power consumption parameters corresponding to the starting moment in the current time window; if the power consumption abnormality parameter is greater than the preset abnormality parameter threshold, determines the change energy value corresponding to each time window within a preset number before the current moment for each situation awareness terminal belonging to the same regional center as the situation awareness terminal device; determines the target abnormal situation awareness terminal for at least one change energy value corresponding to each situation awareness terminal, thereby solving the problem in the prior art. The problem of low accuracy and poor effect of abnormal monitoring is caused by determining whether there is an abnormality in terminal data based on data comparison. The power consumption parameters of each situation awareness terminal are transmitted to the corresponding regional center to ensure the effectiveness of data transmission. The power consumption parameters of the situation awareness terminal are determined based on the power consumption parameters of each situation awareness terminal belonging to the same regional center and the historical power consumption parameters corresponding to the starting time of each situation awareness terminal in the current time window. By monitoring the changes in the power consumption parameters, it is determined whether there is an abnormality in the data of the situation awareness terminal, thereby improving the accuracy of anomaly detection. At the same time, at least one variable energy value corresponding to each situation awareness terminal is used to accurately determine the target abnormal situation awareness terminal, thereby achieving rapid, accurate and reliable detection of abnormal situation awareness terminals and ensuring the safe operation of the power grid.

[0023] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0025] Figure 1is a flowchart of a method for determining an abnormality of a situation awareness terminal provided according to Embodiment 1 of the present invention;

[0026] Figure 2 This is a schematic diagram of situation awareness terminal communication provided according to Embodiment 2 of the present invention;

[0027] Figure 3 is a schematic diagram of a power consumption parameter caching method provided according to a second embodiment of the present invention;

[0028] Figure 4 2 is a schematic diagram of a structure of a device for determining abnormality of a situation awareness terminal provided according to a third embodiment of the present invention;

[0029] Figure 5 It is a structural schematic diagram of an electronic device for implementing the method for determining abnormality of a situation awareness terminal according to an embodiment of the present invention. DETAILED DESCRIPTION

[0030] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0031] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0032] Embodiment 1

[0033] Figure 1 This is a flowchart of a method for determining a situational awareness terminal abnormality according to the first embodiment of the present invention. This embodiment is applicable to situations where a situational awareness terminal is abnormal. The method can be performed by a device for determining a situational awareness terminal abnormality. The device for determining a situational awareness terminal abnormality can be implemented in the form of hardware and / or software. The device for determining a situational awareness terminal abnormality can be configured in a computing device. Figure 1 As shown, the method includes:

[0034] S110, determining the regional center corresponding to each situation awareness terminal, and deploying electronic equipment in the regional center to receive the power usage parameters sent by the corresponding situation awareness terminal based on the electronic equipment.

[0035] Among them, the situation awareness terminal can be deployed on various sensing objects of the power grid. For example, the situation awareness terminal can be a current acquisition device, a voltage acquisition device, a power acquisition device, a temperature sensor, a micro-phasor measurement unit (distribution phasor measurement unit, D-PMU), etc. The regional center can be understood as a site with data reception and transmission functions, and the regional center corresponding to each situation awareness terminal may be different.

[0036] In order to ensure the effectiveness of data transmission from situation awareness terminals, the regional center corresponding to each situation awareness terminal can be determined, and electronic equipment can be deployed in the corresponding regional center. The electronic equipment can receive power usage parameters sent by the corresponding situation awareness terminal and store the power usage parameters in the corresponding regional center. The data stored in the regional center can also be forwarded to the data analysis end for data analysis, so as to determine whether there are any abnormalities in the situation awareness terminal related to the regional center (such as injection of erroneous data, etc.) based on the data.

[0037] It should be noted that the specific locations where each situation awareness terminal is deployed may be different. The power data values ​​generated by the situation awareness terminals that are closer may be less different. This prevents the problem of transmitting the data of the situation awareness terminal to a regional center that is farther away, thereby reducing the transmission efficiency. When determining the regional center corresponding to each situation awareness terminal, the regional center to which the situation awareness terminal should be connected can be determined in a manner that minimizes the electrical distance. For example, an algorithm can be used to cluster the power data values ​​corresponding to each situation awareness terminal to obtain several clusters, and a regional center is set for the situation awareness terminal in each cluster.

[0038] Optionally, determining the regional center corresponding to each situation awareness terminal includes: obtaining historical power consumption data of each situation awareness terminal at a first historical moment and cluster power consumption data of at least one initialized cluster center; respectively determining the relative error value between each historical power consumption data and each cluster power consumption data; determining the initialized cluster center to which the situation awareness terminal to which each historical power consumption data belongs belongs based on at least one relative error value corresponding to each historical power consumption data; and updating the corresponding initialized cluster center based on the historical power consumption data of at least one situation awareness terminal associated with each initialized cluster center to obtain at least one regional center.

[0039] Among them, at least one relative error value corresponds to the initialized cluster center, and the distance between the situation awareness terminal and the cluster center can be characterized based on the relative error value. The historical power consumption data and the clustered power consumption data are the same electrical index item data, and the index item data can correspond to index items such as voltage, current or power.

[0040] In practical applications, the historical power consumption data of each situation awareness terminal at the first historical moment, such as voltage data, can be obtained and clustered using the k-means clustering algorithm. For example, assuming that k situation awareness terminals have been installed, the voltage is used as the clustering indicator, and the voltage vector composed of them is V = [v 1 ,v 2 ,v 3 …v k ], where v k The historical power consumption data of the k-th situation awareness terminal is randomly selected from L voltage data of the k-th situation awareness terminal as the initial cluster center, such as the randomly initialized cluster center vector C = [c 1 ,c 2 ,c 3 …c L ] Among them, c L For the clustered electricity consumption data of the Lth initialized cluster center, the relative error value between each historical electricity consumption data and each clustered electricity consumption data can be calculated respectively, such as using the formula R mh =|v m -c h | 2 Calculate, where R mh is a relative error value, which characterizes the distance between the hth initialized cluster center and the mth situation awareness terminal. Furthermore, the initialized cluster center to which the situation awareness terminal to which each historical power consumption data belongs can be determined based on at least one relative error value corresponding to each historical power consumption data. For example, the initialized cluster center corresponding to the minimum relative error value corresponding to the historical power consumption data A can be used as the initialized cluster center of the situation awareness terminal 1 corresponding to the historical power consumption data A, that is, the calculated situation awareness terminal is divided into the cluster center with the smallest relative error value. Accordingly, each situation awareness terminal has a uniquely corresponding cluster center. Furthermore, the corresponding initialized cluster center can be updated based on the historical power consumption data of at least one situation awareness terminal associated with each initialized cluster center. For example, after clustering once, the historical power consumption data of the situation awareness terminal contained in each cluster center can be averaged, and a new cluster center can be determined based on the average value, such as the cluster center vector C=[c 11 ,c 12 ,c 13 …c 1L ], where c1L The clustered power consumption data of the Lth new cluster center is obtained accordingly, and then the relative error values ​​of each historical power consumption data and the power consumption data of each new cluster center are determined respectively, and the process is repeated until the value of the cluster center C is basically unchanged, and then it can be ended, and it is considered that L regional centers are obtained, where L is a preset number value, which can be determined according to the hardware configuration of the regional center (such as CPU, memory). The electronic equipment in each regional center can receive the power consumption parameters of at least one situation awareness terminal that has been divided, which can reduce the pressure of data transmission and improve the efficiency of data transmission.

[0041] It should be noted that when one or several regional centers are out of operation, the communication link can be reselected based on the present technical solution to re-determine the corresponding regional center for each situation awareness terminal.

[0042] It should also be noted that in order to further alleviate the pressure of data storage while ensuring the effective transmission of situational awareness terminal data, when receiving the power consumption parameters sent by the corresponding situational awareness terminal, the power consumption parameters can be divided into different categories according to the timeliness of the power consumption parameters, and then different types of power consumption parameters can be stored in different cache areas.

[0043] Optionally, after the electronic equipment is deployed in the regional center, it also includes: receiving power usage parameters sent by each situation awareness terminal associated with the current regional center; and storing the power usage parameters in corresponding cache spaces according to the timeliness of the power usage parameters.

[0044] Among them, timeliness can characterize the importance and effectiveness of electricity parameters. For example, the better the timeliness of electricity parameters, the more useful the electricity parameters are. Optionally, timeliness can be determined based on the time information of receiving the electricity parameters. The longer the received time information is from the current time, the worse the timeliness of the electricity parameters. Conversely, the shorter the received time information is from the current time, the better the timeliness of the electricity parameters. The storage method of electricity parameters corresponding to each regional center is the same, and any regional center can be described as the current regional center.

[0045] In actual applications, after electronic devices are deployed in the regional center, each situation awareness terminal can upload power usage parameters to the electronic devices in the regional center corresponding to itself. Furthermore, when receiving power usage parameters sent by each situation awareness terminal associated with the current regional center, the power usage parameters of each situation awareness terminal can be stored in the corresponding cache space according to the timeliness of the power usage parameters. For example, power usage parameter a is the data within 1 minute before the current moment of the situation awareness terminal, which can be considered to have good timeliness, and the data is stored in cache space A; power usage parameter b is the data of the situation awareness terminal within 5 months, which can be considered to have poor timeliness, and the data can be stored in cache space B.

[0046] It should be noted that the situation awareness terminals can also be divided into different business data collection terminals according to business needs. For example, the real-time business data collected by situation awareness terminal 1 will be stored in cache space A when the real-time business data is received; the near-real-time business data collected by situation awareness terminal 2 will be stored in cache space B; the non-real-time business data collected by situation awareness terminal 3 will be stored in cache space C when the real-time business data is received.

[0047] It should also be noted that, according to business needs, the business data collected by the situation awareness terminal can also be divided according to the timeliness of the data, such as real-time business data, near real-time business data, non-real-time business data, etc., and a corresponding number of cache spaces can be set accordingly. When it is detected that the received data is real-time business data, the real-time business data can be stored in cache space A. When it is detected that the received data is near real-time business data, the data can be stored in cache space B.

[0048] Optionally, the cache space includes at least three, and the power usage parameters are stored in corresponding cache spaces according to the timeliness of the power usage parameters, including: when the power usage parameters are received and the storage time of the power usage parameters is within a first preset time range, the power usage parameters are stored in the first cache space; when the power usage parameters are received and the storage time of the power usage parameters exceeds the first preset time but does not reach the second preset time, the power usage parameters are transferred from the first cache space to the second cache space for storage; when the storage time of the power usage parameters exceeds the second preset time, the power usage parameters are moved from the second cache space to the third cache space for storage; when the storage time of the power usage parameters reaches the third preset time, the power usage parameters are released from the third cache space.

[0049] Among them, the third preset time length is greater than the second preset time length, and the second preset time length is greater than the first preset time length.

[0050] It should be noted that in specific applications, data can be divided into power consumption parameters with different timeliness according to business needs, such as real-time power consumption parameters, near real-time power consumption parameters, and non-real-time power consumption parameters. Real-time power consumption parameters can be stored in fast read and write devices, such as cache, etc., which is called cache block 1, that is, the first cache space. Near real-time power consumption parameters are stored in the remaining cache resources, called cache block 2, that is, the second cache space; non-real-time power consumption parameters exist in the hard disk, that is, the third cache space. When data is transmitted, the first cache space has the highest priority. The second cache space data can only be transmitted after the first cache space data transmission is completed. The data in the third cache space needs to wait until the second cache space data transmission is completed before it can be transmitted. The advantage of such transmission is that data with high timeliness is transmitted first to ensure that real-time services can be effectively executed.

[0051] In this embodiment, considering the limited hardware resources of the system, when it is detected that the received power usage parameters and the duration of storing the power usage parameters are within the first preset duration, it can be considered that the timeliness of the power usage parameters at this time is the best, and the power usage parameters can be stored in the first cache space. When it is detected that the received power usage parameters and the duration of storing the power usage parameters exceed the first preset duration and do not reach the second preset duration, it can be considered that the invalidity of the power usage parameters at this time has deteriorated, and the power usage parameters can be transferred from the first cache space to the second cache space for storage. When it is detected that the storage duration of the power usage parameters exceeds the second preset duration, it can be considered that the invalidity of the power usage parameters at this time has further deteriorated, and the power usage parameters can be moved from the second cache space to the third cache space for storage. When it is detected that the storage duration of the power usage parameters reaches the third preset duration, it can be considered that the invalidity of the power usage parameters at this time is poor and has no use value, and the power usage parameters can be released from the third cache space. For example, the data in the first cache space, the second cache space, and the third cache space are progressive and dynamic. Once the power usage parameters are successfully transmitted to the first cache space, when it is detected that the storage time of the power usage parameters exceeds the first preset time and does not reach the second preset time, it is placed in the second cache space. After waiting for a certain period of time and no read or other operation requests are received, it is stored in the third cache space. Similarly, once the power usage parameters are successfully transmitted to the second cache space, when it is detected that the storage time of the power usage parameters exceeds the second preset time and does not reach the third preset time, it is placed in the third cache space. The advantage of this dynamic cache transfer method is that it effectively alleviates memory storage pressure and further ensures that real-time services can be effectively executed.

[0052] S120. For each situation awareness terminal belonging to the same regional center, determine the median power consumption of the situation awareness terminal in the current time window according to the power consumption parameters of the situation awareness terminal.

[0053] The current time window is determined based on the current time and the preset window duration. For example, if the preset window duration is 20 minutes, the current time to the previous 20 minutes can be used as the current time window.

[0054] It should be noted that in the actual data transmission process, there may be multiple data transmission ports that tamper with data into abnormal data. Therefore, when detecting whether there are abnormalities in each situation awareness terminal in the power grid, the regional center can be used as a unit. When abnormal data is detected in a situation awareness terminal associated with a regional center, it can be preliminarily considered that there may be an attack on the regional center, and the remaining situation awareness terminals associated with the regional center may also have abnormal data. Accordingly, the power consumption parameters transmitted by each situation awareness terminal belonging to the same regional center can be monitored on a regional center basis to ensure the normal operation of each situation awareness terminal.

[0055] In practical applications, for each situation awareness terminal belonging to the same regional center, multiple power usage parameters of the situation awareness terminal in the current time window can be determined based on the power usage parameters of a situation awareness terminal, and then the median power usage can be found in each power usage parameter to determine whether the situation awareness terminal is abnormal based on the median power usage. For example, the power usage parameter is voltage, and the regional center A searches for the median voltage in the sliding window with T as the preset window length. For example, when receiving the voltage v of the situation awareness terminal 1 at time t, 1 , with v 1 is the last value in the current time window. It can be seen that the current time window can include {v N ,v N-1 ...v 1}, where the voltage value of N at time tT can be calculated by the formula Vmed,t=med{v N ,v N-1 ...v 1}, find the median value Vmed,t of the N voltages from tT to t, where med represents the median.

[0056] S130. Determine the power consumption change parameter of the situation awareness terminal according to the median power consumption of the situation awareness terminal at the current moment and the historical power consumption parameter corresponding to the starting moment in the current time window.

[0057] Among them, the power consumption change parameters can characterize the abnormal state of the situation awareness terminal.

[0058] In practical applications, after determining the median power consumption of the situation awareness terminal in the current time window, at least one historical power consumption parameter in the historical time window with the start time as the end time can be found based on the start time in the current time window to determine the power consumption change parameter of the situation awareness terminal. For example, the current time is t, the current time window is tT to t, tT is the start time, and the historical time window with tT as the end time is t-2T to tT. The median power consumption corresponding to each historical power consumption parameter from t-2T to tT can be calculated. Based on the median power consumption corresponding to the current time t and the median power consumption corresponding to t-2T to tT, the power consumption change parameter of the situation awareness terminal can be determined. For example, the power consumption change parameter can be calculated using the formula a=e |(Vmed,t)-(Vmed,t-T)| Calculation, a represents the power consumption variation parameter, Vmed,t represents the median power consumption corresponding to the current time t, and (Vmed,tT) represents the median power consumption corresponding to t-2T to tT.

[0059] It should be noted that in order to improve the convenience of data processing, the objective function required for calculating the power consumption variation parameters can be preset, and the objective function includes at least one parameter required for calculating the power consumption variation parameters, so that the corresponding power consumption variation parameters can be obtained by inputting the parameters into the objective function.

[0060] Optionally, the power consumption change parameters of the situation awareness terminal are determined based on the median power consumption of the situation awareness terminal at the current moment and the historical power consumption parameters corresponding to the starting moment in the current time window, including: taking the median power consumption of the situation awareness terminal at the current moment and the historical power consumption parameters as input parameters of the objective function; and determining the power consumption change parameters of the situation awareness terminal based on the input parameters and the objective function.

[0061] In practical applications, the objective function can be {v N ,v N-1 ...v 1} is the set of all power consumption parameters in the time window corresponding to the current time t. 2N ,v 2N-1 ...v N+1 ,} is the set of all historical electricity consumption parameters in the historical time window with the start time in the current time window as the end time, and {v N ,v N-1 ...v 1} and {v 2N ,v 2N-1 ...v N+1 ,} as the input parameter of the objective function, and obtain the power consumption change parameter a of the current situation awareness terminal. The objective function can also be a=e |(Vmed,)t-(Vme,d-t)T|At this time, the median electricity consumption in the current time window (Vmed,t) and the median electricity consumption in the historical time window (Vmed,tT) are used as the input parameters of the objective function to obtain the electricity consumption change parameter a.

[0062] S140. If the abnormal power consumption parameter is greater than a preset abnormal parameter threshold, determine the change energy value corresponding to each time window within a preset number before the current moment for each situation awareness terminal belonging to the same regional center as the situation awareness terminal device.

[0063] In actual applications, when it is detected that the abnormal power consumption parameter of a situation awareness terminal device is greater than the preset abnormal parameter threshold, it is considered that the situation awareness terminals belonging to the same regional center as the situation awareness terminal device may have abnormalities (such as data tampering). At this time, the situation awareness terminals in the same regional center can be controlled to stop data transmission. At the same time, based on the power consumption parameters corresponding to each time window within a preset number before the current moment, it is possible to further determine which situation awareness terminals have abnormalities. The judged abnormal value can be used as the variable energy value, so as to judge and locate the abnormal situation awareness terminal range based on the variable energy value, and timely discover and solve the abnormalities.

[0064] It should be noted that if there is an abnormal entrance during the data transmission process, it may be that a single situation awareness terminal is attacked, or it may be the situation awareness terminals in some or all areas. The abnormal situation can be calculated based on the power consumption parameters corresponding to each reported time window. Optionally, the variable energy value corresponding to each time window within a preset number before the current moment is determined for each situation awareness terminal belonging to the same regional center as the situation awareness terminal device, including: determining the median of historical power consumption corresponding to each time window within a preset number before the current moment; determining the difference square of each power consumption data in the time window and the corresponding historical power consumption median, and determining the variable energy value of each time window based on the difference square and the historical power consumption amount in the time window.

[0065] The power consumption data is consistent with the power consumption parameters. Optionally, the power consumption parameters, the power consumption data and the historical power consumption data include at least one of the voltage data, the current data and the power data sent by the situation awareness terminal.

[0066] In practical applications, the variable energy value corresponding to the current time window can be calculated based on the power consumption parameters and the median power consumption corresponding to the current time window, as shown in the following formula (1):

[0067]

[0068] Among them, s represents the variable energy value, v p represents the power consumption parameters in the current time window, v med,trepresents the median power consumption in the current time window, and N represents the number of power consumption parameters.

[0069] On the basis of the above scheme, the median of historical electricity consumption corresponding to each time window can be calculated based on the historical electricity consumption parameters corresponding to each time window within a preset number before the current moment, and the variable energy value of each time window can be determined based on the difference square of the historical electricity consumption parameters (i.e., electricity consumption data) corresponding to each time window and the corresponding median of historical electricity consumption and the historical electricity consumption quantity. Based on the variable energy value corresponding to the current time window and the variable energy values ​​of each time window, it can be determined in which time period the situation awareness terminal has an abnormality, and it can also be determined which situation awareness terminals have an abnormality based on at least one variable energy value corresponding to each situation awareness terminal.

[0070] S150. Determine a target abnormal situation awareness terminal for at least one variable energy value corresponding to each situation awareness terminal.

[0071] In practical applications, for at least one variable energy value corresponding to each situation awareness terminal, the variable energy mean corresponding to each situation awareness terminal can be calculated, and each variable energy mean can be averaged to obtain a target mean. When it is detected that the variable energy value of a certain situation awareness terminal exceeds the preset value of the target mean, the situation awareness terminal is considered to be abnormal. Or, optionally, according to the distribution information of at least one variable energy value corresponding to each situation terminal, when it is detected that the variable energy value of a certain situation awareness terminal deviates significantly from the distribution information, the situation awareness terminal can be used as a target abnormal situation awareness terminal. Accordingly, after determining the target abnormal situation awareness terminal, the data transmission of the remaining normal situation awareness terminals belonging to the same regional center as the target abnormal situation awareness terminal can be restored, so as to accurately suspend and resume reading data of all situation awareness terminals in the area, and simultaneously send abnormal data events.

[0072] It should be noted that, in order to improve the effectiveness of anomaly detection, optionally, the target anomaly time window can also be determined based on the changing energy value of the target abnormal situation perception terminal.

[0073] In a specific application, for at least one variable energy value corresponding to a target abnormal situation awareness terminal, when a variable energy value is greater than a preset value, it can be considered that there may be an abnormality in the time window corresponding to the variable energy value, and then it can be considered that the target abnormal situation awareness terminal may have an abnormality in the time window, and then the attack time can be accurately determined. Alternatively, the distribution information corresponding to each variable energy value can be determined. When a variable energy value is detected to deviate significantly from the distribution information, the time window corresponding to the variable energy value can be used as the target abnormal time window, so as to provide a reference for abnormal analysis based on the determined attack time, and accurately and effectively determine the processing method.

[0074] It should be noted that in the technical solution of this embodiment, the first preset duration, the second preset duration, the third preset duration, the preset window duration, the preset number and the preset abnormal parameter threshold can all be determined by technical personnel according to actual working conditions, and this technical solution does not limit this.

[0075] The technical solution of this embodiment is to determine the regional center corresponding to each situation awareness terminal and deploy electronic equipment in the regional center; for each situation awareness terminal belonging to the same regional center, determine the median power consumption of the situation awareness terminal in the current time window according to the power consumption parameters of the situation awareness terminal; determine the power consumption abnormality parameter of the situation awareness terminal according to the median power consumption of the situation awareness terminal at the current moment and the historical power consumption parameters corresponding to the starting moment in the current time window; if the power consumption abnormality parameter is greater than the preset abnormality parameter threshold, determine the change energy value corresponding to each time window within a preset number before the current moment for each situation awareness terminal belonging to the same regional center as the situation awareness terminal device; for at least one change energy value corresponding to each situation awareness terminal, determine the target abnormal situation awareness terminal, thereby solving the basic problem in the prior art. In order to solve the problem of low accuracy and poor effect of abnormal monitoring by determining whether terminal data is abnormal in the way of data comparison, the power consumption parameters of each situation awareness terminal are transmitted to the corresponding regional center to ensure the effectiveness of data transmission, and the power consumption parameters of the situation awareness terminal are determined based on the power consumption parameters of each situation awareness terminal belonging to the same regional center and the historical power consumption parameters corresponding to the starting time of each situation awareness terminal in the current time window. By monitoring the changes in the power consumption parameters, it is determined whether the data of the situation awareness terminal is abnormal, thereby improving the accuracy of abnormal detection. At the same time, at least one variable energy value corresponding to each situation awareness terminal is also determined to accurately determine the target abnormal situation awareness terminal, so as to achieve rapid, accurate and reliable detection of abnormal situation awareness terminals and ensure the safe operation of the power grid.

[0076] Embodiment 2

[0077] As an optional embodiment of the above embodiment, in order to make those skilled in the art further understand the technical solution of the embodiment of the present invention, a specific application scenario example is given. For details, please refer to the following specific content.

[0078] For example, see Figure 2 , which can be represented as a situation awareness terminal communication diagram. This technical solution can be implemented by the situation awareness terminal, the regional center, the data processing center and the application center. Considering that a large number of situation awareness terminals need to be deployed in the distribution network, a corresponding regional center can be assigned to each situation awareness terminal. Each regional center accesses the power consumption parameters transmitted by multiple situation awareness terminals. All regional centers aggregate the power consumption parameters to the data processing center. The data processing center determines the target abnormal situation awareness terminal and the target abnormal time window based on the power consumption parameter analysis. The application center determines the target processing method based on the target abnormal situation awareness terminal and the target abnormal time window to ensure the normal operation of the power grid.

[0079] On the basis of the above scheme, the regional center corresponding to each situation awareness terminal is determined. The determination method may be: obtaining the historical power consumption data of each situation awareness terminal at the first historical moment. For example, the historical power consumption data is the voltage value of the situation awareness terminal. The voltage is used as the clustering index and K-means is used for clustering. The execution steps are as follows:

[0080] Step 1: Obtain the voltage data of each situation awareness terminal. Assume that k situation awareness terminals have been installed, and the voltage vector composed of them is V = [v 1 ,v 2 ,v 3 …v k ], where v k For the voltage data of the k-th situation awareness terminal, randomly initialize C initial cluster centers, such as C = [c 1 ,c 2 ,c 3 …c L ], c L The cluster voltage data for the Lth initialized cluster center.

[0081] Step 2: Use formula R mh =|v m -c h | 2 Calculate the distance between each situation awareness terminal and C initialized cluster centers, that is, the relative error value, where R mh is the relative error value, which represents the distance between the hth initialization cluster center and the mth situation awareness terminal. After obtaining C relative error values, each situation awareness terminal is divided into the initialization cluster center corresponding to the minimum relative error value, and the situation awareness terminals contained in each initialization cluster center are obtained.

[0082] Step 3: Based on the voltage data of the situation awareness terminals contained in the C initialization cluster centers obtained in step 2, update C = [c 1 ,c 2 ,c 3 …c L ], that is, the voltage values ​​of the situation awareness terminals contained in each initialized cluster center are averaged to obtain a new cluster center C = [c 11 ,c 12 ,c 13 …c 1L ], where c 1L The voltage data of the Lth new cluster center is obtained. Steps 2 and 3 are repeated in sequence until the value of the cluster center C remains basically unchanged, and the clustering is completed.

[0083] Step 4: Obtain L regional centers, where L is a preset number value, which can be determined based on the hardware configuration (such as CPU, memory) of the regional center.

[0084] The present technical solution can dynamically, adaptively and optimally determine the communication link of the situation awareness terminal. Once one or several regional centers exit operation, the communication link can be reselected based on the present technical solution to re-determine the corresponding regional center for each situation awareness terminal.

[0085] On the basis of the above scheme, in order to ensure the effective transmission of situation awareness terminal data, the power consumption parameters sent by the corresponding situation awareness terminal can be received by the electronic equipment in the regional center, see Figure 3, which can be expressed as a schematic diagram of the power consumption parameter caching method. According to business needs, the situation awareness terminal can be divided into real-time business data, near real-time business data, and non-real-time business data. The real-time power consumption parameters can be stored in a fast read-write device, such as a cache, which is called cache block 1, that is, the first cache space. The near real-time power consumption parameters are stored in the remaining cache resources, which is called cache block 2, that is, the second cache space; the non-real-time power consumption parameters exist in the hard disk, that is, the third cache space. When data transmission is performed, the first cache space has the highest priority. The second cache space data transmission can only be performed after the first cache space data transmission is completed. The data in the third cache space needs to wait until the second cache space data transmission is completed before it can be transmitted. The advantage of such transmission is that data with high timeliness is transmitted first to ensure that real-time business can be effectively executed. At the same time, taking into account the limited hardware resources of the situational awareness terminal, the data in the first cache space, the second cache space and the third cache space are progressive and dynamic. Once the power usage parameters are successfully transmitted to the first cache space, when it is detected that the storage time of the power usage parameters exceeds the first preset time and does not reach the second preset time, it is placed in the second cache space. After waiting for a certain period of time and no read or other operation requests are received, it is stored in the third cache space. Similarly, once the power usage parameters are successfully transmitted to the second cache space, when it is detected that the storage time of the power usage parameters exceeds the second preset time and does not reach the third preset time, it is placed in the third cache space. The advantage of this dynamic cache transfer method is that it effectively alleviates memory storage pressure and further ensures that real-time services can be effectively executed.

[0086] On the basis of the above scheme, in order to improve the efficiency and accuracy of abnormal data detection, the target abnormal situation awareness terminal and the target abnormal time window can be determined based on the power consumption parameters of each situation awareness terminal belonging to the same regional center. For example, the power consumption parameter is voltage, and the regional center A uses T as the preset window length to find the median voltage in the sliding window. For example, when the voltage v of the situation awareness terminal 1 at time t is received, 1 , with v 1 is the last value in the current time window. It can be seen that the current time window can include {v N ,v N-1 ...v 1}, where the voltage value of N at time tT can be calculated by the formula Vmed,t=med{v N ,v N-1 ...v 1}, find the median value Vmed,t of the N voltages from tT to t, where med represents the median. Further, based on the formula a=e |(Vmed,t)-(Vmed,t-T)|Calculate the power consumption variation parameter of situation awareness terminal 1, a represents the power consumption variation parameter, Vmed,t represents the median power consumption corresponding to the current time t, and (Vmed,tT) represents the median power consumption corresponding to t-2T to tT. When it is detected that the power consumption abnormality parameter a is greater than the preset abnormal parameter threshold (such as 1.05), it can be considered that there is an abnormality in the power consumption data in the situation awareness terminal 1, and all situation awareness terminal data belonging to the same regional center as the situation awareness terminal 1 are marked as abnormal data, and the reading of data from all situation awareness terminals in the area is suspended. Furthermore, it is necessary to further judge and locate the tampered anomaly as the situation awareness terminal range to accurately determine that the reading of situation awareness terminal data should be stopped. For example, based on the power consumption parameters and the median power consumption corresponding to the current time window in the situation awareness terminal 1, the variable energy value corresponding to the current time window can be calculated, as shown in the following formula (1):

[0087]

[0088] Among them, s represents the variable energy value, v p represents the power consumption parameters in the current time window, v med,t represents the median power consumption in the current time window, and N represents the number of power consumption parameters.

[0089] On the basis of the above scheme, the target abnormal situation awareness terminal can be determined according to at least one variable energy value corresponding to each situation awareness terminal. For example, according to the distribution information of at least one variable energy value corresponding to each situation terminal, when the variable energy value of a certain situation awareness terminal is detected to deviate greatly from the distribution information, the situation awareness terminal can be used as the target abnormal situation awareness terminal. Correspondingly, after determining the target abnormal situation awareness terminal, the data transmission of the remaining normal situation awareness terminals belonging to the same regional center as the target abnormal situation awareness terminal can be restored to accurately suspend and resume reading all situation awareness terminal data in the area, and send abnormal data events at the same time. In order to improve the effectiveness of abnormal detection, the target abnormal time window can also be determined based on the variable energy value corresponding to each time window within a preset number before the current moment of the target abnormal situation awareness terminal. For example, when a variable energy value in the target abnormal situation awareness terminal is greater than a preset value, it can be considered that there may be an abnormality in the time window corresponding to the variable energy value, and then it can be considered that the target abnormal situation awareness terminal may be abnormal in the time window, and the attack time is accurately determined. Alternatively, the distribution information corresponding to each variable energy value can be determined. When a variable energy value is detected to deviate significantly from the distribution information, the time window corresponding to the variable energy value can be used as the target abnormal time window. Furthermore, the abnormal data event and time period data are sent simultaneously. For the situational awareness terminal that determines the abnormality, the cause needs to be analyzed and the whole measure needs to be implemented before the data can be restored.

[0090] In this technical solution, by determining the regional center corresponding to each situation awareness terminal, the effectiveness of situation awareness terminal data transmission and the accuracy of abnormal terminal control can be guaranteed, and the attacked objects and data range of the situation awareness terminal can be detected quickly, accurately and reliably, effectively ensuring the safe operation of the power grid.

[0091] The technical solution of this embodiment is to determine the regional center corresponding to each situation awareness terminal and deploy electronic equipment in the regional center; for each situation awareness terminal belonging to the same regional center, determine the median power consumption of the situation awareness terminal in the current time window according to the power consumption parameters of the situation awareness terminal; determine the power consumption abnormality parameter of the situation awareness terminal according to the median power consumption of the situation awareness terminal at the current moment and the historical power consumption parameters corresponding to the starting moment in the current time window; if the power consumption abnormality parameter is greater than the preset abnormality parameter threshold, determine the change energy value corresponding to each time window within a preset number before the current moment for each situation awareness terminal belonging to the same regional center as the situation awareness terminal device; for at least one change energy value corresponding to each situation awareness terminal, determine the target abnormal situation awareness terminal, thereby solving the problem in the prior art. The method of determining whether there is an abnormality in terminal data based on data comparison leads to the problem of low accuracy and poor effect of abnormal monitoring. The power consumption parameters of each situation awareness terminal are transmitted to the corresponding regional center to ensure the effectiveness of data transmission. The power consumption parameters of the situation awareness terminal are determined based on the power consumption parameters of each situation awareness terminal belonging to the same regional center and the historical power consumption parameters corresponding to the starting time of each situation awareness terminal in the current time window. By monitoring the changes in the power consumption parameters, it is determined whether there is an abnormality in the data of the situation awareness terminal, thereby improving the accuracy of anomaly detection. At the same time, at least one variable energy value corresponding to each situation awareness terminal is also obtained to accurately determine the target abnormal situation awareness terminal. It is only necessary to stop the data transmission of the target abnormal situation awareness terminal to ensure the safe operation of the power grid.

[0092] Embodiment 3

[0093] Figure 4 1 is a schematic diagram of a structure of a device for determining abnormality of a situation awareness terminal according to Embodiment 3 of the present invention. Figure 4 As shown, the device comprises:

[0094] Among them, the regional center determination module 410 is used to determine the regional center corresponding to each situation awareness terminal, and deploy electronic devices in the regional center to receive the power consumption parameters sent by the corresponding situation awareness terminal based on the electronic devices; the power consumption median determination module 420 is used to determine the median power consumption of the situation awareness terminal in the current time window according to the power consumption parameters of the situation awareness terminal for each situation awareness terminal belonging to the same regional center; wherein the current time window is determined according to the current time and the preset window duration; the power consumption abnormal parameter determination module 430 is used to determine the power consumption abnormal parameter of the situation awareness terminal according to the power consumption parameter of the situation awareness terminal at the current time and the starting power consumption parameter at the starting time of the current time window; the variable energy value determination module 440 is used to determine the variable energy value corresponding to each time window within a preset number before the current time for each situation awareness terminal belonging to the same regional center as the situation awareness terminal device if the power consumption abnormal parameter is greater than the preset abnormal parameter threshold; the abnormal situation awareness terminal determination module 450 is used to determine the target abnormal situation awareness terminal for at least one variable energy value corresponding to each situation awareness terminal.

[0095] The technical solution of this embodiment is to determine the regional center corresponding to each situation awareness terminal and deploy electronic equipment in the regional center; for each situation awareness terminal belonging to the same regional center, determine the median power consumption of the situation awareness terminal in the current time window according to the power consumption parameters of the situation awareness terminal; determine the power consumption abnormality parameter of the situation awareness terminal according to the median power consumption of the situation awareness terminal at the current moment and the historical power consumption parameters corresponding to the starting moment in the current time window; if the power consumption abnormality parameter is greater than the preset abnormality parameter threshold, determine the change energy value corresponding to each time window within a preset number before the current moment for each situation awareness terminal belonging to the same regional center as the situation awareness terminal device; for at least one change energy value corresponding to each situation awareness terminal, determine the target abnormal situation awareness terminal, thereby solving the problem in the prior art. The method of determining whether there is an abnormality in terminal data based on data comparison leads to the problem of low accuracy and poor effect of abnormal monitoring. The power consumption parameters of each situation awareness terminal are transmitted to the corresponding regional center to ensure the effectiveness of data transmission. The power consumption parameters of the situation awareness terminal are determined based on the power consumption parameters of each situation awareness terminal belonging to the same regional center and the historical power consumption parameters corresponding to the starting time of each situation awareness terminal in the current time window. By monitoring the changes in the power consumption parameters, it is determined whether there is an abnormality in the data of the situation awareness terminal, thereby improving the accuracy of anomaly detection. At the same time, at least one variable energy value corresponding to each situation awareness terminal is also obtained to accurately determine the target abnormal situation awareness terminal. It is only necessary to stop the data transmission of the target abnormal situation awareness terminal to ensure the safe operation of the power grid.

[0096] On the basis of the above device, optionally, the regional center determination module 410 includes a clustered power consumption data determination unit, a relative error value determination unit, an initialization cluster center determination unit and a regional center determination unit.

[0097] A clustered power consumption data determination unit, used to obtain the historical power consumption data of each situation awareness terminal at a first historical moment and the clustered power consumption data of at least one initialized cluster center;

[0098] A relative error value determination unit, used to respectively determine the relative error value of each historical power consumption data and each clustered power consumption data;

[0099] An initialization cluster center determination unit is used to determine the initialization cluster center to which the situation awareness terminal to which each historical power consumption data belongs belongs according to at least one relative error value corresponding to each historical power consumption data; wherein at least one relative error value corresponds to the initialization cluster center;

[0100] The regional center determination unit is used to update the corresponding initialized cluster center according to the historical power consumption data of at least one situation awareness terminal associated with each initialized cluster center to obtain at least one regional center.

[0101] On the basis of the above device, optionally, the device further includes: a data storage module, and the data storage module includes an electricity parameter receiving unit and a data storage unit.

[0102] A power consumption parameter receiving unit, used to receive power consumption parameters sent by each situation awareness terminal associated with the current regional center;

[0103] The data storage unit is used to store the power usage parameters in corresponding cache spaces according to the timeliness of the power usage parameters.

[0104] Based on the above device, optionally, the cache space includes at least three, the timeliness is determined based on the time information of receiving the power usage parameters, and the data storage unit includes: a first storage subunit, a second transfer subunit, a third transfer subunit and a fourth release subunit.

[0105] A first storage subunit is configured to store the power usage parameter in a first cache space when the power usage parameter is received and the duration of storing the power usage parameter is within a first preset duration range;

[0106] a second transfer subunit, configured to transfer and store the power usage parameter from the first cache space to a second cache space when the power usage parameter is received and the duration of storing the power usage parameter exceeds a first preset duration and does not reach a second preset duration;

[0107] a third transfer subunit, configured to move and store the power usage parameter from the second cache space to a third cache space if the storage time of the power usage parameter exceeds the second preset time;

[0108] a fourth releasing subunit, configured to release the power usage parameter from the third cache space when the storage time of the power usage parameter reaches a third preset time;

[0109] Among them, the third preset time length is greater than the second preset time length, and the second preset time length is greater than the first preset time length.

[0110] On the basis of the above device, optionally, the power consumption variation parameter determination module 430 includes an input parameter determination unit and a power consumption variation parameter determination unit.

[0111] An input parameter determination unit, used to use the median power consumption of the situation awareness terminal at the current moment and the historical power consumption parameter as input parameters of the objective function;

[0112] The power consumption variation parameter determination unit is used to determine the power consumption variation parameter of the situation awareness terminal based on the input parameter and the objective function.

[0113] On the basis of the above device, optionally, the variable energy value determination module 440 includes a historical power consumption median determination unit and a variable energy value determination unit.

[0114] A historical power consumption median determination unit, used to determine the historical power consumption median corresponding to each time window within a preset number before the current moment;

[0115] The variable energy value determination unit is used to determine the difference square between each power consumption data in the time window and the corresponding historical power consumption median, and determine the variable energy value of each time window based on the difference square and the historical power consumption amount in the time window.

[0116] On the basis of the above-mentioned device, optionally, the abnormal situation awareness terminal determination module 450 includes an abnormal situation awareness terminal determination unit.

[0117] The abnormal situation awareness terminal determination unit is used to determine the target abnormal situation awareness terminal according to the distribution information of at least one variable energy value corresponding to each situation terminal.

[0118] Based on the above device, optionally, the device also includes: a target abnormal time window determination module.

[0119] The target abnormal time window determination module is used to determine the target abnormal time window according to the variable energy value of the target abnormal situation perception terminal.

[0120] Based on the above-mentioned device, optionally, the power consumption parameters, power consumption data and historical power consumption data include at least one of voltage data, current data and power data sent by the situation awareness terminal.

[0121] The device for determining abnormality of a situation awareness terminal provided by an embodiment of the present invention can execute the method for determining abnormality of a situation awareness terminal provided by any embodiment of the present invention, and has functional modules and beneficial effects corresponding to the execution method.

[0122] Embodiment 4

[0123] Figure 5 It is a structural schematic diagram of an electronic device for implementing a method for determining an abnormal situation awareness terminal according to an embodiment of the present invention. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workbenches, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device may also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present invention described and / or required herein.

[0124] like Figure 5 As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0125] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0126] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, digital signal processors (DSPs), and any appropriate processors, controllers, microcontrollers, etc. The processor 11 executes the various methods and processes described above, such as a method for determining an abnormality of a situational awareness terminal.

[0127] In some embodiments, the method for determining the abnormality of the situational awareness terminal can be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program can be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the method for determining the abnormality of the situational awareness terminal described above can be performed. Alternatively, in other embodiments, the processor 11 can be configured to execute the method for determining the abnormality of the situational awareness terminal in any other appropriate manner (for example, by means of firmware).

[0128] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0129] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0130] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0131] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0132] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0133] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0134] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0135] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A method for determining abnormality of a situational awareness terminal, It is characterized in that include: Determine the regional center corresponding to each situation awareness terminal, and deploy electronic equipment at the regional center to receive the power consumption parameters sent by the corresponding situation awareness terminal based on the electronic equipment; For each situation awareness terminal belonging to the same regional center, determine the median power consumption of the situation awareness terminal in the current time window according to the power consumption parameters of the situation awareness terminal; wherein the current time window is determined according to the current time and the preset window duration; Determine the power consumption change parameter of the situation awareness terminal according to the median power consumption of the situation awareness terminal at the current moment and the historical power consumption parameter corresponding to the starting moment in the current time window; If the power consumption abnormality parameter is greater than the preset abnormal parameter threshold, then determine the change energy value corresponding to each time window within a preset number before the current moment for each situation awareness terminal belonging to the same regional center as the situation awareness terminal device; For at least one variable energy value corresponding to each situation awareness terminal, a target abnormal situation awareness terminal is determined.

2. The method according to claim 1, It is characterized in that Determining the regional center corresponding to each situation awareness terminal includes: Acquire historical power consumption data of each situation awareness terminal at a first historical moment and clustered power consumption data of at least one initialized cluster center; Determine the relative error value between each historical electricity consumption data and each cluster electricity consumption data; Determine, according to at least one relative error value corresponding to each historical power consumption data, an initialization cluster center to which the situation awareness terminal to which each historical power consumption data belongs belongs; wherein at least one relative error value corresponds to the initialization cluster center; According to the historical power consumption data of at least one situation awareness terminal associated with each initialized cluster center, the corresponding initialized cluster center is updated to obtain at least one regional center.

3. The method according to claim 1, It is characterized in that After the electronic equipment is deployed in the regional center, the method further comprises: Receiving power consumption parameters sent by each situation awareness terminal associated with the current regional center; According to the timeliness of the power usage parameters, the power usage parameters are stored in corresponding cache spaces respectively.

4. The method according to claim 3, It is characterized in that The cache space includes at least three, the timeliness is determined based on the time information of receiving the power usage parameter, and according to the timeliness of the power usage parameter, the power usage parameter is stored in the corresponding cache space respectively, including: When the power usage parameter is received and the duration of storing the power usage parameter is within a first preset duration range, storing the power usage parameter in a first cache space; When the power usage parameter is received and the duration of storing the power usage parameter exceeds a first preset duration and does not reach a second preset duration, the power usage parameter is transferred from the first cache space to a second cache space for storage; When the storage time of the power usage parameter exceeds the second preset time, the power usage parameter is moved from the second cache space to a third cache space for storage; When the storage time of the power usage parameter reaches a third preset time, releasing the power usage parameter from the third cache space; Among them, the third preset time length is greater than the second preset time length, and the second preset time length is greater than the first preset time length.

5. The method according to claim 1, It is characterized in that The determining of the power consumption change parameter of the situation awareness terminal according to the power consumption median of the situation awareness terminal at the current moment and the historical power consumption parameter corresponding to the starting moment in the current time window includes: Using the median power consumption of the situation awareness terminal at the current moment and the historical power consumption parameters as input parameters of the objective function; Based on the input parameters and the objective function, power consumption fluctuation parameters of the situation awareness terminal are determined.

6. The method according to claim 1, It is characterized in that The step of determining the change energy values ​​corresponding to each time window within a preset number before the current moment for each situation awareness terminal belonging to the same regional center as the situation awareness terminal device includes: Determine the median of historical electricity consumption corresponding to each time window within a preset number before the current moment; The difference square between each power consumption data in the time window and the corresponding historical power consumption median is determined, and the variable energy value of each time window is determined according to the difference square and the historical power consumption amount in the time window.

7. The method according to claim 1, It is characterized in that The step of determining a target abnormal situation awareness terminal for at least one variable energy value corresponding to each situation awareness terminal includes: The target abnormal situation awareness terminal is determined according to the distribution information of at least one variable energy value corresponding to each situation terminal.

8. The method according to claim 1, It is characterized in that Also includes: The target abnormal situation awareness terminal determines the target abnormal time window according to the change energy value.

9. The method according to any one of claims 1 to 8, It is characterized in that The power consumption parameters, power consumption data and historical power consumption data include at least one of voltage data, current data and power data sent by the situation awareness terminal.

10. A device for determining abnormality of a situation awareness terminal, It is characterized in that include: A regional center determination module, used to determine the regional center corresponding to each situation awareness terminal, and deploy electronic equipment at the regional center to receive the power consumption parameters sent by the corresponding situation awareness terminal based on the electronic equipment; A power consumption median determination module is used to determine the power consumption median of each situation awareness terminal belonging to the same regional center in a current time window according to the power consumption parameters of the situation awareness terminal; wherein the current time window is determined according to the current time and the preset window duration; A power consumption change parameter determination module, used to determine the power consumption change parameter of the situation awareness terminal according to the power consumption parameter of the situation awareness terminal at the current moment and the starting power consumption parameter at the starting moment within the current time window; A variable energy value determination module is used to determine the variable energy values ​​corresponding to each time window within a preset number before the current moment for each situation awareness terminal belonging to the same regional center as the situation awareness terminal device if the abnormal power consumption parameter is greater than a preset abnormal parameter threshold; The abnormal situation awareness terminal determination module is used to determine the target abnormal situation awareness terminal for at least one variable energy value corresponding to each situation awareness terminal.

Images