A permission locking system for control commands of a hydropower station monitoring system

Abstract

The invention discloses an authority locking system for a control command of a monitoring system of a hydropower station, comprising a user management module, an authority management module, a verification locking module and a human-computer interaction module; the user management module is used for information units, grouping units and allocation units; the information unit is used for acquiring and managing user information of users, the grouping unit is used for grouping roles according to user information, and the allocation unit is used for allocating role authority according to the role grouping result; the authority management module is used for allocating user authority; the human-computer interaction module is used for acquiring the issued monitoring system control command; the verification locking module is used for searching and verifying the monitoring system control command according to the role authority allocation result and the user authority allocation result, if the verification is passed, the human-computer interaction module outputs the control command, if the verification is not passed, the human-computer interaction module locks the control command; the invention can ensure the safety and reliability of monitoring system maintenance and debugging work.

Description

Technical Field

[0001] The invention relates to an authority locking system for control commands of a hydropower station monitoring system, belonging to the technical field of hydropower station control. Background Art

[0002] With the development of science and technology, hydropower plants have more and more equipment and their functions are becoming increasingly diverse. The computer monitoring system monitors and controls these devices, which requires the collection of a large amount of information and frequent operation of the equipment. Although these operations have a lot of locking logic in the process to ensure the safe and stable operation of the equipment, when operating the equipment, there will still be situations where the computer monitoring system goes to the wrong interval to issue commands or mistakenly issues inoperable equipment. Therefore, the locking function of user authority management can be used to limit users to only control operations on authorized equipment objects. Summary of the invention

[0003] The purpose of the present invention is to overcome the deficiencies in the prior art and provide an authority locking system for control commands of a hydropower station monitoring system, which can prevent the problem of erroneous control commands during daily operation and maintenance of the monitoring system and equipment debugging, and ensure the safety and reliability of the monitoring system during maintenance and debugging.

[0004] To achieve the above object, the present invention is implemented by adopting the following technical solutions:

[0005] The present invention provides a permission locking system for control commands of a hydropower station monitoring system, the permission locking system comprising a user management module, a permission management module, a verification locking module and a human-computer interaction module;

[0006] The user management module is used to perform information unit, grouping unit and allocation unit; the information unit is used to obtain and manage user information of users, the grouping unit is used to group roles according to user information, and the allocation unit is used to allocate role permissions according to the role grouping results;

[0007] The rights management module is used to allocate user rights;

[0008] The human-computer interaction module is used for user login and obtaining the monitoring system control command issued by the user after login;

[0009] The verification and locking module is used to retrieve and verify the monitoring system control command according to the role authority allocation result and the user authority allocation result. If the verification passes, the human-computer interaction module outputs the control command. If the verification fails, the human-computer interaction module locks the control command and issues an alarm.

[0010] Optionally, managing the user's user information includes creating, deleting, modifying and querying the user's user information, and the user's user information includes the user's user name, login name, login password, registration information and activation information.

[0011] Optionally, the user login is used to verify the login name and login password input by the user.

[0012] Optionally, grouping roles according to user information includes creating role groups, and classifying users into corresponding role groups according to user names in the user information.

[0013] Optionally, the role group includes an administrator, a maintainer, an operation shift leader, and an operation monitor.

[0014] Optionally, the allocating role permissions according to the role grouping result includes acquiring function items and function item permissions of the monitoring system, allocating the function items to each role group and allocating function item permissions to the allocated function items.

[0015] Optionally, the function items include user management function, database function, monitoring screen function, report function, list function, curve query function, measuring point index function, sequential control flow function, optical word function, process management function, communication management function, node management function, and AGCAVC configuration function; the function item permissions include create permission, open permission, edit permission, delete permission, and issue control command permission.

[0016] Optionally, the user authority allocation includes obtaining functional nodes and control devices of the monitoring system, allocating the functional nodes to each user in each role group and allocating control devices to the allocated functional nodes; wherein the functional nodes include nodes with operating authority and nodes without operating authority.

[0017] Optionally, the functional nodes include data acquisition nodes, data calculation nodes, data monitoring nodes, control command issuing nodes, daily maintenance nodes, communication service nodes, and training and teaching nodes; the control equipment includes unit equipment, switch station equipment, and public system equipment; among them, the data acquisition nodes, data calculation nodes, data monitoring nodes, and control command issuing nodes are nodes with operating authority, and the daily maintenance nodes, communication service nodes, and training and teaching nodes are nodes without operating authority.

[0018] Optionally, when the human-computer interaction module blocks the control command and issues an alarm, the role authority allocation result and the user authority allocation result are modified respectively through the user management module and the verification locking module, and the control command of the control system is re-retrieved and verified through the verification locking module.

[0019] Compared with the prior art, the present invention has the following beneficial effects:

[0020] The invention provides an authority locking system for control commands of a hydropower station monitoring system, which restricts users to perform control operations only on authorized equipment objects, thereby preventing the problem of erroneous issuance of control commands during daily operation and maintenance of the monitoring system and equipment debugging, and ensuring the safety and reliability of maintenance and debugging of the monitoring system. The authority management method is optimized by software, and multi-level management of equipment by users is realized. The system is flexible and can temporarily change user permissions according to different application scenarios to achieve flexible control and safe locking of equipment. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 It is a working principle diagram of an authority locking system for control commands of a hydropower station monitoring system provided in Embodiment 1 of the present invention. DETAILED DESCRIPTION

[0022] The present invention will be further described below in conjunction with the accompanying drawings. The following embodiments are only used to more clearly illustrate the technical solution of the present invention, and cannot be used to limit the protection scope of the present invention.

[0023] Embodiment 1:

[0024] like Figure 1 As shown, an embodiment of the present invention provides an authority locking system for control commands of a hydropower station monitoring system, characterized in that the authority locking system includes a user management module, an authority management module, a verification locking module and a human-computer interaction module.

[0025] (1) The user management module is used to perform information unit, grouping unit and allocation unit; the information unit is used to obtain and manage user information of users, the grouping unit is used to group roles according to user information, and the allocation unit is used to allocate role permissions according to the role grouping results;

[0026] (1.1) Managing user information includes creating, deleting, modifying and querying user information. User information includes user name, login name, login password, registration information and activation information.

[0027] (1.2) Grouping roles according to user information includes creating role groups, and classifying users into corresponding role groups according to user names in the user information (the same user can be classified into multiple role groups). In this embodiment, the role groups include administrators, maintainers, operation shift leaders, and operation monitors.

[0028] (1.3) Assigning role permissions based on the role grouping results includes obtaining the function items and function item permissions of the monitoring system, assigning the function items to each role group and assigning function item permissions to the assigned function items. In this implementation, the function items include user management function, database function, monitoring screen function, report function, list function, curve query function, measurement point index function, sequential control flow function, optical word function, process management function, communication management function, node management function, and AGCAVC configuration function; function item permissions include creation permission, opening permission, editing permission, deletion permission, and issuing control command permission.

[0029] For example: Administrator: open all function items and all function item permissions of each function item; Maintenance personnel: open all function items except user management function and all function item permissions of each function item; Operation shift leader: open report function, list function, curve query function, measuring point index function, light word function and opening permission of each function item; open monitoring screen function and opening permission and control command issuing permission; Operation monitor: monitoring screen function, report function, list function, curve query function, measuring point index function, sequential control flow function, light word function and opening permission of each function item.

[0030] (2) The rights management module is used to allocate user rights;

[0031] User authority allocation includes obtaining the function nodes and control devices of the monitoring system, allocating the function nodes to each user in each role group and allocating control devices to the allocated function nodes; wherein the function nodes include nodes with operation authority and nodes without operation authority.

[0032] Functional nodes include data acquisition nodes, data calculation nodes, data monitoring nodes, control command issuance nodes, daily maintenance nodes, communication service nodes, and training and teaching nodes; control equipment includes unit equipment, switch station equipment, and public system equipment; among them, data acquisition nodes, data calculation nodes, data monitoring nodes, and control command issuance nodes are nodes with operation authority, and daily maintenance nodes, communication service nodes, and training and teaching nodes are nodes without operation authority.

[0033] (3) The human-computer interaction module is used for user login and obtaining the monitoring system control commands issued by the user after login; the user login is used to verify the login name and login password entered by the user.

[0034] (4) The verification and locking module is used to retrieve and verify the control commands of the monitoring system according to the role authority allocation results and the user authority allocation results. If the verification passes, the human-computer interaction module outputs the control command. If the verification fails, the human-computer interaction module locks the control command and issues an alarm.

[0035] When the human-computer interaction module blocks the control command and issues an alarm, the role authority allocation result and the user authority allocation result are modified through the user management module and the verification and locking module respectively, and the control command of the control system is retrieved and verified again through the verification and locking module.

[0036] The process of retrieval verification is as follows:

[0037] S1. Obtain the user who issues the monitoring system control command;

[0038] S2. Determine the role group to which the user belongs, and obtain its function items and function item permissions according to the role permission allocation result of the role group;

[0039] S3, searching whether there is permission to issue control commands in the function item permissions, if yes, go to S4; if no, go to S7;

[0040] S4. Obtain the function node and control device according to the user authority allocation result of the user, and enter S5; if they do not exist, enter S7;

[0041] S5. Search whether there is a node with operation authority in the function node. If so, go to S6; if not, go to S7;

[0042] S6. Check whether there is a control device in the node with operation authority. If so, the test is passed. If not, go to S7.

[0043] S7. Inspection failed.

[0044] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0045] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0046] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0047] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0048] The above is only a preferred embodiment of the present invention. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the technical principles of the present invention. These improvements and modifications should also be regarded as the scope of protection of the present invention.

Claims

1. A control command authority locking system for a hydropower station monitoring system, characterized in that: The authority locking system includes a user management module, an authority management module, a verification locking module and a human-computer interaction module; The user management module is used to perform information unit, grouping unit and allocation unit; the information unit is used to obtain and manage user information of users, the grouping unit is used to perform role grouping according to user information, and the allocation unit is used to perform role authority allocation according to the role grouping result; the user information management includes creating, deleting, modifying and querying user information of users, and the user information of users includes user name, login name, login password, registration information and activation information of users; the role grouping according to user information includes creating role groups, and classifying users into corresponding role groups according to user names in user information; The allocation of role permissions according to the role grouping result includes obtaining the function items and function item permissions of the monitoring system, allocating the function items to each role group and allocating function item permissions to the allocated function items; The authority management module is used to allocate user authority; the user authority allocation includes obtaining the function nodes and control devices of the monitoring system, allocating the function nodes to each user in each role group and allocating control devices to the allocated function nodes; wherein the function nodes include nodes with operation authority and nodes without operation authority; The human-computer interaction module is used for user login and obtaining the monitoring system control command issued by the user after login; The verification and locking module is used to retrieve and verify the monitoring system control command according to the role authority allocation result and the user authority allocation result. If the verification is passed, the human-computer interaction module outputs the control command. If the verification fails, the human-computer interaction module locks the control command and issues an alarm. The retrieval verification process is as follows: S1. Obtain the user who issues the monitoring system control command; S2. Determine the role group to which the user belongs, and obtain its function items and function item permissions according to the role permission allocation result of the role group; S3, searching whether there is permission to issue control commands in the function item permissions, if yes, go to S4; if no, go to S7; S4. Obtain the function node and control device according to the user authority allocation result of the user, and enter S5; if they do not exist, enter S7; S5. Search whether there is a node with operation authority in the function node. If so, go to S6; if not, go to S7; S6. Check whether there is a control device in the node with operation authority. If so, the test is passed. If not, go to S7. S7. Inspection failed.

2. The authority locking system for control commands of a hydropower station monitoring system according to claim 1 is characterized in that: The user login is used to verify the login name and login password input by the user.

3. The authority locking system for control commands of a hydropower station monitoring system according to claim 1 is characterized in that: The role group includes an administrator, a maintainer, an operation shift leader, and an operation monitor.

4. The authority locking system for control commands of a hydropower station monitoring system according to claim 1 is characterized in that: The functional items include user management function, database function, monitoring screen function, report function, list function, curve query function, measuring point index function, sequential control flow function, optical word function, process management function, communication management function, node management function, and AGCAVC configuration function; the functional item permissions include create permission, open permission, edit permission, delete permission, and issue control command permission.

5. The authority locking system for control commands of a hydropower station monitoring system according to claim 1 is characterized in that: The functional nodes include data acquisition nodes, data calculation nodes, data monitoring nodes, control command issuance nodes, daily maintenance nodes, communication service nodes, and training and teaching nodes; the control equipment includes unit equipment, switch station equipment, and public system equipment; among them, the data acquisition nodes, data calculation nodes, data monitoring nodes, and control command issuance nodes are nodes with operation authority, and the daily maintenance nodes, communication service nodes, and training and teaching nodes are nodes without operation authority.

6. The authority locking system for control commands of a hydropower station monitoring system according to claim 1 is characterized in that: When the human-computer interaction module blocks the control command and issues an alarm, the role authority allocation result and the user authority allocation result are modified through the user management module and the verification and locking module respectively, and the control command of the control system is retrieved and verified again through the verification and locking module.

Images