An airport comprehensive energy management platform based on cloud deployment

Abstract

The application discloses an airport comprehensive energy management platform based on cloud deployment, which comprises a server, storage resources, a bastion host, a cloud firewall security component, a safe access area and a DMZ external connection area; the server and the storage resources are arranged on an airport private cloud, the server adopts IaaS infrastructure level service provided by the airport private cloud, and the storage resources comprise cloud storage resources and a cloud database; the bastion host and the cloud firewall security component are used for operation and maintenance management and security protection of the server and the storage resources; the safe access area is used for connecting an energy subsystem through an energy data private network; and the DMZ external connection area is used for connecting an Internet of Things wireless metering instrument through an operator private network and connecting a third party platform or system through an Internet VPN tunnel; the application realizes panoramic monitoring, optimal scheduling and intelligent operation and maintenance of comprehensive energy by means of flat management of the airport energy subsystem on the basis of the airport private cloud and the integrated service network.

Description

TECHNICAL FIELD

[0001] The application relates to an airport comprehensive energy management platform based on cloud deployment and belongs to the field of airport information technology. BACKGROUND

[0002] With the advent of the double-carbon economy, the high-energy-consuming civil aviation industry is more sensitive to carbon indicators. The Construction Guide for Smart Energy Management System of Civil Airport proposes the construction of a smart energy management system. Each civil airport attempts to comprehensively control the water, electricity, gas, cold and heat energy data of the entire airport through a comprehensive energy management system, coordinate the control of various energies, and ultimately optimize the energy structure and low-carbon operation. In this process, how to effectively utilize the integrated network and computing resources of the civil airport information and weak current engineering, realize resource sharing and avoid repeated construction, while breaking down the information silos between energy subsystems without destroying their independence, and meeting the special requirements of power system safety and process control real-time performance. SUMMARY

[0003] The application aims to overcome the deficiencies in the prior art and provide an airport comprehensive energy management platform based on cloud deployment, which utilizes the private cloud and integrated service network of the civil airport to perform flat management on the energy subsystems of the civil airport, realizes panoramic monitoring, optimal scheduling and intelligent operation and maintenance of comprehensive energy.

[0004] To achieve the above-mentioned purpose, the application is implemented by using the following technical scheme:

[0005] The application provides an airport comprehensive energy management platform based on cloud deployment, which comprises a server, storage resources, a bastion host, a cloud firewall security component, a secure access area and a DMZ external connection area. The server and the storage resources are deployed on an airport private cloud. The server uses the IaaS infrastructure-level service provided by the airport private cloud. The storage resources include cloud storage resources and a cloud database. The bastion host and the cloud firewall security component are used for operation and maintenance management and security protection of the server and the storage resources. The secure access area is used for external connection of energy subsystems through a pre-constructed energy data special network. The DMZ external connection area is used for external connection of Internet of Things wireless metering instruments through an operator special network and external connection of third-party platforms or systems through an Internet VPN tunnel.

[0006] Optionally, the server comprises a basic virtual server, a time sequence data virtual server, a historical data virtual server and an interface virtual server; the basic virtual server is used for managing processing and function application of platform data; the time sequence data virtual server is used for managing second-level time sequence data access of the platform to cloud storage resources; the historical data virtual server is used for managing minute-level historical data access of the platform to cloud storage resources through a cloud database; and the interface virtual server is used for managing data interaction of the platform with third-party platforms or systems through an API interface.

[0007] Optionally, the basic virtual server comprises a collection virtual server, a SCADA virtual server, a dispatching analysis virtual server, an RGS virtual server and a Web publishing virtual server; the collection virtual server is used for managing data interaction of the platform with energy subsystems through communication protocols; the SCADA virtual server is used for managing internal data processing, monitoring and alarm of the platform; the dispatching analysis virtual server is used for managing business analysis, dispatching strategy and intelligent operation and maintenance of the platform; the RGS virtual server is used for managing terminal remote graphics service of the platform; and the Web publishing virtual server is used for publishing management-type business functions of the platform to an airport office network and the Internet by using a B / S network architecture.

[0008] Optionally, the interface virtual server comprises a data center interface virtual server, a comprehensive interface virtual server, an airport group interface virtual server, a video interface virtual server, an Internet of Things interface virtual server and an Internet interface virtual server; the data center interface virtual server is used for managing data interaction of the platform with a data center deployed in an airport private cloud, wherein the data center comprises weather information, flight information, passenger flow information and GIS information; the comprehensive interface virtual server is used for managing data interaction of the platform with third-party platforms deployed in an airport comprehensive service network; the airport group interface virtual server is used for managing data interaction of the platform with third-party systems deployed in an airport group; the video interface virtual server is used for managing data interaction of the platform with an airport video security system; the Internet of Things interface virtual server is used for managing data interaction of the platform with airport Internet of Things wireless metering instruments; and the Internet interface virtual server is used for managing data interaction of the platform with third-party platforms deployed in an airport external Internet.

[0009] Optionally, the collection virtual server comprises a power collection virtual server and an industrial control collection virtual server; the power collection virtual server is used for data interaction with an airport power supply and distribution energy subsystem; and the industrial control collection virtual server is used for data interaction with an airport industrial control energy subsystem.

[0010] Optionally, the airport power supply and distribution energy subsystem comprises a power dispatching control system deployed in the airport flight area, terminal area, working area and cargo area, a power supply and distribution monitoring system of 110kV-0.4kV voltage levels, and a photovoltaic power generation system; the airport industrial control energy subsystem comprises a refrigeration station automatic control system, a heating station automatic control system, a pipe network online monitoring system, a building automatic control system, a water supply station automatic control system, a gas pressure regulating station automatic control system, an intelligent lighting system and an energy consumption metering system deployed in the airport flight area, terminal area, working area and cargo area.

[0011] Optionally, the special interface device of the airport power supply and distribution energy subsystem adopts a power 104 protocol; and the special interface device of the airport industrial control energy subsystem adopts a Modbus TCP and OPC protocol.

[0012] Optionally, the energy data special network comprises a secure access area network, an airport integrated service network and an energy subsystem terminal access network connected in sequence, the secure access area network and the energy subsystem terminal access network are provided with network security devices, and access servers on the airport private cloud and energy subsystems, respectively.

[0013] Optionally, the network security device comprises a firewall, a longitudinal encryption device and a forward and reverse isolation device, and is used for security protection of the energy subsystem.

[0014] Optionally, the management platform terminal comprises a water system regulation and control terminal, an electric power system regulation and control terminal, a gas / vapor system regulation and control terminal, a cold system regulation and control terminal and a heat system monitoring terminal, the client and the management platform RGS virtual server adopt a C / S network architecture, and data interaction is carried out through an EIP set by the RGS virtual server.

[0015] Compared with the prior art, the application has the following beneficial effects:

[0016] The airport integrated energy management platform based on cloud deployment provided by the application realizes cloud deployment of servers and storage resources through the use of airport private cloud computing and storage resources, realizes seamless connection of the private cloud and the integrated service network VLAN special network through a cloud side secure access area, realizes seamless connection of the integrated service network VLAN special network and the energy subsystem through an energy subsystem terminal access network, realizes the security and compatibility of the energy data special network through the cooperation of corresponding security strategies of the secure access network and the energy subsystem terminal access network and the IP / MAC address binding, breaks the information island among the energy subsystems without destroying the independence of the energy subsystems, and meets the special requirements of the security of the electric power system and the real-time of the process control. The application provides guidance for the planning and implementation of the integrated energy management platform. BRIEF DESCRIPTION OF DRAWINGS

[0017] Figure 1 This is a network structure diagram of an airport integrated energy management platform based on cloud deployment provided in Embodiment 1 of the present invention;

[0018] Figure 2 This is a schematic diagram of the data flow of server and storage resources provided in Embodiment 1 of the present invention. Detailed Implementation

[0019] The present invention will be further described below with reference to the accompanying drawings. The following embodiments are only used to more clearly illustrate the technical solution of the present invention, and should not be used to limit the scope of protection of the present invention.

[0020] Example 1:

[0021] like Figure 1 As shown in the diagram, the integrated energy management platform network architecture provided in this embodiment of the invention includes three parts: cloud deployment of the integrated energy management platform, construction of a dedicated energy data network, and access to energy subsystems. Each part will be described in detail below.

[0022] 1. Cloud deployment of integrated energy management platform

[0023] like Figure 2 As shown, the integrated energy management platform's servers and storage resources are deployed in the private cloud of the civil aviation airport, including servers, storage resources, bastion hosts, cloud firewall security components, secure access zones, and DMZ external connection zones.

[0024] The server includes a basic virtual server, a time-series data virtual server, a historical data virtual server, and an interface virtual server. The basic virtual server is used to manage the processing of platform data and functional applications. The time-series data virtual server is used to manage the platform to access and retrieve time-series data from cloud storage resources at the second level. The historical data virtual server is used to manage the platform to access and retrieve historical data from cloud storage resources at the minute level via cloud database. The interface virtual server is used to manage the platform to interact with third-party platforms or systems through API interfaces.

[0025] The private cloud of the civil aviation airport provides IaaS infrastructure as a service, and the integrated energy management platform deploys corresponding basic servers in the private cloud. The basic virtual servers include collection virtual servers, SCADA virtual servers, dispatching analysis virtual servers, RGS virtual servers, and Web publishing virtual servers. The collection virtual servers are used for data interaction between the management platform and the energy subsystem through communication protocols. The SCADA virtual servers are used for internal data processing, monitoring, and alarm of the management platform. The dispatching analysis virtual servers are used for business analysis, dispatching control strategy, and intelligent operation and maintenance of the management platform. The RGS virtual servers are used for terminal remote graphics services of the management platform. The Web publishing virtual servers provide services by using a B / S network architecture and are used for publishing management-type business functions to the airport office network and the Internet by the management platform. The virtual servers are installed with a localized operating system and dispatching and monitoring software of the integrated energy management platform.

[0026] The management platform terminal includes water system regulation and control terminals, power system regulation and control terminals, gas / steam system regulation and control terminals, cold system regulation and control terminals, and heat system monitoring terminals. The client and the RGS virtual server of the management platform adopt a C / S network architecture and perform data interaction through an EIP set by the RGS virtual server.

[0027] The collection virtual server of the integrated energy management platform is responsible for data interaction between the integrated energy management platform and the energy subsystem. The collection virtual server includes a power collection virtual server and an industrial control collection virtual server. The power collection virtual server is used for data interaction with the airport power supply and distribution energy subsystem. The industrial control collection virtual server is used for data interaction with the airport industrial control energy subsystem.

[0028] The RGS virtual server is used for remote graphics service function applications of the client of the integrated energy management platform. The RGS virtual server performs data interaction with remote clients deployed in the energy management hall of the civil aviation airport in a C / S mode through an EIP, realizes source, network, load, and storage integrated panoramic monitoring, optimization and coordination scheduling, intelligent operation and maintenance management functions of corresponding energy media, and includes water system regulation and control terminals, power system regulation and control terminals, gas / steam system regulation and control terminals, cold system regulation and control terminals, and heat system monitoring terminals.

[0029] The Web publishing virtual server is used for publishing management-type external business functions to the civil aviation airport office network and the operator public network by the integrated energy management platform. Related personnel directly access the Web publishing virtual server in a B / S mode through an IE browser to read corresponding data information.

[0030] The interface virtual servers include a data center interface virtual server, a comprehensive interface virtual server, an airport group interface virtual server, a video interface virtual server, an Internet of Things interface virtual server and an Internet interface virtual server; the data center interface virtual server is used for data interaction between the management platform and a data center deployed in an airport private cloud, and the data center includes weather information, flight information, passenger flow information and GIS information; the comprehensive interface virtual server is used for data interaction between the management platform and a third-party platform deployed in an airport comprehensive service network; the airport group interface virtual server is used for data interaction between the management platform and a third-party system deployed in an airport group; the video interface virtual server is used for data interaction between the management platform and an airport video security system; the Internet of Things interface virtual server is used for data interaction between the management platform and an airport Internet of Things wireless metering instrument; and the Internet interface virtual server is used for data interaction between the management platform and a third-party platform deployed in an airport external Internet.

[0031] The storage resources include cloud storage resources and a cloud database, the cloud database is a MySQL database, the comprehensive energy management platform time sequence data virtual server directly stores the second-level time sequence data in the form of a file to the cloud storage resources, the historical data virtual server stores the minute-level historical data to the cloud storage through the MySQL cloud database, other virtual services (the comprehensive interface virtual server, the Web publishing virtual server and the Internet of Things (public) network interface virtual server) can also store their respective minute-level historical data to the cloud storage through the MySQL cloud database, and the cloud storage resource and the cloud database storage resource of the comprehensive energy management platform account for 1:2.

[0032] The bastion host realizes operation and maintenance management of the virtual servers of the comprehensive energy management platform, and the cloud firewall security component realizes network security of the civil aviation airport private cloud. The secure access area is used for external connection of the energy subsystem through a pre-constructed energy data private network, the DMZ external connection area is used for external connection of the Internet of Things wireless metering instrument through an operator private network and external connection of a third-party platform or system (such as a smart vehicle Internet charging pile platform) through an Internet VPN tunnel.

[0033] 2. Energy data private network construction

[0034] The energy data private network is composed of a cloud side security area access network of the comprehensive energy management platform, a VLAN private network of a civil aviation airport comprehensive service network and an energy subsystem terminal access network, takes the VLAN private network of the comprehensive service network as the main body, and configures network security devices such as vertical encryption, forward and reverse isolation and a firewall at the upper and lower ends of the security area access network and the energy subsystem terminal access network, so as to ensure the safety and stability of the energy data private network.

[0035] The security access area of the comprehensive energy management platform is located at the private cloud side of the civil aviation airport, and longitudinal encryption devices and isolation devices are arranged to encrypt / decrypt and positively and reversely isolate the data interaction channel. The network of the security access area is connected with the VLAN special network of the comprehensive service network and the private cloud of the civil aviation airport.

[0036] The energy subsystem terminal access network is located at the energy subsystem side, and comprehensive energy management platform interface devices are arranged to interface with the energy subsystem interface devices and correspond to the corresponding encryption devices of the security access area to realize the security decryption / encryption function of the energy data special network.

[0037] The comprehensive service network is uniformly constructed for the weak current information engineering of the civil aviation airport, and is from the information center of the location of the private cloud of the civil aviation airport to the ground required by the flight area, the terminal area, the working area and the cargo area, and the VLAN special network (gigabit bandwidth) is divided in the comprehensive service network.

[0038] Meanwhile, through the IP / MAC address binding between the two network nodes of the security access area network, the comprehensive service network and the energy subsystem terminal access network, the unified control of the energy data special network is realized.

[0039] 3. Energy subsystem access

[0040] The energy subsystem of the civil aviation airport includes an airport power supply and distribution energy subsystem and an airport industrial control energy subsystem. The airport power supply and distribution energy subsystem includes a power dispatching and control system, a power supply and distribution monitoring system of 110kV-0.4kV voltage levels and a photovoltaic power generation system deployed in the flight area, the terminal area, the working area and the cargo area of the airport. The airport industrial control energy subsystem includes a refrigeration station automatic control system, a heating station automatic control system, a pipe network online monitoring system, a building automatic control system, a water supply station automatic control system, a gas pressure regulating station automatic control system and an intelligent lighting system deployed in the flight area, the terminal area, the working area and the cargo area of the airport. The comprehensive energy management platform has monitoring and dispatching functions for the power supply and distribution monitoring system of 110kV-0.4kV voltage levels, the refrigeration station automatic control system, the heating station automatic control system, the building automatic control system, the water supply station automatic control system, the gas pressure regulating station automatic control system and the intelligent lighting system.

[0041] The above-mentioned energy subsystem access includes energy subsystem special interface devices, comprehensive energy management platform interface devices and corresponding network security devices. The energy subsystem special interface devices (servers) are connected with the comprehensive energy management platform interface devices (industrial gateways) through RJ45 network connection, and data interaction is carried out according to the agreed communication protocol. The industry common communication protocol between the power supply and distribution system special interface devices and the comprehensive energy management platform interface devices is the power 104 protocol. The industry common communication protocol between the industrial control system and the special interface devices and the comprehensive energy management platform interface devices is the Modbus TCP and OPC protocol.

[0042] The special interface device of the airport power supply and distribution energy subsystem adopts the power 104 protocol; the special interface device of the airport industrial control energy subsystem adopts the Modbus TCP and OPC protocol. The building automation system and intelligent lighting system large industrial control energy subsystem in the terminal area adopts the OPC protocol; the other industrial control energy subsystem adopts the Modbus TCP protocol.

[0043] The Modbus TCP protocol is used for small industrial control energy subsystems (coefficient points <3000); the OPC protocol is used for medium and large industrial control energy subsystems (points ≥3000), and one OPC data interaction channel is set for every 10000 points.

[0044] 4. Network security

[0045] The network security device of the comprehensive energy management platform includes a firewall, a longitudinal encryption device, and a forward and reverse isolation device. The network security device is placed in the comprehensive energy management platform security access area and the energy subsystem terminal access network. The longitudinal encryption device in the security access area corresponds to the longitudinal encryption device on the energy subsystem side through "one-to-many" and encrypts / decrypts the corresponding data transmission channel. The network security device of the energy subsystem terminal access network ensures the network security of the front end of the comprehensive service network and performs network isolation, data transmission channel decryption / encryption, and IP / MAC address binding on each energy subsystem. The related network devices are included between the security access area and the comprehensive service network and between the comprehensive service network and the energy subsystem terminal access network.

[0046] The forward and reverse isolation device is used for the security protection of the power dispatching control system, the longitudinal encryption device is used for the security protection of specific energy subsystems, and the firewall is used for the security protection of conventional energy subsystems. The specific energy subsystems include all power supply and distribution systems and industrial control energy subsystems with monitoring and dispatching functions in the management platform, including 110kV-0.4kV voltage level power supply and distribution monitoring systems, refrigeration station control systems, heating station control systems, building automation systems, water supply station control systems, gas pressure regulating station control systems, and intelligent lighting systems.

[0047] The above only describes the preferred embodiments of the present application. It should be noted that those skilled in the art can make several improvements and modifications without departing from the technical principles of the present application, and these improvements and modifications should also be considered within the protection scope of the present application.

Claims

1. A cloud-based integrated energy management platform for airports, characterized in that, It includes servers, storage resources, a bastion host, cloud firewall security components, a secure access zone, and a DMZ external connection zone. The servers and storage resources are deployed on the airport's private cloud. The servers utilize IaaS infrastructure-level services provided by the airport's private cloud, and the storage resources include cloud storage resources and a cloud database. The bastion host and cloud firewall security components are used for operation and maintenance management and security protection of the servers and storage resources. The secure access zone is used to connect to external energy subsystems through a constructed dedicated energy data network. The DMZ external connection zone is used to connect to IoT wireless metering instruments through the operator's dedicated network and to connect to third-party platforms or systems through an Internet VPN tunnel.

2. The airport integrated energy management platform based on cloud deployment according to claim 1, characterized in that, The server includes a basic virtual server, a time-series data virtual server, a historical data virtual server, and an interface virtual server. The basic virtual server is used to manage the processing of platform data and its functional applications. The time-series data virtual server is used to manage the platform's access to and retrieval of second-level time-series data from cloud storage resources. The historical data virtual server is used to manage the platform's access to and retrieval of minute-level historical data from cloud storage resources via a cloud database. The interface virtual server is used to manage the platform's data interaction with third-party platforms or systems through API interfaces.

3. The airport integrated energy management platform based on cloud deployment according to claim 2, characterized in that, The basic virtual servers include a data acquisition virtual server, a SCADA virtual server, a scheduling and analysis virtual server, an RGS virtual server, and a Web publishing virtual server. The data acquisition virtual server is used by the management platform to interact with the energy subsystem through communication protocols. The SCADA virtual server is used for internal data processing, monitoring, and alarms within the management platform. The scheduling and analysis virtual server is used for business analysis, scheduling strategies, and intelligent operation and maintenance of the management platform. The RGS virtual server is used for remote graphical services on the management platform terminals. The Web publishing virtual server provides services using a B / S network architecture, allowing the management platform to publish management-related business functions to the airport office network and the Internet.

4. The airport integrated energy management platform based on cloud deployment according to claim 2, characterized in that, The interface virtual servers include data center interface virtual servers, integrated interface virtual servers, airport group interface virtual servers, video interface virtual servers, IoT interface virtual servers, and internet interface virtual servers. The data center interface virtual servers are used for data interaction between the management platform and the data center deployed in the airport's private cloud. The data center includes meteorological information, flight information, passenger flow information, and GIS information. The integrated interface virtual servers are used for data interaction between the management platform and third-party platforms deployed in the airport's integrated business network. The airport group interface virtual servers are used for data interaction between the management platform and third-party systems deployed within the airport group. The video interface virtual servers are used for data interaction between the management platform and the airport's video security system. The IoT interface virtual server is used for data interaction between the management platform and the airport's IoT wireless metering instruments. The Internet interface virtual server is used for data interaction between the management platform and a third-party platform deployed on the Internet outside the airport.

5. The airport integrated energy management platform based on cloud deployment according to claim 3, characterized in that, The data acquisition virtual server includes a power acquisition virtual server and an industrial control acquisition virtual server; the power acquisition virtual server is used for data interaction between the management platform and the airport's power supply and distribution energy subsystem; the industrial control acquisition virtual server is used for data interaction between the management platform and the airport's industrial control energy subsystem.

6. The airport integrated energy management platform based on cloud deployment according to claim 5, characterized in that, The airport power supply and distribution energy subsystem includes a power dispatch and control system deployed in the airport's flight area, terminal area, work area, and cargo area; a power supply and distribution monitoring system at voltage levels from 110kV to 0.4kV; and a photovoltaic power generation system. The airport industrial control energy subsystem includes an automatic control system for refrigeration stations, an automatic control system for heating stations, an online monitoring system for pipeline networks, a building automation system, an automatic control system for water supply stations, an automatic control system for gas pressure regulating stations, an intelligent lighting system, and an energy consumption metering system deployed in the airport's flight area, terminal area, work area, and cargo area.

7. The airport integrated energy management platform based on cloud deployment according to claim 5, characterized in that, The dedicated interface equipment of the airport power supply and distribution energy subsystem adopts the 104 protocol; the dedicated interface equipment of the airport industrial control energy subsystem adopts the Modbus TCP and OPC protocols.

8. The airport integrated energy management platform based on cloud deployment according to claim 1, characterized in that, The dedicated energy data network includes a secure access area network, an airport integrated business network, and an energy subsystem terminal access network connected in sequence. The secure access area network and the energy subsystem terminal access network are equipped with network security devices and are respectively connected to the data collection virtual server and the energy subsystem on the airport's private cloud. The airport integrated business network divides VLANs for the dedicated energy data network and configures dedicated IP address ranges.

9. The cloud-based integrated energy management platform for airports according to claim 8, characterized in that, The network security equipment includes firewalls, vertical encryption devices, and forward and reverse isolation devices. The network security equipment is used to ensure the security of the data transmission channel between the management platform and the energy subsystem.

10. The airport integrated energy management platform based on cloud deployment according to claim 3, characterized in that, The management platform terminals include water system control terminals, power system control terminals, gas / steam system control terminals, cooling system control terminals, and heating system monitoring terminals. The terminals and the management platform RGS virtual server adopt a C / S network architecture and interact with each other through the EIP set by the RGS virtual server.

Images