Early warning method and device, electronic equipment and nonvolatile storage medium

Abstract

The application discloses a pre-warning method and device, electronic equipment and a nonvolatile storage medium. The method comprises the following steps: filtering original alarm information generated in the running process of an industrial control system according to a preset filtering rule to obtain target alarm information; determining the alarm level of the target alarm information as a first alarm level according to the instrument measurement value corresponding to the target alarm information; sending the target alarm information to a terminal device corresponding to the first alarm level to remind a target object to process the target alarm information; and in the case that the target alarm information is not processed, determining the alarm level of the target alarm information as a second alarm level according to a preset level prediction rule, and sending the target alarm information to a terminal device corresponding to the second alarm level. The application solves the technical problem of poor alarm information prompt accuracy caused by only bit number pin information in the related art to determine whether the alarm information is important alarm.

Description

Technical Field

[0001] This application relates to the field of industrial alarm technology, and more specifically, to an early warning method, device, electronic equipment, and non-volatile storage medium. Background Technology

[0002] In real-world production and daily life, factories generate a large number of alarms every day, including process alarms and system alarms, some of which are critical alarms requiring special attention. Distributed Control Systems (DCS) only prioritize alarms, lacking a method to exclude low-level alarms, leading to a flood of alarms. Differentiating, processing, and predicting alarms within such a large volume is extremely difficult. Existing solutions simply determine the importance of an alarm based on a specified pin number; this method is overly simplistic, prone to misjudgment or over-classification, and suffers from poor accuracy in alarm message prompts.

[0003] There is currently no effective solution to the above problems. Summary of the Invention

[0004] This application provides an early warning method, device, electronic device, and non-volatile storage medium to at least solve the technical problem of poor accuracy in alarm information prompts caused by relying solely on pin number information in related technologies to determine whether an alarm is an important alarm.

[0005] According to one aspect of the embodiments of this application, an early warning method is provided, comprising: filtering original alarm information generated during the operation of an industrial control system according to a preset filtering rule to obtain target alarm information, wherein the preset filtering rule is used to filter invalid alarm information in the original alarm information; determining the alarm level of the target alarm information as a first alarm level based on the instrument measurement value corresponding to the target alarm information; sending the target alarm information to a terminal device corresponding to the first alarm level to remind the target object to handle the target alarm information; if the target alarm information is not handled, determining the alarm level of the target alarm information as a second alarm level according to a preset level prediction rule, and sending the target alarm information to a terminal device corresponding to the second alarm level, wherein the second alarm level is higher than the first alarm level.

[0006] Optionally, after obtaining the target alarm information, the process further includes: determining the target cache corresponding to the tag number and pin information in the cache queue based on the tag number and pin information in the target alarm information; and adding the target alarm information to the target cache.

[0007] Optionally, determining the alarm level of the target alarm information as the second alarm level according to the preset level prediction rule includes: if the number of target alarm information in the target cache is not less than the preset minimum fitting value, determining a target curve based on the target alarm information in the target cache, wherein the target curve is used to characterize the correlation between the instrument measurement value corresponding to the target alarm information and time; calculating the fitting coefficient between the target curve and the preset curve, wherein the preset curve is used to characterize the correlation between the instrument measurement value and time under normal operating conditions; if the fitting coefficient is less than the preset fitting threshold, raising the alarm level of the target alarm information from the first alarm level to the second alarm level.

[0008] Optionally, determining the alarm level of the target alarm information as the second alarm level according to the preset level prediction rule further includes: determining a preset number threshold corresponding to the first alarm level; and when the number of target alarm information in the target cache where the target alarm information is located exceeds the preset number threshold, raising the alarm level of the target alarm information from the first alarm level to the second alarm level.

[0009] Optionally, determining the alarm level of the target alarm information as the second alarm level further includes: determining a preset response duration corresponding to the first alarm level; if the alarm duration of the target alarm information exceeds the preset response duration, raising the alarm level of the target alarm information from the first alarm level to the second alarm level, wherein the alarm duration is the length of time elapsed from the first moment to the second moment, the first moment is the moment when the target alarm information was last sent to the corresponding terminal device, and the second moment is the moment when the preset response duration corresponding to the first alarm level was determined.

[0010] Optionally, after sending the target alarm information to the terminal device corresponding to the first alarm level, the method further includes: deleting the target alarm information from the target cache if the target alarm information has been processed.

[0011] Optionally, determining the alarm level of the target alarm information as the first alarm level based on the instrument measurement value corresponding to the target alarm information includes: determining the set of measurement value thresholds corresponding to the tag number and pin information in the target alarm information; obtaining the instrument measurement value corresponding to the tag number and pin information in the industrial control system based on the tag number and pin information; and determining the alarm level of the target alarm information as the first alarm level by comparing the instrument measurement value with each measurement value threshold in the measurement value threshold set.

[0012] Optionally, the original alarm information includes: tag number and pin information, and a description field; the preset filtering rules include: a tag number and pin information library, and preset description filtering rules; according to the preset filtering rules, filtering the original alarm information generated during the operation of the industrial control system to obtain the target alarm information includes: if the tag number and pin information exist in the tag number and pin information library, determining the original alarm information corresponding to the tag number and pin information as the target alarm information; and, according to the preset description filtering rules, performing regular expression matching on the description field in the original alarm information, and if the matching is successful, determining the original alarm information corresponding to the description field as the target alarm information.

[0013] According to another aspect of the embodiments of this application, an early warning device is also provided, comprising: a pre-filtering module, configured to filter original alarm information generated during the operation of an industrial control system according to a preset filtering rule to obtain target alarm information, wherein the preset filtering rule is used to filter invalid alarm information in the original alarm information; a level determination module, configured to determine the alarm level of the target alarm information as a first alarm level based on the instrument measurement value corresponding to the target alarm information; an alarm sending module, configured to send the target alarm information to a terminal device corresponding to the first alarm level to remind the target object to handle the target alarm information; and a level enhancement module, configured to determine the alarm level of the target alarm information as a second alarm level according to a preset level prediction rule if the target alarm information has not been handled, and send the target alarm information to a terminal device corresponding to the second alarm level, wherein the second alarm level is higher than the first alarm level.

[0014] According to another aspect of the embodiments of this application, an electronic device is also provided, including: a memory and a processor, the processor being configured to run a program stored in the memory, wherein the program executes an early warning method during runtime.

[0015] According to another aspect of the embodiments of this application, a non-volatile storage medium is also provided, the non-volatile storage medium including a stored computer program, wherein the device where the non-volatile storage medium is located executes an early warning method by running the computer program.

[0016] In this embodiment, a preset filtering rule is used to filter the original alarm information generated during the operation of the industrial control system to obtain the target alarm information. The preset filtering rule is used to filter invalid alarm information from the original alarm information. Based on the instrument measurement value corresponding to the target alarm information, the alarm level of the target alarm information is determined to be a first alarm level. The target alarm information is sent to the terminal device corresponding to the first alarm level to remind the target object to handle the target alarm information. If the target alarm information is not handled, the alarm level of the target alarm information is determined to be a second alarm level according to a preset level prediction rule, and the target alarm information is then sent to the terminal device corresponding to the first alarm level. Alarm information is sent to the terminal device corresponding to the second alarm level. The second alarm level is higher than the first alarm level. The system uses a pre-warning method to filter low-priority alarms by matching the tag number, pin number, and description regular expressions, thus preventing alarm flooding. A hierarchical mechanism is adopted to evaluate and dynamically adjust the alarm level according to the evaluation rules of multiple parameters. This achieves the effect of hierarchical and graded alarm processing, reduces alarm processing time, and improves early warning capability and accuracy. This solves the technical problem of poor alarm information prompting accuracy caused by relying solely on tag number and pin information to determine whether an alarm is important in related technologies. Attached Figure Description

[0017] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:

[0018] Figure 1 This is a hardware structure block diagram of a computer terminal (or electronic device) for implementing an early warning method according to an embodiment of this application;

[0019] Figure 2 This is a schematic diagram of a method flow for early warning provided according to an embodiment of this application;

[0020] Figure 3 This is a flowchart illustrating a hierarchical early warning algorithm provided in an embodiment of this application;

[0021] Figure 4 This is a schematic diagram of the structure of an early warning device provided according to an embodiment of this application. Detailed Implementation

[0022] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.

[0023] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0024] To facilitate a better understanding of the embodiments of this application by those skilled in the art, some technical terms or nouns involved in the embodiments of this application are explained as follows:

[0025] Distributed Control System (DCS): A new generation of instrument control system based on microprocessors, employing the design principles of decentralized control functions, centralized display and operation, and balancing decentralized autonomy with integrated coordination. It adopts the basic design concept of decentralized control and centralized operation and management, and uses a multi-level, hierarchical, cooperative, and autonomous structure. Its main characteristics are centralized management and decentralized control. DCS has been widely used in various industries such as power, metallurgy, and petrochemicals.

[0026] In related technologies, when filtering important alarms from a large number of alarms, simply relying on the tag number pin to determine whether the current alarm is important can easily lead to misjudgment or overuse. Furthermore, the warning levels in related technologies are simple and do not achieve the effect of using different judgment methods for different levels to notify different operators. They also cannot perform pre-filtering for a large number of alarms, resulting in poor accuracy of alarm information warning prompts.

[0027] To address this issue, relevant solutions are provided in the embodiments of this application, which are described in detail below.

[0028] According to an embodiment of this application, a method embodiment for early warning is provided. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.

[0029] The methods and embodiments provided in this application can be executed on mobile terminals, computer terminals, or similar computing devices. Figure 1 A hardware structure block diagram of a computer terminal (or electronic device) for implementing an early warning method is shown. Figure 1 As shown, the computer terminal 10 (or electronic device 10) may include one or more processors 102 (shown as 102a, 102b, ..., 102n in the figure) 102 (processor 102 may include, but is not limited to, a microprocessor MCU or a programmable logic device FPGA, etc.), a memory 104 for storing data, and a transmission module 106 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of a BUS bus), a network interface, a power supply, and / or a camera. Those skilled in the art will understand that... Figure 1 The structure shown is for illustrative purposes only and does not limit the structure of the aforementioned electronic device. For example, computer terminal 10 may also include... Figure 1 The more or fewer components shown, or having the same Figure 1 The different configurations shown.

[0030] It should be noted that the aforementioned one or more processors 102 and / or other data processing circuits are generally referred to herein as "data processing circuits". These data processing circuits may be embodied, in whole or in part, in software, hardware, firmware, or any other combination thereof. Furthermore, the data processing circuits may be a single, independent processing module, or may be integrated, in whole or in part, into any other element within the computer terminal 10 (or electronic device). As involved in the embodiments of this application, the data processing circuits serve as a processor control mechanism (e.g., selection of a variable resistor termination path connected to an interface).

[0031] The memory 104 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the early warning method in the embodiments of this application. The processor 102 executes various functional applications and data processing by running the software programs and modules stored in the memory 104, thereby realizing the aforementioned early warning method. The memory 104 may include high-speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include memory remotely located relative to the processor 102, and these remote memories can be connected to the computer terminal 10 via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0032] The transmission device 106 is used to receive or send data via a network. Specific examples of the network described above may include a wireless network provided by the communication provider of the computer terminal 10. In one example, the transmission device 106 includes a Network Interface Controller (NIC), which can connect to other network devices via a base station to communicate with the Internet. In another example, the transmission device 106 may be a Radio Frequency (RF) module, used for wireless communication with the Internet.

[0033] The display may be, for example, a touchscreen liquid crystal display (LCD) that allows the user to interact with the user interface of the computer terminal 10 (or electronic device).

[0034] Under the above operating environment, this application provides an early warning method. Figure 2 This is a schematic diagram of a method flow for early warning provided according to an embodiment of this application, such as... Figure 2 As shown, the method includes the following steps:

[0035] Step S202: According to the preset filtering rules, filter the original alarm information generated during the operation of the industrial control system to obtain the target alarm information. The preset filtering rules are used to filter invalid alarm information in the original alarm information.

[0036] In the technical solution provided in step S202, the original alarm information includes: tag number and pin information, and description field; the preset filtering rules include: tag number and pin information library, and preset description filtering rules.

[0037] To eliminate low-priority alarms and prevent alarm overload, the original alarm information generated during the operation of the industrial control system is filtered according to preset filtering rules to obtain target alarm information. This includes the following steps: if the tag number and pin information exist in the tag number and pin information database, the original alarm information corresponding to the tag number and pin information is determined as the target alarm information; and, according to preset description filtering rules, the description field in the original alarm information is matched with a regular expression, and if the match is successful, the original alarm information corresponding to the description field is determined as the target alarm information.

[0038] Specifically, in the pre-filtering stage, a tag number / pin filtering method can be used: The pre-filtering configuration in the database is read. If a tag number / pin filtering rule exists, the tag number plus pin (TAG+COND) in the alarm (i.e., the original alarm information mentioned above) is matched with the value in the configuration (i.e., the tag number and pin information database mentioned above) to determine whether to accept the alarm. If it is determined to accept, the original alarm information is identified as the target alarm information.

[0039] In the pre-filtering stage, an alarm description filtering method can also be used. Specifically, the pre-filtering configuration in the database is read. If there are description filtering rules, the description filtering rules in the configuration are used to match the description field (DESC) in the alarm with regular expressions to determine whether to accept the alarm.

[0040] In some embodiments of this application, after obtaining the target alarm information, the following steps are further included: determining the target cache corresponding to the bit number and pin information in the cache queue based on the bit number and pin information in the target alarm information; and adding the target alarm information to the target cache.

[0041] Specifically, the filtered alarm (i.e. the target alarm information mentioned above) is used to find the corresponding cache (i.e. the target cache mentioned above) in the cache queue (QUEUE) according to the tag number and pin information. If the corresponding target cache is not found, it is added to the cache queue (QUEUE). If the corresponding target cache is found, the alarm activation count (COUNT) of the target cache (CACHE) is incremented by 1.

[0042] Step S204: Based on the instrument measurement value corresponding to the target alarm information, determine the alarm level of the target alarm information as the first alarm level;

[0043] In some embodiments of this application, determining the alarm level of the target alarm information as the first alarm level based on the instrument measurement value corresponding to the target alarm information includes the following steps: determining the set of measurement value thresholds corresponding to the tag number and pin information in the target alarm information; obtaining the instrument measurement value corresponding to the tag number and pin information in the industrial control system based on the tag number and pin information; and determining the alarm level of the target alarm information as the first alarm level by comparing the instrument measurement value with each measurement value threshold in the measurement value threshold set.

[0044] Specifically, the PV value (i.e. the instrument measurement value mentioned above) of the corresponding tag number and pin in the DCS is read through the DCOM protocol (Microsoft Distributed Component Object Model). If the PV value is greater than the alarm threshold value in the configuration (i.e. the measurement value threshold value mentioned above), the alarm level corresponding to the alarm threshold value is determined as the first alarm level of the target alarm information.

[0045] Step S206: Send the target alarm information to the terminal device corresponding to the first alarm level to remind the target object to handle the target alarm information;

[0046] Specifically, the pre-filter configuration in the database is read, and based on the current alarm level (LEVEL) (i.e., the first alarm level mentioned above), the mobile device (i.e., the terminal device) of the current level's notify person (i.e., the target object mentioned above) corresponding to the pin and tag number information is obtained, and a text message or email is sent to notify.

[0047] In some embodiments of this application, after sending the target alarm information to the terminal device corresponding to the first alarm level, the following step is further included: if the target alarm information has been processed, the target alarm information is deleted from the target cache.

[0048] Specifically, if the operator (i.e. the aforementioned target object) handles the target alarm information in a timely manner, the corresponding alarm cache is deleted from the cache queue, thus ending the hierarchical early warning process for that target alarm information.

[0049] Step S208: If the target alarm information is not processed, the alarm level of the target alarm information is determined to be the second alarm level according to the preset level prediction rule, and the target alarm information is sent to the terminal device corresponding to the second alarm level, wherein the second alarm level is higher than the first alarm level.

[0050] To improve the effectiveness of hierarchical processing, determining the alarm level of the target alarm information as the second alarm level according to the preset level prediction rules includes the following steps: If the number of target alarm information in the target cache is not less than a preset minimum fitting value, determine a target curve based on the target alarm information in the target cache, wherein the target curve is used to characterize the correlation between the instrument measurement value corresponding to the target alarm information and time; calculate the fitting coefficient between the target curve and a preset curve, wherein the preset curve is used to characterize the correlation between the instrument measurement value and time under normal operating conditions; if the fitting coefficient is less than a preset fitting threshold, upgrade the alarm level of the target alarm information from the first alarm level to the second alarm level.

[0051] Specifically, the hierarchical early warning configuration in the database is read, and the corresponding configuration is found according to the current alarm level. When the number of alarms in the cache (i.e., the number of target alarm messages in the target cache) reaches the minimum fitting value in the configuration, the fitting coefficient is calculated by comparing the continuous alarm values ​​in the alarm cache (i.e., the instrument measurement values ​​of the target alarm messages) with the curve values ​​in the configuration at the corresponding time point (i.e., the preset curve). If the fitting coefficient is less than the preset fitting threshold in the configuration, the alarm level (LEVEL) is upgraded (i.e., the alarm level of the target alarm message is upgraded from the first alarm level to the second alarm level), and the message is resent to the terminal device of the corresponding operator (i.e., the target object).

[0052] The specific fitting formula is shown below:

[0053] VALUE1 = SQRT(SUM(PY).^2)

[0054] VALUE2 = SQRT(SUM(P.^2))

[0055] Fit coefficient: RATE = 1 - VALUE1 / VALUE2

[0056] Wherein, P is the original alarm value (i.e., the instrument measurement value of the target alarm information mentioned above), Y is the fitted data value (i.e., the instrument measurement value in the preset curve mentioned above), and the fitting coefficient is used to reflect whether the historical alarm data (i.e., the instrument measurement value of the target alarm information mentioned above) is sufficiently fitted to the expected curve (i.e., the preset curve mentioned above) and meets the expected upgrade standard.

[0057] In some embodiments of this application, determining the alarm level of the target alarm information as the second alarm level according to the preset level prediction rule further includes the following steps: determining a preset number threshold corresponding to the first alarm level; and when the number of target alarm information in the target cache where the target alarm information is located exceeds the preset number threshold, raising the alarm level of the target alarm information from the first alarm level to the second alarm level.

[0058] Specifically, the hierarchical warning configuration in the database is read, and the corresponding configuration is found according to the current alarm level (LEVEL) (i.e., the first alarm level mentioned above). If the alarm count (COUNT) (i.e., the number of target alarm messages) in the current alarm cache (CACHE) (i.e., the target cache mentioned above) is greater than the alarm limit in the configuration (i.e., the preset count threshold mentioned above), then the alarm level (LEVEL) is upgraded, that is, the alarm level of the target alarm message is upgraded from the first alarm level to the second alarm level, and then resent to the terminal device of the corresponding operator (i.e., the target object mentioned above).

[0059] In some embodiments of this application, determining the alarm level of the target alarm information as the second alarm level further includes the following steps: determining a preset response duration corresponding to the first alarm level; if the alarm duration of the target alarm information exceeds the preset response duration, raising the alarm level of the target alarm information from the first alarm level to the second alarm level, wherein the alarm duration is the length of time elapsed from the first moment to the second moment, the first moment is the moment when the target alarm information was last sent to the corresponding terminal device, and the second moment is the moment when the preset response duration corresponding to the first alarm level was determined.

[0060] Specifically, the hierarchical warning configuration in the database is read, and the corresponding configuration is found according to the current alarm level (LEVEL, i.e., the first alarm level mentioned above). If the alarm duration (i.e., the alarm duration mentioned above) is greater than the timeout duration (i.e., the preset response duration mentioned above) in the configuration, the alarm level (LEVEL) is upgraded, that is, the alarm level of the target alarm information is upgraded from the first alarm level to the second alarm level, and it is resent to the terminal device of the corresponding operator (i.e., the target object mentioned above). The alarm duration (i.e., the alarm duration mentioned above) = current time (i.e., the second moment mentioned above) - alarm start time (i.e., the first moment mentioned above).

[0061] As an optional implementation, the hierarchical warning configuration in the database can also be read. Based on the current alarm level, the corresponding configuration can be found, and the PV value of the corresponding tag number plus pin in the DCS (i.e., the instrument measurement value mentioned above) can be read through the DCOM protocol. If the PV value is greater than the alarm threshold in the configuration (i.e., the measurement value threshold mentioned above), the alarm level of the target alarm information is raised from the first alarm level to the second alarm level, and then resent to the terminal device of the corresponding operator (i.e., the target object mentioned above).

[0062] The warning method in steps S202 to S208 of the embodiments of this application will be further described below.

[0063] Figure 3 This is a flowchart illustrating a hierarchical early warning algorithm provided in an embodiment of this application, as shown below. Figure 3 As shown, the method includes the following steps:

[0064] Step 1: Filter the original alarm information by matching the pin number or using regular expression rules.

[0065] Specifically, in the pre-filtering stage, a tag number / pin filtering method can be used: The pre-filtering configuration in the database is read. If a tag number / pin filtering rule exists, the tag number plus pin (TAG+COND) in the alarm (i.e., the original alarm information mentioned above) is matched with the value in the configuration (i.e., the tag number and pin information database mentioned above) to determine whether to accept the alarm. If it is determined to accept, the original alarm information is identified as the target alarm information.

[0066] In the pre-filtering stage, an alarm description filtering method can also be used. Specifically, the pre-filtering configuration in the database is read. If there are description filtering rules, the description filtering rules in the configuration are used to match the description field (DESC) in the alarm with regular expressions to determine whether to accept the alarm.

[0067] This application's early warning system filters low-priority alarms by matching the tag number, pin number, and description using regular expressions, thus preventing alarm overload.

[0068] Step 2: Based on the current predicted level of the target alarm information, use multiple different prediction algorithms to assess whether the level of the target alarm information should be upgraded.

[0069] This application proposes a solution that upgrades alarm levels based on factors such as the number of alarms, duration of alarms, alarm values ​​exceeding thresholds, and alarm values ​​conforming to prediction curves, thereby achieving tiered early warning.

[0070] Specifically, the hierarchical early warning configuration in the database is read, and the corresponding configuration is found according to the current alarm level. When the number of alarms in the cache (i.e., the number of target alarm messages in the target cache) reaches the minimum fitting value in the configuration, the fitting coefficient is calculated by comparing the continuous alarm values ​​in the alarm cache (i.e., the instrument measurement values ​​of the target alarm messages) with the curve values ​​in the configuration at the corresponding time point (i.e., the preset curve). If the fitting coefficient is less than the preset fitting threshold in the configuration, the alarm level (LEVEL) is upgraded (i.e., the alarm level of the target alarm message is upgraded from the first alarm level to the second alarm level), and the message is resent to the terminal device of the corresponding operator (i.e., the target object).

[0071] The specific fitting formula is shown below:

[0072] VALUE1 = SQRT(SUM(PY).^2)

[0073] VALUE2 = SQRT(SUM(P.^2))

[0074] Fit coefficient: RATE = 1 - VALUE1 / VALUE2

[0075] Wherein, P is the original alarm value (i.e., the instrument measurement value of the target alarm information mentioned above), Y is the fitted data value (i.e., the instrument measurement value in the preset curve mentioned above), and the fitting coefficient is used to reflect whether the historical alarm data (i.e., the instrument measurement value of the target alarm information mentioned above) is sufficiently fitted to the expected curve (i.e., the preset curve mentioned above) and meets the expected upgrade standard.

[0076] Based on historical experience, this application uses a prediction curve fitting algorithm to score the fitting effect, making efficient use of historical experience, improving prediction accuracy, enhancing experience-based prediction capabilities, and solving the problem of insufficient experience of traditional operators in equipment fault diagnosis.

[0077] Specifically, the hierarchical warning configuration in the database is read, and the corresponding configuration is found according to the current alarm level (LEVEL) (i.e., the first alarm level mentioned above). If the alarm count (COUNT) (i.e., the number of target alarm messages) in the current alarm cache (CACHE) (i.e., the target cache mentioned above) is greater than the alarm limit in the configuration (i.e., the preset count threshold mentioned above), then the alarm level (LEVEL) is upgraded, that is, the alarm level of the target alarm message is upgraded from the first alarm level to the second alarm level, and then resent to the terminal device of the corresponding operator (i.e., the target object mentioned above).

[0078] Specifically, the hierarchical warning configuration in the database is read, and the corresponding configuration is found according to the current alarm level (LEVEL, i.e., the first alarm level mentioned above). If the alarm duration (i.e., the alarm duration mentioned above) is greater than the timeout duration (i.e., the preset response duration mentioned above) in the configuration, the alarm level (LEVEL) is upgraded, that is, the alarm level of the target alarm information is upgraded from the first alarm level to the second alarm level, and it is resent to the terminal device of the corresponding operator (i.e., the target object mentioned above). The alarm duration (i.e., the alarm duration mentioned above) = current time (i.e., the second moment mentioned above) - alarm start time (i.e., the first moment mentioned above).

[0079] As an optional implementation, the hierarchical warning configuration in the database can also be read. Based on the current alarm level, the corresponding configuration can be found, and the PV value of the corresponding tag number plus pin in the DCS (i.e., the instrument measurement value mentioned above) can be read through the DCOM protocol. If the PV value is greater than the alarm threshold in the configuration (i.e., the measurement value threshold mentioned above), the alarm level of the target alarm information is raised from the first alarm level to the second alarm level, and then resent to the terminal device of the corresponding operator (i.e., the target object mentioned above).

[0080] As an optional implementation, the hierarchical warning configuration in the database can also be read. Based on the current alarm level, the corresponding configuration can be found. If a system alarm is configured in the current alarm level, a Windows system alarm can be issued to highlight the severity level and warn the operator of the system severity level.

[0081] As an optional implementation, the present application solution can also read the hierarchical early warning configuration in the database, find the corresponding configuration according to the current alarm level, and if there is no corresponding preset processing procedure in the configuration, notify the operator, record the log, and end the early warning process.

[0082] In some embodiments of this application, after upgrading the alarm level, the operator is re-notified of the operation and tiered early warning process, and the corresponding entire early warning level is upgraded, resulting in a significant tiered effect. Upgrading continues until the entire early warning process ends. After the entire early warning process concludes, the processing results are stored in a database for later historical data review.

[0083] This application solution performs different notification operations or system warnings for different levels of alarms, ultimately achieving a hierarchical and graded processing effect, reducing the time alarms remain unprocessed, and improving early warning capabilities.

[0084] Step 3: Based on different alarm levels, notify the corresponding operators of the target alarm information.

[0085] Specifically, the pre-filter configuration in the database is read, and based on the current alarm level (LEVEL) (i.e., the first alarm level mentioned above), the mobile device (i.e., the terminal device) of the current level's notify person (i.e., the target object mentioned above) corresponding to the pin and tag number information is obtained, and a text message or email is sent to notify.

[0086] Specifically, if the operator (i.e. the aforementioned target object) handles the target alarm information in a timely manner, the corresponding alarm cache is deleted from the cache queue, thus ending the hierarchical early warning process for that target alarm information.

[0087] This application scheme notifies operators based on hierarchical and categorical numbers, ensuring accurate and effective alarm handling assignment.

[0088] This application solution is easy to customize and maintain, can be configured with multiple variable parameters, provides different characteristics according to the factory's business needs, and is applicable to similar large-scale irregular message systems.

[0089] Through the above steps, early warning is achieved by filtering low-priority alarms using tag number, pin number, and description regular expression matching, thus preventing alarm overload. Furthermore, a hierarchical mechanism is employed to assess and dynamically adjust alarm levels based on various parameter evaluation rules. This achieves a tiered and graded alarm processing effect, reducing alarm processing time and improving early warning capabilities and accuracy. Ultimately, this solves the technical problem of poor alarm information accuracy caused by relying solely on tag number and pin number information to determine whether an alarm is important in related technologies.

[0090] According to an embodiment of this application, an embodiment of an early warning device is also provided. Figure 4 This is a schematic diagram of the structure of an early warning device according to an embodiment of this application. Figure 4 As shown, the device includes:

[0091] The pre-filtering module 40 is used to filter the original alarm information generated during the operation of the industrial control system according to the preset filtering rules to obtain the target alarm information. The preset filtering rules are used to filter invalid alarm information in the original alarm information.

[0092] The alarm level determination module 42 is used to determine the alarm level of the target alarm information as the first alarm level based on the instrument measurement value corresponding to the target alarm information;

[0093] The alarm sending module 44 is used to send the target alarm information to the terminal device corresponding to the first alarm level, so as to remind the target object to handle the target alarm information;

[0094] The level enhancement module 46 is used to determine the alarm level of the target alarm information as the second alarm level according to the preset level prediction rules when the target alarm information has not been processed, and to send the target alarm information to the terminal device corresponding to the second alarm level, wherein the second alarm level is higher than the first alarm level.

[0095] The device proposed in this application loads multiple parameter configurations for both pre- and hierarchical prediction, making it flexible, easy to operate, and convenient for later customization. The pre-prediction filter filters most alarms, effectively preventing alarm overload and improving the accuracy of later predictions. The device employs a multi-level early warning algorithm with diverse levels, resulting in efficient and accurate judgments. The device uses a hierarchical curve fitting algorithm, which efficiently utilizes historical experience data to improve the overall prediction capability. At the same time, the processing results are stored in a database for later functional demonstration, and the multi-parameter configuration facilitates future modification and maintenance.

[0096] It should be noted that each module in the aforementioned early warning device can be a program module (e.g., a set of program instructions to implement a specific function) or a hardware module. For the latter, it can take the following forms, but is not limited to them: each of the aforementioned modules is represented by a processor, or the functions of each of the aforementioned modules are implemented by a processor.

[0097] It should be noted that the early warning device provided in this embodiment can be used to perform... Figure 2 The warning method shown above is also applicable to the embodiments of this application, and will not be repeated here.

[0098] This application embodiment also provides a non-volatile storage medium, which includes a stored computer program. The device containing the non-volatile storage medium executes the following early warning method by running the computer program: filtering original alarm information generated during the operation of the industrial control system according to preset filtering rules to obtain target alarm information, wherein the preset filtering rules are used to filter invalid alarm information in the original alarm information; determining the alarm level of the target alarm information as a first alarm level based on the instrument measurement value corresponding to the target alarm information; sending the target alarm information to a terminal device corresponding to the first alarm level to remind the target object to handle the target alarm information; if the target alarm information is not handled, determining the alarm level of the target alarm information as a second alarm level according to preset level prediction rules, and sending the target alarm information to a terminal device corresponding to the second alarm level, wherein the second alarm level is higher than the first alarm level.

[0099] The sequence numbers of the embodiments in this application are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0100] In the above embodiments of this application, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0101] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are merely illustrative; for example, the division of units can be a logical functional division, and in actual implementation, there may be other division methods. For instance, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual coupling, direct coupling, or communication connection may be through some interfaces; the indirect coupling or communication connection between units or modules may be electrical or other forms.

[0102] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0103] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0104] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as a USB flash drive, read-only memory (ROM), random access memory (RAM), portable hard drive, magnetic disk, or optical disk.

[0105] The above description is only a preferred embodiment of this application. It should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the principle of this application, and these improvements and modifications should also be considered within the scope of protection of this application.

Claims

1. A method of early warning, characterized in that, The method comprises the following steps: According to the preset filtering rule, the original alarm information generated in the operation process of the industrial control system is filtered to obtain target alarm information, wherein the preset filtering rule is used to filter invalid alarm information in the original alarm information; According to the instrument measurement value corresponding to the target alarm information, the alarm level of the target alarm information is determined as a first alarm level, wherein the instrument measurement value is compared with the measurement value threshold corresponding to the bit number and pin information in the target alarm information to determine the alarm level of the target alarm information; The target alarm information is sent to the terminal device corresponding to the first alarm level to remind the target object to process the target alarm information; In the case where the target alarm information is not processed, according to the preset level prediction rule, the alarm level of the target alarm information is determined as a second alarm level, and the target alarm information is sent to the terminal device corresponding to the second alarm level, wherein the second alarm level is higher than the first alarm level; According to the preset level prediction rule, the alarm level of the target alarm information is determined as a second alarm level, which comprises: in the case where the number of target alarm information in the target cache corresponding to the bit number and pin information in the target alarm information is not less than a preset fitting minimum amount, a target curve is determined according to the target alarm information in the target cache, wherein the target curve is used to represent the correlation between the instrument measurement value corresponding to the target alarm information and time; a fitting coefficient between the target curve and a preset curve is calculated, wherein the preset curve is used to represent the correlation between the instrument measurement value and time under normal operation condition; in the case where the fitting coefficient is less than a preset fitting threshold, the alarm level of the target alarm information is raised from the first alarm level to the second alarm level.

2. The early warning method of claim 1, wherein, After obtaining the target alarm information, it further comprises: According to the bit number and pin information in the target alarm information, a target cache corresponding to the bit number and pin information is determined in the cache queue; The target alarm information is added to the target cache.

3. The early warning method of claim 2, wherein, According to the preset level prediction rule, the alarm level of the target alarm information is determined as a second alarm level, which further comprises: A preset number threshold corresponding to the first alarm level is determined; In the case where the number of target alarm information in the target cache where the target alarm information is located exceeds the preset number threshold, the alarm level of the target alarm information is raised from the first alarm level to the second alarm level.

4. The early warning method of claim 2, wherein, According to the preset level prediction rule, the alarm level of the target alarm information is determined as a second alarm level, which further comprises: A preset response time corresponding to the first alarm level is determined; In a case where the alarm duration of the target alarm information exceeds the preset response duration, the alarm level of the target alarm information is raised from the first alarm level to the second alarm level, wherein the alarm duration is a length of time elapsed from a first time to a second time, the first time is a time when the target alarm information is last sent to the corresponding terminal device, and the second time is a time when the preset response duration corresponding to the first alarm level is determined.

5. The early warning method of claim 2, wherein, The method further includes: In a case where the target alarm information has been processed, the target alarm information is deleted from the target cache.

6. The early warning method of claim 1, wherein, Determining the alarm level of the target alarm information as the first alarm level according to the instrument measurement value corresponding to the target alarm information includes: Determining a measurement value threshold set corresponding to the bit number and pin information in the target alarm information; According to the bit number and pin information, the instrument measurement value corresponding to the bit number and pin information in the industrial control system is obtained; By comparing the instrument measurement value with each measurement value threshold in the measurement value threshold set, the alarm level of the target alarm information is determined as the first alarm level.

7. The early warning method of claim 1, wherein, The original alarm information includes bit number and pin information, description field; the preset filtering rule includes bit number and pin information library, and preset description filtering rule; according to the preset filtering rule, the original alarm information generated in the running process of the industrial control system is filtered to obtain the target alarm information, including: In a case where the bit number and pin information exist in the bit number and pin information library, the original alarm information corresponding to the bit number and pin information is determined as the target alarm information; and According to the preset description filtering rule, the description field in the original alarm information is regular matched, and in a case where the matching is successful, the original alarm information corresponding to the description field is determined as the target alarm information.

8. A warning device, characterized in that Including: The pre-filtering module is configured to filter the original alarm information generated in the running process of the industrial control system according to the preset filtering rule to obtain the target alarm information, wherein the preset filtering rule is used to filter invalid alarm information in the original alarm information; The level determination module is configured to determine the alarm level of the target alarm information as the first alarm level according to the instrument measurement value corresponding to the target alarm information, wherein the instrument measurement value is determined by comparing the measurement value threshold corresponding to the bit number and pin information in the target alarm information; The alarm sending module is configured to send the target alarm information to the terminal device corresponding to the first alarm level to remind the target object to process the target alarm information; The grade promotion module is configured to, in a case where the target alarm information is not processed, determine, according to a preset grade prediction rule, an alarm grade of the target alarm information as a second alarm grade, and send the target alarm information to a terminal device corresponding to the second alarm grade, wherein the second alarm grade is higher than the first alarm grade. The determination of the alarm grade of the target alarm information as the second alarm grade according to the preset grade prediction rule includes: in a case where a quantity of the target alarm information in a target cache corresponding to bit number and pin information in the target alarm information is not less than a preset fitting minimum quantity, determining a target curve according to the target alarm information in the target cache, wherein the target curve is used to represent a correlation between an instrument measured value corresponding to the target alarm information and time; calculating a fitting coefficient between the target curve and a preset curve, wherein the preset curve is used to represent a correlation between the instrument measured value and time in a normal operation condition; and in a case where the fitting coefficient is less than a preset fitting threshold, promoting the alarm grade of the target alarm information from the first alarm grade to the second alarm grade.

9. An electronic device, comprising: The method comprises: The memory and the processor are configured to run a program stored in the memory, and the program is configured to perform the early warning method of any one of claims 1 to 7 when running.

10. A non-volatile storage medium, comprising: The non-volatile storage medium comprises a stored computer program, and a device in which the non-volatile storage medium is located performs the early warning method of any one of claims 1 to 7 by running the computer program.

Images