Power system signal verification method and device based on dual-plane signal differentiation analysis

Abstract

The application discloses a power system signal verification method and device based on double-plane signal differential analysis, and the verification method is characterized in that: every time a preset remote signal transmission cycle is reached, a communication server of a centralized control station judges whether the message type of the remote signal message transmitted from a first channel and a second channel is an alarm message; if the message type is an alarm message, the communication server of the centralized control station converts the fields of the remote signal messages transmitted from the first channel and the second channel into the form of a key-value pair set, and filters the key-value pair set; if the time when the remote signal message is received by the first channel and the time when the remote signal message is received by the second channel are inconsistent, or the first key-value pair set and the second key-value pair set are different, the real-time remote signal messages in the first channel and the second channel are compared; the application is beneficial to reducing the workload of on-site personnel checking each plane, and can quickly and accurately find subtle problems of inconsistent remote double-plane data which are difficult to be discovered by manual work.

Description

Technical Field

[0001] This invention relates to the field of power system signal verification technology, specifically to a power system signal verification method and apparatus based on dual-plane signal differential analysis. Background Technology

[0002] Currently, centralized power grid monitoring systems employ dual-plane network access, connecting substation signals to the central control station to prevent network outages from causing unattended substations to fall out of monitoring, thus further improving the stability of centralized power grid monitoring. After new construction or expansion of substations, the collected analog quantities, status quantities, and protection alarm information need to be configured in the remote communication gateway before being transmitted to the remote centralized monitoring station. Typically, the commissioning and acceptance testing of signals connected to the central control station involves manual or testing equipment sending commands to the central control station, where personnel or programs perform signal-level verification. However, with dual-plane networks, real-time verification of data from both networks is difficult, easily overlooking network issues, communication terminal configuration problems, and message anomalies. Therefore, a technical means is needed to accurately verify data from both planes, thereby detecting subtle errors and preventing faulty communication gateways from being connected to the central control station for operation. Therefore, this invention proposes a power system signal verification method and apparatus based on dual-plane signal differentiation analysis. Summary of the Invention

[0003] The purpose of this invention is to provide a power system signal verification method and apparatus based on dual-plane signal differentiation analysis to solve the above-mentioned problems.

[0004] To achieve the above objectives, this invention proposes a power system signal verification method based on dual-plane signal differentiation analysis, comprising the following steps: Step 1: Mark the communication channels of the dual-plane network between the substation and the central control station communication server as the first channel and the second channel, respectively; Step 2: Every preset remote signal transmission cycle, the communication server of the central control station determines whether the message type of the remote signal message transmitted from the first channel and the second channel is an alarm message; if the message type is an alarm message, proceed to step 3; if the message type is not an alarm message, no processing is performed. Step 3: The communication server of the central control station converts the fields of the remote signaling message messages transmitted through the first and second channels into key-value pair sets and filters the key-value pair sets; the key-value pair set filtered by the first channel is marked as the first key-value pair set, and the key-value pair set filtered by the second channel is marked as the second key-value pair set; Step 4: Determine whether the timing of the remote signaling message received by the first channel and the remote signaling message received by the second channel are inconsistent, or whether there is a difference between the first key-value pair set and the second key-value pair set; if the timing of the remote signaling message received by the first channel and the remote signaling message received by the second channel are inconsistent, or if there is a difference between the first key-value pair set and the second key-value pair set, proceed to Step 5; otherwise, do not process. Step 5: Use a bypass monitoring device to monitor the switches in the central control station to obtain the real-time remote signaling signal messages transmitted in the first and second channels, compare the real-time remote signaling signal messages in the first and second channels, determine the anomaly type based on the comparison type, and initiate the corresponding early warning. In one embodiment, the dual-plane network is a substation or transmission line terminal device equipped with two or more independent communication channels, one of which is the main channel and the other is a backup channel. In one embodiment, the remote signal transmission period is a preset time period for the substation to send remote signal messages to the central control station through the first and second channels; In one implementation, the remote signaling message is a binary digital signal generated in real time by the substation using a preset communication protocol. This binary digital signal is used to indicate changes in various status information in the power system. It should be noted that the communication server of the central control station presets a combination of field bits in the remote signaling message, and different message types are represented by the combination of field values ​​of different field bits. In one implementation, the method for determining whether the message type is an alarm message is as follows: the remote signaling message contains fields for communication point and status value; wherein, the communication point is used to indicate the status of the monitored device, and the status value is used to indicate the status of the monitored device; when the status value in the remote signaling message is 1, it indicates that the status of the corresponding communication point is abnormal, that is, the message type of the remote signaling message is an alarm message. In one implementation, the method for converting the fields of the remote signaling message transmitted through the first and second channels into a set of key-value pairs is as follows: The communication server of the central control station uses the corresponding communication protocol to parse the remote signaling message, and saves each field bit and field value in the parsed message in the form of key-value pairs; all key-value pairs are merged to form a key-value pair set.

[0005] In one implementation, the method for filtering the set of key-value pairs is as follows: A remote signaling important field table is designed in advance based on the actual needs of the substation; this remote signaling important field table stores the necessary fields in the remote signaling signal message; Based on the order of each key-value pair in the key-value pair set, for each key-value pair in the first channel's key-value pair set and the second channel's key-value pair set, iterate and match it against the fields stored in the remote information important field table. If a field in the remote information important field table is matched, the key-value pair is saved to the corresponding database table in the central control station database. If no field in the remote information important field table is matched, the key-value pair is not saved. The key-value pairs stored in the database from the first channel's key-value pair set are marked as first key-value pairs, and the key-value pairs stored in the database from the second channel's key-value pair set are marked as second key-value pairs. The first key-value pairs and the second key-value pairs are stored in different database tables, and the key-value pair set saved in the database is marked as the filtered key-value pair set.

[0006] In one implementation, the method for determining whether there is a difference between the first key-value pair set and the second key-value pair set is as follows: For the first set of key-value pairs and the second set of key-value pairs, check if all keys are completely identical. If they are not completely identical, it is determined that there is a difference between the first set of key-value pairs and the second set of key-value pairs. If they are completely identical, continue to check if the values ​​corresponding to each key are completely identical. If there are inconsistent values, it is determined that there is a difference between the first set of key-value pairs and the second set of key-value pairs. If there are inconsistent values, it is determined that there is no difference between the first set of key-value pairs and the second set of key-value pairs. In one implementation, the comparison of real-time remote signaling message messages in the first channel and the second channel includes the following steps: Step 1: Mark the real-time remote signaling message of the first channel as the first real-time message, and mark the real-time remote signaling message of the second channel as the second real-time message; Step 2: Perform byte-by-byte matching between the first real-time message and the second real-time message, and calculate the difference rate in real time; the difference rate is the number of inconsistent bytes divided by the number of matched bytes. Step 3: When the difference rate is greater than or equal to the preset difference rate threshold, proceed to Step 4; When the difference rate is less than the preset difference rate threshold, an abnormal message warning is sent to the display platform of the central control station for visual display; Step 4: Extract several consecutive bytes from the first real-time message, and use a string matching algorithm to match the extracted consecutive bytes in the second real-time message; the string matching algorithm is the KMP string matching algorithm. Step 5: Set the number of matching comparisons n. Repeat Step 4 for the number of matching comparisons n times. If the number of matches is greater than or equal to the preset number of matching comparisons threshold, send a message misalignment warning to the display platform of the central control station for visualization. If the number of matches is less than the preset number of matching comparisons threshold, send a message anomaly warning to the display platform of the central control station for visualization.

[0007] The present invention also provides a power system signal verification device based on dual-plane signal differential analysis, the device comprising: The marking module is used to mark the communication channels of the dual-plane network between the substation and the central control station communication server as the first channel and the second channel, respectively. Module 1 is used to determine whether the message type of the remote signaling message transmitted from the first channel and the second channel is an alarm message at preset remote signaling signal transmission cycles. The conversion and filtering module is used to convert the fields of the remote signaling signal messages transmitted by the first channel and the second channel into the form of key-value pair sets when the message type is an alarm message, and to filter the key-value pair sets; the key-value pair sets filtered by the first channel are marked as the first key-value pair set, and the key-value pair sets filtered by the second channel are marked as the second key-value pair set; The functions of the judgment module and the conversion and filtering module are implemented by the communication server of the central control station; The second judgment module is used to determine whether the timing of the remote signaling message received by the first channel and the remote signaling message received by the second channel are inconsistent, or whether there is a difference between the first key-value pair set and the second key-value pair set. The early warning module is used to monitor the switches in the central control station using a bypass monitoring device when the time when the remote signaling signal messages received in the first channel and the second channel are inconsistent, or when there is a difference between the first key-value pair set and the second key-value pair set. This allows the module to obtain the real-time remote signaling signal messages transmitted in the first and second channels, compare the real-time remote signaling signal messages in the first and second channels, determine the anomaly type based on the comparison type, and initiate the corresponding early warning.

[0008] Compared with the prior art, the beneficial effects of the present invention are: This invention determines whether the message type of the remote signaling message transmitted from the first channel and the second channel is an alarm message at preset remote signaling signal transmission cycles. When the message type is an alarm message, the fields of the remote signaling message transmitted from the first channel and the second channel are converted into a set of key-value pairs, and the key-value pair set is filtered. If the time when the remote signaling message is received by the first channel and the time when the remote signaling message is received by the second channel are inconsistent, or if there is a difference between the first key-value pair set and the second key-value pair set, a bypass monitoring device is used on the switch in the central control station to obtain the real-time remote signaling message transmitted in the first channel and the second channel, and the real-time remote signaling message in the first channel and the second channel is compared. This helps to reduce the workload of on-site personnel checking each plane one by one, and can quickly and accurately discover subtle problems of inconsistency between remote and remote dual-plane data that are difficult to detect manually. Attached Figure Description

[0009] Figure 1 The flowchart illustrates a power system signal verification method based on dual-plane signal differentiation analysis, as provided in an embodiment of the present invention.

[0010] Figure 2 This is a schematic diagram of a power system signal verification device based on dual-plane signal differentiation analysis, provided in an embodiment of the present invention. Implementation

[0011] The technical solution of the present invention will be clearly and completely described below with reference to the embodiments. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0012] like Figure 1 As shown, the power system signal verification method based on dual-plane signal differential analysis includes the following steps: Step 1: Mark the communication channels of the dual-plane network between the substation and the central control station communication server as the first channel and the second channel, respectively.

[0013] In this embodiment, a dual-plane network is a substation or transmission line terminal device equipped with two or more independent communication channels, one of which is the primary channel and the other is a backup channel. This dual-plane network ensures the reliability and stability of communication. This configuration ensures that in the event of a failure or interruption of the primary channel, the backup channel can immediately take over the function of the primary channel, guaranteeing the continuity of the communication system.

[0014] Step 2: Every preset remote signal transmission cycle, the communication server of the central control station determines whether the message type of the remote signal message transmitted from the first channel and the second channel is an alarm message; if the message type is an alarm message, proceed to step 3; if the message type is not an alarm message, no processing is performed.

[0015] Furthermore, the remote signal transmission cycle is a preset time period for the substation to send remote signal messages to the central control station through the first and second channels. That is, every remote signal transmission cycle, the substation simultaneously sends remote signal messages to the central control station through the first and second channels.

[0016] In this embodiment, the remote signaling message is a binary digital signal generated in real time by the substation using a preset communication protocol. This binary digital signal is used to indicate changes in various status information in the power system. The communication server of the central control station presets a combination of field bits in the remote signaling message, and different message types are represented by the combination of field values ​​of different field bits.

[0017] It should be noted that the communication server of the central control station presets combinations of field bits in the remote signaling message, and different message types are represented by combinations of field values ​​for different field bits. The D5000 protocol is preferred for communication.

[0018] In this embodiment, the method for determining whether a message type is an alarm message is as follows: the remote signaling message contains fields for communication point and status value; wherein, the communication point is used to indicate the status of the monitored device, and the status value is used to indicate the status of the monitored device; when the status value in the remote signaling message is 1, it indicates that the corresponding communication point is in an abnormal state, that is, the message type of the remote signaling message is an alarm message. The status of the monitored device includes closed, open, alarm, disconnected, and unknown.

[0019] Step 3: The communication server of the central control station converts the fields of the remote signaling message messages transmitted through the first and second channels into a set of key-value pairs, and then filters the set of key-value pairs. The set of key-value pairs filtered by the first channel is marked as the first key-value pair set, and the set of key-value pairs filtered by the second channel is marked as the second key-value pair set.

[0020] In this embodiment of the application, the method for converting the fields of the remote signaling message transmitted by the first channel and the second channel into a set of key-value pairs is as follows: The communication server of the central control station uses the corresponding communication protocol to parse the remote signaling message, and saves each field bit and field value in the parsed message in the form of key-value pairs; all key-value pairs are merged to form a key-value pair set.

[0021] Furthermore, the method for filtering the key-value pair set is as follows: A remote signaling important field table is designed in advance based on the actual needs of the substation; this remote signaling important field table stores the necessary fields in the remote signaling signal message; Based on the order of the key-value pairs in the key-value pair set, for each key-value pair in the first channel's key-value pair set and the second channel's key-value pair set, iterate and match against the fields stored in the remote information important field table. If a field in the remote information important field table is matched, the key-value pair is saved to the corresponding database table in the central control station database. If no field in the remote information important field table is matched, the key-value pair is not saved. It should be noted that the key-value pairs stored in the database in the first channel's key-value pair set are marked as first key-value pairs, and the key-value pairs stored in the database in the second channel's key-value pair set are marked as second key-value pairs. The first key-value pairs and the second key-value pairs are stored in different database tables, and the key-value pair set saved to the database is marked as the filtered key-value pair set.

[0022] Step 4: Determine whether the timing of the remote signaling message received by the first channel and the remote signaling message received by the second channel are inconsistent, or whether there is a difference between the first key-value pair set and the second key-value pair set; if the timing of the remote signaling message received by the first channel and the remote signaling message received by the second channel are inconsistent, or if there is a difference between the first key-value pair set and the second key-value pair set, proceed to Step 5; otherwise, do not process.

[0023] In this embodiment of the application, the method for determining the difference between the first key-value pair set and the second key-value pair set is as follows: For the first set of key-value pairs and the second set of key-value pairs, check if all keys are completely identical. If they are not completely identical, it is determined that there is a difference between the first set of key-value pairs and the second set of key-value pairs. If they are completely identical, continue to check if the values ​​corresponding to each key are completely identical. If there are inconsistent values, it is determined that there is a difference between the first set of key-value pairs and the second set of key-value pairs. If there are inconsistent values, it is determined that there is no difference between the first set of key-value pairs and the second set of key-value pairs. Step 5: Use a bypass monitoring device to monitor the switches in the central control station to obtain the real-time remote signaling signal messages transmitted in the first and second channels, compare the real-time remote signaling signal messages in the first and second channels, determine the anomaly type based on the comparison type, and initiate the corresponding early warning. In this embodiment of the application, the real-time remote signaling message messages in the first channel and the second channel are compared, the anomaly type is determined based on the comparison type, and a corresponding early warning is initiated, including the following steps: Step 1: Mark the real-time remote signaling message of the first channel as the first real-time message, and mark the real-time remote signaling message of the second channel as the second real-time message; Step 2: Perform byte-by-byte matching between the first real-time message and the second real-time message, and calculate the difference rate in real time; the difference rate is the number of inconsistent bytes divided by the number of matched bytes. Step 3: When the difference rate is greater than or equal to the preset difference rate threshold, proceed to Step 4; When the difference rate is less than the preset difference rate threshold, an abnormal message warning is sent to the display platform of the central control station for visual display; Step 4: Extract several consecutive bytes from the first real-time message, and use a string matching algorithm to match the extracted consecutive bytes in the second real-time message; the string matching algorithm is the KMP string matching algorithm. Step 5: Set the number of matching comparisons n. Repeat Step 4 for the number of matching comparisons n times. If the number of matches is greater than or equal to the preset number of matching comparisons threshold, send a message misalignment warning to the display platform of the central control station for visualization. If the number of matches is less than the preset number of matching comparisons threshold, send a message anomaly warning to the display platform of the central control station for visualization.

[0024] Reference Figure 2 As shown, the present invention also provides a power system signal verification device based on dual-plane signal differential analysis, the device comprising: The marking module is used to mark the communication channels of the dual-plane network between the substation and the central control station communication server as the first channel and the second channel, respectively. Module 1 is used to determine whether the message type of the remote signaling message transmitted from the first channel and the second channel is an alarm message at preset remote signaling signal transmission cycles. The conversion and filtering module is used to convert the fields of the remote signaling signal messages transmitted by the first channel and the second channel into the form of key-value pair sets when the message type is an alarm message, and to filter the key-value pair sets; the key-value pair sets filtered by the first channel are marked as the first key-value pair set, and the key-value pair sets filtered by the second channel are marked as the second key-value pair set; The functions of the judgment module and the conversion and filtering module are implemented by the communication server of the central control station; The second judgment module is used to determine whether the timing of the remote signaling message received by the first channel and the remote signaling message received by the second channel are inconsistent, or whether there is a difference between the first key-value pair set and the second key-value pair set. The early warning module is used to monitor the switches in the central control station using a bypass monitoring device when the time when the remote signaling signal messages received in the first channel and the second channel are inconsistent, or when there is a difference between the first key-value pair set and the second key-value pair set. This allows the module to obtain the real-time remote signaling signal messages transmitted in the first and second channels, compare the real-time remote signaling signal messages in the first and second channels, determine the anomaly type based on the comparison type, and initiate the corresponding early warning.

[0025] It should be noted that the power system signal verification device based on dual-plane signal differentiation analysis provided in the above embodiments is only illustrated by the division of the functional modules described above when executing the power system signal verification method based on dual-plane signal differentiation analysis. In practical applications, the functions described above can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above. Furthermore, the power system signal verification device based on dual-plane signal differentiation analysis and the power system signal verification method embodiment based on dual-plane signal differentiation analysis provided in the above embodiments belong to the same concept, and their implementation process is detailed in the power system signal verification method embodiment based on dual-plane signal differentiation analysis, which will not be repeated here.

[0026] Numerous specific details are set forth in the specification provided herein. However, it will be understood that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures, and techniques have not been shown in detail so as not to obscure the understanding of this specification.

[0027] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0028] The above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention in any way. Although the present invention has been disclosed above with reference to preferred embodiments, it is not intended to limit the present invention. Any person skilled in the art can make some modifications or alterations to the above-described technical content to create equivalent embodiments without departing from the scope of the present invention. Any simple modifications, equivalent changes, and alterations made to the above embodiments based on the technical essence of the present invention without departing from the scope of the present invention shall still fall within the scope of the present invention.

Claims

1. A power system signal verification method based on dual-plane signal differential analysis, characterized in that, Includes the following steps: Step 1: Mark the communication channels of the dual-plane network between the substation and the central control station communication server as the first channel and the second channel, respectively; Step 2: Every preset remote signal transmission cycle, the communication server of the central control station determines whether the message type of the remote signal messages transmitted from the first channel and the second channel is an alarm message; If the message type is an alarm message, proceed to step three; if the message type is not an alarm message, do not process it. Step 3: The communication server of the central control station converts the fields of the remote signaling message messages transmitted through the first and second channels into key-value pair sets and filters the key-value pair sets; the key-value pair set filtered by the first channel is marked as the first key-value pair set, and the key-value pair set filtered by the second channel is marked as the second key-value pair set; Step 4: Determine whether the timing of the remote signaling message received by the first channel and the remote signaling message received by the second channel are inconsistent, or whether there is a difference between the first key-value pair set and the second key-value pair set; if the timing of the remote signaling message received by the first channel and the remote signaling message received by the second channel are inconsistent, or if there is a difference between the first key-value pair set and the second key-value pair set, proceed to Step 5; otherwise, do not process. Step 5: Use a bypass monitoring device to monitor the switches in the central control station to obtain the real-time remote signaling signal messages transmitted in the first and second channels, compare the real-time remote signaling signal messages in the first and second channels, determine the anomaly type based on the comparison type, and initiate the corresponding early warning. The comparison of real-time remote signaling message messages in the first and second channels includes the following steps: Step 1: Mark the real-time remote signaling message of the first channel as the first real-time message, and mark the real-time remote signaling message of the second channel as the second real-time message; Step 2: Perform byte-by-byte matching between the first real-time message and the second real-time message, and calculate the difference rate in real time; the difference rate is the number of inconsistent bytes divided by the number of matched bytes. Step 3: When the difference rate is greater than or equal to the preset difference rate threshold, proceed to Step 4; When the difference rate is less than the preset difference rate threshold, an abnormal message warning is sent to the display platform of the central control station; Step 4: Extract several consecutive bytes from the first real-time message, and use a string matching algorithm to match the extracted consecutive bytes in the second real-time message; the string matching algorithm is the KMP string matching algorithm. Step 5: Set the number of matching comparisons n. Repeat Step 4 for the number of matching comparisons n times. If the number of matches is greater than or equal to the preset number of matching comparisons threshold, send a message misalignment warning to the display platform of the central control station. If the number of matches is less than the preset number of matching comparisons threshold, send a message abnormality warning to the display platform of the central control station.

2. The power system signal verification method based on dual-plane signal differential analysis according to claim 1, characterized in that, The dual-plane network is a system in which two or more independent communication channels are set up in a substation or transmission line terminal device, one of which is the main channel and the other is a backup channel.

3. The power system signal verification method based on dual-plane signal differential analysis according to claim 1, characterized in that, The remote signal transmission period is a preset time period for the substation to send remote signal messages to the central control station through the first and second channels.

4. The power system signal verification method based on dual-plane signal differential analysis according to claim 1, characterized in that, The remote signal message is a binary digital signal generated in real time by the substation using a preset communication protocol. This binary digital signal is used to indicate changes in various status information in the power system. The communication server of the central control station presets a combination of field bits in the remote signal message, and different message types are represented by the combination of field values ​​of different field bits.

5. The power system signal verification method based on dual-plane signal differentiation analysis according to claim 4, characterized in that, The method for determining whether a message type is an alarm message is as follows: The remote signal message contains fields for communication point and status value; the communication point is used to indicate the status of the monitored device, and the status value is used to indicate the status of the monitored device; when the status value in the remote signal message is 1, it indicates that the status of the corresponding communication point is abnormal, that is, the message type of the remote signal message is an alarm message.

6. The power system signal verification method based on dual-plane signal differential analysis according to claim 1 or 5, characterized in that, The method for converting the fields of the remote signaling message transmitted through the first and second channels into a set of key-value pairs is as follows: The communication server of the central control station uses the corresponding communication protocol to parse the remote signaling message, and saves each field bit and field value in the parsed message as a key-value pair set.

7. The power system signal verification method based on dual-plane signal differential analysis according to claim 6, characterized in that, The method for filtering the set of key-value pairs is as follows: A remote signaling important field table is designed in advance based on the actual needs of the substation; this remote signaling important field table stores the necessary fields in the remote signaling signal message; Based on the order of each key-value pair in the key-value pair set, for each key-value pair in the first channel's key-value pair set and the second channel's key-value pair set, iterate and match the fields stored in the remote information important field table. If a field in the remote information important field table is matched, save the key-value pair to the corresponding database table in the central control station database. If no field in the remote information important field table is matched, do not save the key-value pair. Mark the key-value pairs stored in the database in the first channel's key-value pair set as first key-value pairs, and mark the key-value pairs stored in the database in the second channel's key-value pair set as second key-value pairs. Store the first key-value pairs and the second key-value pairs in different database tables, and mark the key-value pair set saved in the database as the filtered key-value pair set.

8. The power system signal verification method based on dual-plane signal differentiation analysis according to claim 7, characterized in that, The method for determining whether there is a difference between the first key-value pair set and the second key-value pair set is as follows: For the first key-value pair set and the second key-value pair set, check if all keys are completely identical. If they are not completely identical, it is determined that there is a difference between the first key-value pair set and the second key-value pair set. If they are completely identical, continue to check if the values ​​corresponding to each key are completely identical. If there are inconsistent values, it is determined that there is a difference between the first key-value pair set and the second key-value pair set. If there are no inconsistent values, it is determined that there is no difference between the first key-value pair set and the second key-value pair set.

9. A power system signal verification device based on dual-plane signal differential analysis, used to execute the power system signal verification method based on dual-plane signal differential analysis according to any one of claims 1 to 8, characterized in that, The device includes: The marking module is used to mark the communication channels of the dual-plane network between the substation and the central control station communication server as the first channel and the second channel, respectively. Module 1 is used to determine whether the message type of the remote signaling message transmitted from the first channel and the second channel is an alarm message at preset remote signaling signal transmission cycles. The conversion and filtering module is used to convert the fields of the remote signaling signal messages transmitted by the first channel and the second channel into the form of key-value pair sets when the message type is an alarm message, and to filter the key-value pair sets; the key-value pair sets filtered by the first channel are marked as the first key-value pair set, and the key-value pair sets filtered by the second channel are marked as the second key-value pair set; The functions of the judgment module and the conversion and filtering module are implemented by the communication server of the central control station; The second judgment module is used to determine whether the timing of the remote signaling signal messages received by the first channel and the remote signaling signal messages received by the second channel are inconsistent, or whether there is a difference between the first key-value pair set and the second key-value pair set. The early warning module is used to monitor the switches in the central control station using a bypass monitoring device when the time when the remote signaling signal messages received in the first channel and the second channel are inconsistent, or when there is a difference between the first key-value pair set and the second key-value pair set. This allows the module to obtain the real-time remote signaling signal messages transmitted in the first and second channels, compare the real-time remote signaling signal messages in the first and second channels, determine the anomaly type based on the comparison type, and initiate the corresponding early warning.

Images