Method, system and computing device for cross-region transmission of power system data

Abstract

Embodiments of the present invention relate to a method, system, computing device and storage medium for cross-region transmission of data in an electric power system. The method includes monitoring a first bus about a first partition via a first bridge; the first bridge is deployed in the first partition; receiving a data message from a second partition, the data message includes a second file generated by a second bridge; the second bridge is deployed in the second partition, the first bridge and the second bridge are equipped with the same data processing logic, and the first partition and the second partition are both partitions in the electric power system; through the data processing logic, a first file is generated based on the first data about the first bus monitored, and the generated first file is stored on a disk to a first application server; the received second file is parsed through the data processing logic to generate a first message body compatible with the first bus; and the generated first message body is sent to the first bus. In this way, the transmission efficiency of data between different partitions can be effectively improved, and good compatibility can be achieved.

Description

Technical Field

[0001] Embodiments of the present invention generally relate to the field of power system data transmission, and more specifically to a method, system, computing device, and storage medium for cross-region transmission of power system data. Background Art

[0002] Based on the requirements for power system security protection, the existing power system divides the power system network into power safety zone I, power safety zone II, power safety zone III, and power safety zone IV according to different functions and safety levels. There is logical isolation between each zone, and safety isolation devices such as one-way safety isolation devices, encryption authentication devices, and firewalls are installed.

[0003] Traditional solutions for cross-zone data transmission in power systems cannot handle the problem of logical isolation between partitions. For example, different security partitions use different processing logics, and data processing applications in different security partitions are implemented in different programming languages. The logical isolation between these partition data, partition architecture, etc. leads to low efficiency in data transmission between different partitions when data is transmitted across zones in the power system using traditional solutions for cross-zone data transmission in power systems. This increases the difficulty of iterating data processing applications and causes poor compatibility of data transmission applications.

[0004] In summary, the traditional method for cross-regional transmission of power system data has the following shortcomings: when the power system data is transmitted across regions, the efficiency of data transmission between different partitions is low and the compatibility of data transmission applications is poor. Summary of the invention

[0005] In response to the above problems, the present invention provides a method, system, computing device and storage medium for cross-region data transmission in an electric power system, which can effectively improve the efficiency of data transmission between different partitions and have good compatibility between different partitions.

[0006] According to a first aspect of the present invention, a method for cross-region transmission of data in an electric power system is provided, comprising: monitoring a first bus about a first partition via a first bridge; wherein the first bridge is deployed in the first partition; receiving a data message from a second partition via the first bridge, the data message including a second file generated by the second bridge; wherein the second bridge is deployed in the second partition, the first bridge and the second bridge are equipped with the same data processing logic, and the first partition and the second partition are both partitions in the electric power system; generating a first file based on first data about the first bus monitored via the data processing logic of the first bridge, and storing the generated first file on a disk of a first application server; parsing the received second file via the data processing logic of the first bridge to generate a first message body compatible with the first bus; and sending the generated first message body to the first bus.

[0007] According to a second aspect of the present invention, there is provided a system for cross-region data transmission in an electric power system, comprising: a plurality of bridges deployed in an electric power system; wherein the electric power system comprises at least a plurality of partitions, a power bus corresponding to each partition, an application server corresponding to each partition, and a forward and reverse isolation device; at least one bridge is deployed in each partition; each of the plurality of bridges is configured at least to: be equipped with the same data processing logic as other bridges, monitor the power bus of the deployed partition, receive data messages from other partitions, and operate in pairs with any bridge deployed in other partitions so as to form a communication link between different power buses of two different partitions; each of the plurality of bridges is also configured to operate the method for cross-region data transmission in an electric power system of the first aspect.

[0008] According to a third aspect of the present invention, a computing device is provided, comprising: at least one processing unit; at least one memory, the at least one memory being coupled to the at least one processing unit and storing instructions for execution by the at least one processing unit, the instructions, when executed by the at least one processing unit, causing the device to perform the steps of the method according to the first aspect.

[0009] According to a fourth aspect of the present invention, there is provided a computer-readable storage medium having a computer program stored thereon, which implements the method according to the first aspect when the computer program is executed by a machine.

[0010] In some embodiments, generating a first file based on first data about a first bus monitored via a first bridge through data processing logic includes: in response to determining that a subject type of the first data falls within a data processing range of the first bridge, determining an encryption method and / or a signature method for the first data, and determining a predetermined data format corresponding to the subject type of the first data; generating a first file about the first data based on the determined encryption method and / or signature method, and based on the determined predetermined data format.

[0011] In some embodiments, parsing the received second file via the first bridge through data processing logic to generate a first message body compatible with the first bus includes: determining the subject type of the received second file; based on the subject type of the second file, determining a predetermined data format corresponding to the second file; parsing the second file based on the predetermined data format corresponding to the second file; and for the parsed second file, generating a first message body compatible with the first bus based on the file compatibility format of the first bus.

[0012] In some embodiments, based on a predetermined data format corresponding to the second file, parsing the second file includes: determining file splitting information of the second file based on the predetermined data format corresponding to the second file, the file splitting information including signature information, encryption information and / or summary value information; verifying the second file based on the determined file splitting information; in response to determining that the second file passes the items to be verified, generating, for the second file, a first message body compatible with the first bus based on the file compatibility format of the first bus.

[0013] In some embodiments, the method for cross-region transmission of power system data also includes: receiving a second file generated by another second bridge; wherein the other second bridge is deployed in other partitions, each partition is deployed with at least one bridge, and any bridge has the same data processing logic as the other bridges; parsing the second file received from the other partitions through the data processing logic to generate a first message body compatible with the first bus; and sending the first message body to the first bus.

[0014] In some embodiments, monitoring the first bus about the first partition via the first bridge includes: determining relevant data topics of the data requests based on data requests from other partitions in the power system; and determining the data processing scope of the first bridge based on a predetermined monitoring scope and the relevant data topics of the data requests.

[0015] In some embodiments, the method for cross-zone transmission of power system data also includes: the first bridge is configured to operate in pairs with any bridge deployed in other partitions to form a communication link between different power buses of two different partitions; the first bridge is also configured so that data generated by the first bus can only be sent to other partitions after being processed by the first bridge, and data sent by other partitions to the first partition can only be sent to the first bus after being processed by the first bridge.

[0016] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] The above and other features, advantages and aspects of the embodiments of the present invention will become more apparent with reference to the following detailed description in conjunction with the accompanying drawings. In the accompanying drawings, the same or similar reference numerals represent the same or similar elements.

[0018] Figure 1 A schematic diagram of a power system data inter-region transmission system for implementing an embodiment of the present invention is shown.

[0019] Figure 2 A flow chart of a method for cross-region transmission of power system data according to an embodiment of the present invention is shown.

[0020] Figure 3 A flow chart of a method for generating a first file according to an embodiment of the present invention is shown.

[0021] Figure 4 A flow chart of a method for generating a first message body compatible with a first bus according to an embodiment of the present invention is shown.

[0022] Figure 5 A schematic structural diagram of a bridge for implementing a method for cross-region data transmission in a power system according to an embodiment of the present invention is shown.

[0023] Figure 6 A schematic diagram of a predetermined data format according to an embodiment of the present invention is shown.

[0024] Figure 7 The flowchart of data processing performed when any bridge is deployed in a power partition according to an embodiment of the present invention is shown.

[0025] Figure 8 A block diagram of an electronic device according to an embodiment of the present invention is shown. DETAILED DESCRIPTION

[0026] The following is a description of exemplary embodiments of the present invention in conjunction with the accompanying drawings, including various details of the embodiments of the present invention to facilitate understanding, which should be considered as merely exemplary. Therefore, it should be recognized by those of ordinary skill in the art that various changes and modifications may be made to the embodiments described herein without departing from the scope and spirit of the present invention. Similarly, for clarity and conciseness, the description of well-known functions and structures is omitted in the following description.

[0027] As used herein, the term "including" and its variations mean open inclusion, i.e., "including but not limited to". Unless otherwise stated, the term "or" means "and / or". The term "based on" means "based at least in part on". The terms "an example embodiment" and "an embodiment" mean "at least one example embodiment". The term "another embodiment" means "at least one additional embodiment". The terms "first", "second", etc. may refer to different or the same objects. Other explicit and implicit definitions may also be included below.

[0028] As described above, the traditional solution for cross-zone data transmission in power systems cannot handle the problem of logical isolation between partitions. For example, different security partitions use different processing logics, and data processing applications in different security partitions are implemented by different programming languages. The logical isolation between these partition data, partition architecture, etc., leads to low efficiency in data transmission between different partitions when data is transmitted across zones in the power system using the traditional solution for cross-zone data transmission in power systems. This also increases the difficulty of iterating data processing applications and causes poor compatibility of data transmission applications.

[0029] In order to at least partially solve one or more of the above-mentioned problems and other potential problems, an example embodiment of the present invention proposes a scheme for cross-zone transmission of power system data. In the scheme of the present invention, a first bridge monitors a first bus about a first partition and receives a data message from a second partition, wherein the data message of the second partition includes a second file generated by a second bridge; wherein the first bridge is deployed in the first partition and the second bridge is deployed in the second partition, and the first bridge and the second bridge are equipped with the same data processing logic; a first file is generated by the first bridge based on the first data about the first bus monitored, and the generated first file is written to a disk of a first application server; the received second file is parsed by the data processing logic carried by the first bridge to generate a first message body compatible with the first bus; and the generated first message body is sent to the first bus.

[0030] Therefore, by deploying bridges with the same data processing logic in different partitions of the power system (such as production areas, access areas, and management areas), using bridges as partitioned data processing components, and processing the transmission data between one partition and other partitions through bridges pre-deployed in each partition, there is a pair of identical processing logics on two different buses, and then the data from different partitions is processed with the same processing logic instead of being processed differently, which not only greatly improves the efficiency of cross-region transmission of power system data, but also improves the portability and compatibility of data processing application components.

[0031] Figure 1 FIG. 1 is a schematic diagram of a power system data cross-region transmission system 100 for implementing an embodiment of the present invention. Figure 1 As shown in , the system 100 includes multiple power system partitions (such as access area 10, production area 20, management and control area 30), forward and reverse isolation devices 40, and bridges (110, 210 and 310) deployed in each partition. It should be understood that the power system structure illustrated above is only a schematic structure, and there may be different power system structures depending on the actual partition situation and network structure.

[0032] Each partition includes a power bus corresponding to the partition, such as the access zone bus 12, the production zone bus 22, and the management control zone bus 32, and each partition also includes a corresponding server (not shown). At least one bridge is deployed on each partition, such as the bridge 110 deployed on the access zone 10, the bridge 210 deployed on the production zone 20, and the bridge 310 deployed on the management control zone 30.

[0033] With respect to the bridges, each bridge (such as any one of 110, 210, and 310) is at least configured to carry the same data processing logic as other bridges, each bridge is also configured to listen to the power bus of the deployed partition (for example, bridge 110 is configured to listen to the access zone bus 12), each bridge is also configured to receive data messages from other partitions (for example, Figure 1 The bridge 110 in the example is configured to receive data messages from the production zone 20 and the management control zone 30), and each bridge is also configured to be able to operate in pairs with any bridge deployed in other zones to form a communication link between different power buses of two different zones (for example, the bridge 110 and the bridge 210 can operate in pairs to form a communication link between the access zone 10 and the production zone 20; for example Figure 1 Two communication links are formed between the access area 10 and the production area 20 through the bridge 110 and the bridge 210, which are used for the access area 10 to transmit data (such as file 1) to the production area 20, and for the production area 20 to transmit data (such as file 2) to the access area 10; for example, the bridge 210 and the bridge 310 can operate in pairs to form a communication link between the production area 20 and the management control area 30, such as Figure 1 Two communication links used to transmit file 3 and file 4).

[0034] It is worth noting that in the above communication link, the bridge and the forward and reverse isolation devices cooperate with each other. At one end, the bridge identifies the subject of the data generated by the bus and converts it into a file. The forward and reverse isolation device 40 is responsible for transporting the file to the specified path. At the other end, the bridge of the partition where it is located converts the file from the specified path into a subject and corresponding data. The file transfer is realized through the forward / reverse isolation device, and the communication link of the forward / reverse isolation device is called. For example, the forward isolation device is used for unidirectional transmission of data flow from a high-security area to a low-security area. Unlike the reverse isolation device, the forward isolation device allows TCP responses, but the TCP responses from the low-security area to the high-security area are prohibited from carrying application data, thereby ensuring that the transmission of the data flow is unidirectional. Therefore, the communication link formed between the two partitions through the bridge is often two unidirectional communication links.

[0035] Regarding the bridge, the bridge can exist in the form of a software application and be loaded on the application server corresponding to each partition. For example, the bridge is installed in the form of software on the application server corresponding to the production area 20. The bridge can also be encapsulated in specific hardware as software, and the specific hardware encapsulated with the bridge is deployed in each partition. Each bridge is configured to be able to run in the power partition where it is deployed to execute any method for cross-zone transmission of power system data provided in the embodiments of the present invention.

[0036] In addition, no matter what form the bridge exists in, it can directly or indirectly have (and / or call other devices in the power partition where it is deployed) one or more processing units, including special processing units such as GPU, FPGA and ASIC, and general processing units such as CPU. In some embodiments, the bridge and the application server can be integrated together or set separately from each other.

[0037] In some embodiments, please refer to Figure 5 The bridge (such as any one of 110 , 210 and 310 ) includes, for example, a first monitoring module 112 , a second monitoring module 114 , a data generating module 116 , and a file parsing module 118 .

[0038] The first monitoring module 112 is configured to monitor a first bus on a first partition via a first bridge; wherein the first bridge is deployed in the first partition.

[0039] Regarding the second monitoring module 114, it is used to receive a data message from the second partition via the first bridge, and the data message includes a second file generated by the second bridge; wherein the second bridge is deployed in the second partition, the first bridge and the second bridge carry the same data processing logic, and the first partition and the second partition are both partitions in the power system.

[0040] The data processing module 116 is used to generate a first file based on the first data about the first bus monitored via the first bridge through the data processing logic, and store the generated first file to the first application server corresponding to the first partition.

[0041] The data parsing module 118 is configured to parse the received second file through the first bridge by means of data processing logic, so as to generate a first message body compatible with the first bus.

[0042] The message sending module 120 is configured to send the generated first message body to the first bus via the first bridge.

[0043] Figure 2 FIG. 2 is a flow chart of a method 200 for cross-region transmission of power system data according to an embodiment of the present invention. The method 200 may be performed as follows: Figure 1The bridge shown (such as any one of 110, 210 and 310) can also be executed by any bridge calling the server of the power system partition to which it is deployed, or in Figure 8 The method 200 is executed at the electronic device 800. It should be understood that the method 200 may further include additional steps not shown and / or may omit the steps shown, and the scope of the present invention is not limited in this respect.

[0044] In step 202, a first bus on a first partition is monitored via a first bridge; wherein the first bridge is deployed in the first partition.

[0045] About the First Bridge, combined Figure 1 The first bridge may be any bridge in the power system data cross-region transmission system 100, such as bridge 110, bridge 210, and bridge 310. Specifically, the first bridge may be deployed on a first server corresponding to the first partition, for example, the first bridge is bridge 110, which is deployed on a first server corresponding to the first partition 10, and is used to monitor the first bus 12.

[0046] In some embodiments, monitoring the first bus about the first partition via the first bridge includes: determining relevant data topics of the data requests based on data requests from other partitions in the power system; and determining the data processing scope of the first bridge based on a predetermined monitoring scope and the relevant data topics of the data requests.

[0047] Therefore, by deploying bridges in power system partitions, the data range that needs to be monitored can be determined based on a predetermined data range (for example, the type of topic that needs to be processed) or based on the data range contained in the data requests received from other partitions (such as access area 10 requesting data about "topic a" from production area 20), thereby saving computing resources and improving monitoring efficiency and data processing efficiency, thereby improving the efficiency of cross-zone data transmission in the power system.

[0048] In step 204, a data message is received from the second partition via the first bridge, the data message includes a second file generated by the second bridge; wherein the second bridge is deployed in the second partition, the first bridge and the second bridge carry the same data processing logic, and the first partition and the second partition are both partitions in the power system.

[0049] In step 206, a first file is generated based on the first data monitored about the first bus via the first bridge through data processing logic, and the generated first file is written to the first application server corresponding to the first partition.

[0050] Regarding generating the first file based on the first data about the first bus monitored, the first bridge determines the data subject type to be monitored based on the monitored data range. For example, if the first bus is monitored to generate data with a subject type belonging to the monitoring range of the first bridge, the data is further processed to generate the first file. Figure 3 The method of generating the first file is described in detail and will not be repeated here.

[0051] Thus, the data generated by the first bus is processed by the first bridge to generate a first file, and the data related to the first bus will be transmitted between the first partition and the second partition in the form of a file. For example, after the first file is dropped on the first application server, it is received by the second bridge through the communication link between the first partition and the second partition, and through the forward and reverse isolation device in the power system. The first files are parsed and generated into a second message body compatible with the second bus, and then sent to the second bus by the second bridge. Therefore, there is no need for the bus to process the messages of each partition alone. These messages will be processed in a standardized and unified manner through the "bridge", which greatly improves the efficiency of cross-region data transmission in the power system and can also achieve seamless interaction at the business end of each partition bus.

[0052] It should be understood that since the first bridge and the second bridge have the same data processing logic, the method by which the second bridge monitors the second bus, obtains the second data, and generates the second file is the same as the method by which the first bridge generates the first file; obviously, the method by which any bridge monitors the partition bus in the partition where it is deployed and generates the corresponding file based on the monitored data is the same, because each bridge has the same data processing logic, and their processing logic for data generated by different buses is the same.

[0053] In step 208, the received second file is parsed by the data processing logic via the first bridge to generate a first message body compatible with the first bus.

[0054] Regarding generating a first message body compatible with the first bus, since the first bridge and the second bridge have the same data processing logic, when the first bridge receives and parses the data about the first bus generated by the second bridge, because the data processing logics of the two are compatible, the first bridge can parse the second file more efficiently and obtain relevant data about the second bus. After that, the first bridge converts the relevant data of the second bus based on the data format compatible with the first bus to generate a first message body compatible with the first bus.

[0055] In some embodiments, the method for cross-region transmission of power system data provided by an embodiment of the present invention also includes: receiving a second file generated by another second bridge via a first bridge; wherein the other second bridge is deployed in other partitions, each partition is deployed with at least one bridge, and any bridge has the same data processing logic as the other bridges; parsing the second file received from other partitions by the data processing logic carried by the first bridge to generate a first message body compatible with the first bus; and sending the first message body to the first bus.

[0056] For example, see Figure 1 , Figure 1 For example, 110 is used as the first bridge, then bridge 110 (the first bridge) can receive the second file (such as Figure 1 File 4 in the figure), that is, the bridge of a partition can establish communication links with multiple partitions at the same time, so that it can transmit data with multiple other partitions respectively.

[0057] Therefore, the first bridge receives these second files, parses them and generates a first message body compatible with the first bus, which is then sent by the first bridge to the first bus; the messages between the partitions will be standardized and unified through the "bridge", which greatly improves the efficiency of cross-region data transmission in the power system and enables seamless interaction between the partitions.

[0058] In step 210, the generated first message body is sent to the first bus via the first bridge.

[0059] In some embodiments, the first bridge is configured to operate in pairs with any bridge deployed in other partitions so as to form a communication link between different power buses of two different partitions; the first bridge is also configured so that data generated by the first bus can only be sent to other partitions after being processed by the first bridge, and data sent by other partitions to the first partition can only be sent to the first bus after being processed by the first bridge.

[0060] In the above scheme, bridges with the same data processing logic are deployed in different power system partitions, thereby ensuring that there is a pair of identical data processing logics on two different buses, so that data from different buses are no longer processed differently in different partitions, but the data from different buses are processed with the same processing logic, which improves data compatibility, so that different data processing logics do not need to be designed in each partition due to different security partitions, and improves portability (for example, to deploy the "bridge" to different partitions, you only need to change the partition configuration (such as IP and port connection parameters) and the corresponding file path to achieve penetrating transmission between different bus data, without the need to configure data structure, programming language, etc., which greatly improves the compatibility and portability of the "bridge" in the power system.).

[0061] Figure 3 FIG. 3 is a flow chart of a method 300 for generating a first file according to an embodiment of the present invention. The method 300 may be performed as follows: Figure 1 The bridge shown (such as any one of 110, 210 and 310) can also be executed by any bridge calling the server of the power system partition to which it is deployed, or in Figure 8 The method 300 is executed at the electronic device 800. It should be understood that the method 300 may further include additional steps not shown and / or may omit the steps shown, and the scope of the present invention is not limited in this respect.

[0062] In step 302, if it is determined that the subject type of the first data falls within the data processing scope of the first bridge, an encryption method and / or a signature method of the first data is determined.

[0063] In step 304, a predetermined data format corresponding to the subject type of the first data is determined.

[0064] In step 306, a first file related to the first data is generated based on the determined encryption method and / or signature method and the determined predetermined data format.

[0065] For the predefined data format, refer to Figure 6 , which for example includes a summary value, data length, data area and signature area; specifically, the signature area can be configured or not configured (blank) according to different configurations; the data area can be configured as plain text or cipher text according to different security levels. If the data area is configured as cipher text, the certificate file content must be specified in the configuration file.

[0066] In some embodiments, the data area can be configured as ciphertext and the signature area can be configured at different times. For example, if the data area is configured as ciphertext, it is not recommended to continue to configure the signature area. For example, if the data area is configured as a plaintext transmission file content area, it is recommended to configure the signature area. In this way, both the secure transmission of data can be guaranteed and computing resources can be saved. It should be understood that in some scenarios with high requirements for data confidentiality, the signature area can be configured while configuring ciphertext transmission to achieve double security verification and improve the communication security of important information. In this way, the encryption and verification methods of data in cross-region communication in the power system can be flexibly configured.

[0067] In some embodiments, the encryption and signing process of the file loads the necessary certificate part from the configuration file by default, and the calculation of the summary value can be, for example, MD5, SM3 or other algorithms. In some embodiments, the calculation of the summary value is a summary of the plaintext of the data area. The length value in the data is the length value of the plaintext. For example, if the configuration signature is effective, it is a signature of the entire document area except the signature part. If the security configuration is a data area ciphertext (i.e. encryption is required), for example, the encryption algorithm of the data area defaults to a symmetric encryption algorithm, such as the SM4 encryption algorithm. It should be understood that the SM4 encryption algorithm is only a schematic that does not limit the symmetric encryption method or the use of a symmetric encryption algorithm, and other types of encryption algorithms can also be used.

[0068] Figure 4 FIG. 4 is a flowchart of a method 400 for generating a first message body compatible with a first bus according to an embodiment of the present invention. The method 400 may be performed as follows: Figure 1 The bridge shown (such as any one of 110, 210 and 310) can also be executed by any bridge calling the server of the power system partition to which it is deployed, or in Figure 8 The method 400 is executed at the electronic device 800. It should be understood that the method 400 may further include additional steps not shown and / or may omit the steps shown, and the scope of the present invention is not limited in this respect.

[0069] In step 402, the subject type of the received second file is determined.

[0070] In step 404, based on the subject type of the second file, a predetermined data format corresponding to the second file is determined.

[0071] In step 406, the second file is parsed based on a predetermined data format corresponding to the second file.

[0072] In some embodiments, based on a predetermined data format corresponding to the second file, parsing the second file includes: determining file splitting information of the second file based on the predetermined data format corresponding to the second file, the file splitting information including signature information, encryption information and / or summary value information; verifying the second file based on the determined file splitting information; in response to determining that the second file passes the items to be verified, generating, for the second file, a first message body compatible with the first bus based on the file compatibility format of the first bus.

[0073] In step 408, for the parsed second file, based on the file compatible format of the first bus, a first message body compatible with the first bus is generated.

[0074] Therefore, in the method for cross-zone transmission of power system data provided in an embodiment of the present invention, the data generated by the bus is converted into text with a predetermined data format according to the subject type of the data, thereby obtaining a standardized text that is compatible between the bridges of the two partitions, and the conversion process is completely applied to the application layer, and a custom encryption and decryption algorithm can be used to realize the encryption and decryption of these files and the mutual conversion of files to subjects, thereby ensuring the confidentiality and integrity of data transmission.

[0075] Please refer to Figure 7 , which illustrates a schematic diagram of the data processing flow performed when any bridge provided by an embodiment of the present invention is deployed in a power partition. The specific flow is as follows:

[0076] Step 701, initialize the bridge; then the bridge has two monitoring threads, one for monitoring the bus (new data generated by the bus it is deployed on), and one for monitoring changes in the file directory (such as monitoring data sent from other partitions);

[0077] In step 710, the bridge determines whether the newly generated data on the data bus needs to be stored (i.e., whether it needs to be processed by the bridge); if it needs to be stored, then in step 712, it is determined whether the data needs to be encrypted; if it needs to be encrypted, then in step 714, it is determined whether the data needs to be signed; finally, in step 716, a file corresponding to the new data is generated in a predetermined data format according to the encryption configuration and signature configuration of the new data, and in step 716, the newly generated file is written to the disk.

[0078] In step 720, the bridge performs file splitting. Specifically, if it monitors that other partitions send files to the current bus, the bridge performs file splitting;

[0079] In step 722, for the file to be split, determine whether the signature verification passes;

[0080] In step 724, for the file to be split, determine whether the encryption verification passes;

[0081] In step 726, for the file to be split, determine whether the digest value verification passes;

[0082] At step 728, for the file that passes the digest value check, a message body that is compatible with the power partition bus where the bridge is located is generated;

[0083] In step 730, the bridge publishes the generated message body to the power partition IoT bus;

[0084] At step 732, end.

[0085] It should be understood that the above steps are only for illustration, and the specific file generation and splitting process can be configured with encryption, signature, summary and other steps according to actual needs.

[0086] To sum up, the effective effect of the present invention lies in data penetration in the cross-region environment of the power system; that is, it meets the standard specifications that cross-region isolation must be implemented in the power system and the use of TCP / IP protocol is prohibited, and it also meets the quasi-real-time requirements of the system using the Internet of Things scenario, so that users do not feel the delay caused by protocol conversion to files, while ensuring the integrity and confidentiality of file transmission, thereby promoting the application of the Internet of Things system in the power system.

[0087] In addition, the present invention enables more IoT devices to be connected to the production area of ​​the power system, thereby forming more effective monitoring. And the "bridge" is used in pairs between any two partitions, acting as agents for each other, which can free the development and design content based on the Internet of Things from cross-region restrictions. The method and system provided by the embodiment of the present invention, in addition to solving the cross-region penetration of IoT bus data, can also achieve data distribution between buses. It only needs to configure the content of one end in batches, and the effect of data distribution and load balancing can be achieved through changes in configuration.

[0088] Through the scheme provided by the embodiment of the present invention, cross-region data transmission of the bus can be flexibly realized, so that users no longer need to consider the problems caused by cross-region when using it, and cross-region penetration of data can be realized, and the overall implementation process is transparent to users. During the implementation process, the encryption and signature verification scheme designed in conjunction with the design can ensure the security of business data. Only the configuration needs to be modified during deployment, and multiple configuration methods can be provided. The structure of the bridge itself does not need to change, and it supports distributed deployment and configuration, has good scalability, and supports further optimization design (especially programmatic), which can ensure data penetration between different types of buses, which is equivalent to bringing some load balancing and data distribution designs, and the compatibility will be better. The communication efficiency mainly depends on the efficiency of forward / reverse isolation. Try to choose hardware devices with excellent performance, and try to choose scenarios with low real-time requirements when using them. (Regarding different buses, for example, mqtt bus-mqtt bus, mqtt bus-kafka bus, kafka bus-kafka bus, etc.).

[0089] Figure 8 800 is a schematic diagram of an example electronic device 800 that can be used to implement an embodiment of the present specification. Figure 1 The bridge shown (such as any one of 110, 210 and 310) can be implemented by an electronic device 800. As shown, the electronic device 800 includes a central processing unit (CPU) 801, which can perform various appropriate actions and processes according to computer program instructions stored in a read-only memory (ROM) 802 or computer program instructions loaded from a storage unit 808 to a random access memory (RAM) 803. In the random access memory 803, various programs and data required for the operation of the electronic device 800 can also be stored. The central processing unit 801, the read-only memory 802 and the random access memory 803 are connected to each other via a bus 804. An input / output (I / O) interface 805 is also connected to the bus 804.

[0090] Multiple components in the electronic device 800 are connected to the input / output interface 805, including: an input unit 806, such as a keyboard, a mouse, a microphone, etc.; an output unit 807, such as various types of displays, speakers, etc.; a storage unit 808, such as a disk, an optical disk, etc.; and a communication unit 809, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 809 allows the device 800 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0091] The various processes and processing described above, such as methods 200 to 400, may be performed by the central processing unit 801. For example, in some embodiments, methods 200 to 400 may be implemented as a computer software program, which is tangibly contained in a machine-readable medium, such as a storage unit 808. In some embodiments, part or all of the computer program may be loaded and / or installed on the device 800 via the read-only memory 802 and / or the communication unit 809. When the computer program is loaded into the random access memory 803 and executed by the central processing unit 801, one or more actions of the methods 200 to 400 described above may be performed.

[0092] The present invention relates to methods, apparatuses, systems, electronic devices, computer-readable storage media and / or computer program products. The computer program products may include computer-readable program instructions for executing various aspects of the present invention.

[0093] A computer-readable storage medium may be a tangible device that can hold and store instructions used by an instruction execution device. A computer-readable storage medium may be, for example, but not limited to, an electrical storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any suitable combination of the above. More specific examples (a non-exhaustive list) of computer-readable storage media include: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a static random access memory (SRAM), a portable compact disk read-only memory (CD-ROM), a digital versatile disk (DVD), a memory stick, a floppy disk, a mechanical encoding device, such as a punch card or a raised structure in a groove on which instructions are stored, and any suitable combination of the above. The computer-readable storage medium used herein is not to be interpreted as a transient signal itself, such as a radio wave or other freely propagating electromagnetic wave, an electromagnetic wave propagating through a waveguide or other transmission medium (e.g., a light pulse through a fiber optic cable), or an electrical signal transmitted through a wire.

[0094] The computer-readable program instructions described herein can be downloaded from a computer-readable storage medium to each computing / processing device, or downloaded to an external computer or external storage device via a network, such as the Internet, a local area network, a wide area network, and / or a wireless network. The network may include copper transmission cables, optical fiber transmission, wireless transmission, routers, firewalls, switches, gateway computers, and / or edge computing devices. The network adapter card or network interface in each computing / processing device receives the computer-readable program instructions from the network and forwards the computer-readable program instructions for storage in a computer-readable storage medium in each computing / processing device.

[0095] The computer program instructions for performing the operation of the present invention may be assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, state setting data, or source code or object code written in any combination of one or more programming languages, including object-oriented programming languages, such as Smalltalk, C++, etc., and conventional procedural programming languages, such as "C" language or similar programming languages. The computer-readable program instructions may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer, partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., using an Internet service provider to connect through the Internet). In some embodiments, the electronic circuit, such as a programmable logic circuit, a field programmable gate array (FPGA), or a programmable logic array (PLA), may be executed by using the state information of the computer-readable program instructions to personalize and customize the electronic circuit, thereby implementing various aspects of the present invention.

[0096] Various aspects of the present invention are described herein with reference to flow charts and / or step diagrams of methods, devices (systems) and computer program products according to embodiments of the present invention. It should be understood that each of the steps in the flow charts and / or step diagrams and the combination of the steps in the flow charts and / or step diagrams can be implemented by computer-readable program instructions.

[0097] These computer-readable program instructions can be provided to a processing unit of a general-purpose computer, a special-purpose computer, or other programmable data processing device, thereby producing a machine, so that when these instructions are executed by the processing unit of the computer or other programmable data processing device, a device that implements the functions / actions specified in one or more steps in the flowchart and / or step diagram is generated. These computer-readable program instructions can also be stored in a computer-readable storage medium, and these instructions cause the computer, programmable data processing device, and / or other equipment to work in a specific manner, so that the computer-readable medium storing the instructions includes a manufactured product, which includes instructions for implementing various aspects of the functions / actions specified in one or more steps in the flowchart and / or step diagram.

[0098] Computer-readable program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other device so that a series of operating steps are performed on the computer, other programmable data processing apparatus, or other device to produce a computer-implemented process, thereby causing the instructions executed on the computer, other programmable data processing apparatus, or other device to implement the functions / actions specified in one or more steps in the flowchart and / or step diagram.

[0099] The flowchart and step diagram in the accompanying drawings show the possible architecture, functions and operations of the system, method and computer program product according to multiple embodiments of the present invention. In this regard, each square step in the flowchart or step diagram can represent a part of a module, program segment or instruction, and a part of a module, program segment or instruction contains one or more executable instructions for realizing the specified logical function. In some alternative implementations, the functions marked in the square steps can also occur in an order different from that marked in the accompanying drawings. For example, two consecutive square steps can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square step in the step diagram and / or the flowchart, and the combination of the square steps in the step diagram and / or the flowchart can be implemented with a dedicated hardware-based system that performs a specified function or action, or can be implemented with a combination of dedicated hardware and computer instructions.

[0100] The embodiments of the present invention have been described above, and the above description is exemplary, not exhaustive, and is not limited to the disclosed embodiments. Many modifications and variations will be apparent to those of ordinary skill in the art without departing from the scope and spirit of the described embodiments. The terms used herein are selected to best explain the principles of the embodiments, practical applications, or technical improvements in the market, or to enable other persons of ordinary skill in the art to understand the embodiments disclosed herein.

Claims

1. A method for cross-region transmission of power system data, characterized in that: include: monitoring a first bus on a first partition via a first bridge; wherein the first bridge is deployed in the first partition; receiving a data message from a second partition via the first bridge, the data message including a second file generated by the second bridge; wherein the second bridge is deployed in the second partition, the first bridge and the second bridge carry the same data processing logic, and the first partition and the second partition are both partitions in the power system; Generate a first file based on the first data about the first bus monitored by the data processing logic via the first bridge, and write the generated first file to a first application server corresponding to the first partition; parsing the received second file by the data processing logic via the first bridge to generate a first message body compatible with the first bus; sending the generated first message body to the first bus via the first bridge; and A second file generated by another second bridge is received via the first bridge; wherein the another second bridge is deployed in other partitions, each partition is deployed with at least one bridge, and any bridge has the same data processing logic as other bridges.

2. The method according to claim 1, characterized in that Generating a first file based on first data about a first bus monitored by the data processing logic via the first bridge includes: In response to determining that the subject type of the first data falls within the data processing scope of the first bridge, determining an encryption method and / or a signature method for the first data, and determining a predetermined data format corresponding to the subject type of the first data; Based on the determined encryption method and / or signature method and based on the determined predetermined data format, a first file regarding the first data is generated.

3. The method according to claim 1, characterized in that Parsing the received second file by the data processing logic via the first bridge to generate a first message body compatible with the first bus includes: determining a subject type of the received second file; Determining a predetermined data format corresponding to the second file based on a subject type of the second file; parsing the second file based on a predetermined data format corresponding to the second file; For the parsed second file, based on the file compatible format of the first bus, a first message body compatible with the first bus is generated.

4. The method according to claim 3, characterized in that Based on a predetermined data format corresponding to the second file, parsing the second file includes: Determine, based on a predetermined data format corresponding to the second file, file splitting information of the second file, the file splitting information including signature information, encryption information and / or summary value information; Performing verification on the second file based on the determined file splitting information; In response to determining that the second file passes the items to be verified, a first message body compatible with the first bus is generated for the second file based on a file compatible format of the first bus.

5. The method according to claim 1, characterized in that Also includes: Parsing the second file received from other partitions by the data processing logic to generate a first message body compatible with the first bus; The first message body is sent to the first bus.

6. The method according to any one of claims 1 to 5, characterized in that: Snooping the first bus on the first partition via the first bridge includes: Determining, based on data requests from other partitions in the power system, relevant data topics of the data requests; The data processing scope of the first bridge is determined based on the predetermined monitoring scope and the relevant data subject of the data request.

7. The method according to any one of claims 1 to 5, characterized in that: Also includes: The first bridge is configured to operate in pair with any bridge deployed in other partitions to form a communication link between different power buses of two different partitions; The first bridge is further configured such that data generated by the first bus can be sent to other partitions only after being processed by the first bridge, and data sent by other partitions to the first partition can be sent to the first bus only after being processed by the first bridge.

8. A power system data cross-region transmission system, characterized in that: include: A plurality of bridges deployed in a power system; wherein the power system comprises at least a plurality of partitions, a power bus corresponding to each partition, an application server corresponding to each partition, and a forward and reverse isolation device; At least one bridge is deployed on each partition; Each of the plurality of bridges is configured at least to: carry the same data processing logic as other bridges, monitor the power bus of the deployed partition, receive data messages from other partitions, and operate in pairs with any bridge deployed in other partitions to form a communication link between different power buses of two different partitions; Each of the plurality of bridges is further configured to execute the method for cross-region transmission of power system data according to any one of claims 1 to 7.

9. A computing device comprising: at least one processing unit; At least one memory, the at least one memory being coupled to the at least one processing unit and storing instructions for execution by the at least one processing unit, the instructions, when executed by the at least one processing unit, causing the device to perform the steps of the method according to any one of claims 1 to 7.

10. A computer-readable storage medium having a computer program stored thereon, wherein the computer program implements the method according to any one of claims 1 to 7 when executed by a machine.

Images