A SCADA configuration screen inspection method and system based on event activity indicators

Abstract

The present invention proposes a SCADA configuration screen inspection method and system based on event activity index. The method mainly includes defining the scope of the patrol screen, scanning the system operation log to obtain the screen weight statistical information, calculating the screen importance index and the screen alarm event activity index, performing activity detection on the measuring points of each screen, and then selecting the screen according to the preset number for periodic inspection or real-time push. This system includes an event statistics module, a screen parameter calculation module, a screen configuration module, a screen push module and a periodic processing module, which work together to optimize the inspection efficiency of the SCADA configuration screen, improve the practicality of the monitoring screen, and reduce the manual burden. The method implemented by the system can reasonably and effectively adjust the configuration screen inspection strategy according to the changes in the actual working conditions, ensure the stable operation of the monitoring system and reduce potential risks.

Description

Technical Field

[0001] The invention belongs to the field of event monitoring and inspection, and more specifically relates to a SCADA configuration screen inspection method and system based on event active indicators. Background Art

[0002] In the real-time power control system, the production and operation status of the control system is generally monitored by the operation and maintenance personnel. The main way for the operation and maintenance personnel to understand and control the production process is to patrol the configuration screens of various monitoring systems and track the system operation logs. Both methods are equally important in operation and monitoring. How to balance the allocation of human resources in these two aspects has always been the main problem facing the monitoring work.

[0003] In traditional monitoring work, when production equipment fails or the operating status trend shows an adverse condition, the system will first notify the operation and maintenance personnel through log alarm information. When the operation and maintenance personnel learn that the system has undergone important changes or failures, they will check the relevant configuration screens in the direction prompted by the log alarm information to further index more detailed system operation information. The operator's manual search and location of related configuration screens not only increases the operating load, but also brings distraction and interference to the viewing of subsequent important log information. This method provides a method for automatically recommending target configuration screens based on active events (alarms), which can effectively reduce such operation and maintenance problems. Summary of the invention

[0004] The present invention proposes a screen recommendation technology based on event activity, which fully integrates two important ways of monitoring into a new way. This method allows operation and maintenance personnel to balance the distribution of attention resources between monitoring configuration screens and log alarms. It reduces the chance of missing screens or more important equipment status alarm information. While reducing the workload of operation and maintenance personnel in analyzing events and searching for screens during monitoring, it improves the fit between the monitoring configuration screen and the specific work scenarios of the system, expands the inspection coverage, and reduces the possibility of important screens being missed.

[0005] In order to achieve the above object, the present invention is implemented by adopting the following technical scheme: the method comprises:

[0006] S1. First, define the range of the screen to be patrolled; exclude unnecessary screens, find the set of measuring points defined by the monitoring screen, and each screen corresponds to a set of measuring points;

[0007] S2. Scan the system operation log to find the timing of the configuration screen switching, and count the number of screen jumps to obtain screen weight statistics;

[0008] S3, calculating the screen importance index Pi, where the screen importance index reflects the inherent importance of each screen and is determined by the topological structure of screen links and the user roaming frequency of each link within a period of time;

[0009] S4, enumerating a set of measurement points in each of the preset screens; calculating ai, an activity index of the screen alarm event;

[0010] S5. Detect the activity of each measuring point: calculate the activity Pa of the hot spot screen, obtain the activity list of each screen and arrange them from large to small;

[0011] S6. Select the pictures according to the preset number and conduct periodic inspection or real-time push;

[0012] S7, jump to S2 to cycle and run the screen detection processing process.

[0013] In one solution, the picture importance index Pi is calculated as follows:

[0014] Calculated using the Weight-PageRank algorithm with probability weights;

[0015] S301, by traversing the configuration screen and extracting the screen link that each screen can jump to, a database table of the edge of the relationship topology is obtained;

[0016] S302, by traversing the SCADA system operation log results within a period of time, extracting the number of screen switching of the user's screen roaming operation as a weight weight;

[0017] S303, calculate each in-degree edge of each node in the table obtained in S302 to obtain a probability transfer matrix M;

[0018] S304: Calculate Pi of each picture.

[0019] In one solution, the screen alarm event activity index ai is as follows:

[0020] The calculation formula of the hot index of screen event activity index is:

[0021]

[0022] in

[0023]

[0024] is the normalized value of the parameter, α, β are the weight coefficients.

[0025] In one solution, the calculation of the hotspot screen activity Pa is as follows:

[0026] Definition of hot screen activity Pa: Characterize the activity index of each screen, let the activity index be ai and the screen index be pi, then

[0027]

[0028] The value range of is within the closed interval [0,1]. The increase from 0 to 1 reflects the importance of the event. When it is 1, it depends entirely on the impact of the event. When it is 0, it depends entirely on the inherent screen index of the configuration screen. .

[0029] In one embodiment, the picture importance index Pi includes two factors:

[0030] (1) The number of “external links” that the topological structure of the screen has, that is, the number of links pointed to by external screens;

[0031] (2) The frequency or probability of the screen being called.

[0032] In one solution, the screen alarm event activity index ai is determined by the alarm level, the alarm arrival rate and the alarm ratio, and is positively correlated with these three indicators.

[0033] In one solution, the standard mapping of the alarm levels is as follows:

[0034] The levels are 1-N, arranged from low to high, with N being the highest. The conventional system level is 1, so a reverse mapping is required, that is, level 1 corresponds to the value N, level 2 corresponds to the value N-1, ... level N corresponds to the value 1, and the following transformations are made:

[0035] .

[0036] In one solution, the alarm arrival rate is normalized by the difference from the mean: the alarm arrival rate is unevenly distributed. In order to reduce the impact of abnormal alarms far from the average value on the index, the difference from the average data normalization method is adopted. Here, the mean is subtracted from each data, and then the Sigmod function is used for normalization, and the value mapping range is [0,1]:

[0037]

[0038] in

[0039] .

[0040] On the other hand, a SCADA configuration screen inspection system based on event activity indicators is applicable to the method described, and the system includes:

[0041] The event statistics module is used to scan the system operation log, find the timing of the configuration screen switching, and count the number of screen jumps;

[0042] The picture parameter calculation module is used to calculate the picture importance index Pi and the picture alarm event activity index ai;

[0043] The screen configuration module is used to define the range of the screens to be patrolled, exclude unnecessary screens, and find the set of measurement points defined in the monitoring screens. Each screen corresponds to a set of measurement points.

[0044] The screen push module is used to select screens according to a preset number for periodic inspection or real-time push.

[0045] Beneficial effects of the present invention:

[0046] The method provided by the present invention can reduce the pressure on power production system operation and maintenance personnel to monitor the panel, and can quickly and efficiently determine the display content of the screen based on the important information fed back from the event measurement point, which can free hands and improve the intelligent operation and maintenance level of the computer monitoring system. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1 is a flow chart of the method of the present invention;

[0048] Figure 2 This is a flow chart of calculating the picture importance index Pi of the method of the present invention;

[0049] Figure 3 This is a schematic diagram of the topological relationship of the screen importance index Pi configured in the method of the present invention;

[0050] Figure 4 This is a system block diagram of the present invention. DETAILED DESCRIPTION

[0051] In order to facilitate the understanding of the present invention, the present invention will be described more fully below with reference to the relevant drawings. Typical embodiments of the present invention are given in the drawings. However, the present invention can be implemented in many different forms and is not limited to the embodiments described in the present invention. On the contrary, the purpose of providing these embodiments is to make the disclosure of the present invention more thorough and comprehensive.

[0052] Unless otherwise defined, all technical and scientific terms used in the present invention have the same meaning as those commonly understood by those skilled in the art of the present invention. The terms used in the specification of the present invention are only for the purpose of describing specific embodiments and are not intended to limit the present invention.

[0053] The general idea of ​​the present invention is as follows: an automatic patrol configuration screen function is designed in the monitoring system, and this function defines a fixed screen patrol list through artificial preset. The screens in the list are periodically rotated in a fixed order so that the operator can patrol each monitoring screen uninterruptedly. Since the system operating conditions are constantly changing over time, this fixed mode and frequency of patrolling needs to be constantly adjusted as the operating conditions change. The content and frequency of our screen patrols should correspond to the operating conditions, and it is natural and appropriate to use the most sensitive and quick log event activity indicator to detect the operating conditions.

[0054] During the patrol process, the equipment's operating condition adjustment information is introduced through event activity, so that equipment with important operating condition changes can be inspected first, which can effectively reduce the time of manual indexing of images and improve the speed of equipment processing.

[0055] The design principle of the hotspot screen activity index of the present invention is as follows:

[0056] In the configuration screen of the monitoring system, the configuration screen group that can best reflect the changes in the measuring points is called the hot screen group under the alarm scenario. Under the current working conditions, this screen set can provide the operation and maintenance personnel with the most accurate and maximized equipment operation management information.

[0057] Design principles for hot screen activity indicators:

[0058] 1. When a specific event is active, the indicator tends to reflect the event information contained in the picture and is mainly determined by it;

[0059] 2. When the event is not active enough, it is determined by the important attributes of the picture itself;

[0060] The activity index of the hotspot screen is mainly composed of the activity index ai of the alarm events of the measurement point screen contained in the screen and the importance of the screen itself pi. The former index is determined by the level of the alarm, the rate of alarm arrival and the proportion of alarms, and is positively correlated with these three indicators. The latter is determined by the importance of the screen itself, mainly including the in-and-out degree of the screen link and the frequency of personnel inspections within a period of time.

[0061] The monitoring configuration screens are designed in layers and can be jumped and roamed mutually, which is similar to the roaming process of Internet web pages.

[0062] This feature is indeed different in the relationship between monitoring configuration screens. Since the importance of information reflected in each monitoring screen is different, the chance of being jumped and roamed is also uneven, so each screen has an unequal chance to jump to other screens. Here, we need to introduce weighted pangeRank to describe the importance of each configuration page.

[0063] Embodiment 1

[0064] like Figure 1 As shown, the process of the method of the present invention is as follows:

[0065] S1. First, define the range of the screen to be patrolled. Exclude unnecessary screens to reduce the workload of later calculations. Find the set of measurement points defined in the monitoring screen, and each screen corresponds to a set of measurement points.

[0066] S2. Scan the system operation log within a period of time to find the timing of the configuration screen switching, count the number of screen jumps, and obtain the screen weight statistical information shown in Table 1.

[0067] S3, calculating the screen importance index Pi, where the screen importance index reflects the inherent importance of each screen and is determined by the topological structure of screen links and the user roaming frequency of each link within a period of time;

[0068] S4, enumerating a set of measurement points in each of the preset screens; calculating ai, an activity index of the screen alarm event;

[0069] S5. Detect the activity of each measuring point: calculate the activity Pa of the hot spot screen, obtain the activity list of each screen and arrange them from large to small;

[0070] S6. Select the top N images according to the preset number for periodic inspection or real-time push.

[0071] S7, jump to S2 to cycle and run the screen detection processing process.

[0072] Activity index calculation of monitoring configuration screen

[0073] The arrival rate of events is defined as

[0074] The event arrival rate reflects the size of the event arrival interval at the measuring point. According to the standard GB / T 41261-2022, it is the number of events arriving within 10 minutes.

[0075] Definition of screen activity index

[0076] Definition of picture activity index (pa): For each picture activity index, let the activity index be ai and the picture index be pi, then

[0077] (1.1)

[0078] The value range of is within the closed interval [0,1]. The increase from 0 to 1 reflects the importance of the event. When it is 1, it depends entirely on the impact of the event. When it is 0, it depends entirely on the inherent screen index of the configuration screen. .

[0079] AI calculation of activity index of screen alarm events

[0080] The calculation formula of screen alarm event activity index ai is:

[0081] (1.2)

[0082] in

[0083] (1.3)

[0084] is the normalized value of the parameter, α and β are weight coefficients, which can be set to 1 for simplicity. The specific normalization process is as follows:

[0085] Normalization of indicator parameters of screen alarm event activity index ai

[0086] Alarm level specification mapping:

[0087] Here the levels are 1-N, arranged from low to high, with level N being the highest. Generally, the system level is 1, which is the highest, so a reverse mapping is required, that is, level 1 corresponds to the value N, level 2 corresponds to the value N-1, .... level N corresponds to the value 1, and the following transformations are made:

[0088] (1.4)

[0089] Other indicators such as arrival rate are normalized by deviation from the mean:

[0090] The distribution of alarm arrival rate is generally uneven. In order to reduce the impact of abnormal alarms far from the average value on the indicators, the difference average data normalization method is adopted. Here, the mean is subtracted from each data, and then the Sigmod function is used for normalization. The value mapping range is [0,1]:

[0091] (1.5)

[0092] in

[0093] (1.6)

[0094] The alarm density itself is a probability, so it does not need to be normalized. for The algorithm used for mean-variance standardization is similar to (1.5) and will not be described here.

[0095] Standardization of AI:

[0096] In formula (1.3), due to So the value range of ai is Scale it to normalize:

[0097] (1.8)

[0098] Hot Spot Index Example:

[0099] Taking screen B as an example, the measurement point set is shown in the second column of Table 1, and the measurement point level alarm rate and alarm proportion information are as follows:

[0100] Table 1 Hotspot index calculation example:

[0101]

[0102] The hotspot index of the final picture B is:

[0103]

[0104] Calculation of the picture importance index Pi;

[0105] Definition of screen importance index: The screen importance index reflects the inherent importance of each screen, which is mainly determined by the topological structure of the screen links and the user roaming frequency of each link within a period of time: Generally, the screens that are called more frequently are considered more important. There are two determining factors: one is the number of "external links" (i.e., links pointed to by external screens) in the topological structure of the screen, and the other is the frequency or probability of the screen being called.

[0106] The Weight-PageRank algorithm with probability weight is used here for calculation.

[0107] Figure 3For a typical set of monitoring configuration screens, the top-level screen directory is generally designed, and then the screens of each device subsystem are defined hierarchically. Since the probability of each monitoring screen jumping to the next page is only related to the current state of the page and has nothing to do with the previous jump state, the roaming of the screen meets the requirements of the first-order Markov chain. The random walk model PageRank can be used for calculation, and the specific algorithm is as follows:

[0108] (1.9)

[0109] Obviously, the transfer matrix satisfies the condition that the sum of each column is 1, and satisfies the requirements of random matrix. Therefore, the matrix has a limit vector R such that

[0110]

[0111] The PageRank algorithm is defined as:

[0112] (1.10)

[0113] Where Pr is the initialization probability of each picture, which can be taken as Pr=1 / n, α is the damping factor with a value range of [0,1]. Generally speaking, α=0.85 is taken in engineering. is an N-order square matrix with all values ​​being 1. Figure 2 As shown, the specific processing process is as follows;

[0114] S301, by traversing the configuration screen and extracting the screen links that can be jumped from each screen, a database table of the edge of the relationship topology is obtained, such as the first two columns (source, target) in Table 1

[0115] S302, by traversing the SCADA system operation log results within a period of time, extract the number of screen switching of the user's screen roaming operation as the weight weight. For example, if the screen switching behavior of A->R is found in the user log, the original weight (weight) is added by 1 in the third row of the table, and the weight = weight+1 is obtained. As shown in the figure, the weight table of the screen is as follows: Table 2:

[0116] Table 2 Screen jump weight table

[0117]

[0118] S303, calculate each in-degree edge of each node in the table obtained in S302 to obtain the probability transfer matrix M, as follows: Since each screen does not need to jump to itself, the elements on the diagonal of the matrix are all 0, that is, , other node elements are:

[0119]

[0120] W i，j is the weight of the link from node i to node j, is the set of screens to which the i-node screen can jump. For example, the elements in the second row and first column of the M matrix are:

[0121]

[0122] By analogy, we obtain the probability transfer matrix M (1.9).

[0123] S304, calculate Pi for each screen, using formula (1.6), let t = 0, calculate Pr1 and then iterate through t to calculate the value of t+1. After sufficient iterations, if Pr t+1 and Pr t When the number is close enough, the iteration is stopped. The index of each picture is shown in Table 3:

[0124] Table 3 Picture index in reverse order

[0125]

[0126] Since the node values ​​given by PageRank are probabilities, there is no need to standardize them, that is, Pi* = Pi, and they can be directly substituted into formula (1.12) for use.

[0127] Embodiment 2

[0128] like Figure 4 As shown, a SCADA configuration screen inspection system based on event activity indicators, the system is applicable to the method described, and the system includes:

[0129] Event statistics module: The event statistics module is mainly used to scan the system operation log, collect the timing of various configuration screen switching, and count the number of screen jumps to obtain the weight statistics of each screen. These data can not only reflect the user's frequency of use of different screens, but also analyze the user's attention and usage habits for each screen, thereby providing a basis for subsequent screen parameter calculation, screen configuration and inspection.

[0130] Screen parameter calculation module: The screen parameter calculation module is mainly responsible for calculating the importance index Pi of each screen and the screen alarm event activity index ai. Among them, the screen importance index Pi is mainly calculated by analyzing the topological structure of the screen link and the user's roaming frequency over a period of time, reflecting the inherent importance of each screen; the screen alarm event activity index ai is calculated based on factors such as the alarm level, alarm arrival rate, and alarm proportion, reflecting the activity of alarm events occurring on the screen within a certain period of time.

[0131] Screen configuration module: The screen configuration module is responsible for defining the scope of the patrol screen. It can find the set of measurement points defined by the screens that need to be monitored by excluding unnecessary screens. Usually, each screen corresponds to a set of measurement points. The screen configuration module will also detect the activity of each measurement point to provide data support for subsequent screen push.

[0132] Screen push module: The screen push module is responsible for selecting a certain number of screens for periodic inspection or real-time push according to preset rules. This process is usually prioritized based on the importance index of the screen and the activity index of the alarm event. Through the operation of the screen push module, it is possible to quickly access and check important screens, effectively improving operational efficiency and accuracy.

[0133] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program, and the program can be stored in a computer-readable storage medium, and when the program is executed, it can include the processes of the embodiments of the above-mentioned methods. The storage medium can be a disk, an optical disk, a read-only memory (ROM) or a random access memory (RAM).

[0134] It should be understood that the detailed description of the technical solutions of the present invention by means of the preferred embodiments is illustrative rather than restrictive. A person skilled in the art may modify the technical solutions described in the embodiments, or replace some of the technical features by equivalents, based on reading the specification of the present invention; and these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A SCADA configuration screen inspection method based on event activity indicators, characterized in that: The method includes: S1. Define the range of the screen to be patrolled; exclude unnecessary screens, find the set of measuring points defined by the monitoring screen, and each screen corresponds to a set of measuring points; S2. Scan the system operation log to find the timing of the configuration screen switching, and count the number of screen jumps to obtain screen weight statistics; S3, calculating the picture importance index Pi, where the picture importance index reflects the inherent importance of each picture; The steps for calculating the picture importance index Pi are as follows: Calculated using the Weight-PageRank algorithm with probability weights; S301, by traversing the configuration screen and extracting the screen link that each screen can jump to, a database table of the edge of the relationship topology is obtained; S302, by traversing the SCADA system operation log results within a period of time, extracting the number of screen switching of the user's screen roaming operation as a weight weight; S303, calculate each in-degree edge of each node in the table obtained in S302 to obtain a probability transfer matrix M; S304, calculating Pi of each picture; S4, enumerating a set of measurement points in each of the preset screens; calculating ai, an activity index of the screen alarm event; The screen alarm event activity index ai is as follows: The calculation formula of the hot index of screen event activity index is: in is the normalized value of the parameter, α and β are weight coefficients; Freq is the meaning of the alarm rate of the measuring point, and Prop is the probability density of the measuring point; S5. Detect the activity of each measuring point: calculate the activity Pa of the hot spot screen, Get the activity list of each screen and sort them from largest to smallest; The calculation of the hotspot screen activity Pa is as follows: Definition of hot screen activity Pa: Characterize the activity index of each screen, let the activity index be ai and the screen index be pi, then The value range of is within the closed interval [0,1]. The increase from 0 to 1 reflects the importance of the event. When it is 1, it depends entirely on the impact of the event. When it is 0, it depends entirely on the inherent screen index of the configuration screen. ; S6. Select the pictures according to the preset number and conduct periodic inspection or real-time push; S7, jump to S2 to cycle and run the screen detection processing process.

2. A SCADA configuration screen inspection method based on event active indicators according to claim 1, characterized in that: The picture importance index Pi includes two factors: (1) The number of "external links" in the topological structure of the screen, that is, the number of links pointed to by external screens; (2) The frequency or probability of the screen being called.

3. A SCADA configuration screen inspection method based on event activity indicators according to claim 1, characterized in that: The screen alarm event activity index ai is determined by the alarm level, the alarm arrival rate and the alarm ratio, and is positively correlated with these three indicators.

4. A SCADA configuration screen inspection method based on event activity indicators according to claim 3, characterized in that: The standard mapping of the alarm levels is as follows: The levels are 1-N, arranged from low to high, with N being the highest. The conventional system level is 1, so a reverse mapping is required, that is, level 1 corresponds to the value N, level 2 corresponds to the value N-1, ... level N corresponds to the value 1, and the following transformations are made: 。 5. A SCADA configuration screen inspection method based on event activity indicators according to claim 3, characterized in that: The alarm arrival rate is normalized by the difference from the mean: the alarm arrival rate is unevenly distributed. In order to reduce the impact of abnormal alarms far from the average value on the index, the difference from the average data normalization method is adopted. Here, the mean is subtracted from each data, and then the Sigmod function is used for normalization. The value mapping range is [0,1]: in 。 6. A SCADA configuration screen inspection system based on event activity indicators, the system being applicable to the method according to any one of claims 1 to 5, characterized in that: The system comprises: The event statistics module is used to scan the system operation log, find the timing of the configuration screen switching, and count the number of screen jumps; The picture parameter calculation module is used to calculate the picture importance index Pi and the picture alarm event activity index ai; The screen configuration module is used to define the range of the screens to be patrolled, exclude unnecessary screens, and find the set of measurement points defined in the monitoring screens. Each screen corresponds to a set of measurement points. The screen push module is used to select screens according to a preset number for periodic inspection or real-time push.

Images