Five-prevention locking test method for transformer substation, storage medium and electronic equipment

Abstract

The invention discloses a substation five-prevention locking test method, a storage medium and electronic equipment, and the method comprises the following steps: confirming the configuration of an SCD, and connecting an IED to a test network to check the state of the IED; verifying the GOOSE message through the VLAN, comparing the state value of the locking contact with an expected value, and judging the on-off state of the locking contact; configuring a WI-FI verification cross-interval five-prevention locking logic; optimizing a test system security index and visualizing system security data; and generating a review check report. According to the invention, comprehensive verification of the IED configuration correctness is realized, the GOOSE message is verified through the VLAN, the state value of the locking contact is compared with the expected value, verification of the accuracy of sending and receiving the GOOSE message and the correctness of the state of the locking contact is realized, the cross-interval five-prevention locking logic is verified through configuring the WI-FI, comprehensive verification of the five-prevention locking logic is realized, and the reliability of the five-prevention locking logic is improved. By optimizing the safety indexes of the test system, the safety of the test system is reinforced, and by visualizing the safety data of the system, the safety state of the system is monitored and displayed in real time.

Description

Technical Field

[0001] The invention relates to the technical field of power system automation, and in particular to a substation five-protection locking test method, a storage medium and an electronic device. Background Art

[0002] With the rapid development of power systems, substations are the core hubs of power transmission and distribution. Their safety and reliability are crucial to the stable operation of the entire power system. Traditional substation anti-error operation systems mainly rely on mechanical and electrical locking devices to prevent power accidents caused by misoperation. However, with the intelligentization of substations, traditional anti-error operation systems have gradually shown their limitations. In recent years, many studies and applications have begun to try to introduce artificial intelligence and big data technologies into substation anti-error operation systems, hoping to improve the safety and reliability of the system through data analysis and intelligent decision-making.

[0003] Although the existing related technologies have improved the effect of preventing misoperation of substations to a certain extent, there are still many shortcomings. The traditional anti-misoperation system relies on preset locking logic and is difficult to cope with complex and changeable on-site conditions. The existing intelligent anti-misoperation system has bottlenecks in data processing and analysis and cannot fully utilize the large amount of data generated by substation equipment. The current testing methods are mostly static tests, and lack dynamic performance evaluation of the system under actual operating conditions, resulting in a gap between the test results and the actual application effects. Summary of the invention

[0004] The present invention aims to provide a substation five-protection locking test method, storage medium and electronic equipment to solve the above problems.

[0005] The present invention is achieved through the following technical solutions:

[0006] A substation five-protection locking test method, comprising:

[0007] Confirm SCD configuration, connect IED to test network and check IED status;

[0008] Verify the GOOSE message through VLAN, compare the blocking contact status value with the expected value and determine the on / off status of the blocking contact;

[0009] Configure the five-protection locking logic for WI-FI authentication across intervals;

[0010] Optimize test system safety indicators and visualize system safety data;

[0011] Generate a review verification report.

[0012] As a preferred solution of the five-protection locking test method of a substation according to the present invention, wherein: the confirmation of the SCD configuration and connecting the IED to the test network to check the IED status refers to reading and checking the configuration items of the SCD file of the substation, using a graphical tool to check the correctness of the configuration of all virtual terminal connections and each logical node and binding each logical node with its corresponding attribute value;

[0013] Turn off the power supply of the IED, take the IED offline from the bay and process switches and connect it to an independent test system, start the IED, check its operating status in the test system, and switch to the test mode;

[0014] Perform status checks on each IED, including power status, communication status, and device status. Use a multimeter to check the power supply of the IED. Check the internal status and logs of the IED through the HMI.

[0015] As a preferred solution of the five-prevention lockout test method for a substation of the present invention, wherein: the verification of the GOOSE message through VLAN and the comparison of the lockout contact state value with the expected value refer to connecting the optical fiber interface of the optical digital tester to the optical port of the VLAN switch, configuring an independent VLAN for the optical digital tester on the VLAN switch, and performing offline verification through the independent VLAN network;

[0016] Configure the sending parameters of GOOSE messages in the optical digital tester, use the optical digital tester to send simulated GOOSE messages, record the sending time and frequency, and compare them with the previously set parameters;

[0017] If the simulated GOOSE message sending time and sending frequency are consistent with the set parameters, start comparing the locking contact state value with the expected value. If the simulated GOOSE message sending time and sending frequency are inconsistent with the set parameters, reset the parameter verification.

[0018] As a preferred solution of the five-protection lockout test method for a substation of the present invention, wherein: the comparison of the lockout contact state value with the expected value refers to connecting the test probe of the digital multimeter to the lockout contact of the IED, measuring the voltage of the lockout contact when the optical digital tester sends a GOOSE message, and recording the state value of the lockout contact under different IED analog signals;

[0019] According to the IED manual, the expected value of the locking node voltage state under different analog signals is obtained, and the measured state value is compared with the expected value. If they are consistent, the locking contact is normal and the five-protection locking logic across the interval is verified. If they are inconsistent, the locking contact is abnormal and repaired and re-verified.

[0020] As a preferred solution of the five-prevention locking test method for a substation according to the present invention, wherein: the configuration of the five-prevention locking logic for WI-FI verification across intervals refers to using a configuration tool to set the SSID and password of the WI-FI, and configuring the IP address and subnet mask, verifying the five-prevention locking logic between multiple verification devices in the entire test system, and checking the communication status between the verification devices through the PING command;

[0021] The verification device includes a sending device and a receiving device. By configuring the GOOSE message sending function on the sending device, the sending device sends messages at a set interval and records the sending time of the GOOSE message. The GOOSE message receiving function is configured on the receiving device to record the received GOOSE message content and timestamp.

[0022] Check the integrity of the received GOOSE message and calculate the communication delay time of sending the GOOSE message, and verify the network availability based on the content integrity and communication delay time of the GOOSE message;

[0023] According to the received GOOSE message and equipment status, verify the five-protection interlocking logic across the interval, including comparing the status changes of the sending and receiving equipment and checking the on and off status of all interlocking contacts.

[0024] As a preferred solution of the five-protection locking test method for a substation according to the present invention, the safety index of the optimized test system includes:

[0025] Use OpenVAS to scan the test system for vulnerabilities, generate detailed vulnerability scan reports from vulnerability data, and apply corresponding security patches and updates to fix known vulnerabilities based on the vulnerability scan reports;

[0026] Regularly use the Metasploit tool in Kali Linux to perform simulated network attacks, deploy intrusion detection system IDS, monitor the test system in real time, detect and record the attack response time of abnormal behavior data;

[0027] Use an electromagnetic interference simulator to generate various interference signals in the test environment, record the data integrity of the test system under interference conditions, and use a hash function to verify the integrity of the message. The formula is:

[0028]

[0029] Among them, H(m) is the hash value, m i is the i-th byte of the message, and n is the total number of bytes in the message;

[0030] The data integrity score is derived using the integrity score formula, which is:

[0031]

[0032] Among them, I j is the data integrity score in the jth test, H(m) is the hash value of the original GOOSE message, H(o) is the hash value of the GOOSE message after interference, and w is the number of bits of the hash value;

[0033] Use AES-256 encryption algorithm to encrypt GOOSE messages;

[0034] Set up a comprehensive security performance evaluation formula, combining vulnerability repair rate, attack response time, data integrity and encryption strength. The formula is:

[0035]

[0036] Among them, S is the comprehensive safety performance score, T u is the total number of vulnerabilities, v i is the degree of repair of the ith vulnerability, ranging from 0 to 1, t i is the time required to repair the i-th vulnerability, D is the number of attacks, and I j is the data integrity verification score of the jth attack, ranging from 0 to 1, E j is the data encryption strength score of the j-th attack, ranging from 0 to 1, and K is the comprehensive adjustment coefficient.

[0037] As a preferred solution of the five-protection locking test method for a substation described in the present invention, wherein: the visualization of the system security data refers to the development of a visualization tool based on D3.js, and the system security data is displayed in the form of icons and dashboards, including line charts, bar charts and pie charts, and the WebSocjet protocol is used to update the data in real time, and the system security data refers to vulnerability data, abnormal behavior data, and electromagnetic interference data.

[0038] As a preferred solution of the five-protection lockout test method for a substation described in the present invention, the generation of a review and verification report refers to generating a detailed verification report based on the recorded data, extracting all recorded measurement data from the database, recording the measurement results of each record in detail, integrating all contents into a verification report, submitting the report to relevant technical personnel for review and confirmation, and then archiving it.

[0039] A computer device comprises: a memory and a processor; the memory stores a computer program, and the processor implements the steps of any one of the above-mentioned substation five-protection locking test methods when executing the computer program.

[0040] A computer-readable storage medium stores a computer program, which, when executed by a processor, implements the steps of any one of the above-mentioned substation five-protection locking test methods.

[0041] Compared with the prior art, the present invention has the following advantages and beneficial effects: the present invention realizes comprehensive verification of the correctness of IED configuration, verifies GOOSE messages through VLAN, and compares the locking contact state value with the expected value, realizes verification of the accuracy of GOOSE message sending and receiving and the correctness of the locking contact state, ensures the correct implementation of the locking logic, verifies the five-protection locking logic across intervals by configuring WI-FI, realizes security reinforcement of the test system by optimizing the test system safety indicators, and realizes real-time monitoring and display of the system security status by visualizing the system security data. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] The drawings described herein are used to provide a further understanding of the embodiments of the present invention, constitute a part of this application, and do not constitute a limitation of the embodiments of the present invention. In the drawings:

[0043] Figure 1 It is a structural schematic diagram of a five-protection locking test method for a substation;

[0044] Figure 2 Verify the structural adaptability of the five-prevention blocking logic for GOOSE messages; DETAILED DESCRIPTION

[0045] In order to make the purpose, technical scheme and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the embodiments and drawings. The schematic implementation modes and descriptions of the present invention are only used to explain the present invention and are not intended to limit the present invention. It should be noted that the present invention is already in the actual development and use stage.

[0046] Example 1

[0047] like Figure 1 to Figure 2 As shown, this embodiment includes:

[0048] S1. Confirm SCD configuration and connect IED to the test network to check IED status;

[0049] Specifically, confirm the SCD configuration and connect the IED to the test network. Checking the IED status means reading and checking the configuration items of the SCD file of the substation, and using a graphical tool for visual inspection. The graphical tool IED Configurator is used to configure and manage intelligent electronic devices, providing a graphical interface to view and modify IED configurations, and checking the correctness of all virtual terminal connections and each logical node configuration;

[0050] Turn off the power supply of the IED, take the IED offline from the bay and process switches and connect it to an independent test network, start the IED, check its operating status in the test network, and switch to the test mode;

[0051] Perform status checks on each IED, including power status, communication status, and device status. Use a multimeter to check the power supply of the device. Check the internal status and log of the device through the device's HMI. The HMI is used to monitor and control the IED and display the real-time operating status of the IED, including voltage, current, temperature, and switch status.

[0052] By carefully reviewing the SCD file configuration items of the substation and using graphical tools for visual inspection, the correctness of the virtual terminal connections and logical node configurations of the IED is ensured, which greatly reduces the risk of operational failures caused by configuration errors. The IED is safely migrated from the production environment to an independent test network and its operating status is checked to verify the stability and reliability of the IED in the test environment. A comprehensive status check is performed on each IED, including power supply, communication, and device status. This not only ensures that the power supply and communication of the IED are normal, but also provides an in-depth understanding of the internal status and log information of the device through the device's HMI interface, providing valuable data support for equipment maintenance and troubleshooting.

[0053] S2, verify the GOOSE message through VLAN, compare the blocking contact state value with the expected value and determine the on / off state of the blocking contact;

[0054] Specifically, the VLAN verification GOOSE message is used to compare the locking contact state value with the expected value, which refers to connecting the optical fiber interface of the optical digital tester to the optical port of the VLAN switch, configuring an independent VLAN for the optical digital tester on the VLAN switch, and performing offline verification through the independent VLAN network;

[0055] GOOSE message is a communication method in the IEC 61850 standard, which is used to control the communication between devices, including circuit breakers and disconnectors. Through GOOSE message, the operating status of the equipment can be monitored in real time, and abnormal conditions can be discovered and handled in time. Configure the sending parameters of GOOSE message in the optical digital tester, use the optical digital tester to send simulated GOOSE message, record the sending time and frequency, and compare with the previously set parameters;

[0056] If the simulated GOOSE message sending time and sending frequency are consistent with the set parameters, the locking contact state value is compared with the expected value. If the simulated GOOSE message sending time and sending frequency are inconsistent with the set parameters, the parameter verification is reset.

[0057] By configuring an independent VLAN for the optical digital tester on the VLAN switch and connecting the optical fiber interface, offline verification of the GOOSE message is achieved, ensuring the correct transmission of the message in a specific network environment. The simulated GOOSE message is configured and sent, and the sending time and frequency are recorded and compared with the preset parameters. This not only verifies the transmission reliability of the GOOSE message, but also ensures the consistency between the locking contact state value and the expected value, thereby improving the security and stability of the system.

[0058] Furthermore, the comparing the state value of the locking contact with the expected value refers to connecting the test probe of the digital multimeter to the locking contact of the IED, measuring the voltage of the locking contact when the optical digital tester sends the GOOSE message, and recording the state value of the locking contact under different IED analog signals;

[0059] According to the IED manual, the expected value of the locking node voltage state under different analog signals is obtained, and the measured state value is compared with the expected value. If they are consistent, the locking contact is normal and the five-protection locking logic across the interval is verified. If they are inconsistent, the locking contact is abnormal and repaired and re-verified.

[0060] By connecting the test probe of a digital multimeter to the locking contacts of the IED and measuring the voltage of the locking contacts when the optical digital tester sends a GOOSE message, the state values ​​of the locking contacts under different analog signals can be monitored in real time, ensuring the accuracy and reliability of the locking contacts in actual operation, thereby improving the safety and stability of the power system. A quantitative evaluation standard is provided by comparing the difference between the state value and the expected value, which can effectively discover and correct errors in the locking logic, thereby ensuring the correctness and reliability of the five-protection locking logic.

[0061] S3, configure the five-protection locking logic of WI-FI verification across intervals;

[0062] Specifically, configuring the five-prevention blocking logic of WI-FI verification across intervals means using the configuration tool to set the SSID and password of the WI-FI, and configuring the IP address and subnet mask, verifying the five-prevention blocking logic between multiple verification devices in the entire test system, and checking the communication status between the verification devices through the PING command;

[0063] The verification device includes a sending device and a receiving device. By configuring the GOOSE message sending function on the sending device, the sending device sends messages at a set interval and records the sending time of the GOOSE message. The GOOSE message receiving function is configured on the receiving device to record the received GOOSE message content and timestamp.

[0064] Check the integrity of the received GOOSE message and calculate the communication delay time of sending the GOOSE message, and verify the network availability based on the content integrity and communication delay time of the GOOSE message;

[0065] According to the received GOOSE message and equipment status, verify the five-protection interlocking logic across the interval, including comparing the status changes of the sending and receiving equipment and checking the on and off status of all interlocking contacts.

[0066] By configuring WI-FI and verifying the five-protection interlocking logic across intervals, smooth communication between devices in the power system can be ensured, thereby improving the security and stability of the system. Use the configuration tool to set the SSID and password of the WI-FI, configure the IP address and subnet mask, and use the PING command to check the communication status between devices to ensure normal communication between devices. By configuring the GOOSE message sending and receiving functions and recording the sending time and receiving content of the GOOSE message, the integrity of the GOOSE message can be checked and the communication delay time can be calculated to verify the availability of the network. According to the received GOOSE message and the device status, the five-protection interlocking logic across intervals is verified, including comparing the status changes of the sending and receiving devices and checking the on and off status of all interlocking contacts.

[0067] S4. Optimize test system safety indicators and visualize system safety data

[0068] Specifically, the safety indicators of the optimized test system include:

[0069] Use OpenVAS to perform vulnerability scans on the test system. OpenVAS is used to detect security vulnerabilities in computer networks and systems, and generate detailed vulnerability scan reports from vulnerability data. Based on the vulnerability scan reports, apply corresponding security patches and updates to fix known vulnerabilities.

[0070] Regularly use the Metasploit tool in Kali Linux to perform simulated network attacks, deploy intrusion detection system IDS, monitor the test system in real time, detect and record the attack response time of abnormal behavior data;

[0071] Use an electromagnetic interference simulator to generate various interference signals in the test environment, record the data integrity of the test system under interference conditions, and use a hash function to verify the integrity of the message. The formula is:

[0072]

[0073] Among them, H(m) is the hash value, m i is the i-th byte of the message, and n is the total number of bytes in the message;

[0074] The data integrity score is derived using the integrity score formula, which is:

[0075]

[0076] Among them, I j is the data integrity score in the jth test, H(m) is the hash value of the original GOOSE message, H(o) is the hash value of the GOOSE message after interference, and w is the number of bits of the hash value;

[0077] Use AES-256 encryption algorithm to encrypt GOOSE messages;

[0078] Set up a comprehensive security performance evaluation formula, combining vulnerability repair rate, attack response time, data integrity and encryption strength. The formula is:

[0079]

[0080] Among them, S is the comprehensive safety performance score, T u is the total number of vulnerabilities, v i is the degree of repair of the ith vulnerability, ranging from 0 to 1, t i is the time required to repair the i-th vulnerability, D is the number of attacks, and I j is the data integrity verification score of the jth attack, ranging from 0 to 1, E j is the data encryption strength score of the jth attack, ranging from 0 to 1, and K is the comprehensive adjustment coefficient;

[0081] The comprehensive security performance evaluation formula integrates four key indicators: vulnerability repair, attack response, data integrity and encryption strength. The units in the formula are converted to ensure the comprehensiveness and reliability of the security performance of the evaluation system. By adjusting the coefficient K of different indicators, the impact of each indicator on the comprehensive score can be adjusted according to actual conditions;

[0082] Total number of vulnerabilities T u Derived from the number of security vulnerabilities found during the system's comprehensive security performance formula evaluation;

[0083] Vulnerability repair level V i The test system records statistics, and the repair degree ranges from 0 to 1, where 0 means not repaired and 1 means repaired;

[0084] Repair time t i The test system records statistics and the repair time is counted in days;

[0085] The number of attacks D is the number of all simulated attacks during the evaluation of the comprehensive security performance formula, recorded by Metasploit in KaliLinux;

[0086] Data Integrity I j The data integrity verification score for each attack. The data integrity score ranges from 0 to 1, where 0 indicates incomplete data and 1 indicates complete data.

[0087] Data encryption strength E j A data encryption strength score for each attack, which can be evaluated and recorded by the strength of the encryption protocol and algorithm. The data encryption strength score ranges from 0 to 1, where 0 means no encryption and 1 means the highest strength encryption;

[0088] The comprehensive adjustment coefficient is used to balance the weights of various indicators. It can be set based on historical data, expert experience or specific security policies. The value range of the comprehensive adjustment coefficient is 0 to 1.

[0089] OpenVAS was used to perform vulnerability scanning, and the known vulnerabilities in the system were fully discovered and repaired, thus improving the security protection capability of the system. Metasploit tools were used regularly to simulate network attacks, and the deployed intrusion detection system IDS was combined to monitor the test system in real time, and the attack response time of abnormal behavior data was discovered and recorded in time, thereby effectively evaluating the system's anti-attack capability and enhancing the defense against potential attacks. An electromagnetic interference simulator was used to generate various interference signals, and the electromagnetic interference data of the test system under interference conditions was recorded, which helped to evaluate the stability and reliability of the system in various complex environments. The AES-256 encryption algorithm was used to encrypt the GOOSE message, which protected the confidentiality and integrity of the message content and prevented the risk of illegal tampering and theft of data. By setting a comprehensive security performance evaluation formula, the security performance of the system can be comprehensively and objectively evaluated, providing a quantitative basis for subsequent security optimization and improvement.

[0090] Furthermore, visualizing the system security data refers to developing a visualization tool based on D3.js to display the system security data in the form of icons and dashboards, including line charts, bar charts and pie charts, and using the WebSocjet protocol to update the data in real time. The system security data refers to vulnerability data, abnormal behavior data, and electromagnetic interference data.

[0091] By developing a visualization tool based on D3.js, the system security data is displayed in the form of icons and dashboards, including line graphs, bar graphs and pie charts, and the WebSocket protocol is used to achieve real-time data updates, enabling intuitive display and real-time monitoring of vulnerability data, abnormal behavior data and electromagnetic interference data, thereby improving the technicians' perception and response speed of the system security status, enhancing the system's security protection capabilities, and ensuring the smooth progress of the substation's five-prevention locking test and the safe and stable operation of the substation.

[0092] S5. Generate a review and verification report;

[0093] Specifically, generating a review verification report means generating a detailed verification report based on the recorded data, extracting all recorded measurement data from the database, recording the measurement results of each record in detail, integrating all content into a verification report, and submitting the report to relevant technical personnel for review and confirmation before archiving.

[0094] A detailed review and verification report is generated by the intelligent verification device, which can comprehensively record and display the measurement data during the test process, including the measurement results of the setting operation and the locking contacts, which helps to improve the traceability and management efficiency of the test data and facilitates the relevant technical personnel to review and confirm the test results. Archiving the report can ensure the long-term preservation of the data and convenient query, and provide important data support for the operation, maintenance and troubleshooting of the power system. This standardized report generation and review process helps to improve the safety and stability of the power system and ensure the reliable operation of the system.

[0095] Example 2

[0096] This embodiment provides a substation five-protection locking test method.

[0097] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc., which can store program codes.

[0098] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in conjunction with such instruction execution systems, devices or apparatuses. For the purposes of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in conjunction with such instruction execution systems, devices or apparatuses.

[0099] More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be a paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering or, if necessary, processing in another suitable manner, and then stored in a computer memory.

[0100] It should be understood that the various parts of the present invention can be implemented by hardware, software, firmware or a combination thereof. In the above embodiments, a plurality of steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, any one of the following technologies known in the art or a combination thereof can be used to implement: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0101] It should be noted that the terms "including" and "having" and any variations thereof in the specification and claims of the present application are intended to cover non-exclusive inclusions. For example, a process, method, system, product or apparatus comprising a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units that are not explicitly listed or inherent to these processes, methods, products or apparatuses.

[0102] Note that the above are only preferred embodiments of the present invention and the principles of the application technology. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and that various obvious changes, readjustments and substitutions can be made by those skilled in the art without departing from the scope of protection of the present invention. Therefore, although the present invention is described in more detail through the above embodiments, the present invention is not limited to the specific embodiments described herein, and may include more other effective embodiments without departing from the concept of the present invention, and the scope of the present invention is determined by the scope of the appended claims.

Claims

1. A five-protection locking test method for a substation, characterized in that: The steps include: Step S1: Confirm the SCD configuration and connect the IED to the test network to check the IED status; Step S2: Verify the GOOSE message through VLAN, compare the blocking contact state value with the expected value and determine the on / off state of the blocking contact; Step S3: configure the five-protection locking logic of WI-FI verification across intervals; Step S4: Optimize the test system safety indicators and visualize the system safety data; Step S5: Generate a review and verification report.

2. A five-protection locking test method for a substation as claimed in claim 1, characterized in that: The step S1 specifically includes reading and checking the configuration items of the SCD file of the substation, using a graphical tool to check the correctness of the configuration of all virtual terminal connections and each logical node, and binding each logical node to its corresponding attribute value; Turn off the power supply of the IED, take the IED offline from the bay and process switches and connect it to an independent test system, start the IED, check its operating status in the test system, and switch to the test mode; Perform status checks on each IED, including power status, communication status, and device status. Use a multimeter to check the power supply of the IED. Check the internal status and logs of the IED through the HMI.

3. A five-protection locking test method for a substation as claimed in claim 2, characterized in that: The step S2 specifically includes connecting the optical fiber interface of the optical digital tester to the optical port of the VLAN switch, configuring an independent VLAN for the optical digital tester on the VLAN switch, and performing offline verification through the independent VLAN network; Configure the sending parameters of GOOSE messages in the optical digital tester, use the optical digital tester to send simulated GOOSE messages, record the sending time and frequency, and compare them with the previously set parameters; If the simulated GOOSE message sending time and sending frequency are consistent with the set parameters, start comparing the locking contact state value with the expected value. If the simulated GOOSE message sending time and sending frequency are inconsistent with the set parameters, reset the parameter verification.

4. A five-protection locking test method for a substation as claimed in claim 3, characterized in that: Comparing the state value of the locking contact with the expected value in step S2 specifically includes connecting the test probe of the digital multimeter to the locking contact of the IED, measuring the voltage of the locking contact when the optical digital tester sends the GOOSE message, and recording the state value of the locking contact under different IED analog signals; According to the IED manual, the expected value of the locking node voltage state under different analog signals is obtained, and the measured state value is compared with the expected value. If they are consistent, the locking contact is normal and the five-protection locking logic across the interval is verified. If they are inconsistent, the locking contact is abnormal and repaired and re-verified.

5. A substation five-protection locking test method as claimed in claim 5, characterized in that: The step S3 specifically includes using a configuration tool to set the SSID and password of the WI-FI, and configure the IP address and subnet mask, verifying the five-protection locking logic between multiple verification devices in the entire test system, and checking the communication status between the verification devices through the PING command; The verification device includes a sending device and a receiving device. By configuring the GOOSE message sending function on the sending device, the sending device sends messages at a set interval and records the sending time of the GOOSE message. The GOOSE message receiving function is configured on the receiving device to record the received GOOSE message content and timestamp. Check the integrity of the received GOOSE message and calculate the communication delay time of sending the GOOSE message, and verify the network availability based on the content integrity and communication delay time of the GOOSE message; According to the received GOOSE message and equipment status, verify the five-protection interlocking logic across the interval, including comparing the status changes of the sending and receiving equipment and checking the on and off status of all interlocking contacts.

6. A substation five-protection locking test method as claimed in claim 3, characterized in that: Optimizing the safety index of the test system in step S4 specifically includes: Use OpenVAS to scan the test system for vulnerabilities, generate detailed vulnerability scan reports from vulnerability data, and apply corresponding security patches and updates to fix known vulnerabilities based on the vulnerability scan reports; Regularly use the Metasploit tool in KaliLinux to perform simulated network attacks, deploy intrusion detection system IDS, monitor the test system in real time, detect and record the attack response time of abnormal behavior data; Use an electromagnetic interference simulator to generate various interference signals in the test environment, record the data integrity of the test system under interference conditions, and use a hash function to verify the integrity of the message. The formula is: Among them, H(m) is the hash value, m i is the i-th byte of the message, and n is the total number of bytes in the message; The data integrity score is derived using the integrity score formula, which is: Among them, I j is the data integrity score in the jth test, H(m) is the hash value of the original GOOSE message, H(o) is the hash value of the GOOSE message after interference, and w is the number of bits of the hash value; Use AES-256 encryption algorithm to encrypt GOOSE messages; Set up a comprehensive security performance evaluation formula, combining vulnerability repair rate, attack response time, data integrity and encryption strength. The formula is: Among them, S is the comprehensive safety performance score, T u is the total number of vulnerabilities, v i is the degree of repair of the ith vulnerability, ranging from 0 to 1, t i is the time required to repair the i-th vulnerability, D is the number of attacks, and I j is the data integrity verification score of the jth attack, ranging from 0 to 1, E j is the data encryption strength score of the j-th attack, ranging from 0 to 1, and K is the comprehensive adjustment coefficient.

7. A five-protection locking test method for a substation as claimed in claim 6, characterized in that: In the step S4, the system security data is visualized by developing a visualization tool based on D3.js, and the system security data is displayed in the form of icons and dashboards, including line graphs, bar graphs and pie charts. The WebSocjet protocol is used to update the data in real time. The system security data refers to vulnerability data, abnormal behavior data, and electromagnetic interference data.

8. A five-protection locking test method for a substation as claimed in claim 7, characterized in that: The step S5 specifically includes generating a detailed verification report based on the recorded data, extracting all recorded measurement data from the database, recording the measurement results of each record in detail, integrating all contents into a verification report, and submitting the report to relevant technical personnel for review and confirmation before archiving.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by the processor, the device where the computer-readable storage medium is located executes the substation five-protection locking test method according to any one of claims 1 to 8.

10. An electronic device, characterized in that: include: A memory and a processor, wherein the memory stores a program that can be run on the processor, and when the processor executes the program, the substation five-protection locking test method as described in any one of claims 1 to 8 is implemented.

Images