Safety-zone-crossing electric power internet-of-things terminal access system and method thereof

Abstract

The invention belongs to the technical field of power systems, and particularly relates to a cross-safety-area power internet-of-things terminal access system and method. The method comprises the following specific steps: deploying an Internet of Things message bus and a monitoring program thereof, and setting a file format when each area transmits Internet of Things equipment registration information and service data; judging a safe area to be registered by the reported equipment registration information according to the Internet of Things message bus, converting the equipment registration information into a set format, and synchronizing the equipment registration information to the safe area for registration; and judging a safe area where the equipment registration information is located according to the Internet of Things message bus, converting the equipment business data into a set format, synchronizing a file to the safe area, and processing the equipment business data by a business data processing program. The sharing of the data of the internet-of-things terminal in each safe area is ensured, the application range of the power master station system under the conditions of rapid development of the internet-of-things technology and internet-of-things transformation of the power terminal is expanded, and the safe and stable operation of a power grid is ensured.

Description

Technical Field

[0001] The present invention belongs to the technical field of power systems, and in particular relates to a cross-safety zone power Internet of Things terminal access system and method. Background Art

[0002] In the field of power systems, the deployment architecture of the master station system is as follows: Figure 1 As shown. The master station system is divided into safety zone I (production control zone), safety zone IV (management information zone) and Internet zone. Safety zone I is responsible for substation data access and monitoring operations related to production control, safety zone IV is responsible for intelligent operation and maintenance and statistical analysis services, and the Internet zone is responsible for Internet-based intelligent operation and maintenance and partial data monitoring. In order to ensure data security, isolation devices are deployed between safety zone I and safety zone IV, and between safety zone IV and Internet zone. After the gateway sends the substation data to safety zone I, the data required by safety zone IV is synchronized to safety zone IV through the forward isolation device. After safety zone IV processes the data, the data required by the Internet zone is synchronized to the Internet zone through the forward isolation device, meeting the business data needs of each zone.

[0003] With the rapid development of IoT technology, power terminals in remote areas such as wind farms and distributed photovoltaic stations are rapidly developing IoT. More and more terminals are beginning to use IoT protocols to interact with the master station. Most IoT terminals are deployed in large Internet areas and upload data through IoT cards. The deployment architecture of the master station system has also evolved into the following: Figure 2 The data source of the master station system has evolved from only safety zone I to safety zone I and safety zone IV. Safety zone I collects data in the substation through the gateway, and safety zone IV receives data from wind farms and photovoltaic stations through IoT terminals.

[0004] Currently, when IoT terminals are connected to an Internet region, they can only be registered in this region. There are only two ways to process the business data sent by the IoT terminals: one is to process it directly in the Internet region, but this method has certain limitations and cannot cope with the situation where functional applications are deployed in non-Internet regions; the other is that since the registration status of the IoT terminals is unknown, all business data sent by the IoT terminals can only be stored and then fully synchronized to the relevant regions, resulting in low data transmission efficiency. Summary of the invention

[0005] The object of the present invention is to provide a cross-security zone power IoT terminal access system and method thereof, so as to solve the problem of low transmission efficiency caused by full synchronization of IoT device business data in the IoT terminal.

[0006] In order to solve the above technical problems, the present invention provides a method for accessing a power IoT terminal across security zones, and the specific steps include:

[0007] 1) The region where the IoT terminal device is located receives the device registration information reported by it and takes the region where it is located as the current region. After the current region determines that the device registration information is legal, it executes step 2);

[0008] 2) The current zone determines whether to request registration in the current zone based on the device registration information: if yes, the registration is completed directly in the current zone; if not, the device registration information is converted into a format that can be transmitted across zones and transmitted to the next zone connected to the current zone, and the next zone is used as the current zone, and step 2) is repeated until the device registration information is transmitted to the zone where the device requests registration;

[0009] 3) The region where the IoT terminal device is located receives the device service data reported by it, and takes the region where it is located as the current region, and executes step 4);

[0010] 4) The current zone determines whether the registered device is registered in this zone: if so, the current zone processes the device service data; if not, the device service data is converted into a format that can be transmitted across zones and transmitted to the next zone connected to the current zone, and the next zone is used as the current zone, and step 4) is repeated until the device service data is transmitted to the zone where the device has completed registration.

[0011] The beneficial effects are as follows: in order to solve the problem of low transmission efficiency caused by full synchronization of business data of IoT devices in IoT terminals, the present invention registers the uploaded device information, and processes the business data of the device in the security zone where the device information is registered, thereby realizing the reverse synchronization of the required data by the IoT terminal to each major zone, ensuring the sharing of IoT terminal data in each security zone, meeting the requirements of the power system for zoning management of IoT devices and zoning processing of IoT terminal data, improving the application scope of the power master station system under the rapid development of IoT technology and the IoT transformation of power terminals, ensuring the safe and stable operation of the power grid, and greatly improving the data transmission efficiency and the performance of real-time services of the power system.

[0012] Furthermore, the device registration information includes a product serial number, a device key, a device registration partition, and a device address, and also includes a device creation time and / or a device version number.

[0013] The beneficial effect is that judging the region where the IoT device requests to register based on the above registration information is conducive to accurately transmitting the registration information of each device to the target region, meeting the requirements of the power system for the zoning management of IoT devices and the zoning processing of IoT terminal data.

[0014] Furthermore, the device business data includes the device key and the partition to which the device belongs, and also includes at least one of a simple business data sample, a compound business data sample, an array business data sample, and an array compound business data sample.

[0015] The beneficial effects are: judging the region where the IoT device has completed registration based on the above-mentioned business data is conducive to accurately transmitting the business data of each device to the target region, so that the power master station can accurately grasp the data status of each IoT device, meet the power system's requirements for IoT device zoning management and IoT terminal data zoning processing, and ensure the safe and stable operation of the power grid.

[0016] Furthermore, the IoT message bus deployed in each region is used to determine the region where the registration information of the IoT device is requested to be registered.

[0017] In order to solve the above technical problems, the present invention also provides a cross-security zone power IoT terminal access system, comprising a plurality of large zones, wherein different large zones are sequentially connected through isolation devices, and one of the large zones is also used to connect IoT terminals; the cross-security zone power IoT terminal access system is used to realize cross-zone data transmission of IoT devices by adopting the following method:

[0018] 1) The region where the IoT terminal device is located receives the device registration information reported by it and takes the region where it is located as the current region. After the current region determines that the device registration information is legal, it executes step 2);

[0019] 2) The current zone determines whether to request registration in the current zone based on the device registration information: if yes, the registration is completed directly in the current zone; if not, the device registration information is converted into a format that can be transmitted across zones and transmitted to the next zone connected to the current zone, and the next zone is used as the current zone, and step 2) is repeated until the device registration information is transmitted to the zone where the device requests registration;

[0020] 3) The region where the IoT terminal device is located receives the device service data reported by it, and takes the region where it is located as the current region, and executes step 4);

[0021] 4) The current zone determines whether the registered device is registered in this zone: if so, the current zone processes the device service data; if not, the device service data is converted into a format that can be transmitted across zones and transmitted to the next zone connected to the current zone, and the next zone is used as the current zone, and step 4) is repeated until the device service data is transmitted to the zone where the device has completed registration.

[0022] The beneficial effects are as follows: in order to solve the problem that the data of IoT devices in IoT terminals cannot be shared across zones, the present invention registers the uploaded device information, and processes the business data of the device in the security zone where the device information is registered, thereby realizing the reverse synchronization of the data uploaded by the IoT terminal to each major zone, ensuring the sharing of IoT terminal data in each security zone, meeting the requirements of the power system for zoning management of IoT devices and zoning processing of IoT terminal data, improving the application scope of the power master station system under the rapid development of IoT technology and the IoT transformation of power terminals, and ensuring the safe and stable operation of the power grid. The system ensures the effective and reliable execution of a method for accessing power IoT terminals across security zones.

[0023] Furthermore, the device registration information includes a product serial number, a device key, a device registration partition, and a device address, and also includes a device creation time and / or a device version number.

[0024] The beneficial effect is that judging the region where the IoT device requests to register based on the above registration information is conducive to accurately transmitting the registration information of each device to the target region, meeting the requirements of the power system for the zoning management of IoT devices and the zoning processing of IoT terminal data.

[0025] Furthermore, the device business data includes the device key and the partition to which the device belongs, and also includes at least one of a simple business data sample, a compound business data sample, an array business data sample, and an array compound business data sample.

[0026] The beneficial effects are: judging the region where the IoT device has completed registration based on the above-mentioned business data is conducive to accurately transmitting the business data of each device to the target region, so that the power master station can accurately grasp the data status of each IoT device, meet the power system's requirements for IoT device zoning management and IoT terminal data zoning processing, and ensure the safe and stable operation of the power grid.

[0027] Furthermore, the IoT message bus deployed in each region is used to determine the region where the registration information of the IoT device is requested to be registered. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Figure 1 It is the master station system deployment architecture of the present invention;

[0029] Figure 2 It is the master station system deployment architecture supporting multi-zone data access of the present invention;

[0030] Figure 3 is a flow chart for implementing the method of the present invention;

[0031] Figure 4 This is a flow chart of cross-region registration of IoT terminals of the present invention;

[0032] Figure 5This is a flow chart of sending cross-region data of the Internet of Things terminal of the present invention. DETAILED DESCRIPTION

[0033] The basic concept of the present invention is: deploy the IoT message bus and its listening program, set the file format for synchronously transmitting IoT device registration information and business data in each zone; determine the security zone where the reported device registration information is to be registered based on the deployed IoT message bus, and the listening program of the IoT message bus converts the device registration information into a set format and synchronizes it to the security zone for registration; then determine the security zone where the device registration information is located based on the deployed IoT message bus, and the listening program of the IoT message bus converts the device business data into a set format and synchronizes the file to the security zone, and the business data processing program processes the device business data. Based on this concept, a cross-security zone power IoT terminal access method of the present invention can be implemented.

[0034] The present invention will be described in detail below with reference to the accompanying drawings and method embodiments.

[0035] Implementation example of cross-security zone power IoT terminal access system:

[0036] The present invention provides a cross-security zone power IoT terminal access system, and its deployment architecture is as follows: Figure 2 As shown, it includes an Internet zone, a safety zone IV and a safety zone I; the safety zone IV and the safety zone I are connected via a forward and reverse isolation device, the Internet zone and the safety zone IV are connected via a forward and reverse isolation device, and the Internet zone is connected to the IoT terminal via an IoT card.

[0037] In order to realize the data sharing of Internet of Things devices in multiple zones, the above system adopts a cross-security zone power Internet of Things terminal access method of the present invention, as shown in the flow chart. Figure 3 As shown, the specific implementation steps include:

[0038] Step 1: Deploy the IoT message bus and listening program in each security zone.

[0039] The IoT message bus, namely MQTT Broker, is deployed in the Internet zone, Security Zone IV and Security Zone I respectively, and the MQTT Broker listening program is deployed in each zone to determine the registration and business data information of IoT devices and generate a standard E file under the specified path.

[0040] Step 2: Define the file format for synchronously transmitting IoT device registration information and business data in each zone.

[0041] The E file format that defines the synchronous transmission of IoT device registration information in each zone is shown in Table 1 below:

[0042] Table 1

[0043] key value Notes pdtKey *** Product serial number deviceSecret *** Device Key deviceArea *** Device Registration Partition ipAddress *** Device IP address createTime *** Device creation time deviceVersion *** Device version number

[0044] The E file format that defines the synchronous transmission of IoT device business data in each zone is shown in Table 2 below:

[0045] Table 2

[0046] key value Notes deviceSecret *** Device Key deviceArea *** The partition to which the device belongs businessData1 *** Simple business data example businessData2 {***} Composite business data sample businessData… [***] Array business data example businessData N [(***)] Array composite business data example

[0047] Step 3: Cross-region registration of IoT devices in IoT terminals. The flow chart is as follows: Figure 4 shown.

[0048] 1) The IoT terminal reports the device registration information according to the requirements of the MQTT Broker. The Internet Zone IoT Message Bus determines whether the device registration information is legal. If it is illegal, it ends directly. If the registration information is legal, the Internet Zone Message Bus determines whether the device is registered in the Internet Zone. If the device requests to register in the Internet Zone, the registration is completed directly; otherwise, go to step 2).

[0049] 2) While the device is registering in the Internet zone (registration here refers to generating a transmission channel from the Internet zone to the safety zone IV), the monitoring program generates the device's registration information into a set registration information E file format, and places the E file in a specific path of the reverse isolation device. The reverse isolation device synchronizes the device's registration information E file to the safety zone IV. The safety zone IV determines whether the device requests to register in the safety zone IV. If the device requests to register in the safety zone IV, the device registration is completed directly; otherwise, step 3 is executed.

[0050] 3) When the device is registered in Security Zone IV (registration here refers to the generation of a transmission channel from Security Zone IV to Security Zone I), the listening program generates the device's registration information into a set registration information E file format, and places the E file in a specific path of the reverse isolation device. The reverse isolation device synchronizes the device's registration information E file to Security Zone I. The Security Zone I listening program parses the E file and sends the registration information to the IoT message bus to register the device in Security Zone I.

[0051] Step 4: The IoT device in the IoT terminal reports business data across regions. The flow chart is as follows: Figure 5 shown.

[0052] ① The IoT terminal reports the device business data according to the requirements of the MQTT Broker, and the Internet Zone IoT message bus determines whether the device has been successfully registered. If the device has not been registered, it ends directly. If the device has been successfully registered, it determines whether the device is registered in the Internet zone. If the device is registered in the Internet zone, the Internet zone message bus receives the device business data, and the business data processing program processes the business data in the Internet zone; otherwise, execute step ②.

[0053] ② The monitoring program converts the business data reported by the device into the set E file format, and places the E file in the specific path of the reverse isolation device, and the reverse isolation device synchronizes the business data of the device to the safe zone IV; if the registration information of the device is the safe zone IV, the monitoring program sends the business data of the device directly to the safe zone IV IoT message bus, and the safe zone IV business data processing program processes the device business data; otherwise, execute step ③.

[0054] ③ The listening program directly places the E file in the path specified by the reverse isolation device, and the reverse isolation device synchronizes the E file to Security Zone I; the Security Zone I listening program parses the device business data synchronized by the reverse isolation device and sends it to the IoT message bus of Security Zone I, and the Security Zone I business data processing program processes the business data.

[0055] The present invention realizes the partition registration of IoT devices and the partition processing of business data, realizes the reverse synchronization of data sent by IoT terminals to safety zone IV and safety zone I, ensures the sharing of IoT terminal data accessed by the Internet zone in the Internet zone, safety zone IV and safety zone I, solves the multi-zone data sharing problem of the master station system, meets the requirements of the power system for the partition management of IoT devices and the partition processing of IoT terminal data, improves the application scope of the power master station system under the rapid development of IoT technology and the transformation of power terminals to IoT, ensures the safe and stable operation of the power grid, and greatly improves the data transmission efficiency and the performance of the real-time business of the power system.

[0056] Embodiment of a method for accessing a power IoT terminal across security zones:

[0057] The specific steps of the cross-security zone power Internet of Things terminal access method of the present invention have been described in detail in the cross-security zone power Internet of Things terminal access system embodiment, and will not be repeated here.

Claims

1. A method for accessing a power IoT terminal across security zones, characterized in that: The specific steps include: 1) The region where the IoT terminal device is located receives the device registration information reported by it and takes the region where it is located as the current region. After the current region determines that the device registration information is legal, it executes step 2); 2) The current zone determines whether to request registration in the current zone based on the device registration information: if yes, the registration is completed directly in the current zone; if not, the device registration information is converted into a format that can be transmitted across zones and transmitted to the next zone connected to the current zone, and the next zone is used as the current zone, and step 2) is repeated until the device registration information is transmitted to the zone where the device requests registration; before determining whether the device registration information is required to request registration in the current zone; 3) The region where the IoT terminal device is located receives the device service data reported by it, and takes the region where it is located as the current region, and executes step 4); 4) The current zone determines whether the registered device is registered in this zone: if so, the current zone processes the device service data; if not, the device service data is converted into a format that can be transmitted across zones and transmitted to the next zone connected to the current zone, and the next zone is used as the current zone, and step 4) is repeated until the device service data is transmitted to the zone where the device has completed registration.

2. The cross-security zone power IoT terminal access method according to claim 1 is characterized in that: Device registration information includes the product serial number, device key, device registration partition and device address, as well as the device creation time and / or device version number.

3. The cross-security zone power IoT terminal access method according to claim 1 is characterized in that: The device business data includes the device key and the partition to which the device belongs, and also includes at least one of a simple business data sample, a compound business data sample, an array business data sample, and an array compound business data sample.

4. The cross-security zone power Internet of Things terminal access method according to any one of claims 1 to 3, characterized in that: The IoT message bus deployed in each region is used to determine the region where the registration information of the IoT device is requested to be registered.

5. A cross-safety zone power IoT terminal access system, comprising a plurality of large zones, wherein different large zones are sequentially connected through isolation devices, and one of the large zones is also used to connect IoT terminals; characterized in that: The cross-security zone power IoT terminal access system is used to implement cross-zone data transmission of IoT devices using the following method: 1) The region where the IoT terminal device is located receives the device registration information reported by it and takes the region where it is located as the current region. After the current region determines that the device registration information is legal, it executes step 2); 2) The current zone determines whether to request registration in the current zone based on the device registration information: if yes, the registration is completed directly in the current zone; if not, the device registration information is converted into a format that can be transmitted across zones and transmitted to the next zone connected to the current zone, and the next zone is used as the current zone, and step 2) is repeated until the device registration information is transmitted to the zone where the device requests registration; 3) The region where the IoT terminal device is located receives the device service data reported by it, and takes the region where it is located as the current region, and executes step 4); 4) The current zone determines whether the registered device is registered in this zone: if so, the current zone processes the device service data; if not, the device service data is converted into a format that can be transmitted across zones and transmitted to the next zone connected to the current zone, and the next zone is used as the current zone, and step 4) is repeated until the device service data is transmitted to the zone where the device has completed registration.

6. The cross-security zone power IoT terminal access system according to claim 5 is characterized in that: Device registration information includes the product serial number, device key, device registration partition and device address, as well as the device creation time and / or device version number.

7. The cross-security zone power IoT terminal access system according to claim 5 is characterized in that: The device business data includes the device key and the partition to which the device belongs, and also includes at least one of a simple business data sample, a compound business data sample, an array business data sample, and an array compound business data sample.

8. The cross-security zone power Internet of Things terminal access system according to any one of claims 5 to 7, characterized in that: The IoT message bus deployed in each region is used to determine the region where the registration information of the IoT device is requested to be registered.

Images