Power heterogeneous asset portrait management method and device, electronic equipment and storage medium

Abstract

The invention discloses a power heterogeneous asset portrait management method and device, electronic equipment and a storage medium. The method comprises the following steps: determining asset fingerprint information of each target asset, wherein the target assets are target access equipment in the distributed energy system; determining asset portrait information of each target asset according to the asset fingerprint information of each target asset; associating the asset portrait information of each target asset to different business types, and determining the asset portrait information related to the different business types; and performing asset ledger management on each target asset according to the different service types and the asset portrait information related to the different service types. According to the scheme, the characteristics, the communication states and the operating systems of various access devices in the distributed energy system are identified, and the target assets in different types of service scenes are subjected to hierarchical management, so that the security risk of the distributed energy system can be managed and controlled.

Description

Technical Field

[0001] The present invention relates to the field of asset management technology, and in particular to a method, device, electronic device and storage medium for managing power heterogeneous asset portraits. Background Art

[0002] With the development of society, digital transformation is deepening, the construction of new power systems is also accelerating, and a large number of new energy stations and third-party market players are connected to the power system.

[0003] From the perspective of network security, this development trend has brought many problems. The exposure of network risks continues to expand, the boundaries of network security protection are gradually blurred, and the difficulty of security management and control is increasing. The existing network security protection system can no longer meet the needs. For example, the distributed energy network is scattered on the user side, which makes the number of devices large and it is extremely difficult to establish equipment records. On the user side, the distributed energy system faces serious security risks. Illegal users can easily break through physical security measures and access key and important assets. In addition, the types of distributed energy system equipment on the user side are rich and diverse, and the manufacturers and models are mixed. There is a lack of unified technical means to effectively manage these devices. These problems have seriously affected the safe and stable operation of the distributed energy system and hindered the further development of the distributed energy system. Summary of the invention

[0004] The present invention provides a method, device, electronic device and storage medium for managing power heterogeneous asset portraits, so as to realize the construction of an asset ledger for a distributed energy system and conduct a comprehensive assessment of the asset network security of the distributed energy system.

[0005] According to one aspect of the present invention, a method for managing power heterogeneous asset portraits is provided, comprising:

[0006] Determine the asset fingerprint information of each target asset, where the target asset is a target access device in the distributed energy system;

[0007] Determine the asset profile information of each target asset based on the asset fingerprint information of each target asset;

[0008] Associating the asset profile information of each target asset with different business types, and determining the asset profile information related to different business types;

[0009] Asset ledger management is performed for each target asset based on different business types and asset portrait information related to different business types.

[0010] According to another aspect of the present invention, there is provided a power heterogeneous asset portrait management device, comprising:

[0011] A first determination module is used to determine the asset fingerprint information of each target asset, where the target asset is a target access device in a distributed energy system;

[0012] The second determination module is used to determine the asset profile information of each target asset according to the asset fingerprint information of each target asset;

[0013] The third determination module is used to associate the asset portrait information of each target asset with different business types and determine the asset portrait information related to different business types;

[0014] The asset ledger management module is used to manage the asset ledger of each target asset based on different business types and asset portrait information related to different business types.

[0015] According to another aspect of the present invention, there is provided an electronic device, comprising:

[0016] at least one processor; and

[0017] a memory communicatively connected to at least one processor; wherein,

[0018] The memory stores a computer program that can be executed by at least one processor, and the computer program is executed by at least one processor so that the at least one processor can execute the power heterogeneous asset portrait management method of any embodiment of the present invention.

[0019] According to another aspect of the present invention, a computer-readable storage medium is provided, which stores computer instructions, and the computer instructions are used to enable a processor to implement the power heterogeneous asset portrait management method of any embodiment of the present invention when executed.

[0020] The power heterogeneous asset portrait management solution provided in the embodiment of the present invention determines the asset fingerprint information of each target asset, where the target asset is a target access device in a distributed energy system, and determines the asset portrait information of each target asset based on the asset fingerprint information of each target asset, thereby realizing detection and identification of various access devices in the distributed energy system, obtaining the characteristics, communication status and operating system of various access devices, and establishing asset portrait information of various access devices; associating the asset portrait information of each target asset with different business types, determining the asset portrait information related to the different business types, and performing asset ledger management for each target asset based on the different business types and the asset portrait information related to the different business types, thereby realizing hierarchical management of target assets of different types of businesses, and continuously and synchronously updating the target asset information of different types of businesses, so as to facilitate the establishment of network topology relationships under different types of business scenarios, thereby facilitating the management of security risks of distributed energy systems.

[0021] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0023] Figure 1 A flowchart of a method for managing power heterogeneous asset portraits provided in the first embodiment of the present invention;

[0024] Figure 2 A schematic diagram of the structure of a power heterogeneous asset portrait management device provided in Embodiment 2 of the present invention;

[0025] Figure 3 A schematic diagram of the structure of an electronic device for implementing a method for profiling power heterogeneous assets provided in Example 3 of the present invention. DETAILED DESCRIPTION

[0026] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0027] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0028] It is understandable that before using the technical solutions disclosed in the embodiments of the present invention, the type, scope of use, usage scenarios, etc. of the personal information involved in the present invention should be informed to the user and the user's authorization should be obtained in an appropriate manner in accordance with relevant laws and regulations.

[0029] For example, in response to receiving an active request from a user, a prompt message is sent to the user to clearly prompt the user that the operation requested to be performed will require obtaining and using the user's personal information. Thus, the user can autonomously choose whether to provide personal information to software or hardware such as an electronic device, application, server, or storage medium that performs the operation of the technical solution of the present invention according to the prompt message.

[0030] As an optional but non-limiting implementation, in response to receiving an active request from the user, the prompt information may be sent to the user in the form of a pop-up window, in which the prompt information may be presented in text form. In addition, the pop-up window may also carry a selection control for the user to choose "agree" or "disagree" to provide personal information to the electronic device.

[0031] It is understandable that the above notification and user authorization process is only illustrative and does not constitute a limitation on the implementation of the present invention. Other methods that meet relevant laws and regulations may also be applied to the implementation of the present invention.

[0032] Embodiment 1

[0033] Figure 1 This is a flowchart of a method for managing the portrait of a power heterogeneous asset provided in the first embodiment of the present invention. This embodiment is applicable to the case of asset ledger management of each target access device in a distributed energy system. The method can be executed by a power heterogeneous asset portrait management device, which can be implemented in the form of hardware and / or software and can be configured in an electronic device that implements the power heterogeneous asset portrait management method. Figure 1 As shown, the method includes:

[0034] S101. Determine the asset fingerprint information of each target asset, where the target asset is a target access device in a distributed energy system.

[0035] In the embodiment of the present invention, the target asset refers to various equipment and facilities used for power production, transmission and distribution in the distributed energy system, including host systems, transmission lines, substation equipment, distribution lines and equipment, and automation control equipment, etc. Asset fingerprint information refers to detailed technical information about a single target asset, such as the hardware configuration, software version and network service of the device.

[0036] Specifically, a request is made to access the target asset to obtain the target asset's hardware configuration, software version, network service and other related information. Then, the target asset's hardware configuration, software version, network service and other related information are used as its asset fingerprint information.

[0037] As an optional method, determining the asset fingerprint information of each target asset includes the following steps A1-A2:

[0038] Step A1: Send different types of network requests to each target asset. The network requests are used to determine the asset fingerprint information of each target asset. The asset fingerprint information of the target asset includes the behavior of the target asset's operating system protocol stack, initial serial number, open ports, and running services.

[0039] Step A2: Compare the asset fingerprint information of each target asset with the information in the pre-established fingerprint database, and identify and classify the asset fingerprint information of each target asset according to the comparison result between the asset fingerprint information of each target asset and the information in the pre-established fingerprint database.

[0040] In the embodiment of the present invention, a network request refers to a request sent by one device to another device in a computer network to obtain data, resources or services of another device. Network requests usually follow a specific protocol, which defines the format of the request, the transmission method and how to process the request. The fingerprint database refers to a database of asset fingerprint information about the target asset established by the virtual device module, which contains asset fingerprint information of many known operating systems, services and versions.

[0041] Specifically, the virtual device module sends different types of network requests to each target asset to collect information about each target asset. Then, the collected information of each target asset is used as the asset fingerprint information of each target asset. At the same time, the virtual device module compares and matches the collected asset fingerprint information of each target asset with the asset fingerprint information in the fingerprint database. If the asset fingerprint information of the target asset matches the asset fingerprint information in the fingerprint database, the asset fingerprint information of the target asset is identified and classified to facilitate the management of the target asset and subsequent search and application. If the asset fingerprint information of the target asset does not match the asset fingerprint information in the fingerprint database, the asset fingerprint information is customized in the fingerprint database based on the collected asset fingerprint information of the target asset to improve the accuracy of asset fingerprint information recognition and upgrade the fingerprint database.

[0042] As an option, different types of network requests are sent to the target asset, including the following steps B1-B4:

[0043] Step B1: Send a response request message to the host of the target asset. The response request message is used to detect whether the host of the target asset is reachable.

[0044] Step B2: Send a port detection request to the host of the target asset. The port detection request is used to detect whether the port of the host of the target asset is open.

[0045] Step B3: Send a specific data packet to the host of the target asset. The specific data packet is a specific TCP, UDP or ICMP data packet and is used to determine the type and version of the operating system of the target asset.

[0046] Step B4: Send a service identification data packet to the authorized and known open port of the target asset host. The service identification data packet is used to identify the service and version running on the authorized and known open port of the target asset host.

[0047] Specifically, the virtual device module sends a response request message to the target asset host, and by analyzing the response request message returned by the target asset host, the basic connectivity and response time of the target asset host are determined to determine whether the target asset host is reachable. The virtual device module sends a port detection request to the port of the target asset host, and determines whether the port of the target asset host is open based on the response of the target asset host. The virtual device module sends a specific Transmission Control Protocol (TCP), User Datagram Protocol (UDP) or Internet Control Message Protocol (ICMP) data packet to the target asset host, and analyzes the response of the target asset host to process different network protocols to determine the type and version of the target asset's operating system.

[0048] As an option, a port detection request is sent to the host of the target asset. The port detection request is used to detect whether the port of the target asset host is open, including:

[0049] The virtual device module sends a TCP Synchronize Sequence Numbers (SYN) packet to each port of the target asset host. If the port is open, the port will return a TCP SYN / Acknowledgement (ACK) response. If the port is closed, the port will return a Reset the connection (RST) response.

[0050] As an option, a port detection request is sent to the host of the target asset. The port detection request is used to detect whether the port of the target asset host is open, including:

[0051] Completely establish a TCP connection between the virtual device module and the target asset host. The virtual device module sends a SYN packet to each port of the target asset host and waits for the SYN / ACK response returned by the port, and then sends an ACK to each port of the target asset host to complete the three-way handshake.

[0052] As an option, a port detection request is sent to the host of the target asset. The port detection request is used to detect whether the port of the target asset host is open, including:

[0053] The virtual device module sends UDP packets to each port of the target asset host. If the port is open, the port will not return any response. If the port is closed, the port will return an ICMP port unreachable message.

[0054] S102. Determine the asset profile information of each target asset based on the asset fingerprint information of each target asset.

[0055] In an embodiment of the present invention, asset profiling refers to building a comprehensive, multi-dimensional view to describe the characteristics and status of the target assets by collecting and analyzing various types of data of the target assets, including basic information, operating data, maintenance records, performance indicators, etc. of the target assets.

[0056] Specifically, the virtual device module determines the asset fingerprint information of each target asset, and then establishes the asset portrait information of each target asset based on the obtained asset fingerprint information of each target asset.

[0057] As an optional method, the asset profile information of each target asset is determined according to the asset fingerprint information of each target asset, including the following steps C1-C2:

[0058] Step C1, determine the asset characteristics of each target asset according to the asset fingerprint information of each target asset, each target asset includes general assets, general middleware, power-specific devices and distributed energy user-side assets in the distributed energy system, and the asset characteristics include IP address, MAC address, open port characteristics, operating system characteristics and asset type.

[0059] Step C2: Determine the asset profile information of each target asset according to the asset characteristics of each target asset.

[0060] In the embodiment of the present invention, asset characteristics refer to some unique properties of the target asset in different aspects, including Internet Protocol (IP) address, Media Access Control address (MAC) address, open port characteristics, operating system characteristics and asset type. Among them, IP address refers to the network address of the target asset, which is used to uniquely identify the target asset in the network; MAC address refers to the physical address of the target asset, which is used to uniquely identify the network interface of the target asset in the local area network; open port characteristics refer to the open network ports on the target asset and their corresponding services; operating system characteristics refer to the type and version of the operating system running on the target asset.

[0061] General assets refer to equipment or facilities that may be used in multiple links of distributed energy systems, such as energy storage systems, smart meters, microgrid controllers, bidirectional inverters, and communication infrastructure, including wireless networks, optical fibers and other data transmission technologies, which are used to achieve interconnection between devices, demand response platforms, etc. General middleware refers to software used for communication, data exchange and integration between different devices and systems in distributed energy systems, including message queue middleware, application servers and cache middleware. Among them, message queue middleware allows applications to communicate through asynchronous messaging, which helps to decouple system components and improve the scalability and reliability of the system, such as RabbitMQ, ApacheKafka, ActiveMQ, etc.; application servers provide an environment for running Java EE applications, including container management, transaction processing, security and other functions, such as Apache Tomcat, JBoss / WildFly, WebLogic, WebSphere, etc.; cache middleware provides in-memory data storage to improve data access speed and reduce the load on the back-end database, such as Redis, Memcached, etc. Power-specific devices refer to equipment specially designed for use in distributed energy systems. Distributed energy user-side assets refer to the equipment or facilities on the user side of the distributed energy system that meet the user's needs for various energy sources such as electricity, heat, and cold, such as smart meters and automated control systems.

[0062] Exemplarily, the asset characteristics of the general assets in the distributed energy system are identified based on the asset fingerprint information of the general assets in the distributed energy system, and the asset portrait information of the general assets in the distributed energy system is established based on the identified asset characteristics. The asset portrait information of the general assets in the distributed energy system includes IP address, MAC address, open port characteristics, operating system characteristics, and asset type. Among them, the asset type includes host, switch, firewall, and vertical encryption authentication device.

[0063] Specifically, the virtual device module collects the network fingerprint of the operating system of the common assets in the distributed energy system, and determines the operating system of the common assets in the distributed energy system according to the collected network fingerprint of the operating system.

[0064] As an option, the asset types included in the asset profile information of the general assets in the distributed energy system are determined according to the asset characteristics of the general assets in the distributed energy system, including:

[0065] Send a specific HTTPS request to a common asset and analyze the returned HTTP header information. For example, a server may return a specific server type such as Apache, Nginx, or IIS, while a firewall or switch may return a different response or have specific management interface characteristics. Analyze the information in the SSL certificate of the common asset, including the organization name and organizational unit, which can reflect the nature or management unit of the common asset.

[0066] As an option, the asset types included in the asset profile information of the general assets in the distributed energy system are determined according to the asset characteristics of the general assets in the distributed energy system, including:

[0067] Check whether other typical ports are open on common assets and analyze the combination pattern of open ports. For example, a switch may also open port 161, while a server may open ports 21, 111, and other business-specific ports.

[0068] As an option, the asset types included in the asset profile information of the general assets in the distributed energy system are determined according to the asset characteristics of the general assets in the distributed energy system, including:

[0069] Monitor the characteristics of network traffic sent or received from common assets. For example, an active web server will show a lot of HTTP or HTTPS traffic, while a switch may show a lot of broadcast or multicast traffic. Examine the content of transactions conducted by common assets over port 443 to determine if they match typical server responses, management interfaces, or other types of services.

[0070] As an option, the asset types included in the asset profile information of the general assets in the distributed energy system are determined according to the asset characteristics of the general assets in the distributed energy system, including:

[0071] Use network scanning tools to analyze the differences in TCP / IP stacks to determine the operating system type and asset type of the general asset. By analyzing the application layer data of the general asset, determine the application type and version running on the general asset.

[0072] Exemplarily, the asset characteristics of the general middleware in the distributed energy system are identified based on the asset fingerprint information of the general middleware in the distributed energy system, and the asset portrait information of the general middleware in the distributed energy system is established based on the identified asset characteristics. The asset portrait information of the general middleware in the distributed energy system includes middleware information, network communication behavior, security configuration and vulnerability information, dependency, and configuration and change history. Among them, the middleware information includes the name, version, type, and port of the middleware; the network communication behavior includes traffic, protocol, and frequency.

[0073] Specifically, establishing asset profile information of the general middleware in the distributed energy system according to the asset fingerprint information of the general middleware in the distributed energy system includes the following steps D1-D6:

[0074] Step D1, identify the basic information and classification of the general middleware in the distributed energy system according to the asset fingerprint information of the general middleware in the distributed energy system. The basic information of the general middleware includes the device type, manufacturer, and model of the general middleware. The classification of the general middleware includes power generation equipment, transmission equipment, and control equipment. Use a network scanning tool to scan the network port of the general middleware, collect the banner information, type and number of the service port, and identify and record the name, version number and type of the general middleware.

[0075] Step D2: monitor the communication behavior and operating status of the general middleware in the distributed energy system according to the log of the general middleware in the distributed energy system. The communication behavior of the general middleware includes the traffic pattern, communication frequency, and data transmission volume. The operating status of the general middleware includes CPU usage, memory usage, and response time.

[0076] Step D3: Evaluate the security configuration of the common middleware in the distributed energy system. The security configuration of the common middleware includes firewall rules, access control lists, and encryption protocols. Compare the system vulnerabilities of the common middleware in the distributed energy system with the security vulnerability library to check whether there are known security vulnerabilities in the common middleware in the distributed energy system.

[0077] Step D4: Determine the dependencies between common middleware in the distributed energy system. The dependencies between common middleware include physical connection, data flow and control flow.

[0078] Step D5, record the configuration information of the general middleware in the distributed energy system, and track the change history of the general middleware in the distributed energy system. The configuration information of the general middleware includes hardware configuration, software version, and configuration file. The change history of the general middleware includes software update and configuration modification.

[0079] Step D6: Establish an asset information list of the common middleware in the distributed energy system based on the basic information, classification, communication behavior, operating status, security assessment results, dependencies, configuration information and change history of the common middleware in the distributed energy system, and then construct the asset portrait information of the common middleware in the distributed energy system.

[0080] Exemplarily, the asset characteristics of the power-specific devices in the distributed energy system are identified based on the asset fingerprint information of the power-specific devices in the distributed energy system, and the asset portrait information of the power-specific devices in the distributed energy system is established based on the identified asset characteristics. The asset portrait information of the power-specific devices in the distributed energy system includes IP addresses, MAC addresses, open port characteristics, operating system characteristics, and types of power-specific devices. Among them, the types of power-specific devices include telecontrol devices, measurement and control devices, protection devices, power quality detection devices, AC low-voltage protection measurement and control devices, power electronic transformer controllers, low-voltage DC distribution network control devices, high-voltage DC distribution network control devices, DC coordination controllers, AC coordination controllers, central controllers, digital integrated measurement and control devices, power quality detection devices, and intelligent gateways.

[0081] Exemplarily, the asset characteristics of the distributed energy user-side assets in the distributed energy system are identified based on the asset fingerprint information of the distributed energy user-side assets in the distributed energy system, and the asset portrait information of the distributed energy user-side assets in the distributed energy system is established based on the identified asset characteristics. The asset portrait information of the distributed energy user-side assets in the distributed energy system includes IP address, MAC address, open port characteristics, and asset type. Among them, the asset type includes distributed energy user-side unique assets such as electric energy meters, charging piles, photovoltaic power generation systems, and mobile energy storage vehicles.

[0082] S103. Associate the asset portrait information of each target asset with different business types, and determine the asset portrait information related to the different business types.

[0083] Specifically, the asset portrait information of each target asset is matched with the business type according to the predefined business association rules to determine the asset portrait information of the target assets related to different business types. For example, if the asset portrait information shows that the corresponding target asset has a specific communication port and function, and matches the microgrid system business type, then the target asset is associated with the microgrid system business type.

[0084] S104. Perform asset ledger management for each target asset based on different business types and asset portrait information related to different business types.

[0085] In an embodiment of the present invention, asset ledger management refers to operations such as reviewing, displaying, analyzing, or updating asset portrait information related to different business types, so as to help managers quickly understand and deal with target asset issues related to specific businesses. Asset ledger management includes: collecting and analyzing data flows between target assets of different business types, and determining ports used for business-critical communications; network traffic monitoring and tracking communication modes between target assets to verify business association rules; centralized storage of asset portrait information and business association information of all target assets to ensure that the asset management platform can display the relationship between target assets and business types, as well as the role of target assets in the corresponding business types; implementing real-time monitoring, tracking the status, performance indicators, and security events of target assets; and regularly checking the health status and configuration of target assets to ensure that each target asset operates normally and meets business type requirements.

[0086] Specifically, the asset portrait information of each target asset associated with different business types is reviewed, displayed, analyzed, or updated to achieve asset ledger management of each target asset in different business type scenarios.

[0087] As an option, different business types include microgrid system business type, energy storage system business type, energy storage vehicle business type and low voltage area business type;

[0088] Accordingly, according to different business types and asset profile information related to different business types, asset ledger management is performed for each target asset, including the following steps E1-E4:

[0089] Step E1: According to the asset portrait information related to the business type of the microgrid system, asset ledger management is performed for each microgrid asset under the business type scenario of the microgrid system. The microgrid assets include business servers, telecontrol devices, measurement and control devices, protection devices, photovoltaic power generation equipment and energy storage equipment.

[0090] Step E2: Based on the asset portrait information related to the energy storage system business type, asset ledger management is performed on each energy storage asset under the energy storage system business type scenario. The energy storage assets include a battery management system, an energy management system, a power management system, and an on-site integrated monitoring device for energy storage.

[0091] Step E3: Based on the asset portrait information related to the energy storage vehicle business type, asset ledger management is performed on each energy storage vehicle asset under the energy storage vehicle business type scenario. The energy storage vehicle assets include a battery management system, an inverter, an energy management system, and communication equipment.

[0092] Step E4: Based on the asset portrait information related to the low-voltage substation business type, asset ledger management is performed on each low-voltage substation asset under the low-voltage substation business type scenario. The low-voltage substation assets include power detection equipment, protocol converters, protection devices and communication equipment.

[0093] In the embodiment of the present invention, the microgrid system refers to a small, controllable, power distribution system that can connect distributed power sources, power loads, distribution facilities, monitoring and protection devices and other components. The energy storage system refers to a technical system for storing and releasing electric energy, which can store electric energy when the power supply is sufficient or the electricity price is low, and release electric energy when the power demand increases or the supply is insufficient. The energy storage vehicle refers to a mobile energy storage unit that can store electric energy and provide electric energy supply when needed. The energy storage vehicle can be an electric car, a modified electric vehicle or other type of mobile power vehicle, equipped with a large-capacity battery system, which can provide support when the power grid fails or additional power is needed. The low-voltage substation refers to the low-voltage power grid area powered by a specific transformer, which is used for power supply management, including power grid planning, maintenance, power calculation and line loss statistics.

[0094] Specifically, by accessing and updating the asset portrait information related to the business type of the microgrid system, the asset ledger management is carried out for the business servers, telecontrol devices, measurement and control devices, protection devices, photovoltaic power generation equipment and energy storage equipment in the microgrid system business type scenario. By accessing and updating the asset portrait information related to the energy storage system business type, the asset ledger management is carried out for the battery management system, energy management system, electric energy management system and energy storage on-site integrated monitoring device in the energy storage system business type scenario. By accessing and updating the asset portrait information related to the energy storage vehicle business type, the asset ledger management is carried out for the battery management system, inverter, energy management system and communication equipment in the energy storage vehicle business type scenario. By accessing and updating the asset portrait information related to the low-voltage area business type, the asset ledger management is carried out for the power detection equipment, protocol converter, protection device and communication equipment in the low-voltage area business type scenario.

[0095] As an optional method, after asset ledger management of each target asset is performed according to different business types and asset profile information related to different business types, the following steps F1-F2 are also included:

[0096] Step F1: by calling the situation awareness platform interface and the energy interconnection platform interface, the asset portrait information of each target asset stored in the asset ledger management platform is retrieved, and the asset ledger information is synchronously updated according to the asset portrait information of each target asset.

[0097] Step F2: Instantly respond to the user request based on the user input, and access the asset portrait information corresponding to the specified IP through the target asset access portal.

[0098] In an embodiment of the present invention, a situational awareness platform refers to a system for collecting, processing, analyzing and presenting a large amount of data, providing users with real-time perception capabilities of complex environments. In the field of distributed energy, the situational awareness platform is mainly used to monitor and manage the operating status of the energy system to ensure the stability and security of the system. An energy interconnection platform refers to an energy management platform that uses advanced power electronics technology, information technology and intelligent management technology to interconnect a large number of new power network nodes consisting of distributed energy collection devices, distributed energy storage devices and various types of loads to achieve two-way flow, peer-to-peer exchange and sharing of energy. The platform interface refers to the application programming interface (API) provided by the platform, which is used to exchange data with other systems or external applications.

[0099] Specifically, through the situation awareness platform interface and the application program interface of the energy interconnection platform, the asset portrait information of each target asset stored in the asset ledger management platform is retrieved, and the asset ledger information is synchronously updated according to the retrieved asset portrait information of each target asset. At the same time, the asset portrait information of the target asset corresponding to the specified IP can also be retrieved according to the instant response user request input by the user.

[0100] As an optional method, according to the instant response user request input by the user, the asset portrait information corresponding to the specified IP is retrieved through the target asset access portal, including the following steps G1-G6:

[0101] Step G1: confirm whether the target asset has various remote access services based on the open information of the target asset service port, and the remote access services include at least one of SSH, TELNET, FTP and HTTP / HTTPS.

[0102] Step G2: Use a crawler tool to recursively crawl the remote access services of the target asset, traverse the directory, and attempt a dictionary attack to detect the asset service ports accessible to the target asset.

[0103] Step G3: Use SSH access request to send to the asset service port accessible to the target asset, and detect the returned SSH access request echo. According to the SSH access request echo, determine whether there is a firewall on the asset service port accessible to the target asset.

[0104] Step G4: For the asset service port accessible to the target asset with a firewall, use port scanning technology to determine the firewall open / closed status of the asset service port accessible to the target asset.

[0105] Step G5: Determine the target asset access entry method list based on the asset service port accessible to the target asset through the open firewall. The access entry method list includes the IP address, asset service port number, service type and service status.

[0106] Step G6: Select the target asset access entry with the same IP address as the current calling platform through the target asset access entry method list to access the asset portrait information of the target asset with the specified IP.

[0107] As an option, after determining the asset profile information related to different business types, it also includes:

[0108] Based on different business types and asset portrait information related to different business types, build network topology relationships corresponding to business scenarios of different business types.

[0109] In the embodiment of the present invention, the network topology relationship refers to the description of the connection mode between various devices in the distributed energy system and how data is transmitted between the devices, including the physical structure and logical structure of the system.

[0110] Specifically, according to different business types and asset portrait information related to different business types, the network topology relationship corresponding to the business scenarios of different business types is constructed, including the following steps H1-H6:

[0111] Step H1: Obtain asset profile information of each target asset in different business type scenarios.

[0112] Step H2: Collect Address Resolution Protocol (ARP) table and MAC table information from each target asset. The ARP table records the mapping relationship between the IP address and MAC address of the target asset, and the MAC table records the corresponding relationship between the port and MAC address of the target asset.

[0113] Step H3: Use a network scanning tool to scan each target asset in different business type scenarios to discover active target assets. Obtain the MAC address of the target asset by sending an ARP request to the target asset or querying the ARP table of the target asset.

[0114] Step H4: Using the collected asset profile information and ARP / MAC table information of each target asset, the corresponding relationship between the MAC address and the port of each target asset is analyzed to infer the communication connection relationship between each target asset. By analyzing the mapping relationship between the IP address and the MAC address of each target asset, combined with the network routing information, the logical connection relationship between each target asset is inferred.

[0115] Step H5: Generate network topology relationships of various target assets in different business type scenarios based on the communication connection relationships and logical connection relationships between various target assets.

[0116] Step H6: Visualize the network topology relationship of each target asset in different business type scenarios to obtain a topology map, and mark the location and connection relationship of each type of target asset in the topology map.

[0117] As an option, the power heterogeneous asset portrait management method also includes the following steps I1-I2:

[0118] Step I1. Detect the reference access device assets in the distributed energy system. The reference access device assets include unknown device assets, changed device assets, and shadow device assets. Unknown device assets are devices newly connected to the distributed energy system and access devices whose business communications are not within the scope of existing business rules. Changed device assets are access devices with device changes in the distributed energy system. Shadow device assets are unauthorized or unmanaged network assets, applications, and services.

[0119] Step I2: Update and adjust the asset profile information of the reference access device assets.

[0120] Specifically, it is detected whether there is a reference access device asset in the distributed energy system. If it is detected whether there is a reference access device asset in the distributed energy system, the asset fingerprint information of the reference access device asset is determined. Then, the asset portrait information of the reference access device asset is determined based on the asset fingerprint information of the reference access device asset, so as to update and adjust the asset portrait information of the reference access device asset.

[0121] As an optional method, detecting the reference access device assets in the distributed energy system and updating and adjusting the asset profile information of the reference access device assets include the following steps J1-J7:

[0122] Step J1: Use network scanning technology to scan the distributed energy system to discover all active target assets and record all target asset IP addresses that respond to the scan request.

[0123] Step J2: Detect the communication ports of active target assets and collect characteristic information of the communication port services, including protocol type and service version number.

[0124] Step J3: Analyze the communication characteristics of active target assets, including the protocols used, the types of data packets exchanged, and the communication frequency and mode.

[0125] Step J4: Match the communication characteristics of the communication port of the active target asset with the existing business rules. The existing business rule library defines the target asset type, IP address range, port and protocol involved in a specific business.

[0126] Step J5: If the IP address, port or communication protocol of the target asset does not conform to any existing business rules, the target asset is defined as an unknown device asset.

[0127] Step J6: Collect asset fingerprint information of unknown device assets, construct asset portrait information of unknown device assets, and associate the asset portrait information of unknown device assets with the business type to which the unknown device assets belong.

[0128] Step J7: Display asset profile information of unknown device assets.

[0129] As an optional method, detecting the reference access device assets in the distributed energy system and updating and adjusting the asset profile information of the reference access device assets include the following steps K1-K7:

[0130] Step K1: Regularly perform target asset survival scans and port detection on the distributed energy system to capture any change information.

[0131] Step K2: Compare the current scan result with the previous scan result or with the preset baseline configuration to detect changes in the IP address, MAC address and communication service port parameters of the target asset.

[0132] Step K3: If a new target asset is found or the communication characteristics of the target asset are changed during the survival scan and port detection, a topology check is performed to confirm whether the location and connection relationship of the target asset in the network have changed.

[0133] Step K4: If a change is detected in the target asset, the target asset is defined as a changed device asset, along with detailed information on the change, including the IP address, MAC address, and communication service port of the changed device asset before and after the change.

[0134] Step K5: Determine whether the changed content has potential security risks, including whether the changed content is unauthorized.

[0135] Step K6: Display the information of the changed device assets, including the IP address, change time, change content and communication characteristics of the changed device assets, so as to conduct further review and processing.

[0136] Step K7: Compare the detected asset fingerprint of the changed device asset with the corresponding existing asset portrait information, and update the asset portrait information of the changed device asset to reflect the latest status of the device.

[0137] As an optional method, detecting the reference access device assets in the distributed energy system and updating and adjusting the asset profile information of the reference access device assets include the following steps L1-L8:

[0138] Step L1: Create a list of known target assets based on the asset profile information in the distributed energy system, including all authorized and managed network devices, applications and services. Regularly compare with the network scan results to find any new devices or services that are not on the target asset list.

[0139] Step L2: Use network scanning technology to perform a comprehensive scan of the system to identify all active IP addresses and open ports. Use port detection to determine the services and applications running on the port.

[0140] Step L3: Identify abnormal traffic patterns and unknown communication protocols through traffic analysis.

[0141] Step L4: For newly discovered target assets that are not on the target asset list, collect their asset fingerprint information, including operating system type, version, and hardware information.

[0142] Step L5: Associate the newly discovered target asset that is not on the target asset list with known business processes and requirements. If the target asset is not related to any known business, the target asset is unauthorized.

[0143] Step L6: Confirm with the business department whether the newly discovered target asset that is not on the target asset list is authorized and managed. If clear authorization confirmation cannot be obtained, the target asset is defined as a shadow device asset.

[0144] Step L7: Identify the shadow device asset-associated business, asset type and network topology location based on the shadow device asset characteristics, including asset fingerprint information identification, asset characteristic determination, asset classification, associated business determination, and network topology location determination of the shadow device asset.

[0145] Step L8: Build asset portrait information of the shadow device asset based on the asset characteristics, asset type and network topology location of the shadow device asset, and associate the asset portrait information of the shadow device asset with the corresponding asset type.

[0146] The power heterogeneous asset portrait management solution provided in the embodiment of the present invention determines the asset fingerprint information of each target asset, where the target asset is a target access device in a distributed energy system, and determines the asset portrait information of each target asset based on the asset fingerprint information of each target asset, thereby realizing detection and identification of various access devices in the distributed energy system, obtaining the characteristics, communication status and operating system of various access devices, and establishing asset portrait information of various access devices; associating the asset portrait information of each target asset with different business types, determining the asset portrait information related to the different business types, and performing asset ledger management for each target asset based on the different business types and the asset portrait information related to the different business types, thereby realizing hierarchical management of target assets of different types of businesses, and continuously and synchronously updating the target asset information of different types of businesses, so as to facilitate the establishment of network topology relationships under different types of business scenarios, thereby facilitating the management of security risks of distributed energy systems.

[0147] Embodiment 2

[0148] Figure 2 This is a schematic diagram of the structure of a power heterogeneous asset portrait management device provided in the second embodiment of the present invention. This embodiment can be applied to the asset ledger management of each target access device in the distributed energy system. The device can be implemented in the form of hardware and / or software, and can be configured in an electronic device that implements the power heterogeneous asset portrait management method. Figure 2 As shown, the device comprises:

[0149] The first determination module 201 is used to determine the asset fingerprint information of each target asset, where the target asset is a target access device in the distributed energy system;

[0150] The second determination module 202 is used to determine the asset profile information of each target asset according to the asset fingerprint information of each target asset;

[0151] The third determination module 203 is used to associate the asset portrait information of each target asset with different business types, and determine the asset portrait information related to the different business types;

[0152] The asset ledger management module 204 is used to perform asset ledger management on each target asset according to different business types and asset portrait information related to different business types.

[0153] As an option, the first determining module 201 includes:

[0154] The network request sending submodule is used to send different types of network requests to each target asset. The network request is used to determine the asset fingerprint information of each target asset. The asset fingerprint information of the target asset includes the behavior of the target asset's operating system protocol stack, initial serial number, open ports, and running services;

[0155] The asset fingerprint information identification and classification submodule is used to compare the asset fingerprint information of each target asset with the information in a pre-established fingerprint database, and identify and classify the asset fingerprint information of each target asset based on the comparison result of the asset fingerprint information of each target asset with the information in the pre-established fingerprint database.

[0156] Optionally, send different types of network requests to the target asset, including:

[0157] Send a response request message to the host of the target asset. The response request message is used to detect whether the host of the target asset is reachable;

[0158] Send a port detection request to the host of the target asset. The port detection request is used to detect whether the port of the host of the target asset is open;

[0159] Sending a specific data packet to the host of the target asset, where the specific data packet is a specific TCP, UDP or ICMP data packet and is used to determine the type and version of the operating system of the target asset;

[0160] A service identification data packet is sent to an authorized and known open port of the target asset host, where the service identification data packet is used to identify the service and version running on the authorized and known open port of the target asset host.

[0161] As an option, the second determining module 202 includes:

[0162] The asset feature determination submodule is used to determine the asset features of each target asset according to the asset fingerprint information of each target asset. Each target asset includes general assets, general middleware, power-specific devices and distributed energy user-side assets in the distributed energy system. The asset features include IP address, MAC address, open port features, operating system features and asset type.

[0163] The asset portrait information determination submodule is used to determine the asset portrait information of each target asset based on the asset characteristics of each target asset.

[0164] As an option, different business types include microgrid system business type, energy storage system business type, energy storage vehicle business type and low voltage area business type;

[0165] Accordingly, asset ledger management is performed for each target asset based on different business types and asset profile information related to different business types, including:

[0166] According to the asset portrait information related to the business type of the microgrid system, the asset ledger management is carried out for each microgrid asset under the business type scenario of the microgrid system. The microgrid assets include business servers, telecontrol devices, measurement and control devices, protection devices, photovoltaic power generation equipment and energy storage equipment;

[0167] According to the asset portrait information related to the energy storage system business type, the asset ledger management is carried out for each energy storage asset under the energy storage system business type scenario. The energy storage assets include the battery management system, energy management system, power management system and energy storage on-site integrated monitoring device;

[0168] According to the asset portrait information related to the energy storage vehicle business type, the asset ledger management of each energy storage vehicle asset under the energy storage vehicle business type scenario is carried out. The energy storage vehicle assets include battery management system, inverter, energy management system and communication equipment;

[0169] Based on the asset portrait information related to the low-voltage substation business type, asset ledger management is performed on each low-voltage substation asset under the low-voltage substation business type scenario. The low-voltage substation assets include power detection equipment, protocol converters, protection devices and communication equipment.

[0170] As an option, after determining the asset profile information related to different business types, it also includes:

[0171] Based on different business types and asset portrait information related to different business types, build network topology relationships corresponding to business scenarios of different business types.

[0172] As an optional device, the power heterogeneous asset portrait management device also includes:

[0173] The reference access device asset detection module is used to detect the reference access device assets in the distributed energy system. The reference access device assets include unknown device assets, changed device assets and shadow device assets. Unknown device assets are devices newly connected to the distributed energy system and access devices whose business communications are not within the scope of existing business rules. Changed device assets are access devices with device changes in the distributed energy system. Shadow device assets are unauthorized or unmanaged network assets, applications and services.

[0174] The asset portrait information update and adjustment module is used to update and adjust the asset portrait information of the reference access device assets.

[0175] The power heterogeneous asset portrait management scheme provided by the embodiment of the present invention determines the asset fingerprint information of each target asset, the target asset is the target access device in the distributed energy system, and determines the asset portrait information of each target asset according to the asset fingerprint information of each target asset, thereby realizing the detection and identification of various access devices in the distributed energy system, obtaining the characteristics, communication status and operating system of various access devices, and establishing the asset portrait information of various access devices; associating the asset portrait information of each target asset with different business types, determining the asset portrait information related to different business types, and performing asset ledger management on each target asset according to different business types and the asset portrait information related to different business types, realizing hierarchical management of target assets of different types of business, and continuously and synchronously updating the target asset information of different types of business, so as to facilitate the establishment of network topology relationships under different types of business scenarios, thereby facilitating the management and control of the security risks of the distributed energy system. The power heterogeneous asset portrait management device provided by the embodiment of the present invention can execute the power heterogeneous asset portrait management method provided by any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0176] Embodiment 3

[0177] Figure 3 A schematic diagram of the structure of an electronic device for implementing a method for managing the portrait of heterogeneous power assets provided in Example 3 of the present invention. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workbenches, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device may also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices (such as helmets, glasses, watches, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are provided as examples only and are not intended to limit the implementation of the present invention described and / or claimed herein.

[0178] like Figure 3As shown, the electronic device 10 includes at least one processor 11, and a memory connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., wherein the memory stores a computer program that can be executed by at least one processor, and the processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 to the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0179] A number of components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disk, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0180] The processor 11 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as the power heterogeneous asset portrait management method.

[0181] In some embodiments, the power heterogeneous asset portrait management method may be implemented as a computer program, which is tangibly contained in a computer-readable storage medium, such as a storage unit 18. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the power heterogeneous asset portrait management method described above may be performed. Alternatively, in other embodiments, the processor 11 may be configured to execute the power heterogeneous asset portrait management method in any other appropriate manner (e.g., by means of firmware).

[0182] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0183] Computer programs for implementing the methods of the present invention may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that when the computer program is executed by the processor, the functions / operations specified in the flow chart and / or block diagram are implemented. The computer program may be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0184] In the context of the present invention, a computer-readable storage medium may be a tangible medium that may contain or store a computer program for use by or in combination with an instruction execution system, device or equipment. A computer-readable storage medium may include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices or equipment, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium may be a machine-readable signal medium. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0185] To provide interaction with a user, the systems and techniques described herein may be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or trackball) through which the user can provide input to the electronic device. Other types of devices may also be used to provide interaction with the user; for example, the feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form (including acoustic input, voice input, or tactile input).

[0186] The systems and techniques described herein may be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.

[0187] A computing system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The client and server relationship is generated by computer programs running on the corresponding computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system to solve the defects of difficult management and weak business scalability in traditional physical hosts and VPS services.

[0188] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0189] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A method for managing power heterogeneous assets portrait, characterized in that: The method comprises: Determine asset fingerprint information of each target asset, wherein the target asset is a target access device in a distributed energy system; Determine the asset profile information of each target asset based on the asset fingerprint information of each target asset; Associating the asset profile information of each target asset with different business types, and determining the asset profile information related to different business types; Asset ledger management is performed for each target asset based on different business types and asset portrait information related to different business types.

2. The method according to claim 1, characterized in that After determining the asset profile information related to different business types, it also includes: Based on different business types and asset portrait information related to different business types, build network topology relationships corresponding to business scenarios of different business types.

3. The method according to claim 1, characterized in that The method further comprises: Detecting reference access device assets in a distributed energy system, wherein the reference access device assets include unknown device assets, changed device assets, and shadow device assets. The unknown device assets are devices newly connected to the distributed energy system and access devices whose business communications are not within the scope of existing business rules. The changed device assets are access devices with device changes in the distributed energy system. The shadow device assets are unauthorized or unmanaged network assets, applications, and services. Update and adjust the asset profile information of the reference access device assets.

4. The method according to claim 1, characterized in that: Determine the asset fingerprint information of each target asset, including: Sending different types of network requests to each target asset, wherein the network requests are used to determine the asset fingerprint information of each target asset, wherein the asset fingerprint information of the target asset includes the behavior of the target asset's operating system protocol stack, initial serial number, open ports, and running services; The asset fingerprint information of each target asset is compared with the information in the pre-established fingerprint database, and the asset fingerprint information of each target asset is identified and classified according to the comparison result of the asset fingerprint information of each target asset with the information in the pre-established fingerprint database.

5. The method according to claim 4, characterized in that Send different types of network requests to the target asset, including: Sending a response request message to the host of the target asset, wherein the response request message is used to detect whether the host of the target asset is reachable; Sending a port detection request to the host of the target asset, wherein the port detection request is used to detect whether the port of the host of the target asset is open; Sending a specific data packet to the host of the target asset, where the specific data packet is a specific TCP, UDP or ICMP data packet and is used to determine the type and version of the operating system of the target asset; A service identification data packet is sent to the authorized and known open port of the target asset host, where the service identification data packet is used to identify the service and version running on the authorized and known open port of the target asset host.

6. The method according to claim 1, characterized in that According to the asset fingerprint information of each target asset, the asset profile information of each target asset is determined, including: Determine the asset characteristics of each target asset according to the asset fingerprint information of each target asset, wherein each target asset includes general assets, general middleware, power-specific devices and distributed energy user-side assets in a distributed energy system, and the asset characteristics include IP address, MAC address, open port characteristics, operating system characteristics and asset type; The asset profile information of each target asset is determined according to the asset characteristics of each target asset.

7. The method according to claim 1, characterized in that The different business types include microgrid system business type, energy storage system business type, energy storage vehicle business type and low voltage area business type; Accordingly, asset ledger management is performed for each target asset based on different business types and asset profile information related to different business types, including: According to the asset portrait information related to the business type of the microgrid system, the asset ledger management is performed for each microgrid asset under the business type scenario of the microgrid system. The microgrid assets include business servers, telecontrol devices, measurement and control devices, protection devices, photovoltaic power generation equipment and energy storage equipment; According to the asset portrait information related to the energy storage system business type, the asset ledger management is performed for each energy storage asset under the energy storage system business type scenario, and the energy storage assets include the battery management system, energy management system, power management system and energy storage on-site integrated monitoring device; According to the asset portrait information related to the energy storage vehicle business type, the asset ledger management is performed for each energy storage vehicle asset under the energy storage vehicle business type scenario. The energy storage vehicle assets include the battery management system, inverter, energy management system and communication equipment; According to the asset portrait information related to the low-voltage substation business type, asset ledger management is performed on each low-voltage substation asset under the low-voltage substation business type scenario. The low-voltage substation assets include power detection equipment, protocol converters, protection devices and communication equipment.

8. A power heterogeneous asset image management device, characterized in that: The device comprises: A first determination module is used to determine the asset fingerprint information of each target asset, wherein the target asset is a target access device in a distributed energy system; The second determination module is used to determine the asset profile information of each target asset according to the asset fingerprint information of each target asset; The third determination module is used to associate the asset portrait information of each target asset with different business types and determine the asset portrait information related to different business types; The asset ledger management module is used to manage the asset ledger of each target asset based on different business types and asset portrait information related to different business types.

9. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the power heterogeneous asset portrait management method described in any one of claims 1-7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the power heterogeneous asset portrait management method described in any one of claims 1-7 when executed.

Images