Power service hard isolation fusion transmission system and method based on TSN module, power monitoring system and power monitoring center

Abstract

The invention relates to the technical field of electric power systems, in particular to an electric power service hard isolation fusion transmission system and method based on a TSN module, an electric power monitoring system and an electric power monitoring center. The power monitoring system comprises a first network slice and mapping module, a plurality of security areas, and a plurality of service units and first TSN modules arranged in the security areas. The power monitoring center comprises a second network slice and mapping module, a plurality of second TSN modules, and a plurality of storage areas connected with the second TSN modules. According to the invention, a complex and redundant switch deployment mode in a traditional power system is abandoned, and only one TSN module is deployed in each security area, so that hard isolation between power services is realized. Besides, in combination with the application of a network slice and a mapping module, not only is the security isolation of the service ensured, but also the fusion transmission of the service is realized, and the overall structure of the system is greatly simplified.

Description

Technical Field

[0001] The present disclosure relates to the technical field of power systems, and in particular to a power business hard isolation fusion transmission system and method based on a TSN (Time-Sensitive Networking) module, a power monitoring system, and a power monitoring center. Background Art

[0002] Safety area division is an important measure to ensure the safe and stable operation of the power system, which is generally divided into production control area and management information area. Among them, the production control area is further divided into control area (safety area I) and non-control area (safety area II), while the management information area is divided into production management area (safety area III) and management information area (safety area IV).

[0003] Different security areas need to formulate differentiated security protection standards based on their specific security needs. This not only requires strict isolation between different security areas, but also involves a detailed division between different security levels within the same security area. In order to achieve these high-standard isolation requirements, it is necessary to build an efficient and secure business exchange environment in the power system to ensure that the data flow between business modules in all security areas follows established safety specifications.

[0004] The communication volume between business units in the power system is large. In order to implement the access control strategy for large amounts of data communication, it is a simple and effective means to deploy a large number of precisely configured switches between business units in the security zone. However, a series of problems caused by the large number of switches deployed cannot be ignored. For example, as the network topology becomes more complex, the difficulty of network management increases. Each switch needs to be configured and maintained, resulting in increased configuration and maintenance costs. If a switch fails, it may affect other switches and business systems connected to it, greatly increasing the hardware cost of the enterprise. The large number of deployed switches may lead to insufficient flexibility of the network architecture, making it difficult to quickly adapt to the changing needs of the power business.

[0005] Therefore, how to use a small amount of safety isolation equipment to achieve the isolated transmission of power business data in the above-mentioned different safety areas is a problem that needs to be solved urgently in the existing power system. Summary of the invention

[0006] In order to solve the problems in the related art, the embodiments of the present disclosure provide a power service hard isolation fusion transmission system and method based on the TSN module, a power monitoring system and a power monitoring center.

[0007] In a first aspect, the present disclosure provides a power service hard isolation fusion transmission system based on a TSN module, including: a power monitoring system and a power monitoring center;

[0008] The power monitoring system comprises: a first network slice and mapping module, a plurality of security areas, a plurality of service units and a first TSN module arranged in the security area, wherein the plurality of service units in the same security area are connected to the first TSN module; the first network slice and mapping module are connected to the plurality of first TSN modules;

[0009] The power monitoring center includes: a second network slice and mapping module, a plurality of second TSN modules, and a plurality of storage areas connected to the second TSN module; the second network slice and mapping module are connected to the first network slice and mapping module; the plurality of second TSN modules are connected to the second network slice and mapping module;

[0010] The first TSN module is used to receive the service data stream of the connected service unit, parse the service data stream to obtain the corresponding transmission time slot, and send the corresponding service data stream in the transmission time slot, wherein different service units have different transmission time slots;

[0011] The first network slicing and mapping module is used to receive corresponding service data streams from the multiple first TSN modules in different transmission time slots, obtain a transmission time slot-subchannel mapping table, and send the corresponding service data stream based on the subchannel corresponding to the transmission time slot;

[0012] The second network slicing and mapping module is used to receive different service data streams from the first network slicing and mapping module based on the corresponding sub-channel, obtain the transmission time slot-sub-channel mapping table, and send the corresponding service data stream in the transmission time slot corresponding to the sub-channel;

[0013] The second TSN module is used to receive different service data streams in the allocated multiple transmission time slots, and send the received service data streams to the corresponding storage area for storage, wherein the multiple storage areas connected to the second TSN module have different transmission time slots.

[0014] According to an embodiment of the present disclosure, the first network slicing and mapping module includes a first mapping layer and a first physical layer device group, the first physical layer device group includes a plurality of first physical layer devices, and the first physical layer devices are divided into a plurality of sub-channels;

[0015] The first network slicing and mapping module is used to receive corresponding service data streams from the multiple first TSN modules in different transmission time slots, and obtain the transmission time slot-subchannel mapping table. The first mapping layer maps the service data stream corresponding to the transmission time slot to the corresponding sub-channel in the first physical layer device group according to the transmission time slot-sub-channel mapping table, and the service data stream is sent by the corresponding sub-channel in the first physical layer device group.

[0016] According to an embodiment of the present disclosure, the second network slicing and mapping module includes: a second mapping layer and a second physical layer device group, the second physical layer device group includes a plurality of second physical layer devices, and the second physical layer devices are divided into a plurality of sub-channels;

[0017] The second network slicing and mapping module is used to receive different service data streams from the first network slicing and mapping module based on the corresponding sub-channel, and obtain the transmission time slot-sub-channel mapping table. The second mapping layer maps the service data stream corresponding to the sub-channel to the corresponding transmission time slot according to the transmission time slot-sub-channel mapping table, so as to send it in the corresponding transmission time slot.

[0018] According to an embodiment of the present disclosure, the transmission time slot-subchannel mapping table includes: a mapping relationship between transmission time slots and subchannels included in a physical layer device group;

[0019] The mapping relationship is any one or more of the following:

[0020] One-to-one mapping, one-to-many mapping, many-to-one mapping.

[0021] According to an embodiment of the present disclosure, parsing the service data stream to obtain a corresponding transmission time slot includes allocating a corresponding transmission time slot to the service data stream according to any one or more of the following identification information:

[0022] The source MAC address, destination MAC address, source IP address, destination IP address, source port number, and destination port number of the service data flow.

[0023] According to an embodiment of the present disclosure, the security area includes any one of the following:

[0024] Control area, non-control area, production management area, and management information area.

[0025] According to an embodiment of the present disclosure, the business unit includes any one of the following:

[0026] Phase measurement unit, dynamic phase measurement unit, switch unit, camera unit, sensor unit.

[0027] According to an embodiment of the present disclosure, the first TSN module and the second TSN module are implemented based on any one of the following methods:

[0028] FPGA platform, chip, software platform, hardware platform.

[0029] According to an embodiment of the present disclosure, for a plurality of service units connected to the first TSN module:

[0030] The business units are provided with the same or different security levels;

[0031] Business units of different security levels are isolated from each other.

[0032] According to an embodiment of the present disclosure, the service isolation includes any one of the following:

[0033] Physical isolation, logical isolation, and access control policies.

[0034] In a second aspect, an embodiment of the present disclosure provides a power monitoring system, including: a first network slice and a mapping module, a plurality of security areas, a plurality of service units and a first TSN module arranged in the security area, wherein the plurality of service units and the first TSN module are connected in the same security area; the first network slice and the mapping module are connected to the plurality of first TSN modules;

[0035] The first TSN module is used to receive the service data stream of the connected service unit, parse the service data stream to obtain the corresponding transmission time slot, and send the corresponding service data stream in the transmission time slot, wherein different service units have different transmission time slots;

[0036] The first network slicing and mapping module is used to receive corresponding service data streams from the multiple first TSN modules in different transmission time slots, obtain a transmission time slot-subchannel mapping table, and thus send corresponding service data streams based on the sub-channel corresponding to the transmission time slot.

[0037] According to an embodiment of the present disclosure, the first network slicing and mapping module includes a first mapping layer and a first physical layer device group, the first physical layer device group includes a plurality of first physical layer devices, and the first physical layer devices are divided into a plurality of sub-channels;

[0038] The first network slicing and mapping module is used to receive corresponding service data streams from the multiple first TSN modules in different transmission time slots, and obtain the transmission time slot-subchannel mapping table. The first mapping layer maps the service data stream corresponding to the transmission time slot to the corresponding sub-channel in the first physical layer device group according to the transmission time slot-sub-channel mapping table, and the service data stream is sent by the corresponding sub-channel in the first physical layer device group.

[0039] According to an embodiment of the present disclosure, the transmission time slot-subchannel mapping table is pre-configured in the first network slice and mapping module.

[0040] In a third aspect, an embodiment of the present disclosure provides a power monitoring center, including:

[0041] A second network slice and mapping module, a plurality of second TSN modules, and a plurality of storage areas connected to the second TSN module; the second network slice and mapping module is connected to the power monitoring system; the plurality of second TSN modules are connected to the second network slice and mapping module;

[0042] The second network slicing and mapping module is used to receive different service data streams from the power monitoring system based on the corresponding sub-channels, obtain a transmission time slot-sub-channel mapping table, and send the corresponding service data stream in the transmission time slot corresponding to the sub-channel;

[0043] The second TSN module is used to receive different service data streams in the allocated multiple transmission time slots, and send the received service data streams to the corresponding storage area for storage, wherein the multiple storage areas connected to the second TSN module have different transmission time slots.

[0044] According to an embodiment of the present disclosure, the second network slicing and mapping module includes: a second mapping layer and a second physical layer device group, the second physical layer device group includes a plurality of second physical layer devices, and the second physical layer devices are divided into a plurality of sub-channels;

[0045] The second network slicing and mapping module is used to receive different business data streams from the power monitoring system based on the corresponding sub-channel, and obtain the transmission time slot-sub-channel mapping table. The second mapping layer maps the business data stream corresponding to the sub-channel to the corresponding transmission time slot according to the transmission time slot-sub-channel mapping table, so as to send it in the corresponding transmission time slot.

[0046] According to an embodiment of the present disclosure, the transmission time slot-subchannel mapping table is pre-configured in the second network slice and mapping module.

[0047] In a fourth aspect, an embodiment of the present disclosure provides a method for hard-isolated fusion transmission of electric power services based on a TSN module, the method being applied to an electric power monitoring system, the electric power monitoring system comprising: a first network slice and a mapping module, multiple security areas, multiple business units and a first TSN module arranged in the security area, multiple business units in the same security area being connected to the first TSN module; the first network slice and the mapping module are connected to multiple first TSN modules, the method comprising:

[0048] The first TSN module receives a service data stream of a connected service unit, parses the service data stream to obtain a corresponding transmission time slot, and sends the corresponding service data stream in the transmission time slot, wherein different service units have different transmission time slots;

[0049] The first network slicing and mapping module receives corresponding service data streams from the multiple first TSN modules in different transmission time slots, obtains a transmission time slot-subchannel mapping table, and sends corresponding service data streams based on the sub-channel corresponding to the transmission time slot.

[0050] In a fifth aspect, a method for hard-isolated fusion transmission of electric power services based on TSN modules in an embodiment of the present disclosure is applied to an electric power monitoring center, the electric power monitoring center comprising: a second network slice and mapping module, multiple second TSN modules, and multiple storage areas connected to the second TSN module; the second network slice and mapping module are connected to the electric power monitoring system; the multiple second TSN modules are connected to the second network slice and mapping module, and the method comprises:

[0051] The second network slicing and mapping module receives different service data streams from the power monitoring system based on the corresponding sub-channels, obtains a transmission time slot-sub-channel mapping table, and sends the corresponding service data stream in the transmission time slot corresponding to the sub-channel;

[0052] The second TSN module receives different service data streams in the allocated multiple transmission time slots, and sends the received service data streams to the corresponding storage area for storage, wherein the multiple storage areas connected to the second TSN module have different transmission time slots.

[0053] In a sixth aspect, a computer-readable storage medium is provided in an embodiment of the present disclosure, on which computer instructions are stored. When the computer instructions are executed by a processor, a method as described in any one of the fourth aspect or the fifth aspect is implemented.

[0054] In a seventh aspect, a computer program product is provided in an embodiment of the present disclosure, comprising computer instructions, which, when executed by a processor, implement a method as described in any one of the fourth aspect or the fifth aspect.

[0055] According to the technical solution provided by the embodiment of the present disclosure, by setting up the first TSN module correspondingly in multiple security areas of the power monitoring system and combining the first network slice and the mapping module, not only the security isolation between multiple business units in the same security area is achieved, but also the hard isolation between business units in different security areas is achieved, and the isolated and fused sending of different business units is also achieved. Accordingly, by setting up the second network slice and the mapping module in the power monitoring center and combining multiple second TSN modules, the isolated and fused reception and secure isolated storage of different business units are achieved at the same time.

[0056] The present disclosure abandons the need to deploy a large number of precisely configured switches between business units in the security zone in traditional power systems in order to achieve an efficient and secure business exchange environment. Instead, by deploying only a small number of TSN modules in the power monitoring system and deploying corresponding TSN modules in the power monitoring center, hard-isolated transmission between a large number of business units can be achieved, while ensuring the real-time and reliability of business transmission. In addition, combined with the setting of network slicing and mapping modules, the decoupling of the MAC layer and the PHY layer is achieved, so that the application scope of TSN technology is expanded from the local area network level to the wide area network level. This expansion not only improves the flexibility of the power system, but also realizes the hard-isolated fusion transmission of business data with higher efficiency, providing a strong guarantee for the safe and efficient operation of the power system.

[0057] The present disclosure realizes hard-isolated fusion transmission of business data streams in a low-cost manner, simplifies the system architecture, and greatly improves the flexibility of the network architecture in the power system, so that the power system can quickly respond to and adapt to various changing needs of the power business.

[0058] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0059] Other features, objectives and advantages of the present disclosure will become more apparent through the following detailed description of non-limiting embodiments in conjunction with the accompanying drawings. In the accompanying drawings:

[0060] Figure 1 A structural block diagram of a power service hard isolation fusion transmission system based on a TSN module according to an embodiment of the present disclosure is shown;

[0061] Figure 2 A schematic diagram showing the connection between the first network slice and mapping module and the first TSN module in an embodiment of the present disclosure is shown;

[0062] Figure 3 A schematic diagram showing the connection between the second network slice and the mapping module and the second TSN module in an embodiment of the present disclosure is shown;

[0063] Figure 4 A structural block diagram of a power monitoring system according to an embodiment of the present disclosure is shown;

[0064] Figure 5 A structural block diagram of a power monitoring center according to an embodiment of the present disclosure is shown;

[0065] Figure 6 A logic block diagram of a power service hard isolation fusion transmission method based on a TSN module according to an embodiment of the present disclosure is shown;

[0066] Figure 7 A logical block diagram of another TSN module-based power service hard isolation fusion transmission method according to an embodiment of the present disclosure is shown. DETAILED DESCRIPTION

[0067] Hereinafter, exemplary embodiments of the present disclosure will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily implement them. In addition, for the sake of clarity, parts not related to the description of the exemplary embodiments are omitted in the accompanying drawings.

[0068] In the present disclosure, it should be understood that terms such as "include" or "have" are intended to indicate the presence of features, numbers, steps, behaviors, components, parts, or a combination thereof disclosed in the present specification, and are not intended to exclude the possibility that one or more other features, numbers, steps, behaviors, components, parts, or a combination thereof exist or are added.

[0069] It should also be noted that, in the absence of conflict, the embodiments and features in the embodiments of the present disclosure may be combined with each other. The present disclosure will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0070] In the present disclosure, if it involves operations of obtaining user information or user data or displaying user information or user data to others, the operations are all authorized and confirmed by the user, or actively selected by the user.

[0071] As mentioned above, the division of safety areas is an important measure to ensure the safe and stable operation of the power system, and is generally divided into production control areas and management information areas. The production control area is further divided into safety areas I and II, and the management information area is further divided into safety areas III and IV. The details are as follows:

[0072] Safety Zone I is the production control zone, which is the most important and safest area, including key businesses such as distribution automation system and dispatching automation system. These systems are directly involved in the real-time control of the power system and play a vital role in the stable operation of the power system.

[0073] Safety Zone II is a non-controlled production area, including electric energy metering systems, wholesale power trading systems, etc. Although these systems are not directly involved in control, their functions are directly related to power production and also require strict safety protection.

[0074] Safety Zone III is the production management zone, which includes the information management systems required for power production. These systems are mainly used for power production management and decision support.

[0075] Security Zone IV is the management information zone, including customer service systems, office automation systems, etc. These systems are mainly for internal management and customer service of power companies.

[0076] By dividing the power system into security areas, we can achieve security isolation and protection for different business units, reduce the risk of power system attacks, and improve the overall security protection level of the power system. At the same time, we can also determine the corresponding security level and protection level according to the security protection requirements of different security areas to ensure the safe and stable operation of the power system.

[0077] In order to meet the security protection standards between different security areas, it is necessary to build an efficient and secure business exchange environment in the power system. The inventors noticed that due to the large amount of communication between business units in the power system, although it is a simple and effective means to deploy a large number of precisely configured switches between the business units in the security area, a large number of deployed switches also bring a series of problems: the network topology becomes more complex, which increases the difficulty of network management, each switch needs to be configured and maintained, resulting in increased configuration and maintenance costs, a switch failure may affect other switches and business systems connected to it, and a large number of deployed switches may lead to insufficient flexibility of the network architecture, making it difficult to quickly adapt to the changing needs of the power business, etc.

[0078] To solve the above problems, the embodiment of the present disclosure provides a power service hard isolation fusion transmission system based on TSN modules, including: a power monitoring system and a power monitoring center; the power monitoring system includes: a first network slice and mapping module, multiple security areas, multiple business units set in the security area and a first TSN module, and multiple business units located in the same security area are connected to the first TSN module; the first network slice and mapping module are connected to the multiple first TSN modules; the power monitoring center includes: a second network slice and mapping module, multiple second TSN modules, and multiple storage areas connected to the second TSN module; the second network slice and mapping module are connected to the first network slice and mapping module; the multiple second TSN modules are connected to the second network slice and mapping module; the first TSN module is used to receive the business data flow of the connected business units and parse the business data flow Obtain the corresponding transmission time slot, so as to send the corresponding business data stream in the transmission time slot, wherein different business units have different transmission time slots; the first network slicing and mapping module is used to receive the corresponding business data stream from the multiple first TSN modules in different transmission time slots, and obtain the transmission time slot-subchannel mapping table, so as to send the corresponding business data stream based on the sub-channel corresponding to the transmission time slot; the second network slicing and mapping module is used to receive different business data streams from the first network slicing and mapping module based on the corresponding sub-channel, and obtain the transmission time slot-sub-channel mapping table, so as to send the corresponding business data stream in the transmission time slot corresponding to the sub-channel; the second TSN module is used to receive different business data streams in the allocated multiple transmission time slots, and send the received business data streams to the corresponding storage area for storage, wherein the multiple storage areas connected to the second TSN module have different transmission time slots.

[0079] The present disclosure abandons the need to deploy a large number of precisely configured switches between business units in different security areas in order to achieve an efficient and secure business exchange environment in traditional power systems. Only a small number of TSN modules are deployed in the power monitoring system, and corresponding TSN modules are deployed in the power monitoring center, so that hard isolation transmission between a large number of business units can be achieved, while ensuring the real-time and reliability of business transmission. In addition, combined with the setting of network slicing and mapping modules, the decoupling of the MAC layer and the PHY layer is achieved, so that the application scope of TSN technology is expanded from the local area network level to the wide area network level. The present disclosure can not only achieve effective business isolation between business units in a low-cost manner, but also ensure the hard isolation and fusion transmission of business data flows, simplify the system structure, and improve the flexibility of the network architecture in the power system, so that the power system can quickly adapt to the changing needs of power business.

[0080] Figure 1 A structural block diagram of a power service hard isolation fusion transmission system based on a TSN module according to an embodiment of the present disclosure is shown.

[0081] like Figure 1 As shown, the power business hard isolation fusion transmission system includes: a power monitoring system and a power monitoring center.

[0082] According to an embodiment of the present disclosure, the power monitoring system includes: a first network slice and mapping module, multiple security areas, multiple business units and a first TSN module set in the security area, and multiple business units and the first TSN module located in the same security area are connected; the first network slice and mapping module are connected to multiple first TSN modules.

[0083] According to an embodiment of the present disclosure, the first TSN module is used to receive the business data stream of the connected business unit, parse the business data stream to obtain the corresponding transmission time slot, and then send the corresponding business data stream in the transmission time slot, wherein different business units have different transmission time slots.

[0084] According to an embodiment of the present disclosure, a corresponding transmission time slot can be allocated to the service data flow based on any one or more of the following information: the source MAC address, destination MAC address, source IP address, destination IP address, source port number, destination port number of the service data flow, or user-defined data, such as a service unit identifier, etc.

[0085] In the present disclosure, the first TSN module is implemented based on TSN network technology. TSN network technology uses IEEE 1588 / PTP (Precision Time Protocol) to achieve precise clock synchronization of the entire network, uses IEEE802.1Qbv to achieve data scheduling, and uses IEEE 802.1Qav to achieve data shaping. These protocols together constitute the core functions of TSN network technology.

[0086] The first TSN module implemented based on the TSN network technology can automatically identify the corresponding identification information according to the business data stream sent by the downstream business unit, thereby allocating different transmission time slots to different business units according to the corresponding identification information.

[0087] The introduction of the first TSN module, that is, the introduction of the deterministic traffic scheduling mechanism in the TSN network technology, not only realizes the time division multiplexing function, but also ensures that the transmission of business data in the network is highly deterministic and real-time, and realizes low-latency and high-reliability business transmission services, intelligent traffic scheduling, and higher security; compared with a single time division multiplexing technology, although it can also realize time slot allocation, it usually cannot provide such strict deterministic transmission guarantees, only allocates according to fixed order and rules, lacks broad compatibility with existing network infrastructure, and cannot effectively prevent network attacks and data leakage. In addition, in the event of equipment failure or network congestion, the reliability and stability of the time division multiplexing system may also be affected.

[0088] According to an embodiment of the present disclosure, the first TSN module and the second TSN module are implemented based on any of the following methods: FPGA platform, chip, software platform, hardware platform. For example, the TSN model can be run on a computing platform, or the TSN function can be implemented on a PGA platform, or a dedicated chip for the TSN processing algorithm can be designed, etc.

[0089] According to an embodiment of the present disclosure, the first network slicing and mapping module is used to receive corresponding business data streams from the multiple first TSN modules in different transmission time slots, obtain a transmission time slot-subchannel mapping table, and thus send corresponding business data streams based on the sub-channel corresponding to the transmission time slot.

[0090] According to an embodiment of the present disclosure, the first network slice and mapping module includes a first mapping layer and a first physical layer device group, the first physical layer device group includes a plurality of first physical layer devices, and the first physical layer device is divided into a plurality of sub-channels; Figure 2 shown.

[0091] Among them, the first network slicing and mapping module is used to receive corresponding business data streams from the multiple first TSN modules in different transmission time slots, and obtain the transmission time slot-subchannel mapping table. The first mapping layer maps the business data stream corresponding to the transmission time slot to the corresponding sub-channel in the first physical layer device group according to the transmission time slot-sub-channel mapping table, and the business data stream is sent by the corresponding sub-channel in the first physical layer device group.

[0092] According to an embodiment of the present disclosure, the transmission time slot-subchannel mapping table includes: a mapping relationship between a transmission time slot and a subchannel included in a physical layer device group; the mapping relationship is any one or more of the following: one-to-one mapping, one-to-many mapping, and many-to-one mapping.

[0093] Specifically, in the first network slice and mapping module, a transmission time slot-subchannel mapping table can be pre-configured. Among them, the transmission time slot-subchannel mapping table can be flexibly configured according to business needs. For example, for some business units set in the above-mentioned safety zone I, since safety zone I is the highest and most important area in the power system, the transmission time slot and subchannel can be configured as a one-to-one mapping relationship for the business data flow of the part of the business unit; and for some business units that do not have high real-time requirements, the transmission time slot and subchannel can be configured as a one-to-many mapping relationship.

[0094] Generally, in traditional Ethernet technology, the MAC layer and the PHY layer are usually strictly matched. However, with the continuous development of network technology, this strict matching relationship limits the flexibility of data transmission. The present disclosure breaks this strict matching relationship, allowing business data to be transmitted in a more flexible manner, thereby meeting the differentiated needs of different business units in a power system.

[0095] According to an embodiment of the present disclosure, the security area includes any one of the following: a control area, a non-control area, a production management area, and a management information area.

[0096] According to an embodiment of the present disclosure, the business unit includes any one of the following: a phasor measurement unit, a dynamic phasor measurement unit, a switch unit, a camera unit, and a sensor unit.

[0097] In a specific embodiment, the power monitoring system includes two security areas, namely the production control area and the management information area. In the production control area, a plurality of secondary intelligent electronic devices (IED) units are correspondingly arranged. The secondary IED units refer to auxiliary equipment units that monitor, measure, control, protect and adjust the primary equipment in the power system. These auxiliary equipment units are not directly connected to the electric energy, but are connected to the primary equipment through various signals and communication methods, so as to realize the intelligent management and control of the power system. In the management information area, cameras, sensors and other equipment are correspondingly arranged for monitoring and managing the operating environment, equipment status and safety status of the power system.

[0098] The secondary IED units in the production control area may include but are not limited to the following: phasor measurement unit, dynamic phasor measurement unit, switch unit, relay protection unit, automatic control unit, measuring instrument unit, fault recording unit, etc.

[0099] According to an embodiment of the present disclosure, the power monitoring center includes: a second network slice and mapping module, multiple second TSN modules, and multiple storage areas connected to the second TSN module; the second network slice and mapping module are connected to the first network slice and mapping module; the multiple second TSN modules are connected to the second network slice and mapping module.

[0100] According to an embodiment of the present disclosure, the second network slicing and mapping module is used to receive different service data streams from the first network slicing and mapping module based on the corresponding sub-channel, obtain the transmission time slot-sub-channel mapping table, and thus send the corresponding service data stream in the transmission time slot corresponding to the sub-channel.

[0101] According to an embodiment of the present disclosure, the second network slicing and mapping module includes: a second mapping layer and a second physical layer device group, the second physical layer device group includes a plurality of second physical layer devices, and the second physical layer device is divided into a plurality of sub-channels, such as Figure 3 shown.

[0102] Among them, the second network slicing and mapping module is used to receive different service data streams from the first network slicing and mapping module based on the corresponding sub-channel, and obtain the transmission time slot-sub-channel mapping table. The second mapping layer maps the service data stream corresponding to the sub-channel to the corresponding transmission time slot according to the transmission time slot-sub-channel mapping table, so as to send it in the corresponding transmission time slot.

[0103] The second network slice and mapping module are connected to the first network slice and mapping module via a transmission network (e.g., Ethernet).

[0104] According to an embodiment of the present disclosure, the second TSN module is used to receive different business data streams in the allocated multiple transmission time slots, and send the received business data streams to the corresponding storage area for storage, wherein the multiple storage areas connected to the second TSN module have different transmission time slots.

[0105] In the present disclosure, the multiple storage areas may belong to one or more storage media; when the multiple storage areas belong to one storage medium, they may be located in different partitions of the storage medium respectively.

[0106] Different second TSN modules are assigned different transmission time slots, and transmission time slots can be assigned to them by setting the second TSN modules accordingly. For example, the second TSN module can be set correspondingly to the first TSN module. Specifically, assuming that the power monitoring system includes two first TSN modules and the power monitoring center includes two second TSN modules, and assuming that the transmission time slots used by the business units transmitted by one of the first TSN modules are time slots 1, 2, 3 and 4, and the transmission time slots used by the business units transmitted by the other first TSN module are time slots 5, 6, 7 and 8, then time slots 1, 2, 3 and 4 can be assigned to one of the second TSN modules, and time slots 5, 6, 7 and 8 can be assigned to the other second TSN module, thereby realizing the corresponding setting of the second TSN module and the first TSN module.

[0107] Furthermore, different storage areas also have different transmission time slots. Since the transmission time slots of the business data streams transmitted by each business unit are different, when the receiver (power monitoring center) saves the business data, the transmission time slots of each storage area are also different, thereby achieving separate storage of the business data of each business unit.

[0108] The present disclosure realizes hard isolation of business of different business units and reduces the mutual influence between business units. For example, some business data with relatively high real-time requirements will not be affected by business data with lower real-time requirements, thereby improving the overall stability and reliability of the power system.

[0109] And it is possible to achieve hard-isolated transmission between a large number of business units without deploying a large number of precisely configured switches between the business units, while ensuring the real-time and reliability of business transmission. In addition, the decoupling of the MAC layer and the PHY layer is also achieved, which expands the application scope of TSN technology from the LAN level to the WAN level, improves the flexibility of the power system, and achieves hard-isolated fusion transmission of business data with higher efficiency, so that the power system can quickly respond to and adapt to various changing needs of the power business.

[0110] According to an embodiment of the present disclosure, for multiple business units connected to the first TSN module: the business units are provided with the same or different security levels; business isolation is performed between business units of different security levels. The business isolation includes any one of the following: physical isolation, logical isolation, and access control policy.

[0111] This can effectively prevent sensitive data from leaking from a business unit with a higher security level to a business unit with a lower security level, reduce the chances of external attacks exploiting system vulnerabilities to move laterally; reduce the mutual impact between business units so that each business unit can operate independently and efficiently; and reasonably allocate resources according to the needs of different business units.

[0112] Figure 4 FIG. 2 shows a structural block diagram of a power monitoring system according to an embodiment of the present disclosure. Figure 4 As shown, the system comprises:

[0113] A first network slice and mapping module, a plurality of security areas, a plurality of service units and a first TSN module arranged in the security area, and a plurality of service units and the first TSN module located in the same security area are connected; the first network slice and mapping module are connected to the plurality of first TSN modules;

[0114] The first TSN module is used to receive the service data stream of the connected service unit, parse the service data stream to obtain the corresponding transmission time slot, and send the corresponding service data stream in the transmission time slot, wherein different service units have different transmission time slots;

[0115] The first network slicing and mapping module is used to receive corresponding service data streams from the multiple first TSN modules in different transmission time slots, obtain a transmission time slot-subchannel mapping table, and thus send corresponding service data streams based on the sub-channel corresponding to the transmission time slot.

[0116] According to an embodiment of the present disclosure, the first network slicing and mapping module includes a first mapping layer and a first physical layer device group, the first physical layer device group includes a plurality of first physical layer devices, and the first physical layer devices are divided into a plurality of sub-channels;

[0117] The first network slicing and mapping module is used to receive corresponding service data streams from the multiple first TSN modules in different transmission time slots, and obtain the transmission time slot-subchannel mapping table. The first mapping layer maps the service data stream corresponding to the transmission time slot to the corresponding sub-channel in the first physical layer device group according to the transmission time slot-sub-channel mapping table, and the service data stream is sent by the corresponding sub-channel in the first physical layer device group.

[0118] According to an embodiment of the present disclosure, the transmission time slot-subchannel mapping table is pre-configured in the first network slice and mapping module.

[0119] The present invention can realize hard-isolated transmission of a large number of business units in the power monitoring system only through the first TSN module, which ensures the certainty and real-time nature of business transmission while realizing business security isolation, and maps and matches multiple transmission time slots with multiple sub-channels through the first network slice and mapping module, thereby realizing the decoupling of the MAC layer and the PHY layer, which not only greatly improves the flexibility of business transmission, but also can realize hard-isolated fusion transmission of business data.

[0120] Figure 5 FIG. 2 shows a structural block diagram of a power monitoring center according to an embodiment of the present disclosure. Figure 5 As shown, including:

[0121] A second network slice and mapping module, a plurality of second TSN modules, and a plurality of storage areas connected to the second TSN module; the second network slice and mapping module is connected to the power monitoring system; the plurality of second TSN modules are connected to the second network slice and mapping module;

[0122] The second network slicing and mapping module is used to receive different service data streams from the power monitoring system based on the corresponding sub-channels, obtain a transmission time slot-sub-channel mapping table, and send the corresponding service data stream in the transmission time slot corresponding to the sub-channel;

[0123] The second TSN module is used to receive different service data streams in the allocated multiple transmission time slots, and send the received service data streams to the corresponding storage area for storage, wherein the multiple storage areas connected to the second TSN module have different transmission time slots.

[0124] According to an embodiment of the present disclosure, the second network slicing and mapping module includes: a second mapping layer and a second physical layer device group, the second physical layer device group includes a plurality of second physical layer devices, and the second physical layer devices are divided into a plurality of sub-channels;

[0125] The second network slicing and mapping module is used to receive different business data streams from the power monitoring system based on the corresponding sub-channel, and obtain the transmission time slot-sub-channel mapping table. The second mapping layer maps the business data stream corresponding to the sub-channel to the corresponding transmission time slot according to the transmission time slot-sub-channel mapping table, so as to send it in the corresponding transmission time slot.

[0126] According to an embodiment of the present disclosure, the transmission time slot-subchannel mapping table is pre-configured in the second network slice and mapping module.

[0127] The present invention can realize hard-isolated transmission of business data flows belonging to a large number of business units only through the second TSN module, and ensure the real-time and deterministic transmission of business data. The decoupling of the MAC layer and the PHY layer is realized through the second network slicing and mapping module, which has high flexibility and security, and realizes hard-isolated fusion transmission of business data.

[0128] Figure 6 A logic block diagram of a method for hard-isolated fusion transmission of electric power services based on TSN modules according to an embodiment of the present disclosure is shown. The method is applied to an electric power monitoring system, which includes: a first network slice and a mapping module, multiple security areas, multiple business units and a first TSN module set in the security area, and multiple business units in the same security area are connected to the first TSN module; the first network slice and mapping module are connected to multiple first TSN modules. Figure 6 As shown, the method includes steps S601 to S602:

[0129] In the step S601, the first TSN module receives the service data stream of the connected service unit, parses the service data stream to obtain the corresponding transmission time slot, and sends the corresponding service data stream in the transmission time slot, wherein different service units have different transmission time slots.

[0130] In the step S602, the first network slice and mapping module receives corresponding service data streams from the multiple first TSN modules in different transmission time slots, obtains a transmission time slot-subchannel mapping table, and sends corresponding service data streams based on the sub-channel corresponding to the transmission time slot.

[0131] Figure 7 A logic block diagram of another method for hard-isolated fusion transmission of electric power services based on TSN modules according to an embodiment of the present disclosure is shown. The method is applied to an electric power monitoring center, which includes: a second network slice and mapping module, multiple second TSN modules, and multiple storage areas connected to the second TSN modules; the second network slice and mapping module are connected to the electric power monitoring system; the multiple second TSN modules are connected to the second network slice and mapping module. Figure 7 Said method comprises steps S701 to S702.

[0132] In step S701, the second network slicing and mapping module receives different business data streams from the power monitoring system based on the corresponding sub-channel, obtains a transmission time slot-sub-channel mapping table, and sends the corresponding business data stream in the transmission time slot corresponding to the sub-channel.

[0133] In the step S702, the second TSN module receives different service data streams in the allocated multiple transmission time slots, and sends the received service data streams to the corresponding storage area for storage, wherein the multiple storage areas connected to the second TSN module have different transmission time slots.

[0134] In particular, according to an embodiment of the present disclosure, the method described above can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program tangibly contained on a machine-readable medium, and the computer program includes a program code for executing the above method. In such an embodiment, the computer program can be downloaded and installed from a network through a communication part, and / or installed from a removable medium.

[0135] The units or modules involved in the embodiments described in the present disclosure may be implemented by software or programmable hardware. The units or modules described may also be set in a processor, and the names of these units or modules do not constitute limitations on the units or modules themselves in some cases.

[0136] As another aspect, the present disclosure further provides a computer-readable storage medium, which may be a computer-readable storage medium included in the electronic device or computer system in the above embodiment; or a computer-readable storage medium that exists independently and is not assembled into a device. The computer-readable storage medium stores one or more programs, and the programs are used by one or more processors to execute the method described in the present disclosure.

[0137] The above description is only a preferred embodiment of the present disclosure and an explanation of the technical principles used. Those skilled in the art should understand that the scope of the invention involved in the present disclosure is not limited to the technical solution formed by a specific combination of the above technical features, but should also cover other technical solutions formed by any combination of the above technical features or their equivalent features without departing from the inventive concept. For example, the above features are replaced with the technical features with similar functions disclosed in the present disclosure (but not limited to) by each other.

Claims

1. A power business hard isolation fusion transmission system based on TSN module, characterized in that: include: Power monitoring system and power monitoring center; The power monitoring system comprises: a first network slice and mapping module, a plurality of security areas, a plurality of service units and a first TSN module arranged in the security area, wherein the plurality of service units in the same security area are connected to the first TSN module; the first network slice and mapping module are connected to the plurality of first TSN modules; The power monitoring center includes: a second network slice and mapping module, a plurality of second TSN modules, and a plurality of storage areas connected to the second TSN module; the second network slice and mapping module are connected to the first network slice and mapping module; the plurality of second TSN modules are connected to the second network slice and mapping module; The first TSN module is used to receive the service data stream of the connected service unit, parse the service data stream to obtain the corresponding transmission time slot, and send the corresponding service data stream in the transmission time slot, wherein different service units have different transmission time slots; The first network slicing and mapping module is used to receive corresponding service data streams from the multiple first TSN modules in different transmission time slots, obtain a transmission time slot-subchannel mapping table, and send the corresponding service data stream based on the subchannel corresponding to the transmission time slot; The second network slicing and mapping module is used to receive different service data streams from the first network slicing and mapping module based on the corresponding sub-channel, obtain the transmission time slot-sub-channel mapping table, and send the corresponding service data stream in the transmission time slot corresponding to the sub-channel; The second TSN module is used to receive different service data streams in the allocated multiple transmission time slots, and send the received service data streams to the corresponding storage area for storage, wherein the multiple storage areas connected to the second TSN module have different transmission time slots.

2. The system according to claim 1, characterized in that The first network slicing and mapping module comprises a first mapping layer and a first physical layer device group, the first physical layer device group comprises a plurality of first physical layer devices, and the first physical layer devices are divided into a plurality of sub-channels; The first network slicing and mapping module is used to receive corresponding service data streams from the multiple first TSN modules in different transmission time slots, and obtain the transmission time slot-subchannel mapping table. The first mapping layer maps the service data stream corresponding to the transmission time slot to the corresponding sub-channel in the first physical layer device group according to the transmission time slot-sub-channel mapping table, and the service data stream is sent by the corresponding sub-channel in the first physical layer device group.

3. The system according to claim 1, characterized in that The second network slicing and mapping module comprises: a second mapping layer and a second physical layer device group, the second physical layer device group comprises a plurality of second physical layer devices, and the second physical layer devices are divided into a plurality of sub-channels; The second network slicing and mapping module is used to receive different service data streams from the first network slicing and mapping module based on the corresponding sub-channel, and obtain the transmission time slot-sub-channel mapping table. The second mapping layer maps the service data stream corresponding to the sub-channel to the corresponding transmission time slot according to the transmission time slot-sub-channel mapping table, so as to send it in the corresponding transmission time slot.

4. The system according to claim 2 or 3, characterized in that: The transmission time slot-subchannel mapping table includes: a mapping relationship between transmission time slots and subchannels included in the physical layer device group; The mapping relationship is any one or more of the following: One-to-one mapping, one-to-many mapping, many-to-one mapping.

5. The system according to claim 1, characterized in that The parsing the service data stream to obtain a corresponding transmission time slot includes allocating a corresponding transmission time slot to the service data stream according to any one or more of the following identification information: The source MAC address, destination MAC address, source IP address, destination IP address, source port number, and destination port number of the service data flow.

6. The system according to claim 1, characterized in that The security area includes any of the following: Control area, non-control area, production management area, and management information area.

7. The system according to claim 1, characterized in that The business unit includes any of the following: Phase measurement unit, dynamic phase measurement unit, switch unit, camera unit, sensor unit.

8. The system according to claim 1, characterized in that The first TSN module and the second TSN module are implemented based on any of the following methods: FPGA platform, chip, software platform, hardware platform.

9. The system according to claim 1, characterized in that For multiple service units connected to the first TSN module: The business units are provided with the same or different security levels; Business units of different security levels are isolated from each other.

10. The system according to claim 9, characterized in that The service isolation includes any of the following: Physical isolation, logical isolation, and access control policies.

11. A power monitoring system, characterized in that: include: A first network slice and mapping module, a plurality of security areas, a plurality of service units and a first TSN module arranged in the security area, and a plurality of service units and the first TSN module located in the same security area are connected; the first network slice and mapping module are connected to the plurality of first TSN modules; The first TSN module is used to receive the service data stream of the connected service unit, parse the service data stream to obtain the corresponding transmission time slot, and send the corresponding service data stream in the transmission time slot, wherein different service units have different transmission time slots; The first network slicing and mapping module is used to receive corresponding service data streams from the multiple first TSN modules in different transmission time slots, obtain a transmission time slot-subchannel mapping table, and thus send corresponding service data streams based on the sub-channel corresponding to the transmission time slot.

12. The system according to claim 11, characterized in that The first network slicing and mapping module comprises a first mapping layer and a first physical layer device group, the first physical layer device group comprises a plurality of first physical layer devices, and the first physical layer devices are divided into a plurality of sub-channels; The first network slicing and mapping module is used to receive corresponding service data streams from the multiple first TSN modules in different transmission time slots, and obtain the transmission time slot-subchannel mapping table. The first mapping layer maps the service data stream corresponding to the transmission time slot to the corresponding sub-channel in the first physical layer device group according to the transmission time slot-sub-channel mapping table, and the service data stream is sent by the corresponding sub-channel in the first physical layer device group.

13. The system according to claim 11, characterized in that The transmission time slot-subchannel mapping table is pre-configured in the first network slice and mapping module.

14. A power monitoring center, characterized in that: include: A second network slice and mapping module, a plurality of second TSN modules, and a plurality of storage areas connected to the second TSN modules; The second network slice and mapping module are connected to the power monitoring system; the plurality of second TSN modules are connected to the second network slice and mapping module; The second network slicing and mapping module is used to receive different service data streams from the power monitoring system based on the corresponding sub-channels, obtain a transmission time slot-sub-channel mapping table, and send the corresponding service data stream in the transmission time slot corresponding to the sub-channel; The second TSN module is used to receive different service data streams in the allocated multiple transmission time slots, and send the received service data streams to the corresponding storage area for storage, wherein the multiple storage areas connected to the second TSN module have different transmission time slots.

15. The system according to claim 14, characterized in that The second network slicing and mapping module comprises: a second mapping layer and a second physical layer device group, the second physical layer device group comprises a plurality of second physical layer devices, and the second physical layer devices are divided into a plurality of sub-channels; The second network slicing and mapping module is used to receive different business data streams from the power monitoring system based on the corresponding sub-channel, and obtain the transmission time slot-sub-channel mapping table. The second mapping layer maps the business data stream corresponding to the sub-channel to the corresponding transmission time slot according to the transmission time slot-sub-channel mapping table, so as to send it in the corresponding transmission time slot.

16. The system according to claim 14, characterized in that The transmission time slot-subchannel mapping table is pre-configured in the second network slice and mapping module.

17. A method for hard isolation and fusion transmission of electric power services based on TSN module, characterized in that: The method is applied to a power monitoring system, which includes: a first network slice and a mapping module, multiple security areas, multiple business units and a first TSN module set in the security area, multiple business units in the same security area are connected to the first TSN module; the first network slice and the mapping module are connected to the multiple first TSN modules, and the method includes: The first TSN module receives a service data stream of a connected service unit, parses the service data stream to obtain a corresponding transmission time slot, and sends the corresponding service data stream in the transmission time slot, wherein different service units have different transmission time slots; The first network slice and mapping module receives corresponding service data streams from the multiple first TSN modules in different transmission time slots, obtains a transmission time slot-subchannel mapping table, and sends corresponding service data streams based on the sub-channel corresponding to the transmission time slot.

18. A method for hard isolation and fusion transmission of electric power services based on TSN module, characterized in that: The method is applied to a power monitoring center, which includes: a second network slice and mapping module, multiple second TSN modules, and multiple storage areas connected to the second TSN modules; the second network slice and mapping module are connected to a power monitoring system; the multiple second TSN modules are connected to the second network slice and mapping module, and the method includes: The second network slicing and mapping module receives different service data streams from the power monitoring system based on the corresponding sub-channels, obtains a transmission time slot-sub-channel mapping table, and sends the corresponding service data stream in the transmission time slot corresponding to the sub-channel; The second TSN module receives different service data streams in the allocated multiple transmission time slots, and sends the received service data streams to the corresponding storage area for storage, wherein the multiple storage areas connected to the second TSN module have different transmission time slots.

19. A computer-readable storage medium having computer instructions stored thereon, characterized in that: When the computer instructions are executed by a processor, the method according to any one of claims 17 to 18 is implemented.

20. A computer program product, characterized in that The method comprises computer instructions, which implement the method according to any one of claims 17 to 18 when executed by a processor.

Images