Electric power informatization micro-service platform construction method and system, and storage medium

Abstract

The invention relates to an electric power informatization micro-service platform construction method and system and a storage medium. The method comprises the following steps: constructing an internal local area network service system and a software definition boundary system; configuring at least one local client in the plurality of local clients as a connection accepting host in the software defined boundary system; storing the electric power information in a local server; enabling a local client to access a local server through a local area network to obtain the electric power information; the internet client is configured to be a connection initiating host in the software defined boundary system, and the internet client obtains electric power information from a local client configured to be a connection receiving host through the internet under the control of the SDP controller; according to the invention, sharing of internal power information is carried out by using a local area network in a transformer substation or a power transmission and distribution station, Internet sharing of the power information is realized by using a software-defined boundary system outside the station, and the security of the power information is improved.

Description

Technical Field

[0001] The present invention relates to the field of power information security technology, and in particular to a method, system and storage medium for constructing a power information microservice platform. Background Art

[0002] Power informatization is the combination of information such as power equipment, substations, and transmission and distribution networks with geographic information systems to provide more intuitive power equipment information, power grid operation status information, and production management information, which helps to improve the level of refined power management. In the existing technology, an Internet platform is usually built based on power equipment information, power grid operation status information, and production management information to obtain power information in real time through the Internet. Although power information can be obtained remotely through the Internet, it may be stolen through the Internet, resulting in security risks for power information. Summary of the invention

[0003] In order to solve technical problems in the prior art, such as potential security risks in the dissemination of power information on the Internet, the present invention provides a method, system and storage medium for constructing a power informatization microservice platform.

[0004] The technical solution of the present invention to solve the above technical problems is as follows:

[0005] A method for constructing a power information microservice platform includes the following steps:

[0006] S1. Collect power information;

[0007] S2. Building an internal LAN service system and a software-defined border system; wherein the internal LAN service system includes a local server and multiple local clients, and the software-defined border system includes an SDP controller, a connection initiating host, and a connection accepting host;

[0008] S3, configuring at least one of the plurality of local clients as the connection accepting host in the software-defined boundary system;

[0009] S4, storing the power information in the local server;

[0010] S5, allowing all the local clients to access the local server through the local area network to obtain the power information;

[0011] S6. Configure the Internet client as the connection initiating host in the software-defined boundary system, and allow the Internet client to establish a communication connection with at least one local client configured as the connection accepting host through the Internet under the control of the SDP controller, so that the Internet client can obtain the power information from at least one local client configured as the connection accepting host through the Internet.

[0012] The beneficial effects of the present invention are as follows: by constructing a local area network system and a software-defined boundary system, a substation or a transmission and distribution station uses a local area network to share internal power information, and users outside the substation or the transmission and distribution station need to obtain power information in the substation or the transmission and distribution station through the software-defined boundary system; the purpose of quick access to information within the station and secure access through the Internet outside the station is achieved. At the same time, since the software-defined boundary system is a decentralized communication system, the controller of the software-defined boundary system does not store data, so the software-defined boundary system is used to realize the Internet sharing of power information and improve the security of power information.

[0013] Based on the above technical solution, the present invention can also be improved as follows.

[0014] Furthermore, the power information includes at least power equipment information, power grid operation status information and production management information;

[0015] Collecting power information includes the following steps:

[0016] S101, collecting the power equipment information by using the equipment control system;

[0017] S102, transmitting the power equipment information to a production management system;

[0018] S103, allowing the production management system to generate the power grid operation status information and production management information according to the power equipment information;

[0019] S104, allowing the production management system to integrate the power equipment information, the power grid operation status information and the production management information into the power information.

[0020] Further, transmitting the power equipment information to the production management system comprises the following steps:

[0021] Allowing the equipment control system to establish communication with the production management system through the LLC protocol;

[0022] The power equipment information is transmitted to the production management system through the LLC protocol.

[0023] Furthermore, the internal LAN service system and software-defined edge system are constructed, which specifically includes the following steps:

[0024] S201, constructing an internal LAN service system;

[0025] S202, constructing an SSL / TLS protocol to establish a communication connection between the internal LAN service system and the production management system through the SSL / TLS protocol.

[0026] S203, component software defines boundary system;

[0027] S204. Construct a one-way authenticated TLS handshake protocol to allow the internal LAN service system to establish a communication connection with the software-defined boundary system through the one-way authenticated TLS handshake protocol.

[0028] Further, construct the SSL / TLS protocol to establish a communication connection between the internal LAN service system and the production management system through the SSL / TLS protocol. The specific steps are as follows:

[0029] configuring the production management system in a local server that is not configured as the connection receiving host;

[0030] The SSL / TLS protocol is constructed in the local server configured with the production management system, so that the local server configured with the production management system establishes a communication connection with the local server in the internal LAN service system through the SSL / TLS protocol.

[0031] Further, constructing a one-way authenticated TLS handshake protocol, and establishing a communication connection between the internal LAN service system and the software defined boundary system through the one-way authenticated TLS handshake protocol, including the following steps:

[0032] Constructing the TLS handshake protocol for the one-way authentication;

[0033] Allowing the connection accepting host to establish a control communication connection with the SDP controller through the one-way authenticated TLS handshake protocol;

[0034] Allowing the link initiating host to establish a control communication connection with the SDP controller through the one-way authenticated TLS handshake protocol;

[0035] The one-way authenticated TLS handshake protocol allows the connection accepting host to establish a data transmission communication connection with the link initiating host.

[0036] Further, configuring at least one of the plurality of local clients as the connection accepting host in the software defined edge system specifically comprises the following steps:

[0037] Allowing at least one of the plurality of local clients to establish a control communication connection with the SDP controller through the one-way authenticated TLS handshake protocol;

[0038] The one-way authenticated TLS handshake protocol allows the local client that establishes a control communication connection with the SDP controller to establish a data transmission communication connection with the link initiating host.

[0039] Further, the Internet client obtains the power information from at least one local client configured as the connection receiving host via the Internet, specifically comprising the following steps:

[0040] creating a temporary database in at least one of the local clients configured as the connection accepting host;

[0041] The local client configured as the connection acceptance host stores the power information obtained from the local server in the temporary database;

[0042] Allowing the Internet client to obtain the power information in the temporary database through the Internet;

[0043] After the Internet client acquires the power information, it sends data transmission termination information to the local client configured as the connection acceptance host;

[0044] The local client configured as the connection acceptance host deletes the power information in the temporary database or / and the temporary database after receiving the data transmission termination information.

[0045] In order to solve the above technical problems, the present invention also provides a power information microservice system, the specific technical contents of which are as follows:

[0046] A power information microservice system, obtained by the above method, includes multiple subsystems, the multiple subsystems include an internal local area network service system and a software defined boundary system;

[0047] The internal LAN service system includes a local server and multiple local clients, and the software-defined boundary system includes an SDP controller, a connection initiating host and a connection accepting host; wherein, at least one of the multiple local clients is configured as the connection accepting host in the software-defined boundary system; the power information is stored in the local server, so that all the local clients access the local server through the LAN to obtain the power information; the Internet client is configured as the connection initiating host in the software-defined boundary system, and under the control of the SDP controller, the Internet client establishes a communication connection with at least one local client configured as the connection accepting host through the Internet, so that the Internet client obtains the power information from at least one local client configured as the connection accepting host through the Internet.

[0048] In order to solve the above technical problems, the present invention also provides a storage medium, and its specific technical contents are as follows:

[0049] A storage medium stores a computer program or a computer instruction, and when the computer program or the computer instruction is executed by a processor of a computer, the steps of the method for constructing the above-mentioned power information microservice platform are implemented. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] Figure 1 It is a flowchart of a method for building a power information microservice platform in an embodiment of the present invention;

[0051] Figure 2 The structure principle framework of a power information microservice system in an embodiment of the present invention is shown in FIG. Figure 1 ;

[0052] Figure 3 The structural principle framework of a power information microservice system of the present invention is Figure 2 . DETAILED DESCRIPTION

[0053] The principles and features of the present invention are described below in conjunction with the accompanying drawings. The examples given are only used to explain the present invention and are not used to limit the scope of the present invention.

[0054] Example 1

[0055] like Figure 1 As shown, this embodiment provides a method for constructing a power information microservice platform, including the following steps:

[0056] S1. Collect power information;

[0057] Collecting power information includes the following steps:

[0058] S101. Collect the power equipment information using a device control system; wherein the device control system may be a PLC control system.

[0059] S102, transmitting the power equipment information to a production management system;

[0060] The power information includes at least power equipment information, power grid operation status information and production management information;

[0061] Transmitting the power equipment information to the production management system comprises the following steps:

[0062] Allowing the equipment control system to establish communication with the production management system through the LLC protocol;

[0063] The power equipment information is transmitted to the production management system through the LLC protocol.

[0064] S103, the production management system generates the power grid operation status information and production management information according to the power equipment information;

[0065] S104, the production management system integrates the power equipment information, the grid operation status information and the production management information into the power information. The power equipment information, the grid operation status information and the production management information are integrated into an information chart file; and the information chart file is uniformly stored.

[0066] S2. Building an internal LAN service system and a software-defined border system; wherein the internal LAN service system includes a local server and multiple local clients, and the software-defined border system includes an SDP controller, a connection initiating host, and a connection accepting host;

[0067] Building an internal LAN service system and a software-defined edge system includes the following steps:

[0068] S201, constructing an internal LAN service system;

[0069] S202, constructing an SSL / TLS protocol to establish a communication connection between the internal LAN service system and the production management system through the SSL / TLS protocol.

[0070] S203, component software defines boundary system;

[0071] S204. Construct a one-way authenticated TLS handshake protocol to allow the internal LAN service system to establish a communication connection with the software-defined boundary system through the one-way authenticated TLS handshake protocol.

[0072] Constructing the SSL / TLS protocol to establish a communication connection between the internal LAN service system and the production management system through the SSL / TLS protocol, the specific steps are:

[0073] configuring the production management system in a local server that is not configured as the connection receiving host;

[0074] The SSL / TLS protocol is constructed in the local server configured with the production management system, so that the local server configured with the production management system establishes a communication connection with the local server in the internal LAN service system through the SSL / TLS protocol.

[0075] Constructing a one-way authenticated TLS handshake protocol, and establishing a communication connection between the internal LAN service system and the software-defined boundary system through the one-way authenticated TLS handshake protocol; comprising the following steps:

[0076] Constructing the TLS handshake protocol for the one-way authentication;

[0077] Allowing the connection accepting host to establish a control communication connection with the SDP controller through the one-way authenticated TLS handshake protocol;

[0078] Allowing the link initiating host to establish a control communication connection with the SDP controller through the one-way authenticated TLS handshake protocol;

[0079] The one-way authenticated TLS handshake protocol allows the connection accepting host to establish a data transmission communication connection with the link initiating host.

[0080] S3, configuring at least one of the plurality of local clients as the connection accepting host in the software-defined boundary system;

[0081] Configuring at least one of the plurality of local clients as the connection accepting host in the software defined boundary system; specifically comprising the following steps:

[0082] Allowing at least one of the plurality of local clients to establish a control communication connection with the SDP controller through the one-way authenticated TLS handshake protocol;

[0083] The local client that establishes a control communication connection with the SDP controller establishes a data transmission communication connection with the link initiating host through the one-way authenticated TLS handshake protocol

[0084] S4, storing the power information in the local server;

[0085] S5, allowing all the local clients to access the local server through the local area network to obtain the power information;

[0086] S6. Configure an Internet client as the connection initiating host in the software-defined boundary system. Under the control of the SDP controller, the Internet client establishes a communication connection with at least one local client configured as the connection accepting host through the Internet, so that the Internet client obtains the power information from at least one local client configured as the connection accepting host through the Internet.

[0087] Allowing the Internet client to obtain the power information from at least one local client configured as the connection receiving host via the Internet specifically comprises the following steps:

[0088] creating a temporary database in at least one of the local clients configured as the connection accepting host;

[0089] The local client configured as the connection acceptance host stores the power information obtained from the local server in the temporary database;

[0090] Allowing the Internet client to obtain the power information in the temporary database through the Internet;

[0091] After the Internet client acquires the power information, it sends data transmission termination information to the local client configured as the connection acceptance host;

[0092] The local client configured as the connection acceptance host deletes the power information in the temporary database or / and the temporary database after receiving the data transmission termination information.

[0093] The embodiment of the present invention constructs a local area network system and a software-defined boundary system. The substation or transmission and distribution station uses the local area network to share internal power information, and users outside the substation or transmission and distribution station need to obtain the power information in the substation or transmission and distribution station through the software-defined boundary system; the purpose of quick access to information within the station and secure access through the Internet outside the station is achieved. At the same time, since the software-defined boundary system is a decentralized communication system, the controller of the software-defined boundary system does not store data, so the software-defined boundary system is used to realize the Internet sharing of power information and improve the security of power information.

[0094] like Figure 2 As shown, in some embodiments, a power information microservice system is also provided, which is obtained by using the above method and includes multiple subsystems, and the multiple subsystems include an internal local area network service system and a software-defined boundary system;

[0095] The internal LAN service system includes a local server and multiple local clients, and the software-defined boundary system includes an SDP controller, a connection initiating host and a connection accepting host; wherein, at least one of the multiple local clients is configured as the connection accepting host in the software-defined boundary system; the power information is stored in the local server, so that all the local clients access the local server through the LAN to obtain the power information; the Internet client is configured as the connection initiating host in the software-defined boundary system, and under the control of the SDP controller, the Internet client establishes a communication connection with at least one local client configured as the connection accepting host through the Internet, so that the Internet client obtains the power information from at least one local client configured as the connection accepting host through the Internet.

[0096] like Figure 3 As shown, in some embodiments, the multiple subsystems of the power information microservice system also include a device control system and a production management system; wherein the device control system is used to collect the power equipment information; the device control system can be a PLC control system. The device control system transmits the power equipment information to the production management system; the power information includes at least power equipment information, power grid operation status information and production management information;

[0097] Specifically, the equipment control system establishes communication with the production management system through the LLC protocol; the equipment control system transmits the power equipment information to the production management system through the LLC protocol, and the production management system generates the power grid operation status information and production management information based on the power equipment information; the production management system integrates the power equipment information, the power grid operation status information and the production management information into the power information.

[0098] The internal LAN service system establishes a communication connection with the production management system through the SSL / TLS protocol; the internal LAN service system establishes a communication connection with the software-defined boundary system through the one-way authenticated TLS handshake protocol. The internal LAN service system establishes a communication connection with the production management system through the SSL / TLS protocol.

[0099] The SSL / TLS protocol is constructed in the local server configured with the production management system, so that the local server configured with the production management system establishes a communication connection with the local server in the internal LAN service system through the SSL / TLS protocol.

[0100] The one-way authenticated TLS handshake protocol allows the connection accepting host to establish a control communication connection with the SDP controller; the one-way authenticated TLS handshake protocol allows the link initiating host to establish a control communication connection with the SDP controller; the one-way authenticated TLS handshake protocol allows the connection accepting host to establish a data transmission communication connection with the link initiating host.

[0101] This embodiment uses the internal LAN service system and the software-defined boundary system as subsystems to build a LAN sharing system and an Internet information security transmission system. The substation or transmission and distribution station uses the LAN to share internal power information. Users outside the substation or transmission and distribution station need to pass the identity authentication through the software-defined boundary system. Only after obtaining the identity approval of the SDP controller can they obtain the power information in the substation or transmission and distribution station through the mutual benefit network; the purpose of quick access to information within the station and secure access through the Internet outside the station is achieved. At the same time, since the software-defined boundary system is a decentralized communication system, the controller of the software-defined boundary system does not store data, so the software-defined boundary system is used to realize the Internet sharing of power information and improve the security of power information.

[0102] It should be noted that the SDP in the present invention represents a software defined boundary; the SDP controller represents a controller of the software defined boundary.

[0103] Example 2

[0104] Based on Example 1, this embodiment provides a storage medium, which stores a computer program or computer instructions. When the computer program or the computer instructions are executed by a computer processor, the steps of the above-mentioned method for constructing a power informationization microservice platform are implemented.

[0105] The storage medium may be an internal storage unit of any device with data processing capabilities described in any of the aforementioned embodiments, such as a hard disk or a memory. The storage medium may also be an external storage device of any device with data processing capabilities, such as a plug-in hard disk, a smart memory card, an SD card, a flash memory card, etc. equipped on the device. Furthermore, the storage medium may also include both an internal storage unit and an external storage device of any device with data processing capabilities. The computer-readable storage medium is used to store the computer program and other programs and data required by any device with data processing capabilities, and may also be used to temporarily store data that has been output or is to be output.

[0106] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the concept and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A method for constructing a power information microservice platform, characterized in that: The steps include: S1. Collect power information; S2. Building an internal LAN service system and a software-defined border system; wherein the internal LAN service system includes a local server and multiple local clients, and the software-defined border system includes an SDP controller, a connection initiating host, and a connection accepting host; S3, configuring at least one of the plurality of local clients as the connection accepting host in the software-defined boundary system; S4, storing the power information in the local server; S5, allowing all the local clients to access the local server through the local area network to obtain the power information; S6. Configure the Internet client as the connection initiating host in the software-defined boundary system, and allow the Internet client to establish a communication connection with at least one local client configured as the connection accepting host through the Internet under the control of the SDP controller, so that the Internet client can obtain the power information from at least one local client configured as the connection accepting host through the Internet.

2. The method for constructing a power information microservice platform according to claim 1, characterized in that: The power information includes at least power equipment information, power grid operation status information and production management information; Collecting power information includes the following steps: S101, collecting the power equipment information by using the equipment control system; S102, transmitting the power equipment information to a production management system; S103, allowing the production management system to generate the power grid operation status information and production management information according to the power equipment information; S104, allowing the production management system to integrate the power equipment information, the power grid operation status information and the production management information into the power information.

3. The method for constructing a power information microservice platform according to claim 2, characterized in that: Transmitting the power equipment information to the production management system comprises the following steps: Allowing the equipment control system to establish communication with the production management system through the LLC protocol; The power equipment information is transmitted to the production management system through the LLC protocol.

4. The method for constructing a power information microservice platform according to claim 2, characterized in that: Building an internal LAN service system and a software-defined edge system includes the following steps: S201, constructing an internal LAN service system; S202, constructing an SSL / TLS protocol to establish a communication connection between the internal LAN service system and the production management system through the SSL / TLS protocol; S203, component software defines boundary system; S204. Construct a one-way authenticated TLS handshake protocol to allow the internal LAN service system to establish a communication connection with the software-defined boundary system through the one-way authenticated TLS handshake protocol.

5. The method for constructing a power information microservice platform according to claim 4, characterized in that: Constructing the SSL / TLS protocol to establish a communication connection between the internal LAN service system and the production management system through the SSL / TLS protocol, the specific steps are: configuring the production management system in a local server that is not configured as the connection receiving host; The SSL / TLS protocol is constructed in the local server configured with the production management system, so that the local server configured with the production management system establishes a communication connection with the local server in the internal LAN service system through the SSL / TLS protocol.

6. The method for constructing a power information microservice platform according to claim 5, characterized in that: Constructing a one-way authenticated TLS handshake protocol, and establishing a communication connection between the internal LAN service system and the software-defined boundary system through the one-way authenticated TLS handshake protocol, including the following steps: Constructing the TLS handshake protocol for the one-way authentication; Allowing the connection accepting host to establish a control communication connection with the SDP controller through the one-way authenticated TLS handshake protocol; Allowing the link initiating host to establish a control communication connection with the SDP controller through the one-way authenticated TLS handshake protocol; The one-way authenticated TLS handshake protocol allows the connection accepting host to establish a data transmission communication connection with the link initiating host.

7. The method for constructing a power information microservice platform according to claim 6, characterized in that: Configuring at least one of the plurality of local clients as the connection accepting host in the software defined boundary system; specifically comprising the following steps: Allowing at least one of the plurality of local clients to establish a control communication connection with the SDP controller through the one-way authenticated TLS handshake protocol; The one-way authenticated TLS handshake protocol allows the local client that establishes a control communication connection with the SDP controller to establish a data transmission communication connection with the link initiating host.

8. The method for constructing a power information microservice platform according to claim 1, characterized in that: Allowing the Internet client to obtain the power information from at least one local client configured as the connection receiving host via the Internet specifically comprises the following steps: creating a temporary database in at least one of the local clients configured as the connection accepting host; The local client configured as the connection acceptance host stores the power information obtained from the local server in the temporary database; Allowing the Internet client to obtain the power information in the temporary database through the Internet; After the Internet client acquires the power information, it sends data transmission termination information to the local client configured as the connection acceptance host; The local client configured as the connection acceptance host deletes the power information in the temporary database or / and the temporary database after receiving the data transmission termination information.

9. A power information microservice system, characterized in that: Obtained by the method according to any one of claims 1 to 8, comprising a plurality of subsystems, the plurality of subsystems comprising an internal local area network service system and a software defined boundary system; The internal LAN service system includes a local server and multiple local clients, and the software-defined boundary system includes an SDP controller, a connection initiating host and a connection accepting host; wherein, at least one of the multiple local clients is configured as the connection accepting host in the software-defined boundary system; the power information is stored in the local server, so that all the local clients access the local server through the LAN to obtain the power information; the Internet client is configured as the connection initiating host in the software-defined boundary system, and under the control of the SDP controller, the Internet client establishes a communication connection with at least one local client configured as the connection accepting host through the Internet, so that the Internet client obtains the power information from at least one local client configured as the connection accepting host through the Internet.

10. A storage medium, characterized in that: The storage medium stores a computer program or a computer instruction. When the computer program or the computer instruction is executed by a computer processor, the steps of the method for constructing a power information microservice platform as described in any one of claims 1 to 8 are implemented.

Images