Safety and stability control system and method for power transmission and transformation

Abstract

The invention relates to the technical field of substation control, in particular to a safety and stability control system and method for power transmission and transformation. Comprising a transformer substation, a network detection module, a data encryption module, a vulnerability scanning module, a multi-element monitoring module, a unit tripping priority sorting module and a transformer substation control master station, and the network detection module comprises an intrusion detection unit, an SSL technology unit, an IPSec technology unit and a firewall technology unit. The vulnerability scanning module comprises a continuous monitoring unit, a vulnerability discovery unit, a risk assessment unit and a report generation unit, the transformer substation control master station is connected with a power plant end, a firewall is deployed as a first defense line, the firewall can monitor communication traffic entering and exiting a network, only safe and approved information enters, and the risk assessment unit is connected with the power plant end; and meanwhile, data which threatens the enterprise is resisted.

Description

Technical Field

[0001] The present invention relates to the technical field of substation control, and in particular to a safe and stable control system and method for power transmission and transformation. Background Art

[0002] The prior art patent CN111509718A discloses a safe and stable control system and method for power transmission and transformation, including: a substation control master station for the unit to be cut, which is used to receive fault information from the information collection substation side of each substation, and receive the cuttable power of each unit in each power plant, as well as the power operation status information of each unit; it is also used to generate a cutting instruction according to the cutting priority sorting result; a unit cutting priority sorting device is used to determine the predicted power of each unit; and according to the fault information of the unit to be cut, the preset corresponding unit to be cut and the corresponding cuttable power are determined, and according to the corresponding cuttable power and predicted power of the unit to be cut, the cutting priority of each unit to be cut is sorted; each power plant is used to cut out the corresponding unit according to the cutting instruction of the unit to be cut. This design can improve the safety and stability of the power grid and the power transmission and transformation system;

[0003] However, in the existing technology, as the level of informatization and intelligence of power systems continues to improve, network security threats are becoming increasingly prominent. Hacker attacks, virus intrusions, etc. may cause system paralysis or data leakage, posing a serious threat to the safe and stable operation of power systems. Summary of the invention

[0004] The purpose of the present invention is to provide a safe and stable control system and method for power transmission and transformation, aiming to solve the technical problem in the prior art that as the level of informatization and intelligence of power systems continues to improve, network security threats are becoming increasingly prominent, and hacker attacks, virus intrusions, etc. may cause system paralysis or data leakage, posing a serious threat to the safe and stable operation of power systems.

[0005] To achieve the above-mentioned purpose, the present invention adopts a safe and stable control system for power transmission and transformation, including a substation substation, a network detection module, a data encryption module, a vulnerability scanning module, a multi-monitoring module, a unit cutting machine priority sorting module and a substation control main station, the network detection module includes an intrusion detection unit, an SSL technology unit, an IPSec technology unit and a firewall technology unit, the vulnerability scanning module includes a continuous monitoring unit, a vulnerability discovery unit, a risk assessment unit and a report generation unit, the substation control main station is connected to a power plant end, the substation, the network detection module, the data encryption module, the vulnerability scanning module, the multi-monitoring module and the unit cutting machine priority sorting module are all connected to the substation control main station;

[0006] The multi-monitoring module is used to detect and respond to potential security threats such as hacker attacks and virus intrusions;

[0007] The data encryption module is responsible for encrypting the transmitted and stored data;

[0008] The unit cutting priority sorting module is used to sort the priority of each unit to be cut from high to low according to the cuttable power corresponding to the unit to be cut;

[0009] The substation control master station is used to receive fault information from each substation information collection substation, and receive the power that can be cut for each unit in each power plant, as well as the power operation status information of each unit; it is also used to generate a cutting instruction according to the cutting priority sorting result sent by the unit cutting priority sorting device, and send it to the corresponding power plant;

[0010] The intrusion detection unit is used to detect unauthorized access, malicious use or abuse attempts, and denial of service attacks by monitoring network traffic;

[0011] The SSL technology unit is used for transmission at the transport layer to protect network transmission information under the influence of the application layer;

[0012] The IPSec technology unit is used to provide end-to-end security and can protect a group of confidential communications conducted through a public Internet network;

[0013] The firewall technology unit is used to monitor and filter traffic flowing through the firewall to protect certain areas from external threats;

[0014] The continuous monitoring unit is used to monitor system activities and immediately issue an alarm when suspicious behavior or potential threats are detected;

[0015] The vulnerability discovery unit is used to use professional automated scanning tools to conduct in-depth analysis of the target system to find possible security vulnerabilities;

[0016] The risk assessment unit is used to conduct a detailed analysis of the vulnerability and assess its nature, severity and possible harm;

[0017] The report generating unit is used to generate a detailed vulnerability scanning report.

[0018] Wherein, the data encryption module includes an identity authentication unit, a data integrity verification unit and an encryption algorithm selection unit, and the identity authentication unit, the data integrity verification unit and the encryption algorithm selection unit are all connected to the substation control master station;

[0019] The identity authentication unit is used to ensure that only users with corresponding permissions can access specific data resources;

[0020] The data integrity verification unit is an important means to ensure that the data has not been tampered with during transmission;

[0021] The encryption algorithm selection unit is used to provide strong security protection by combining the AES algorithm and the RSA algorithm.

[0022] Wherein, the data encryption module further includes a key management unit, and the key management unit is connected to the substation control master station;

[0023] The key management unit is used to securely generate and store encryption keys using a hardware HSM.

[0024] The multi-element monitoring module includes a network traffic monitoring unit, a threat intelligence collection unit, a system log analysis unit and a security policy optimization unit, and the network traffic monitoring unit, the threat intelligence collection unit, the system log analysis unit and the security policy optimization unit are all connected to the substation control master station;

[0025] The network traffic monitoring unit is used to monitor the traffic data in the network in real time and analyze the source, destination, size and protocol type of the traffic;

[0026] The threat intelligence collection unit is used to collect and update the latest threat intelligence information in real time;

[0027] The system log analysis unit is used to collect and analyze log information of operating systems, applications and network devices;

[0028] The security policy optimization unit is used to dynamically adjust and optimize the security policy of the system according to the monitored security events and threat intelligence.

[0029] The unit cutting priority sorting module includes an information acquisition unit, an information analysis unit, a priority sorting unit, a decision making unit and a decision execution unit, and the information acquisition unit, the information analysis unit, the priority sorting unit, the decision making unit and the decision execution unit are all connected to the substation control master station;

[0030] The information acquisition unit is responsible for real-time monitoring of the operating status of the power system and collecting operating data and fault information of each unit;

[0031] The information analysis unit is used to perform in-depth analysis and processing on the collected information to determine whether the current power system is in a stable state and whether it is necessary to take power-off measures;

[0032] The prioritization unit is used to prioritize the units that need to be removed according to preset rules or strategies;

[0033] The decision-making unit is used to formulate a specific generator cutting plan based on the priority sorting and in combination with the actual operation of the power grid;

[0034] The decision execution unit is used to receive instructions from the decision making module and perform a cut-off operation on the designated unit according to the instruction requirements.

[0035] Wherein, the safety and stability control system for power transmission and transformation further comprises a wireless communication unit, the communication unit comprises a receiving unit, a transmitting unit, a processing unit and an antenna unit, the receiving unit, the transmitting unit, the processing unit and the antenna unit are all connected to the substation control master station;

[0036] The receiving unit is responsible for receiving wireless signals from other nodes or a control center;

[0037] The transmitting unit is responsible for sending data packets or control instructions in the form of wireless signals;

[0038] The processing unit is responsible for processing, encoding, decoding and encryption of data;

[0039] The antenna unit is used to convert the wireless signal into electromagnetic waves and radiate them.

[0040] The present invention also provides a safety and stability control method for power transmission and transformation, which is applied to the above-mentioned safety and stability control system for power transmission and transformation, and comprises the following steps:

[0041] The substation control master station receives the fault information of each substation, and receives the cuttable power of each unit in the power plant, as well as the power operation status information of each unit;

[0042] The unit cutting priority sorting module determines the predicted power of each unit according to the power operation status information of each unit and a preset trained machine learning model;

[0043] The unit cutting priority sorting module determines the preset corresponding units to be cut and the corresponding cuttable power according to the fault information;

[0044] According to the cuttable power and predicted power corresponding to the units to be cut, the cutting priority of each unit to be cut is sorted, and the sorting result is sent to the substation control master station;

[0045] The substation control master station generates a power cut instruction according to the sorting result and sends it to the corresponding power plant end;

[0046] The power plant end switches off the corresponding unit according to the switch-off instruction.

[0047] The invention discloses a safe and stable control system and method for power transmission and transformation, comprising a substation substation, a network detection module, a data encryption module, a vulnerability scanning module, a multi-element monitoring module, a unit cutting priority module and a substation control main station, wherein the network detection module comprises an intrusion detection unit, an SSL technology unit, an IPSec technology unit and a firewall technology unit, the vulnerability scanning module comprises a continuous monitoring unit, a vulnerability discovery unit, a risk assessment unit and a report generation unit, the substation control main station is connected to a power plant end, and a firewall is deployed as the first line of defense. The firewall can monitor the traffic in and out of the network, and only allow safe and approved information to enter, while resisting data that poses a threat to the enterprise, and then real-time monitoring of network traffic, identifying and responding to abnormal behaviors and attack events, and finally encrypting the transmitted and stored data to ensure the confidentiality and integrity of the data, thereby effectively solving the technical problem that as the information and intelligent level of the power system continues to improve, network security threats are increasingly prominent, hacker attacks, virus invasions, etc. may cause system paralysis or data leakage, and pose a serious threat to the safe and stable operation of the power system. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0049] Figure 1 It is a schematic diagram of the principle of the safe and stable control system for power transmission and transformation of the present invention.

[0050] Figure 2 It is a schematic diagram of the principle of a network detection module in a safe and stable control system for power transmission and transformation according to the present invention.

[0051] Figure 3 It is a schematic diagram of the principle of a vulnerability scanning module in a safe and stable control system for power transmission and transformation of the present invention.

[0052] Figure 4 It is a schematic diagram of the principle of a multi-element monitoring module in a safe and stable control system for power transmission and transformation according to the present invention.

[0053] Figure 5 It is a schematic diagram of the principle of a data encryption module in a safe and stable control system for power transmission and transformation of the present invention.

[0054] Figure 6 It is a schematic diagram of the principle of a wireless communication module in a safe and stable control system for power transmission and transformation of the present invention.

[0055] Figure 7 It is a schematic diagram of the principle of the emergency response module in the safe and stable control system for power transmission and transformation of the present invention.

[0056] Figure 8 It is a schematic diagram of the principle of a system alarm module in a safe and stable control system for power transmission and transformation of the present invention.

[0057] Fig. 9 The present invention is a flowchart of the steps of a safe and stable control method for power transmission and transformation.

[0058] 1-Substation substation, 2-Wireless communication unit, 3-Receiving unit, 4-Network detection module, 5-Data encryption module, 6-Vulnerability scanning module, 7-Multi-monitoring module, 8-Unit cutting priority module, 9-Substation control master station, 10-Intrusion detection unit, 11-SSL technology unit, 12-IPSec technology unit, 13-Firewall technology unit, 14-Continuous monitoring unit, 15-Vulnerability discovery unit, 16-Risk assessment unit, 17-Report generation unit, 18-Power plant end, 19-Transmitting unit, 20-Processing unit, 21-Identity authentication unit, 22-Data integrity verification unit, 23- Encryption algorithm selection unit, 24-key management unit, 25-network traffic monitoring unit, 26-threat intelligence collection unit, 27-system log analysis unit, 28-security policy optimization unit, 29-information acquisition unit, 30-information analysis unit, 31-prioritization unit, 32-decision making unit, 33-decision execution unit, 34-antenna unit, 35-emergency response module, 36-system alarm module, 37-threat detection unit, 38-isolation unit, 39-repair unit, 40-backup unit, 41-real-time alarm unit, 42-buzzer unit, 43-flashing light unit, 44-event tracking unit. DETAILED DESCRIPTION

[0059] Embodiments of the present invention are described in detail below, examples of which are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present invention, and should not be construed as limiting the present invention.

[0060] See also Figures 1 to 8The present invention provides a safe and stable control system for power transmission and transformation, comprising a substation substation 1, a network detection module 4, a data encryption module 5, a vulnerability scanning module 6, a multi-monitoring module 7, a unit cutting machine priority sorting module 8 and a substation control main station 9, wherein the network detection module 4 comprises an intrusion detection unit 10, an SSL technology unit 11, an IPSec technology unit 12 and a firewall technology unit 13, the vulnerability scanning module 6 comprises a continuous monitoring unit 14, a vulnerability discovery unit 15, a risk assessment unit 16 and a report generation unit 17, the substation control main station is connected to a power plant end 18, the substation, the network detection module 4, the data encryption module 5, the vulnerability scanning module 6, the multi-monitoring module 7 and the unit cutting machine priority sorting module 8 are all connected to the substation control main station 9;

[0061] The multi-monitoring module 7 is used to detect and respond to potential security threats such as hacker attacks and virus intrusions;

[0062] The data encryption module 5 is responsible for encrypting the transmitted and stored data;

[0063] The unit cutting priority sorting module 8 is used to sort the priority of each unit to be cut from high to low according to the cuttable power corresponding to the unit to be cut;

[0064] The substation control master station 9 is used to receive fault information from each substation information collection substation, and receive the power that can be cut for each unit in each power plant, as well as the power operation status information of each unit; it is also used to generate a cutting instruction according to the cutting priority sorting result sent by the unit cutting priority sorting device, and send it to the corresponding power plant;

[0065] The intrusion detection unit 10 is used to detect unauthorized access, malicious use or abuse attempts, and denial of service attacks by monitoring network traffic;

[0066] The SSL technology unit 11 is used for transmission at the transport layer, protecting network transmission information under the influence of the application layer;

[0067] The IPSec technology unit 12 is used to provide end-to-end security and can protect a group of confidential communications conducted through the public Internet;

[0068] The firewall technology unit 13 is used to monitor and filter the traffic flowing through the firewall to protect certain areas from external threats;

[0069] The continuous monitoring unit 14 is used to monitor system activities and immediately issue an alarm when suspicious behavior or potential threats are detected;

[0070] The vulnerability discovery unit 15 is used to use professional automated scanning tools to conduct in-depth analysis of the target system to find possible security vulnerabilities;

[0071] The risk assessment unit 16 is used to analyze the vulnerability in detail and assess its nature, severity and possible harm;

[0072] The report generating unit 17 is used to generate a detailed vulnerability scanning report.

[0073] In this embodiment, by deploying a firewall as the first line of defense, the firewall can monitor the communication volume in and out of the network, allowing only safe and approved information to enter, while resisting data that poses a threat to the enterprise, and then monitor network traffic in real time, identify and respond to abnormal behavior and attack incidents, and finally encrypt the transmitted and stored data to ensure the confidentiality and integrity of the data. This effectively solves the technical problem that as the level of informatization and intelligence of the power system continues to improve, network security threats are becoming increasingly prominent, and hacker attacks, virus intrusions, etc. may cause system paralysis or data leakage, posing a serious threat to the safe and stable operation of the power system.

[0074] Further, the data encryption module 5 includes an identity authentication unit 21, a data integrity verification unit 22 and an encryption algorithm selection unit 23, and the identity authentication unit 21, the data integrity verification unit 22 and the encryption algorithm selection unit 23 are all connected to the substation control master station 9;

[0075] The identity authentication unit 21 is used to ensure that only users with corresponding permissions can access specific data resources;

[0076] The data integrity verification unit 22 is an important means to ensure that the data has not been tampered with during transmission;

[0077] The encryption algorithm selection unit 23 is used to provide strong security protection by combining the AES algorithm and the RSA algorithm.

[0078] In this embodiment, the identity authentication unit 21 can prevent unauthorized users from accessing sensitive data, and uses multi-factor authentication technology combined with multiple verification methods such as passwords and biometrics to further improve the security of identity authentication; the data integrity verification unit 22 hashes the data by using a hash function and attaches it to the data packet, so that the recipient can verify the integrity of the data; the AES algorithm in the encryption algorithm selection unit 23 is widely used in data encryption due to its high efficiency and security, while the RSA algorithm is often used in key exchange and digital signatures to ensure the security of data transmission.

[0079] Furthermore, the data encryption module 5 further includes a key management unit 24, and the key management unit 24 is connected to the substation control master station 9;

[0080] The key management unit 24 is used to securely generate and store encryption keys using a hardware HSM.

[0081] In this embodiment, the key management unit 24 is the core link of the data encryption module 5. A secure key management system needs to be able to generate, store, distribute and destroy keys while ensuring the security and privacy of the keys.

[0082] Further, the multi-element monitoring module 7 includes a network traffic monitoring unit 25, a threat intelligence collection unit 26, a system log analysis unit 27 and a security policy optimization unit 28, and the network traffic monitoring unit 25, the threat intelligence collection unit 26, the system log analysis unit 27 and the security policy optimization unit 28 are all connected to the substation control master station 9;

[0083] The network traffic monitoring unit 25 is used to monitor the traffic data in the network in real time and analyze the source, destination, size and protocol type of the traffic;

[0084] The threat intelligence collection unit 26 is used to collect and update the latest threat intelligence information in real time;

[0085] The system log analysis unit 27 is used to collect and analyze log information of the operating system, application programs and network devices;

[0086] The security policy optimization unit 28 is used to dynamically adjust and optimize the security policy of the system according to the monitored security events and threat intelligence.

[0087] In this embodiment, the network traffic monitoring unit 25 can timely discover abnormal behaviors in the network, such as DDoS attacks, scanning attacks, etc., by comparing normal traffic patterns with abnormal traffic patterns; the threat intelligence collection unit 26 can timely discover and respond to new security threats through the collection and update of threat intelligence, thereby improving the security protection capabilities of the system; the system log analysis unit 27 can discover potential security vulnerabilities, unauthorized modifications, or abnormal behaviors through log analysis. For example, when a large number of failed login attempts appear in the system log, it may indicate the presence of a brute force attack; the security policy optimization unit 28 can more effectively prevent hacker attacks and virus intrusions through the optimization of security policies, thereby improving the overall security of the system.

[0088] Further, the unit cutting priority module 8 includes an information acquisition unit 29, an information analysis unit 30, a priority unit 31, a decision-making unit 32 and a decision execution unit 33, and the information acquisition unit 29, the information analysis unit 30, the priority unit 31, the decision-making unit 32 and the decision execution unit 33 are all connected to the substation control master station 9;

[0089] The information acquisition unit 29 is responsible for real-time monitoring of the operating status of the power system and collecting operating data and fault information of each unit;

[0090] The information analysis unit 30 is used to perform in-depth analysis and processing on the collected information to determine whether the current power system is in a stable state and whether it is necessary to take power-off measures;

[0091] The prioritization unit 31 is used to prioritize the units that need to be removed according to preset rules or strategies;

[0092] The decision-making unit 32 is used to formulate a specific power-off plan based on the priority sorting and in combination with the actual operation of the power grid;

[0093] The decision execution unit 33 is used to receive instructions from the decision making module and perform a cut-off operation on the designated unit according to the instruction requirements.

[0094] In this embodiment, the information analysis unit 30 includes a specific algorithm or model for predicting the behavior of the power grid under different fault conditions; the priority sorting unit 31 is based on factors such as the unit's switchable power, predicted power, and the degree of impact on the stability of the power grid; the decision-making unit 32 considers multiple factors, such as the amount of machine cutting, the order of machine cutting, and the stability of the power grid after machine cutting; the decision execution unit 33 needs to work closely with the control system of the power plant or substation to ensure the accuracy and timeliness of the machine cutting operation.

[0095] Furthermore, the safety and stability control system for power transmission and transformation further includes a wireless communication unit 2, the communication unit includes a receiving unit 3, a transmitting unit 19, a processing unit 20 and an antenna unit 34, and the receiving unit 3, the transmitting unit 19, the processing unit 20 and the antenna unit 34 are all connected to the substation control master station 9;

[0096] The receiving unit 3 is responsible for receiving wireless signals from other nodes or the control center;

[0097] The transmitting unit 19 is responsible for sending data packets or control instructions in the form of wireless signals;

[0098] The processing unit 20 is responsible for processing, encoding, decoding and encryption of data;

[0099] The antenna unit 34 is used to convert the wireless signal into electromagnetic waves and radiate them.

[0100] In this embodiment, the receiving unit 3 has high sensitivity and selectivity to ensure accurate signal reception in a complex electromagnetic environment; the transmitting unit 19 has adjustable transmission power and frequency to adapt to different communication distances and interference environments; the processing unit 20 is also responsible for controlling the operation of the receiving unit 3 and the transmitting unit 19, as well as the interaction with other system components.

[0101] Furthermore, the safety and stability control system for power transmission and transformation further includes an emergency response module 35 and a system alarm module 36, and both the emergency response module 35 and the system alarm module 36 are connected to the substation control master station 9;

[0102] The emergency response module 35 is responsible for taking quick response measures when network security incidents such as hacker attacks and virus intrusions occur, so as to protect the security and stable operation of the system;

[0103] The system alarm module 36 is used to timely detect and respond to potential security threats by integrating multiple security monitoring and alarm units.

[0104] In this embodiment, the emergency response module 35 is responsible for taking prompt countermeasures when network security incidents such as hacker attacks and virus intrusions occur to protect the security and stable operation of the system; the system alarm module 36 is used to promptly detect and respond to potential security threats by integrating multiple security monitoring and alarm units.

[0105] Furthermore, the emergency response module 35 includes a threat detection unit 37 , an isolation unit 38 , a repair unit 39 and a backup unit 40 , and the threat detection unit 37 , the isolation unit 38 , the repair unit 39 and the backup unit 40 are all connected to the substation control master station 9 .

[0106] The threat detection unit 37 is used to monitor system activities in real time and promptly detect potential security threats through technical means such as abnormal behavior detection and intrusion detection system;

[0107] The isolation unit 38 is used to isolate the affected system or network part to prevent the threat from spreading further;

[0108] The repair unit 39 is used to recover and repair the system that has been attacked or infected by a virus, including recovering damaged data, repairing system vulnerabilities, updating security patches, etc.;

[0109] The backup unit 40 is used to back up important data and quickly restore data when needed to reduce the risk of data loss.

[0110] In this embodiment, the threat detection unit 37 analyzes the collected data, identifies signs of hacker attacks or virus intrusions, and determines the type and source of the attack; the isolation unit 38 implements measures such as network traffic control and closing unnecessary ports and services to limit the scope of activities of the attacker; the repair unit 39 ensures that the system can operate normally after recovery and takes measures to prevent similar incidents from happening again; the backup unit 40 ensures the integrity and availability of the backup data so that the system function can be restored in time in an emergency.

[0111] Furthermore, the system alarm module 36 includes a real-time alarm unit 41, a buzzer unit 42, a flashing light unit 43 and an event tracking unit 44, and the real-time alarm unit 41, the buzzer unit 42, the flashing light unit 43 and the event tracking unit 44 are all connected to the substation control master station 9.

[0112] The real-time alarm unit 41 is used to send alarm information to the administrator in real time when suspicious activities or security incidents are detected;

[0113] The buzzer unit 42 is used to emit a buzzer warning;

[0114] The flashing light unit 43 is used to warn by flashing lights;

[0115] The event tracking unit 44 is used to track and analyze security events to determine the attack source, attack method and attack purpose.

[0116] In this embodiment, the alarm information of the real-time alarm unit 41 should include detailed information such as event type, occurrence time, source address, target address, etc.; the event tracking unit 44 adjusts the security strategy and strengthens the protection measures according to the analysis results.

[0117] In the present invention, when cutting out the units corresponding to each fault, instead of directly cutting out all the cutting unit objects according to the preset correspondence between the fault and the cutting unit object, all the cutting unit objects are sorted by cutting priority according to their cuttable power and predicted power. The operation of the units with high predicted power in the event of a fault will have a greater impact on the impact and stability of the power grid, while the units with low predicted power can be allowed to operate in a fault-tolerant manner in the event of a fault, thereby giving priority to cutting out the units with high predicted power. In this way, the number of cutting units is minimized in the fault mode, and the safety and stability of the power grid and the transmission and transformation system are improved when a substation fails.

[0118] Based on the present invention, please refer to Fig. 9 ,in Fig. 9 The present invention is a flowchart of the steps of a safe and stable control method for power transmission and transformation.

[0119] The present invention also provides a safety and stability control method for power transmission and transformation, which is applied to the above-mentioned safety and stability control system for power transmission and transformation, and comprises the following steps:

[0120] S1: The substation control master station 9 receives the fault information of each substation 1, and receives the cuttable power of each unit in the power plant end 18, as well as the power operation status information of each unit;

[0121] S2: The unit cutting priority sorting module 8 determines the predicted power of each unit according to the power operation status information of each unit and a preset trained machine learning model;

[0122] S3: The unit cutting priority sorting module 8 determines the preset corresponding units to be cut and the corresponding cuttable power according to the fault information;

[0123] S4: sorting the cutting priorities of the units to be cut according to the cuttable powers and predicted powers corresponding to the units to be cut, and sending the sorting results to the substation control master station 9;

[0124] S5: The substation control master station 9 generates a power cut command according to the sorting result and sends it to the corresponding power plant end 18;

[0125] S6: The power plant end 18 switches off the corresponding unit according to the switch-off instruction.

[0126] What is disclosed above is only a preferred embodiment of the present invention, and it certainly cannot be used to limit the scope of rights of the present invention. Ordinary technicians in this field can understand that all or part of the processes of the above embodiment and equivalent changes made according to the claims of the present invention still fall within the scope of the invention.

Claims

1. A safe and stable control system for power transmission and transformation, characterized in that: It includes a substation substation, a network detection module, a data encryption module, a vulnerability scanning module, a multi-monitoring module, a unit cutting priority sorting module and a substation control main station, the network detection module includes an intrusion detection unit, an SSL technology unit, an IPSec technology unit and a firewall technology unit, the vulnerability scanning module includes a continuous monitoring unit, a vulnerability discovery unit, a risk assessment unit and a report generation unit, the substation control main station is connected to a power plant end, the substation, the network detection module, the data encryption module, the vulnerability scanning module, the multi-monitoring module and the unit cutting priority sorting module are all connected to the substation control main station; The multi-monitoring module is used to detect and respond to potential security threats such as hacker attacks and virus intrusions; The data encryption module is responsible for encrypting the transmitted and stored data; The unit cutting priority sorting module is used to sort the priority of each unit to be cut from high to low according to the cuttable power corresponding to the unit to be cut; The substation control master station is used to receive fault information from each substation information collection substation, and receive the power that can be cut for each unit in each power plant, as well as the power operation status information of each unit; it is also used to generate a cutting instruction according to the cutting priority sorting result sent by the unit cutting priority sorting device, and send it to the corresponding power plant; The intrusion detection unit is used to detect unauthorized access, malicious use or abuse attempts, and denial of service attacks by monitoring network traffic; The SSL technology unit is used for transmission at the transport layer to protect network transmission information under the influence of the application layer; The IPSec technology unit is used to provide end-to-end security and can protect a group of confidential communications conducted through a public Internet network; The firewall technology unit is used to monitor and filter traffic flowing through the firewall to protect certain areas from external threats; The continuous monitoring unit is used to monitor system activities and immediately issue an alarm when suspicious behavior or potential threats are detected; The vulnerability discovery unit is used to use professional automated scanning tools to conduct in-depth analysis of the target system to find possible security vulnerabilities; The risk assessment unit is used to conduct a detailed analysis of the vulnerability and assess its nature, severity and possible harm; The report generating unit is used to generate a detailed vulnerability scanning report.

2. The safe and stable control system for power transmission and transformation according to claim 1, characterized in that: The data encryption module includes an identity authentication unit, a data integrity verification unit and an encryption algorithm selection unit, and the identity authentication unit, the data integrity verification unit and the encryption algorithm selection unit are all connected to the substation control master station; The identity authentication unit is used to ensure that only users with corresponding permissions can access specific data resources; The data integrity verification unit is an important means to ensure that the data has not been tampered with during transmission; The encryption algorithm selection unit is used to provide strong security protection by combining the AES algorithm and the RSA algorithm.

3. The safe and stable control system for power transmission and transformation according to claim 2, characterized in that: The data encryption module also includes a key management unit, and the key management unit is connected to the substation control master station; The key management unit is used to securely generate and store encryption keys using a hardware HSM.

4. The safe and stable control system for power transmission and transformation according to claim 3, characterized in that: The multi-element monitoring module includes a network traffic monitoring unit, a threat intelligence collection unit, a system log analysis unit and a security policy optimization unit, and the network traffic monitoring unit, the threat intelligence collection unit, the system log analysis unit and the security policy optimization unit are all connected to the substation control master station; The network traffic monitoring unit is used to monitor the traffic data in the network in real time and analyze the source, destination, size and protocol type of the traffic; The threat intelligence collection unit is used to collect and update the latest threat intelligence information in real time; The system log analysis unit is used to collect and analyze log information of operating systems, applications and network devices; The security policy optimization unit is used to dynamically adjust and optimize the security policy of the system according to the monitored security events and threat intelligence.

5. The safe and stable control system for power transmission and transformation according to claim 4, characterized in that: The unit cutting priority sorting module includes an information acquisition unit, an information analysis unit, a priority sorting unit, a decision making unit and a decision execution unit, and the information acquisition unit, the information analysis unit, the priority sorting unit, the decision making unit and the decision execution unit are all connected to the substation control master station; The information acquisition unit is responsible for real-time monitoring of the operating status of the power system and collecting operating data and fault information of each unit; The information analysis unit is used to perform in-depth analysis and processing on the collected information to determine whether the current power system is in a stable state and whether it is necessary to take power-off measures; The prioritization unit is used to prioritize the units that need to be removed according to preset rules or strategies; The decision-making unit is used to formulate a specific generator cutting plan based on the priority sorting and in combination with the actual operation of the power grid; The decision execution unit is used to receive instructions from the decision making module and perform a cut-off operation on the designated unit according to the instruction requirements.

6. The safe and stable control system for power transmission and transformation according to claim 5, characterized in that: The safety and stability control system for power transmission and transformation further includes a wireless communication unit, the communication unit includes a receiving unit, a transmitting unit, a processing unit and an antenna unit, and the receiving unit, the transmitting unit, the processing unit and the antenna unit are all connected to the substation control master station; The receiving unit is responsible for receiving wireless signals from other nodes or a control center; The transmitting unit is responsible for sending data packets or control instructions in the form of wireless signals; The processing unit is responsible for processing, encoding, decoding and encryption of data; The antenna unit is used to convert the wireless signal into electromagnetic waves and radiate them.

7. A safe and stable control method for power transmission and transformation, applied to the safe and stable control system for power transmission and transformation as claimed in claim 6, characterized in that: The steps include: The substation control master station receives the fault information of each substation, and receives the cuttable power of each unit in the power plant, as well as the power operation status information of each unit; The unit cutting priority sorting module determines the predicted power of each unit according to the power operation status information of each unit and a preset trained machine learning model; The unit cutting priority sorting module determines the preset corresponding units to be cut and the corresponding cuttable power according to the fault information; According to the cuttable power and predicted power corresponding to the units to be cut, the cutting priority of each unit to be cut is sorted, and the sorting result is sent to the substation control master station; The substation control master station generates a power cut instruction according to the sorting result and sends it to the corresponding power plant end; The power plant end switches off the corresponding unit according to the switch-off instruction.

Images