Method and system for monitoring dangerous operating command of operating system of power equipment

Abstract

The invention relates to the technical field of power system safety monitoring, and provides a power equipment operating system dangerous operation command monitoring method and system, and the method comprises the steps: an operation information convergence center is used as a server, an operation command collection module is used as a client, and the client sends an authentication message; after receiving the authentication message, the server authenticates the identity of the client; the operation information aggregation center initiates a secret key updating process; the operation command acquisition module acquires operation command information of the power equipment operation system terminal in real time to form an operation command information message; and encrypting the content of the operation command information message, decrypting the operation command information message by the operation information convergence center, extracting the operation command from the operation command information message, matching the operation command with a configured dangerous operation command list, and prompting a dangerous operation alarm if the matching is successful, thereby realizing the real-time monitoring function of the dangerous operation command of the power equipment operating system. The method provides support for troubleshooting of operation and maintenance personnel, and provides guarantee for stable operation of a power grid.

Description

Technical Field

[0001] The present invention relates to the technical field of power system safety monitoring, and in particular to a method and system for monitoring dangerous operation commands of an operating system of a power device. Background Art

[0002] In the field of power equipment operation and maintenance such as substations, new energy power stations, and energy storage power stations, when maintenance personnel perform operations on power equipment, they use terminals to add, modify, and delete functions on the equipment. If there is an error in operation, it will cause equipment failure. For example, if a key information configuration file is deleted by mistake, or a third-party application is installed, causing the system to run abnormally, etc., during the problem troubleshooting process, it is impossible to effectively query all the operation record information of the operator, which has an adverse impact on the stable operation of the power equipment. Summary of the invention

[0003] The purpose of the present invention is to solve at least one technical problem in the background technology and to provide a method and system for monitoring dangerous operation commands of an electric equipment operating system.

[0004] To achieve the above object, the present invention provides a method for monitoring dangerous operation commands of an electric power equipment operating system, comprising:

[0005] Deploy an operation information aggregation center at the power station end, and configure the operation command collection object information through the operation information aggregation center for identity authentication, key update, and data reception;

[0006] Deploy the operation command collection module in the power equipment and configure the peer communication port number and IP address;

[0007] The operation information aggregation center acts as the server of the TCP / IP communication protocol, and the operation command collection module acts as the client. After the network connection is successful, the client sends an authentication message, and after the server receives the authentication message, it authenticates the client's identity.

[0008] After identity authentication is passed, the operation information aggregation center initiates the key update process;

[0009] After the key is successfully updated, the operation command collection module collects the operation command information of the power equipment operating system terminal in real time, obtains the operation user name, operation time, operation path, terminal number, IP address, and operation command, and forms an operation command information message in a fixed format;

[0010] Encrypt the content of the operation command information message and send it to the operation information aggregation center after encryption;

[0011] The operation information aggregation center receives the encrypted operation command information message sent by the operation command collection module, decrypts the operation command information message, extracts the operation command from it, and matches it with the configured dangerous operation command list. If the match is successful, a dangerous operation alarm is prompted to realize the real-time monitoring function of dangerous operation commands of the power equipment operating system.

[0012] According to one aspect of the present invention, the operation information aggregation center adds operation command collection object information through the configuration interface, including the name, IP, port number, and dangerous operation command list of the collection object, and imports the collection object public key certificate to generate the key that needs to be updated.

[0013] According to one aspect of the present invention, an operation command collection module is deployed in the power equipment, the peer communication port number and IP address are set in the interface configured by the operation command collection module, and a private key certificate is imported.

[0014] According to one aspect of the present invention, the operation information convergence center serves as the server of the TCP / IP communication protocol, and the operation command collection module serves as the client. After the network connection is successful, the client sends an authentication message, and after the server receives the authentication message, it authenticates the client identity, including:

[0015] The operation information aggregation center acts as the server of the TCP / IP protocol, and the operation command collection module acts as the client. The client initiates the network connection. The server receives the network connection request and determines whether the client IP address is the configured collection object IP address. If so, the connection request is accepted. If not, the connection request is rejected.

[0016] When the network connection is successful, the client initiates an identity authentication request. The authentication message consists of the machine name, IP address, random number, authentication type, and signature value. The national secret SM2 algorithm is used to sign the machine name, IP address, random number, and authentication type using a private key certificate. The signature value is attached to the end of the authentication message.

[0017] After receiving the authentication message, the server uses the corresponding public key certificate to verify the signature content and signature value. If the verification passes, the key is updated, otherwise the connection is disconnected.

[0018] According to one aspect of the present invention, after the identity authentication is passed, the operation information convergence center initiates a key update process, including:

[0019] After identity authentication is passed, the operation information aggregation center uses the public key certificate to encrypt the key and sends the encrypted message to the operation command collection module;

[0020] The operation command acquisition module receives the encrypted key message, decrypts the message using the private key certificate, obtains the encryption key for data transmission, and updates its own key;

[0021] After the key of the operation command collection module is successfully updated, a key update success message is sent to the operation information aggregation center.

[0022] According to one aspect of the present invention, the operation command information message content includes a message header, data length, data content, and a CRC check code, and its message format is:

[0023] Content Item Length (bytes) Detailed description Header 1 Fixed to: 0xEB Data length 2 Low position in front, high position in the back Data content n Operation command data CRC checksum 2 Data content check code .

[0024] According to one aspect of the present invention, the operation information convergence center receives the encrypted operation command information message sent by the operation command acquisition module, decrypts the operation command information message, extracts the operation command from it, and matches it with the configured dangerous operation command list. If the match is successful, a dangerous operation alarm is prompted to realize the real-time monitoring function of dangerous operation commands of the power equipment operating system, including:

[0025] The operation information convergence center receives the encrypted operation command information message and decrypts the operation command information message using the key;

[0026] After the operation command information message is decrypted, the legitimacy of the operation command information message is judged, including whether the message header, data length, and CRC check code are correct. If correct, the next operation is performed, otherwise it is discarded;

[0027] After determining that the operation command information message is legal, the data content is obtained and stored in the system database for subsequent historical data query. At the same time, the operation command is extracted from it and matched with the configured dangerous operation command list. If the match is successful, a dangerous operation alarm is prompted to realize the real-time monitoring function of dangerous operation commands of the power equipment operating system.

[0028] To achieve the above object, the present invention also provides a dangerous operation command monitoring system for an electric power equipment operating system, comprising:

[0029] The operation information aggregation center configuration module deploys the operation information aggregation center at the substation plant end, and configures the operation command collection object information through the operation information aggregation center for identity authentication, key update, and data reception;

[0030] An operation command collection module configuration module is used to deploy the operation command collection module in the power equipment and configure the peer communication port number and IP address;

[0031] Identity authentication module, the operation information aggregation center acts as the server of the TCP / IP communication protocol, and the operation command collection module acts as the client. After the network connection is successful, the client sends an authentication message, and after the server receives the authentication message, it authenticates the client's identity;

[0032] Key update module: after identity authentication is passed, the operation information aggregation center initiates the key update process;

[0033] Operation command information message generation module: after the key is successfully updated, the operation command collection module collects the operation command information of the power equipment operating system terminal in real time, obtains the operation user name, operation time, operation path, terminal number, IP address, operation command, and forms an operation command information message with a fixed format;

[0034] The operation command information message encryption module encrypts the contents of the composed operation command information message and sends the encrypted content to the operation information aggregation center;

[0035] The operation command monitoring module, the operation information aggregation center receives the encrypted operation command information message sent by the operation command acquisition module, decrypts the operation command information message, extracts the operation command from it, and matches it with the configured dangerous operation command list. If the match is successful, a dangerous operation alarm is prompted to realize the real-time monitoring function of dangerous operation commands of the power equipment operating system.

[0036] To achieve the above objectives, the present invention also provides an electronic device, comprising a processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the computer program, when executed by the processor, implements the method for monitoring dangerous operation commands of an operating system of an electric power equipment as described above.

[0037] To achieve the above objectives, the present invention also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the method for monitoring dangerous operation commands of an operating system of an electric power equipment as described above is implemented.

[0038] According to the solution of the present invention, the purpose of the present invention is to provide a method for monitoring dangerous operation commands of the operating system of an electric equipment in view of the situation that there is misoperation of the electric equipment during the operation and inspection process, which leads to equipment operation failure. The method is based on a list of dangerous operation commands, and by collecting the operation command information of the terminal of the operating system of the electric equipment, the real-time monitoring function of the dangerous operation commands of the operating system of the electric equipment is realized, which provides strong support for the operation and inspection personnel to quickly troubleshoot problems, and at the same time provides reliable guarantee for the stable operation of the power grid.

[0039] According to the solution of the present invention, starting from the safety operation requirements of power equipment, the present invention defines a list of dangerous operation commands of the power equipment operating system, collects the operation command information of the power equipment operating system terminal in real time, and matches it with the dangerous command list. If the match is successful, a dangerous operation alarm is prompted to realize the real-time monitoring function of dangerous operation commands of the power equipment operating system.

[0040] The present invention includes an operation command collection module and an operation information convergence center. Both parties use the TCP / IP protocol to communicate. After establishing a communication connection, identity authentication is required to ensure the legitimacy of the identities of both parties in communication. After the authentication is passed, data transmission is performed. The message content is encrypted using a national secret algorithm to ensure the confidentiality of data transmission. The operation information convergence center receives the operation information message sent by the operation command collection module, decrypts the message, extracts the operation command from it, and matches it with the configured dangerous operation command list. If the match is successful, a dangerous operation alarm is prompted, and a historical data query function is provided. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 A flowchart schematically showing a method for monitoring dangerous operation commands of an operating system of an electric power device according to an embodiment of the present invention;

[0042] Figure 2 The communication flow chart between the operation information convergence center and the operation command acquisition module according to an embodiment of the present invention is schematically shown. DETAILED DESCRIPTION

[0043] The present invention will now be discussed with reference to exemplary embodiments. It should be understood that the embodiments discussed are only to enable those skilled in the art to better understand and thus implement the present invention, rather than implying any limitation on the scope of the present invention.

[0044] As used herein, the term “including” and variations thereof are to be interpreted as open-ended terms meaning “including, but not limited to.” The term “based on” is to be interpreted as “based, at least in part, on.” The terms “one embodiment” and “an embodiment” are to be interpreted as “at least one embodiment.”

[0045] Figure 1 A flowchart schematically showing a method for monitoring dangerous operation commands of an operating system of an electric power device according to an embodiment of the present invention; Figure 2 The following is a schematic diagram showing the communication flow chart between the operation information convergence center and the operation command acquisition module according to an embodiment of the present invention. Figure 1 and Figure 2 As shown, in this embodiment, the method for monitoring dangerous operation commands of an electric power equipment operating system includes:

[0046] Deploy an operation information aggregation center at the power station end, and configure the operation command collection object information through the operation information aggregation center for identity authentication, key update, and data reception;

[0047] Deploy the operation command collection module in the power equipment and configure the peer communication port number and IP address;

[0048] The operation information aggregation center acts as the server of the TCP / IP communication protocol, and the operation command collection module acts as the client. After the network connection is successful, the client sends an authentication message, and after the server receives the authentication message, it authenticates the client's identity.

[0049] After identity authentication is passed, the operation information aggregation center initiates the key update process;

[0050] After the key is successfully updated, the operation command collection module collects the operation command information of the power equipment operating system terminal in real time, obtains the operation user name, operation time, operation path, terminal number, IP address, and operation command, and forms an operation command information message in a fixed format;

[0051] Encrypt the contents of the composed operation command information message and send it to the operation information aggregation center after encryption;

[0052] The operation information aggregation center receives the encrypted operation command information message sent by the operation command collection module, decrypts the operation command information message, extracts the operation command from it, and matches it with the configured dangerous operation command list. If the match is successful, a dangerous operation alarm is prompted to realize the real-time monitoring function of dangerous operation commands of the power equipment operating system.

[0053] Further, according to an embodiment of the present invention, an operation information convergence center is deployed at the substation plant end, and the operation information convergence center adds operation command collection object information through the configuration interface, and the collection object information includes the name, IP, port number, and dangerous operation command list of the collection object, and imports the collection object public key certificate at the same time to generate the key that needs to be updated. The list of dangerous operation commands of the monitoring system is shown in Table 1 below.

[0054]

[0055] Table 1

[0056] Further, according to an embodiment of the present invention, an operation command collection module is deployed in the power equipment, the peer communication port number and IP address are set in the interface configured by the operation command collection module, and the private key certificate is imported.

[0057] Further, according to an embodiment of the present invention, the operation information convergence center serves as the server of the TCP / IP communication protocol, and the operation command collection module serves as the client. After the network connection is successful, the client sends an authentication message, and after the server receives the authentication message, it authenticates the client identity, including:

[0058] The operation information aggregation center acts as the server of the TCP / IP protocol, and the operation command collection module acts as the client. The client initiates the network connection. The server receives the network connection request and determines whether the client IP address is the configured collection object IP address. If so, the connection request is accepted. If not, the connection request is rejected.

[0059] When the network connection is successful, the client initiates an identity authentication request. The authentication message consists of the machine name, IP address, random number, authentication type, and signature value. The national secret SM2 algorithm is used to sign the machine name, IP address, random number, and authentication type using a private key certificate. The signature value is attached to the end of the authentication message. The authentication message information body format is shown in Table 2 below:

[0060]

[0061]

[0062] Table 2

[0063] After receiving the authentication message, the server uses the corresponding public key certificate to verify the signature content and signature value. If the verification passes, the key is updated, otherwise the connection is disconnected.

[0064] Further, according to an embodiment of the present invention, after identity authentication is passed, the operation information convergence center initiates a key update process, including:

[0065] After identity authentication is passed, the operation information aggregation center uses the public key certificate to encrypt the key and sends the encrypted message to the operation command collection module;

[0066] The operation command acquisition module receives the encrypted key message, decrypts the message using the private key certificate, obtains the encryption key for data transmission, and updates its own key;

[0067] After the key of the operation command collection module is successfully updated, a key update success message is sent to the operation information aggregation center.

[0068] Further, according to an embodiment of the present invention, the content of the operation command information message includes a message header, data length, data content, and a CRC check code, and its message format is shown in Table 3 below:

[0069] Content Item Length (bytes) Detailed description Header 1 Fixed to: 0xEB Data length 2 Low position in front, high position in the back Data content n Operation command data CRC checksum 2 Data content check code

[0070] Table 3

[0071] Furthermore, according to an embodiment of the present invention, the operation command collection module uses the national encryption SM4 algorithm to encrypt the operation command information message content, and sends it to the operation information aggregation center after encryption.

[0072] Further, according to an embodiment of the present invention, the operation information convergence center receives the encrypted operation command information message sent by the operation command acquisition module, decrypts the operation command information message, extracts the operation command from it, and matches it with the configured dangerous operation command list. If the match is successful, a dangerous operation alarm is prompted to realize the real-time monitoring function of dangerous operation commands of the power equipment operating system, including:

[0073] The operation information convergence center receives the encrypted operation command information message and decrypts the operation command information message using the key;

[0074] After the operation command information message is decrypted, the legitimacy of the operation command information message is judged, including whether the message header, data length, and CRC check code are correct. If correct, the next operation is performed, otherwise it is discarded;

[0075] After determining that the operation command information message is legal, the data content is obtained and stored in the system database for subsequent historical data query. At the same time, the operation command is extracted from it and matched with the configured dangerous operation command list. If the match is successful, a dangerous operation alarm is prompted to realize the real-time monitoring function of dangerous operation commands of the power equipment operating system.

[0076] According to the solution of the present invention, the purpose of the present invention is to provide a method for monitoring dangerous operation commands of the operating system of an electric equipment in view of the situation that there is misoperation of the electric equipment during the operation and inspection process, which leads to equipment operation failure. The method is based on a list of dangerous operation commands, and by collecting the operation command information of the terminal of the operating system of the electric equipment, the real-time monitoring function of the dangerous operation commands of the operating system of the electric equipment is realized, which provides strong support for the operation and inspection personnel to quickly troubleshoot problems, and at the same time provides reliable guarantee for the stable operation of the power grid.

[0077] According to the solution of the present invention, starting from the safety operation requirements of power equipment, the present invention defines a list of dangerous operation commands of the power equipment operating system, collects the operation command information of the power equipment operating system terminal in real time, and matches it with the dangerous command list. If the match is successful, a dangerous operation alarm is prompted to realize the real-time monitoring function of dangerous operation commands of the power equipment operating system.

[0078] The present invention includes an operation command collection module and an operation information convergence center. Both parties use the TCP / IP protocol to communicate. After establishing a communication connection, identity authentication is required to ensure the legitimacy of the identities of both parties in communication. After the authentication is passed, data transmission is performed. The message content is encrypted using a national secret algorithm to ensure the confidentiality of data transmission. The operation information convergence center receives the operation information message sent by the operation command collection module, decrypts the message, extracts the operation command from it, and matches it with the configured dangerous operation command list. If the match is successful, a dangerous operation alarm is prompted, and a historical data query function is provided.

[0079] Furthermore, in order to achieve the above-mentioned purpose, the present invention also provides a dangerous operation command monitoring system for an electric power equipment operating system, comprising:

[0080] The operation information aggregation center configuration module deploys the operation information aggregation center at the substation plant end, and configures the operation command collection object information through the operation information aggregation center for identity authentication, key update, and data reception;

[0081] An operation command collection module configuration module is used to deploy the operation command collection module in the power equipment and configure the peer communication port number and IP address;

[0082] Identity authentication module, the operation information aggregation center acts as the server of the TCP / IP communication protocol, and the operation command collection module acts as the client. After the network connection is successful, the client sends an authentication message, and after the server receives the authentication message, it authenticates the client's identity;

[0083] Key update module: after identity authentication is passed, the operation information aggregation center initiates the key update process;

[0084] Operation command information message generation module: after the key is successfully updated, the operation command collection module collects the operation command information of the power equipment operating system terminal in real time, obtains the operation user name, operation time, operation path, terminal number, IP address, operation command, and forms an operation command information message with a fixed format;

[0085] The operation command information message encryption module encrypts the contents of the composed operation command information message and sends the encrypted content to the operation information aggregation center;

[0086] The operation command monitoring module, the operation information aggregation center receives the encrypted operation command information message sent by the operation command acquisition module, decrypts the operation command information message, extracts the operation command from it, and matches it with the configured dangerous operation command list. If the match is successful, a dangerous operation alarm is prompted to realize the real-time monitoring function of dangerous operation commands of the power equipment operating system.

[0087] The dangerous operation command monitoring system for the electric power equipment operating system according to the present invention can implement the dangerous operation command monitoring method for the electric power equipment operating system. The specific method steps are as described above and will not be repeated here.

[0088] Furthermore, to achieve the above-mentioned purpose, the present invention also provides an electronic device, including a processor, a memory, and a computer program stored in the memory and executable on the processor, wherein when the computer program is executed by the processor, the method for monitoring dangerous operation commands of the operating system of an electric power equipment as described above is implemented.

[0089] Furthermore, to achieve the above-mentioned purpose, the present invention also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the method for monitoring dangerous operation commands of an operating system of an electric power equipment as described above is implemented.

[0090] Those skilled in the art will appreciate that the modules and algorithm steps described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0091] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the above-described devices and equipment can refer to the corresponding processes in the aforementioned method implementation methods, and will not be repeated here.

[0092] In the embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the modules is only a logical function division. There may be other division methods in actual implementation, such as multiple modules or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or modules, which can be electrical, mechanical or other forms.

[0093] The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical modules, that is, they may be located in one place or distributed on multiple network modules. Some or all of the modules may be selected according to actual needs to achieve the purpose of the embodiments of the present invention.

[0094] In addition, each functional module in the embodiment of the present invention may be integrated into one processing module, or each module may exist physically separately, or two or more modules may be integrated into one module.

[0095] If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the energy-saving signal sending / receiving method of each embodiment of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard disks, ROM, RAM, magnetic disks, or optical disks.

[0096] The above description is only a preferred embodiment of the present application and an explanation of the technical principles used. Those skilled in the art should understand that the scope of the invention involved in the present application is not limited to the technical solution formed by a specific combination of the above technical features, but should also cover other technical solutions formed by any combination of the above technical features or their equivalent features without departing from the inventive concept. For example, the above features are replaced with the technical features with similar functions disclosed in this application (but not limited to) by each other.

[0097] It should be understood that the size of the serial numbers of each step in the content of the invention and the implementation methods of the present invention does not absolutely mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the implementation methods of the present invention.

Claims

1. A method for monitoring dangerous operation commands of an electric power equipment operating system, characterized in that: include: Deploy an operation information aggregation center at the power station end, and configure the operation command collection object information through the operation information aggregation center for identity authentication, key update, and data reception; Deploy the operation command collection module in the power equipment and configure the peer communication port number and IP address; The operation information aggregation center acts as the server of the TCP / IP communication protocol, and the operation command collection module acts as the client. After the network connection is successful, the client sends an authentication message, and after the server receives the authentication message, it authenticates the client's identity. After identity authentication is passed, the operation information aggregation center initiates the key update process; After the key is successfully updated, the operation command collection module collects the operation command information of the power equipment operating system terminal in real time, obtains the operation user name, operation time, operation path, terminal number, IP address, and operation command, and forms an operation command information message in a fixed format; Encrypt the content of the operation command information message and send it to the operation information aggregation center after encryption; The operation information aggregation center receives the encrypted operation command information message sent by the operation command collection module, decrypts the operation command information message, extracts the operation command from it, and matches it with the configured dangerous operation command list. If the match is successful, a dangerous operation alarm is prompted to realize the real-time monitoring function of dangerous operation commands of the power equipment operating system.

2. The method for monitoring dangerous operation commands of an electric power equipment operating system according to claim 1 is characterized in that: The operation information convergence center adds operation command collection object information through the configuration interface, including the name, IP, port number, and dangerous operation command list of the collection object, and imports the collection object public key certificate to generate the key that needs to be updated.

3. The method for monitoring dangerous operation commands of an electric power equipment operating system according to claim 1, characterized in that: Deploy the operation command collection module in the power equipment, set the peer communication port number and IP address in the operation command collection module configuration interface, and import the private key certificate.

4. The method for monitoring dangerous operation commands of an electric power equipment operating system according to claim 1, characterized in that: The operation information convergence center acts as the server of the TCP / IP communication protocol, and the operation command collection module acts as the client. After the network connection is successful, the client sends an authentication message, and after the server receives the authentication message, it authenticates the client identity, including: The operation information aggregation center acts as the server of the TCP / IP protocol, and the operation command collection module acts as the client. The client initiates the network connection. The server receives the network connection request and determines whether the client IP address is the configured collection object IP address. If so, the connection request is accepted. If not, the connection request is rejected. When the network connection is successful, the client initiates an identity authentication request. The authentication message consists of the machine name, IP address, random number, authentication type, and signature value. The national secret SM2 algorithm is used to sign the machine name, IP address, random number, and authentication type using a private key certificate. The signature value is attached to the end of the authentication message. After receiving the authentication message, the server uses the corresponding public key certificate to verify the signature content and signature value. If the verification passes, the key is updated, otherwise the connection is disconnected.

5. The method for monitoring dangerous operation commands of an electric power equipment operating system according to claim 1, characterized in that: After the identity authentication is passed, the operation information convergence center initiates the key update process, including: After identity authentication is passed, the operation information aggregation center uses the public key certificate to encrypt the key and sends the encrypted message to the operation command collection module; The operation command acquisition module receives the encrypted key message, decrypts the message using the private key certificate, obtains the encryption key for data transmission, and updates its own key; After the key of the operation command collection module is successfully updated, a key update success message is sent to the operation information aggregation center.

6. The method for monitoring dangerous operation commands of an electric power equipment operating system according to claim 1, characterized in that: The operation command information message content includes a message header, data length, data content, and a CRC check code, and its message format is: 。 7. The method for monitoring dangerous operation commands of an electric power equipment operating system according to any one of claims 1 to 6, characterized in that: The operation information convergence center receives the encrypted operation command information message sent by the operation command acquisition module, decrypts the operation command information message, extracts the operation command from it, and matches it with the configured dangerous operation command list. If the match is successful, a dangerous operation alarm is prompted to realize the real-time monitoring function of dangerous operation commands of the power equipment operating system, including: The operation information convergence center receives the encrypted operation command information message and decrypts the operation command information message using the key; After the operation command information message is decrypted, the legitimacy of the operation command information message is judged, including whether the message header, data length, and CRC check code are correct. If correct, the next operation is performed, otherwise it is discarded; After determining that the operation command information message is legal, the data content is obtained and stored in the system database for subsequent historical data query. At the same time, the operation command is extracted from it and matched with the configured dangerous operation command list. If the match is successful, a dangerous operation alarm is prompted to realize the real-time monitoring function of dangerous operation commands of the power equipment operating system.

8. The dangerous operation command monitoring system of the power equipment operating system is characterized by: include: The operation information aggregation center configuration module deploys the operation information aggregation center at the substation plant end, and configures the operation command collection object information through the operation information aggregation center for identity authentication, key update, and data reception; An operation command collection module configuration module is used to deploy the operation command collection module in the power equipment and configure the peer communication port number and IP address; Identity authentication module, the operation information aggregation center acts as the server of the TCP / IP communication protocol, and the operation command collection module acts as the client. After the network connection is successful, the client sends an authentication message, and after the server receives the authentication message, it authenticates the client's identity; Key update module: after identity authentication is passed, the operation information aggregation center initiates the key update process; Operation command information message generation module: after the key is successfully updated, the operation command collection module collects the operation command information of the power equipment operating system terminal in real time, obtains the operation user name, operation time, operation path, terminal number, IP address, operation command, and forms an operation command information message with a fixed format; The operation command information message encryption module encrypts the contents of the composed operation command information message and sends the encrypted content to the operation information aggregation center; The operation command monitoring module, the operation information aggregation center receives the encrypted operation command information message sent by the operation command acquisition module, decrypts the operation command information message, extracts the operation command from it, and matches it with the configured dangerous operation command list. If the match is successful, a dangerous operation alarm is prompted to realize the real-time monitoring function of dangerous operation commands of the power equipment operating system.

9. An electronic device, characterized in that It comprises a processor, a memory and a computer program stored in the memory and executable on the processor, wherein when the computer program is executed by the processor, the method for monitoring dangerous operation commands of an operating system of an electric power equipment as described in any one of claims 1 to 7 is implemented.

10. A computer-readable storage medium, characterized in that The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method for monitoring dangerous operation commands of an operating system of an electric power equipment as described in any one of claims 1 to 7 is implemented.

Images