Electric power system and electric power system construction method

Abstract

The invention relates to a power system and a power system construction method. The power system includes: a hybrid communication network; the hybrid communication network comprises a virtual private network area, a hybrid private network area and an independent private network area, the virtual private network area adopts a virtual private network networking scheme, and the virtual private network networking scheme comprises at least one of a first wireless network, a first bearer network and a first core network; the hybrid private network area adopts a hybrid private network networking scheme, and the hybrid private network networking scheme comprises at least one of a second wireless network, a second bearer network and a second core network; the independent private network area adopts an independent private network networking scheme, and the independent private network networking scheme comprises at least one of a third wireless network, a third bearer network and a third core network. Therefore, the communication network capable of satisfying the user data security and the network transmission delay can be constructed according to the power supply demand of the user power system, thereby being beneficial to realizing the power system construction satisfying the user.

Description

Technical Field

[0001] The present disclosure relates to the technical field of power systems, and in particular to a power system and a method for constructing a power system. Background Art

[0002] The new power system has developed into a complex coupled network system consisting of a physical power system and a communication information system, forming a highly coupled cyber-physical power cyber-physical system (CPS). With the access of large-scale multi-mode terminals, the number of terminal services has increased significantly, and the types of services have continued to diversify, leading to the further expansion of wide-area measurement and protection control applications, distributed energy on the distribution network side, microgrids, load-side management, and two-way interaction between users and the grid. This places increasingly higher demands on the communication of the power system. Summary of the invention

[0003] In view of this, the embodiments of the present disclosure are intended to provide a power system and a method for constructing a power system.

[0004] The technical solution of the present disclosure is achieved as follows:

[0005] In a first aspect, the present disclosure provides a power system.

[0006] The power system provided by the embodiment of the present disclosure includes:

[0007] A hybrid communication network; wherein the hybrid communication network comprises:

[0008] Virtual private network area, hybrid private network area and independent private network area;

[0009] The virtual private network area adopts a virtual private network networking solution, and the virtual private network networking solution includes at least one of a first wireless network, a first bearer network, and a first core network;

[0010] The hybrid private network area adopts a hybrid private network networking solution, and the hybrid private network networking solution includes at least one of a second wireless network, a second bearer network, and a second core network;

[0011] The independent private network area adopts an independent private network networking solution, and the independent private network networking solution includes at least one of a third wireless network, a third bearer network, and a third core network;

[0012] The data security of the third wireless network is greater than the data security of the second wireless network, and the data security of the second wireless network is greater than the data security of the first wireless network;

[0013] The data security of the third bearer network is greater than the data security of the second bearer network, and the data security of the second bearer network is greater than the data security of the first bearer network;

[0014] The data security of the third core network is greater than the data security of the second core network, and the data security of the second core network is greater than the data security of the first core network;

[0015] The network transmission time delay of the third wireless network is greater than the network transmission time delay of the second wireless network, and the network transmission time delay of the second wireless network is greater than the network transmission time delay of the first wireless network;

[0016] The network transmission delay of the third bearer network is greater than the network transmission delay of the second bearer network, and the network transmission delay of the second bearer network is greater than the network transmission delay of the first bearer network;

[0017] The network transmission timing delay of the third core network is greater than the network transmission timing delay of the second core network, and the network transmission timing delay of the second core network is greater than the network transmission timing delay of the first core network.

[0018] In some embodiments, the first wireless network adopts a DNN slicing architecture; wherein the DNN slicing architecture includes a first management information regional slice and a first production control regional slice; the first management information regional slice adopts 5QI priority protection on the wireless side and VPN isolation on the transmission side;

[0019] The first bearer network adopts VPN isolation or time slot isolation;

[0020] The first core network adopts the operator core network to form a network based on logical slices.

[0021] In some embodiments, the second wireless network includes a second management information regional slice and a second production control regional slice; the second management information regional slice adopts 5QI priority protection on the wireless side and VPN isolation on the transmission side;

[0022] The second production control measurement area slice uses RB resources on the wireless side, distinguishes the priorities of different services through 5QI priorities within the RB resource pool, uses FlexE hard pipe protection on the transmission side, and has VPN isolation inside the hard pipe;

[0023] The second bearer network adopts VPN isolation or time slot isolation;

[0024] The second core network uses power UPF deployed in substations, municipal companies, and provincial companies.

[0025] In some embodiments, the third wireless network uses an operator spectrum, a power dedicated base station, a UR_U dedicated base station, or a 5G spectrum dedicated base station;

[0026] The third bearer network is a self-built bearer network;

[0027] The third core network is a self-built core network, and the third core network is used to connect to the operator network.

[0028] In some embodiments, the hybrid communication network further comprises:

[0029] Independent private network; the independent private network is an independent base station built in a local park, and an independent frequency band is allocated using a power private network; wherein, on the core network side of the independent private network, the control plane and the user plane are completely isolated from the public network, and all business information and control information are locally retained;

[0030] The private network traffic of the independent private network is connected to the independent base station through the air interface of the independent frequency band, and the internal application traffic is diverted through the local UPF and flows directly to the application platform carried by the private cloud or edge cloud (MEC) in the park;

[0031] The signaling traffic of the independent private network is processed through the core network of the independent private network.

[0032] In some embodiments, the hybrid communication network further comprises:

[0033] Non-independent private network; the non-independent private network includes a part of the shared private network;

[0034] The partially shared private network is used to share some core network elements;

[0035] The independent private network and the non-independent private network share a core network control plane;

[0036] The private network traffic of the non-independent private network accesses the shared base station through the air interface of the independent frequency band within the park; the internal application traffic of the non-independent private network is diverted through the locally sunken UPF and flows to the application platform carried by the private cloud or edge cloud (MEC) within the park; the signaling traffic of the non-independent private network is processed through the public network core network based on the user's demand for security isolation.

[0037] In a second aspect, the present disclosure provides a method for constructing a power system, comprising:

[0038] Obtaining the power supply demand of the user's power system; wherein the power supply demand at least includes data security and network transmission time extension;

[0039] Based on the power supply demand of the user power system, a hybrid communication network is constructed; wherein the hybrid communication network includes at least one of the following:

[0040] Virtual private network area, hybrid private network area and independent private network area;

[0041] The virtual private network area adopts a virtual private network networking solution, and the virtual private network networking solution includes at least one of a first wireless network, a first bearer network, and a first core network;

[0042] The hybrid private network area adopts a hybrid private network networking solution, and the hybrid private network networking solution includes at least one of a second wireless network, a second bearer network, and a second core network;

[0043] The independent private network area adopts an independent private network networking solution, and the independent private network networking solution includes at least one of a third wireless network, a third bearer network, and a third core network;

[0044] The data security of the third wireless network is greater than the data security of the second wireless network, and the data security of the second wireless network is greater than the data security of the first wireless network;

[0045] The data security of the third bearer network is greater than the data security of the second bearer network, and the data security of the second bearer network is greater than the data security of the first bearer network;

[0046] The data security of the third core network is greater than the data security of the second core network, and the data security of the second core network is greater than the data security of the first core network;

[0047] The network transmission time delay of the third wireless network is greater than the network transmission time delay of the second wireless network, and the network transmission time delay of the second wireless network is greater than the network transmission time delay of the first wireless network;

[0048] The network transmission delay of the third bearer network is greater than the network transmission delay of the second bearer network, and the network transmission delay of the second bearer network is greater than the network transmission delay of the first bearer network;

[0049] The network transmission timing delay of the third core network is greater than the network transmission timing delay of the second core network, and the network transmission timing delay of the second core network is greater than the network transmission timing delay of the first core network.

[0050] In some embodiments, the first wireless network adopts a DNN slicing architecture; wherein the DNN slicing architecture includes a first management information regional slice and a first production control regional slice; the first management information regional slice adopts 5QI priority protection on the wireless side and VPN isolation on the transmission side;

[0051] The first bearer network adopts VPN isolation or time slot isolation;

[0052] The first core network adopts the operator core network to form a network based on logical slices.

[0053] In some embodiments, the second wireless network includes a second management information regional slice and a second production control regional slice; the second management information regional slice adopts 5QI priority protection on the wireless side and VPN isolation on the transmission side;

[0054] The second production control measurement area slice uses RB resources on the wireless side, distinguishes the priorities of different services through 5QI priorities within the RB resource pool, uses FlexE hard pipe protection on the transmission side, and has VPN isolation inside the hard pipe;

[0055] The second bearer network adopts VPN isolation or time slot isolation;

[0056] The second core network uses power UPF deployed in substations, municipal companies, and provincial companies.

[0057] In some embodiments, the third wireless network uses an operator spectrum, a power dedicated base station, a UR_U dedicated base station, or a 5G spectrum dedicated base station;

[0058] The third bearer network is a self-built bearer network;

[0059] The third core network is a self-built core network, and the third core network is used to connect to the operator network.

[0060] According to an embodiment of the present disclosure, the electric power system includes: a hybrid communication network; wherein the hybrid communication network includes: a virtual private network area, a hybrid private network area and an independent private network area; the virtual private network area adopts a virtual private network networking solution, and the virtual private network networking solution includes at least one of a first wireless network, a first bearer network, and a first core network; the hybrid private network area adopts a hybrid private network networking solution, and the hybrid private network networking solution includes at least one of a second wireless network, a second bearer network, and a second core network; the independent private network area adopts an independent private network networking solution, and the independent private network networking solution includes at least one of a third wireless network, a third bearer network, and a third core network; wherein the data security of the third wireless network is greater than the data security of the second wireless network, and the data security of the second wireless network is greater than the data security of the first wireless network; the data security of the third bearer network is greater than the data security of the third wireless network. The data security of the second bearer network is greater than that of the first bearer network; the data security of the third core network is greater than that of the second core network, and the data security of the second core network is greater than that of the first core network; the network transmission delay of the third wireless network is greater than that of the second wireless network, and the network transmission delay of the second wireless network is greater than that of the first wireless network; the network transmission delay of the third bearer network is greater than that of the second bearer network, and the network transmission delay of the second bearer network is greater than that of the first bearer network; the network transmission delay of the third core network is greater than that of the second core network, and the network transmission delay of the second core network is greater than that of the first core network. In the present application, through a hybrid communication network of a virtual private network area, a hybrid private network area and an independent private network area, it is possible to realize the construction of a communication network that can meet the user's data security and network transmission delay according to the power supply needs of the user's power system, thereby facilitating the construction of a power system that meets the user's needs.

[0061] Additional aspects and advantages of the present disclosure will be given in part in the following description and in part will be obvious from the following description or learned through practice of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0062] Figure 1 is a schematic diagram of a power system structure according to an exemplary embodiment;

[0063] Figure 2 The present invention is a flow chart of a method for constructing a power system according to an exemplary embodiment. DETAILED DESCRIPTION

[0064] Embodiments of the present disclosure are described in detail below, examples of which are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present disclosure, and should not be construed as limiting the present disclosure.

[0065] The new power system has developed into a complex coupled network system consisting of a physical power system and a communication information system, forming a highly coupled cyber-physical power cyber-physical system (CPS). With the access of large-scale multi-mode terminals, the number of terminal services has increased significantly, and the types of services have continued to diversify, leading to the further expansion of wide-area measurement and protection control applications, distributed energy on the distribution network side, microgrids, load-side management, and two-way interaction between users and the grid. This places increasingly higher demands on the communication of the power system.

[0066] In view of the above situation, the present disclosure provides a power system. Figure 1 FIG. 1 is a schematic diagram of a power system structure according to an exemplary embodiment. Figure 1 As shown, the power system comprises:

[0067] A hybrid communication network; wherein the hybrid communication network comprises:

[0068] Virtual private network area, hybrid private network area and independent private network area;

[0069] The virtual private network area adopts a virtual private network networking solution 01, and the virtual private network networking solution includes at least one of a first wireless network, a first bearer network, and a first core network;

[0070] The hybrid private network area adopts a hybrid private network networking solution 02, and the hybrid private network networking solution includes at least one of a second wireless network, a second bearer network, and a second core network;

[0071] The independent private network area adopts an independent private network networking solution 03, and the independent private network networking solution includes at least one of a third wireless network, a third bearer network, and a third core network;

[0072] The data security of the third wireless network is greater than the data security of the second wireless network, and the data security of the second wireless network is greater than the data security of the first wireless network;

[0073] The data security of the third bearer network is greater than the data security of the second bearer network, and the data security of the second bearer network is greater than the data security of the first bearer network;

[0074] The data security of the third core network is greater than the data security of the second core network, and the data security of the second core network is greater than the data security of the first core network;

[0075] The network transmission time delay of the third wireless network is greater than the network transmission time delay of the second wireless network, and the network transmission time delay of the second wireless network is greater than the network transmission time delay of the first wireless network;

[0076] The network transmission delay of the third bearer network is greater than the network transmission delay of the second bearer network, and the network transmission delay of the second bearer network is greater than the network transmission delay of the first bearer network;

[0077] The network transmission timing delay of the third core network is greater than the network transmission timing delay of the second core network, and the network transmission timing delay of the second core network is greater than the network transmission timing delay of the first core network.

[0078] In an exemplary embodiment, an electric power system comprises: a hybrid communication network; wherein the hybrid communication network comprises: a virtual private network area, a hybrid private network area and an independent private network area; the virtual private network area adopts a virtual private network networking solution, and the virtual private network networking solution comprises at least one of a first wireless network, a first bearer network and a first core network; the hybrid private network area adopts a hybrid private network networking solution, and the hybrid private network networking solution comprises at least one of a second wireless network, a second bearer network and a second core network; the independent private network area adopts an independent private network networking solution, and the independent private network networking solution comprises at least one of a third wireless network, a third bearer network and a third core network; wherein the data security of the third wireless network is greater than the data security of the second wireless network, and the data security of the second wireless network is greater than the data security of the first wireless network; the data security of the third bearer network is greater than the data security of the third wireless network. The data security of the second bearer network is greater than that of the first bearer network; the data security of the third core network is greater than that of the second core network, and the data security of the second core network is greater than that of the first core network; the network transmission delay of the third wireless network is greater than that of the second wireless network, and the network transmission delay of the second wireless network is greater than that of the first wireless network; the network transmission delay of the third bearer network is greater than that of the second bearer network, and the network transmission delay of the second bearer network is greater than that of the first bearer network; the network transmission delay of the third core network is greater than that of the second core network, and the network transmission delay of the second core network is greater than that of the first core network. In the present application, through a hybrid communication network of a virtual private network area, a hybrid private network area and an independent private network area, it is possible to realize the construction of a communication network that can meet the user's data security and network transmission delay according to the power supply needs of the user's power system, thereby facilitating the construction of a power system that meets the user's needs.

[0079] In some embodiments, the first wireless network adopts a DNN slicing architecture; wherein the DNN slicing architecture includes a first management information regional slice and a first production control regional slice; the first management information regional slice adopts 5QI priority protection on the wireless side and VPN isolation on the transmission side;

[0080] The first bearer network adopts VPN isolation or time slot isolation;

[0081] The first core network adopts the operator core network to form a network based on logical slices.

[0082] In an exemplary embodiment, the second wireless network includes a second management information regional slice and a second production control regional slice; the second management information regional slice adopts 5QI priority protection on the wireless side and VPN isolation on the transmission side;

[0083] The second production control measurement area slice uses RB resources on the wireless side, distinguishes the priorities of different services through 5QI priorities within the RB resource pool, uses FlexE hard pipe protection on the transmission side, and has VPN isolation inside the hard pipe;

[0084] The second bearer network adopts VPN isolation or time slot isolation;

[0085] The second core network uses power UPF deployed in substations, municipal companies, and provincial companies.

[0086] In an exemplary embodiment, the third wireless network uses an operator spectrum, a power-dedicated base station, a UR_U-dedicated base station, and a 5G spectrum-dedicated base station;

[0087] The third bearer network is a self-built bearer network;

[0088] The third core network is a self-built core network, and the third core network is used to connect to the operator network.

[0089] In the exemplary embodiment, terminal security covers end-to-end security authentication, and 5G terminals need to undergo chip-level encryption authentication to access the secure area, including access control and network attack detection. The internal boundary uses a company-specific security access platform to implement security functions such as encrypted transmission from wireless service terminals to the network boundary, terminal legitimacy authentication, and data isolation exchange.

[0090] Channel security mainly involves the transmission of power private network data in the operator network to achieve mutual isolation of private networks between different types of services. Among them, physical isolation and other measures can be adopted between the services accessing the production control area and the management information area, while logical isolation and other measures can be adopted between different services accessing the management information area and between different services in the production control area. Power slice security can uniformly consider access network slices, bearer network slices and core network slices, including technologies such as slice management security and slice authorization security. Slice management security covers network slice controller attack prevention and service configuration management plane attack prevention, while slice authorization security requires the provision of intra-slice authentication and authorization mechanisms to prevent unauthorized users from accessing slice resources.

[0091] In terms of access area security, when the business system of the production control area uses a wireless communication network, other data networks of the power enterprise or a virtual private network of an external public data network to communicate with its terminals in the vertical connection, a secure access area should be established. In addition, if the terminal wants to access the management information area, it can access the gateway securely through a dedicated information network.

[0092] Devices in the power system, such as PMU, protection terminals, and switchgear terminal equipment, all have built-in clocks. However, due to problems such as clock initial values ​​or clock timing accuracy, these clocks are difficult to synchronize, resulting in time deviations in the collected quantities, which in turn affects the correct execution of power services. For example, in the differential protection of the distribution network, the lack of synchronization of the protection terminals at both ends of the line will lead to inaccurate numerical calculations of the differential current IA-IB at both ends of the line, affecting the accuracy of the differential current calculation and protection logic judgment. Therefore, it is necessary to synchronize the timing of the entire network equipment and collected quantities through technologies such as satellite timing. In actual projects, the distribution network differential protection requires a timing accuracy of less than 10μs, while the distribution network PMU requires a timing accuracy of less than 1μs.

[0093] Therefore, 5G can meet the security needs of power grid control services, mainly differential protection, distribution automation, power load demand-side response, distributed energy, and precise load control.

[0094] In some embodiments, the hybrid communication network further comprises:

[0095] Independent private network; the independent private network is an independent base station built in a local park, and an independent frequency band is allocated using a power private network; wherein, on the core network side of the independent private network, the control plane and the user plane are completely isolated from the public network, and all business information and control information are locally retained;

[0096] The private network traffic of the independent private network is connected to the independent base station through the air interface of the independent frequency band, and the internal application traffic is diverted through the local UPF and flows directly to the application platform carried by the private cloud or edge cloud (MEC) in the park;

[0097] The signaling traffic of the independent private network is processed through the core network of the independent private network.

[0098] In an exemplary embodiment,

[0099] Independent private networks are mainly aimed at industry users with very high security requirements. Independent private networks are completely independent of the 5G public network and are operated by SNPN operators, providing exclusive wireless resources, independent 5G core networks, etc. Among them, independent private networks can refer to the use of independent wireless equipment, frequency resources, bearer networks and core networks, which are completely isolated from the public wireless network, bearer network and core network. Changes in public network services will not affect the quality of data transmission in the private network, forming a strictly isolated industry private network.

[0100] On the wireless side, an independent private network builds an independent base station for the local park to ensure that the power equipment resources within the private network are not occupied by the public network, and allocates an independent frequency band for the power private network to ensure that there is no frequency interference between the power private network and the 5G public network, and the data transmission of the private network is reliable.

[0101] On the core network side, an independent private network core network is built. The core network control plane and user plane are completely isolated from the public network. All business information and control information are retained locally and do not leave the power park.

[0102] The private network traffic is connected to an independent base station through an air interface with an independent frequency band. The internal application traffic is diverted through the local UPF and flows directly to the application platform carried by the private cloud or edge cloud (MEC) in the park; the signaling traffic is directly processed through the independent core network of the private network. The architecture of the independent private network reduces transmission latency, ensures that the internal business data, terminal card number and other control information of the park do not leave the park, and realizes strict data isolation.

[0103] Independent private networks can adopt customized solutions according to the needs of different industry applications, including: seamless coverage of indoor and outdoor base stations, beam management optimization for special scenarios, deployment of large-scale MIMO, providing differentiated coverage, adjusting frame structure, and realizing wireless uplink and downlink resource configuration. In addition, private network users can use the operation and maintenance management platform for self-service, manage all wireless and core network equipment, and monitor network quality.

[0104] In general, independent private network resources are completely isolated, public network adjustments do not affect private network services, and the quality of private network services is guaranteed. All information such as internal application data, terminal quantity, and location does not leave the power park, meeting the most stringent data isolation and security requirements. However, all equipment in the independent private network needs to be built separately, and considering high reliability, the construction and maintenance costs are high.

[0105] In some embodiments, the hybrid communication network further comprises:

[0106] Non-independent private network; the non-independent private network includes a part of the shared private network;

[0107] The partially shared private network is used to share some core network elements;

[0108] The independent private network and the non-independent private network share a core network control plane;

[0109] The private network traffic of the non-independent private network accesses the shared base station through the air interface of the independent frequency band within the park; the internal application traffic of the non-independent private network is diverted through the locally sunken UPF and flows to the application platform carried by the private cloud or edge cloud (MEC) within the park; the signaling traffic of the non-independent private network is processed through the public network core network based on the user's demand for security isolation.

[0110] In an exemplary embodiment, the network relies on the 5G public network and is operated by traditional operators. Non-independent private networks include the following two forms: Partially shared private network: sharing some core network elements, UPF, session management function (SMF, Session Management Function), AMF, unified data management function (UDM, Unified Data Management) and other network elements. The private network uses part of the operator's public network frequency as the exclusive carrier frequency for the private network within the park. Partially shared private networks are mainly for power users who have requirements such as data not leaving the park and low latency. In the partially shared private network solution, you can choose to sink the core network user plane of the private network to the park, or build an independent core network in the park to deploy the core network.

[0111] On the wireless side, some shared private networks share the hardware facilities of public and private network base stations in the park to reduce construction costs, and private network base stations are used to fill in weak public network coverage or blind spots. Operators in the park divide some public network frequencies as exclusive frequency bands for user private networks to ensure that there is no frequency interference between private and public networks and that private network data transmission is reliable.

[0112] On the core network side, some shared private networks should be deployed based on the different requirements of industry users for the degree of data security isolation.

[0113] On the one hand, the public and private networks can share the core network control plane, while the private network can exclusively use the core network user plane that is sunk to the local campus, meeting the needs of industry users for internal application data to not leave the campus, reducing the cost of core network construction and maintenance, and supporting terminal roaming outside the campus. On the other hand, the private network can deploy an independent core network to ensure that any information of internal applications and terminal card numbers does not leave the campus, meeting the needs of higher security isolation.

[0114] Private network traffic accesses the shared base station through the air interface of an independent frequency band within the park. Internal application traffic is diverted through the locally sunken UPF and flows directly to the application platform carried by the private cloud or edge cloud (MEC) within the park. Signaling traffic can be processed through the public core network or directly through the private independent core network based on the user's demand for security isolation.

[0115] Private network users can perform a variety of network operation and maintenance operations through the operation and maintenance management platform provided by the operator, self-manage terminal access rights, configure terminal IP address pools, set differentiated QoS parameters, monitor network quality, etc.

[0116] Since independent frequencies are allocated for some shared private networks in the park, private network services are transmitted in this independent frequency band, and public network services will not affect the channel quality of private network services. In addition, compared with independent private networks, some shared private networks and public network sharing base stations can reduce network construction costs to a certain extent. However, the specific cost savings are related to the demand for network coverage of private network services and the coverage of the public network. Once the public network coverage does not meet user needs, private network base stations need to be built to supplement the points. In addition, it cannot be ignored that base station sharing will cause mutual influence between public and private networks in terms of coverage, uplink and downlink resource allocation, etc.

[0117] Virtual private network: A virtual private network provided by technologies such as slicing, QoS and DNN (Date Network Name) customization, mainly for power users with relatively low security requirements. Among them, a virtual private network refers to a private network that shares wireless access equipment, frequency, bearer network and core network with the public network, and realizes virtualized private network through logical isolation of slicing.

[0118] On the wireless side, public and private networks share base stations and frequencies, and slices are used to achieve logical isolation and priority scheduling of public and private network spectrum resources, reducing construction costs. On the core network side, public and private networks share the core network control plane resource pool, and slices are used to isolate different degrees to reduce the construction cost and maintenance difficulty of the core network; private network users share the core network user plane pool that is sunk to the vicinity of the user, and slices are used to isolate the shared user plane resource pool to reduce transmission latency. Private network user traffic accesses shared base stations through priority scheduling or spectrum reservation based on slices on the wireless side.

[0119] 1) Application traffic is diverted through the UPF near the user and flows to the application platform of industry users, which reduces transmission latency and isolates business data to a certain extent;

[0120] 2) Signaling traffic is processed through the public core network resource pool, but slicing technology can be used to achieve isolation of the private core network control plane based on user requirements for security isolation.

[0121] Users who use virtual private networks can order slice services through the slice management system and operation and maintenance management platform, manage terminal access rights, set differentiated QoS parameters, configure terminal IP address pools, and perform other business activation and network operation and maintenance operations.

[0122] Virtual private networks share base stations, frequencies, and core network resources with the public network, and achieve logical isolation through slicing technology, which greatly reduces the cost of network construction and is very suitable for wide-area scenarios that require large-scale deployment. However, when network resources are insufficient, it will lead to resource scramble between the public and private networks. In addition, the public network may not meet the business needs of various private network users in terms of coverage, uplink and downlink resource configuration, etc. Once adjusted, it may also cause mutual impact between the public and private networks.

[0123] 3) Comparison of networking solutions: The network provision capabilities and advantages and disadvantages of the three networking modes are analyzed from seven dimensions: data security, network transmission latency, network slicing capability, industry chain maturity, construction and operation difficulty, investment scale, and policy and technical feasibility.

[0124] Virtual private network solutions have advantages in terms of policy feasibility and construction and operation difficulty. Independent private network solutions have advantages in data security, network transmission latency, and network slicing capabilities. Hybrid private networks are in between the two.

[0125] The present disclosure provides a method for constructing a power system. Figure 2 FIG. 1 is a flow chart of a method for constructing a power system according to an exemplary embodiment. Figure 2 As shown, the power system construction method includes:

[0126] Step 20: Obtain the power supply demand of the user's power system; wherein the power supply demand at least includes data security and network transmission time extension;

[0127] Step 21: construct a hybrid communication network based on the power supply demand of the user power system; wherein the hybrid communication network includes at least one of the following:

[0128] Virtual private network area, hybrid private network area and independent private network area;

[0129] The virtual private network area adopts a virtual private network networking solution, and the virtual private network networking solution includes at least one of a first wireless network, a first bearer network, and a first core network;

[0130] The hybrid private network area adopts a hybrid private network networking solution, and the hybrid private network networking solution includes at least one of a second wireless network, a second bearer network, and a second core network;

[0131] The independent private network area adopts an independent private network networking solution, and the independent private network networking solution includes at least one of a third wireless network, a third bearer network, and a third core network;

[0132] The data security of the third wireless network is greater than the data security of the second wireless network, and the data security of the second wireless network is greater than the data security of the first wireless network;

[0133] The data security of the third bearer network is greater than the data security of the second bearer network, and the data security of the second bearer network is greater than the data security of the first bearer network;

[0134] The data security of the third core network is greater than the data security of the second core network, and the data security of the second core network is greater than the data security of the first core network;

[0135] The network transmission time delay of the third wireless network is greater than the network transmission time delay of the second wireless network, and the network transmission time delay of the second wireless network is greater than the network transmission time delay of the first wireless network;

[0136] The network transmission delay of the third bearer network is greater than the network transmission delay of the second bearer network, and the network transmission delay of the second bearer network is greater than the network transmission delay of the first bearer network;

[0137] The network transmission timing delay of the third core network is greater than the network transmission timing delay of the second core network, and the network transmission timing delay of the second core network is greater than the network transmission timing delay of the first core network.

[0138] In an exemplary embodiment, a hybrid communication network includes: a virtual private network area, a hybrid private network area and an independent private network area; the virtual private network area adopts a virtual private network networking solution, and the virtual private network networking solution includes at least one of a first wireless network, a first bearer network, and a first core network; the hybrid private network area adopts a hybrid private network networking solution, and the hybrid private network networking solution includes at least one of a second wireless network, a second bearer network, and a second core network; the independent private network area adopts an independent private network networking solution, and the independent private network networking solution includes at least one of a third wireless network, a third bearer network, and a third core network; wherein the data security of the third wireless network is greater than the data security of the second wireless network, and the data security of the second wireless network is greater than the data security of the first wireless network; the data security of the third bearer network is greater than the data security of the second bearer network The data security of the second bearer network is greater than that of the first bearer network; the data security of the third core network is greater than that of the second core network, and the data security of the second core network is greater than that of the first core network; the network transmission delay of the third wireless network is greater than that of the second wireless network, and the network transmission delay of the second wireless network is greater than that of the first wireless network; the network transmission delay of the third bearer network is greater than that of the second bearer network, and the network transmission delay of the second bearer network is greater than that of the first bearer network; the network transmission delay of the third core network is greater than that of the second core network, and the network transmission delay of the second core network is greater than that of the first core network. In the present application, through a hybrid communication network of virtual private network areas, hybrid private network areas and independent private network areas, it is possible to realize the construction of a communication network that can meet the user's data security and network transmission delay according to the power supply needs of the user's power system, thereby facilitating the construction of a power system that meets the user's needs.

[0139] In some embodiments, the first wireless network adopts a DNN slicing architecture; wherein the DNN slicing architecture includes a first management information regional slice and a first production control regional slice; the first management information regional slice adopts 5QI priority protection on the wireless side and VPN isolation on the transmission side;

[0140] The first bearer network adopts VPN isolation or time slot isolation;

[0141] The first core network adopts the operator core network to form a network based on logical slices.

[0142] In an exemplary embodiment, the second wireless network includes a second management information regional slice and a second production control regional slice; the second management information regional slice adopts 5QI priority protection on the wireless side and VPN isolation on the transmission side;

[0143] The second production control measurement area slice uses RB resources on the wireless side, distinguishes the priorities of different services through 5QI priorities within the RB resource pool, uses FlexE hard pipe protection on the transmission side, and has VPN isolation inside the hard pipe;

[0144] The second bearer network adopts VPN isolation or time slot isolation;

[0145] The second core network uses power UPF deployed in substations, municipal companies, and provincial companies.

[0146] In an exemplary embodiment, the third wireless network uses an operator spectrum, a power-dedicated base station, a UR_U-dedicated base station, and a 5G spectrum-dedicated base station;

[0147] The third bearer network is a self-built bearer network;

[0148] The third core network is a self-built core network, and the third core network is used to connect to the operator network.

[0149] In the exemplary embodiment, terminal security covers end-to-end security authentication, and 5G terminals need to undergo chip-level encryption authentication to access the secure area, including access control and network attack detection. The internal boundary uses a company-specific security access platform to implement security functions such as encrypted transmission from wireless service terminals to the network boundary, terminal legitimacy authentication, and data isolation exchange.

[0150] Channel security mainly involves the transmission of power private network data in the operator network to achieve mutual isolation of private networks between different types of services. Among them, physical isolation and other measures can be adopted between the services accessing the production control area and the management information area, while logical isolation and other measures can be adopted between different services accessing the management information area and between different services in the production control area. Power slice security can uniformly consider access network slices, bearer network slices and core network slices, including technologies such as slice management security and slice authorization security. Slice management security covers network slice controller attack prevention and service configuration management plane attack prevention, while slice authorization security requires the provision of intra-slice authentication and authorization mechanisms to prevent unauthorized users from accessing slice resources.

[0151] In terms of access area security, when the business system of the production control area uses a wireless communication network, other data networks of the power enterprise or a virtual private network of an external public data network to communicate with its terminals in the vertical connection, a secure access area should be established. In addition, if the terminal wants to access the management information area, it can access the gateway securely through a dedicated information network.

[0152] Devices in the power system, such as PMU, protection terminals, and switchgear terminal equipment, all have built-in clocks. However, due to problems such as clock initial values ​​or clock timing accuracy, these clocks are difficult to synchronize, resulting in time deviations in the collected quantities, which in turn affects the correct execution of power services. For example, in the differential protection of the distribution network, the lack of synchronization of the protection terminals at both ends of the line will lead to inaccurate numerical calculations of the differential current IA-IB at both ends of the line, affecting the accuracy of the differential current calculation and protection logic judgment. Therefore, it is necessary to synchronize the timing of the entire network equipment and collected quantities through technologies such as satellite timing. In actual projects, the distribution network differential protection requires a timing accuracy of less than 10μs, while the distribution network PMU requires a timing accuracy of less than 1μs.

[0153] Therefore, 5G can meet the security needs of power grid control services, mainly differential protection, distribution automation, power load demand-side response, distributed energy, and precise load control.

[0154] In some embodiments, the hybrid communication network further comprises:

[0155] Independent private network; the independent private network is an independent base station built in a local park, and an independent frequency band is allocated using a power private network; wherein, on the core network side of the independent private network, the control plane and the user plane are completely isolated from the public network, and all business information and control information are locally retained;

[0156] The private network traffic of the independent private network is connected to the independent base station through the air interface of the independent frequency band, and the internal application traffic is diverted through the local UPF and flows directly to the application platform carried by the private cloud or edge cloud (MEC) in the park;

[0157] The signaling traffic of the independent private network is processed through the core network of the independent private network.

[0158] In an exemplary embodiment,

[0159] Independent private networks are mainly aimed at industry users with very high security requirements. Independent private networks are completely independent of the 5G public network and are operated by SNPN operators, providing exclusive wireless resources, independent 5G core networks, etc. Among them, independent private networks can refer to the use of independent wireless equipment, frequency resources, bearer networks and core networks, which are completely isolated from the public wireless network, bearer network and core network. Changes in public network services will not affect the quality of data transmission in the private network, forming a strictly isolated industry private network.

[0160] On the wireless side, an independent private network builds an independent base station for the local park to ensure that the power equipment resources within the private network are not occupied by the public network, and allocates an independent frequency band for the power private network to ensure that there is no frequency interference between the power private network and the 5G public network, and the data transmission of the private network is reliable.

[0161] On the core network side, an independent private network core network is built. The core network control plane and user plane are completely isolated from the public network. All business information and control information are retained locally and do not leave the power park.

[0162] The private network traffic is connected to an independent base station through an air interface with an independent frequency band. The internal application traffic is diverted through the local UPF and flows directly to the application platform carried by the private cloud or edge cloud (MEC) in the park; the signaling traffic is directly processed through the independent core network of the private network. The architecture of the independent private network reduces transmission latency, ensures that the internal business data, terminal card number and other control information of the park do not leave the park, and realizes strict data isolation.

[0163] Independent private networks can adopt customized solutions according to the needs of different industry applications, including: seamless coverage of indoor and outdoor base stations, beam management optimization for special scenarios, deployment of large-scale MIMO, providing differentiated coverage, adjusting frame structure, and realizing wireless uplink and downlink resource configuration. In addition, private network users can use the operation and maintenance management platform for self-service, manage all wireless and core network equipment, and monitor network quality.

[0164] In general, independent private network resources are completely isolated, public network adjustments do not affect private network services, and the quality of private network services is guaranteed. All information such as internal application data, terminal quantity, and location does not leave the power park, meeting the most stringent data isolation and security requirements. However, all equipment in the independent private network needs to be built separately, and considering high reliability, the construction and maintenance costs are high.

[0165] In some embodiments, the hybrid communication network further comprises:

[0166] Non-independent private network; the non-independent private network includes a part of the shared private network;

[0167] The partially shared private network is used to share some core network elements;

[0168] The independent private network and the non-independent private network share a core network control plane;

[0169] The private network traffic of the non-independent private network accesses the shared base station through the air interface of the independent frequency band within the park; the internal application traffic of the non-independent private network is diverted through the locally sunken UPF and flows to the application platform carried by the private cloud or edge cloud (MEC) within the park; the signaling traffic of the non-independent private network is processed through the public network core network based on the user's demand for security isolation.

[0170] In an exemplary embodiment, the network relies on the 5G public network and is operated by traditional operators. Non-independent private networks include the following two forms: Partially shared private network: sharing some core network elements, UPF, session management function (SMF, Session Management Function), AMF, unified data management function (UDM, Unified Data Management) and other network elements. The private network uses part of the operator's public network frequency as the exclusive carrier frequency for the private network within the park. Partially shared private networks are mainly for power users who have requirements such as data not leaving the park and low latency. In the partially shared private network solution, you can choose to sink the core network user plane of the private network to the park, or build an independent core network in the park to deploy the core network.

[0171] On the wireless side, some shared private networks share the hardware facilities of public and private network base stations in the park to reduce construction costs, and private network base stations are used to fill in weak public network coverage or blind spots. Operators in the park divide some public network frequencies as exclusive frequency bands for user private networks to ensure that there is no frequency interference between private and public networks and that private network data transmission is reliable.

[0172] On the core network side, some shared private networks should be deployed based on the different requirements of industry users for the degree of data security isolation.

[0173] On the one hand, the public and private networks can share the core network control plane, while the private network can exclusively use the core network user plane that is sunk to the local campus, meeting the needs of industry users for internal application data to not leave the campus, reducing the cost of core network construction and maintenance, and supporting terminal roaming outside the campus. On the other hand, the private network can deploy an independent core network to ensure that any information of internal applications and terminal card numbers does not leave the campus, meeting the needs of higher security isolation.

[0174] Private network traffic accesses the shared base station through the air interface of an independent frequency band within the park. Internal application traffic is diverted through the locally sunken UPF and flows directly to the application platform carried by the private cloud or edge cloud (MEC) within the park. Signaling traffic can be processed through the public core network or directly through the private independent core network based on the user's demand for security isolation.

[0175] Private network users can perform a variety of network operation and maintenance operations through the operation and maintenance management platform provided by the operator, self-manage terminal access rights, configure terminal IP address pools, set differentiated QoS parameters, monitor network quality, etc.

[0176] Since independent frequencies are allocated for some shared private networks in the park, private network services are transmitted in this independent frequency band, and public network services will not affect the channel quality of private network services. In addition, compared with independent private networks, some shared private networks and public network sharing base stations can reduce network construction costs to a certain extent. However, the specific cost savings are related to the demand for network coverage of private network services and the coverage of the public network. Once the public network coverage does not meet user needs, private network base stations need to be built to supplement the points. In addition, it cannot be ignored that base station sharing will cause mutual influence between public and private networks in terms of coverage, uplink and downlink resource allocation, etc.

[0177] Virtual private network: A virtual private network provided by technologies such as slicing, QoS and DNN (Date Network Name) customization, mainly for power users with relatively low security requirements. Among them, a virtual private network refers to a private network that shares wireless access equipment, frequency, bearer network and core network with the public network, and realizes virtualized private network through logical isolation of slicing.

[0178] On the wireless side, public and private networks share base stations and frequencies, and slices are used to achieve logical isolation and priority scheduling of public and private network spectrum resources, reducing construction costs. On the core network side, public and private networks share the core network control plane resource pool, and slices are used to isolate different degrees to reduce the construction cost and maintenance difficulty of the core network; private network users share the core network user plane pool that is sunk to the vicinity of the user, and slices are used to isolate the shared user plane resource pool to reduce transmission latency. Private network user traffic accesses shared base stations through priority scheduling or spectrum reservation based on slices on the wireless side.

[0179] 1) Application traffic is diverted through the UPF near the user and flows to the application platform of industry users, which reduces transmission latency and isolates business data to a certain extent;

[0180] 2) Signaling traffic is processed through the public core network resource pool, but slicing technology can be used to achieve isolation of the private core network control plane based on user requirements for security isolation.

[0181] Users who use virtual private networks can order slice services through the slice management system and operation and maintenance management platform, manage terminal access rights, set differentiated QoS parameters, configure terminal IP address pools, and perform other business activation and network operation and maintenance operations.

[0182] Virtual private networks share base stations, frequencies, and core network resources with the public network, and achieve logical isolation through slicing technology, which greatly reduces the cost of network construction and is very suitable for wide-area scenarios that require large-scale deployment. However, when network resources are insufficient, it will lead to resource scramble between the public and private networks. In addition, the public network may not meet the business needs of various private network users in terms of coverage, uplink and downlink resource configuration, etc. Once adjusted, it may also cause mutual impact between the public and private networks.

[0183] 3) Comparison of networking solutions: The network provision capabilities and advantages and disadvantages of the three networking modes are analyzed from seven dimensions: data security, network transmission latency, network slicing capability, industry chain maturity, construction and operation difficulty, investment scale, and policy and technical feasibility.

[0184] Virtual private network solutions have advantages in terms of policy feasibility and construction and operation difficulty. Independent private network solutions have advantages in data security, network transmission latency, and network slicing capabilities. Hybrid private networks are in between the two.

[0185] It should be noted that the logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as a sequenced list of executable instructions for implementing logical functions, and can be specifically implemented in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute instructions), or in combination with these instruction execution systems, devices or apparatuses. For the purposes of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in combination with these instruction execution systems, devices or apparatuses. More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection portion with one or more wirings (electronic device), a portable computer disk box (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium and then editing, interpreting or otherwise processing in a suitable manner if necessary, and then stored in a computer memory.

[0186] It should be understood that the various parts of the present disclosure can be implemented in hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, multiple steps or methods can be implemented in software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0187] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present disclosure. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.

[0188] In the description of the present disclosure, it should be understood that the terms "center", "longitudinal", "lateral", "length", "width", "thickness", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", "clockwise", "counterclockwise", "axial", "radial", "circumferential" and the like indicate orientations or positional relationships based on the orientations or positional relationships shown in the accompanying drawings, and are only for the convenience of describing the present disclosure and simplifying the description, and do not indicate or imply that the referred device or element must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be understood as a limitation on the present disclosure.

[0189] In addition, the terms "first", "second", etc. used in the embodiments of the present disclosure are only used for descriptive purposes and should not be understood as indicating or implying relative importance, or implicitly indicating the number of technical features indicated in the embodiments. Therefore, the features defined by the terms "first", "second", etc. in the embodiments of the present disclosure may explicitly or implicitly indicate that at least one of the features is included in the embodiment. In the description of the present disclosure, the word "multiple" means at least two or two or more, such as two, three, four, etc., unless otherwise clearly and specifically defined in the embodiments.

[0190] In the present disclosure, unless otherwise clearly specified or limited in the embodiments, the terms "installed", "connected", "connected" and "fixed" etc. appearing in the embodiments should be understood in a broad sense. For example, the connection can be a fixed connection, a detachable connection, or an integrated connection. It can be understood that it can also be a mechanical connection, an electrical connection, etc.; of course, it can also be a direct connection, or an indirect connection through an intermediate medium, or it can be the internal connection of two elements, or the interaction relationship between two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present disclosure can be understood according to the specific implementation situation.

[0191] In the present disclosure, unless otherwise clearly specified and limited, a first feature being "above" or "below" a second feature may mean that the first and second features are in direct contact, or the first and second features are in indirect contact through an intermediate medium. Moreover, a first feature being "above", "above" or "above" a second feature may mean that the first feature is directly above or obliquely above the second feature, or simply means that the first feature is higher in level than the second feature. A first feature being "below", "below" or "below" a second feature may mean that the first feature is directly below or obliquely below the second feature, or simply means that the first feature is lower in level than the second feature.

[0192] Although the embodiments of the present disclosure have been shown and described above, it is to be understood that the above embodiments are exemplary and are not to be construed as limitations of the present disclosure. A person skilled in the art may change, modify, replace and vary the above embodiments within the scope of the present disclosure.

Claims

1. A power system, characterized in that: Comprising a hybrid communication network; wherein the hybrid communication network comprises: Virtual private network area, hybrid private network area and independent private network area; The virtual private network area adopts a virtual private network networking solution, and the virtual private network networking solution includes at least one of a first wireless network, a first bearer network, and a first core network; The hybrid private network area adopts a hybrid private network networking solution, and the hybrid private network networking solution includes at least one of a second wireless network, a second bearer network, and a second core network; The independent private network area adopts an independent private network networking solution, and the independent private network networking solution includes at least one of a third wireless network, a third bearer network, and a third core network; The data security of the third wireless network is greater than the data security of the second wireless network, and the data security of the second wireless network is greater than the data security of the first wireless network; The data security of the third bearer network is greater than the data security of the second bearer network, and the data security of the second bearer network is greater than the data security of the first bearer network; The data security of the third core network is greater than the data security of the second core network, and the data security of the second core network is greater than the data security of the first core network; The network transmission time delay of the third wireless network is greater than the network transmission time delay of the second wireless network, and the network transmission time delay of the second wireless network is greater than the network transmission time delay of the first wireless network; The network transmission delay of the third bearer network is greater than the network transmission delay of the second bearer network, and the network transmission delay of the second bearer network is greater than the network transmission delay of the first bearer network; The network transmission timing delay of the third core network is greater than the network transmission timing delay of the second core network, and the network transmission timing delay of the second core network is greater than the network transmission timing delay of the first core network.

2. The power system according to claim 1, characterized in that: The first wireless network adopts a DNN slice architecture; wherein the DNN slice architecture includes a first management information regional slice and a first production control regional slice; the first management information regional slice adopts 5QI priority protection on the wireless side and VPN isolation on the transmission side; The first bearer network adopts VPN isolation or time slot isolation; The first core network adopts the operator core network to form a network based on logical slices.

3. The power system according to claim 1, characterized in that: The second wireless network includes a second management information regional slice and a second production control regional slice; the second management information regional slice adopts 5QI priority protection on the wireless side and VPN isolation on the transmission side; The second production control measurement area slice uses RB resources on the wireless side, distinguishes the priorities of different services through 5QI priorities within the RB resource pool, uses FlexE hard pipe protection on the transmission side, and has VPN isolation inside the hard pipe; The second bearer network adopts VPN isolation or time slot isolation; The second core network uses power UPF deployed in substations, municipal companies, and provincial companies.

4. The power system according to claim 1, characterized in that: The third wireless network uses operator spectrum, power dedicated base station, UR_U dedicated base station, and 5G spectrum dedicated base station; The third bearer network is a self-built bearer network; The third core network is a self-built core network, and the third core network is used to connect to the operator network.

5. The power system according to claim 1, characterized in that: The hybrid communication network further comprises: Independent private network; the independent private network is an independent base station built in a local park, and an independent frequency band is allocated using a power private network; wherein, on the core network side of the independent private network, the control plane and the user plane are completely isolated from the public network, and all business information and control information are locally retained; The private network traffic of the independent private network is connected to the independent base station through the air interface of the independent frequency band, and the internal application traffic is diverted through the local UPF and flows directly to the application platform carried by the private cloud or edge cloud (MEC) in the park; The signaling traffic of the independent private network is processed through the core network of the independent private network.

6. The power system according to claim 5, characterized in that: The hybrid communication network further comprises: Non-independent private network; the non-independent private network includes a part of the shared private network; The partially shared private network is used to share some core network elements; The independent private network and the non-independent private network share a core network control plane; The private network traffic of the non-independent private network accesses the shared base station through the air interface of the independent frequency band within the park; the internal application traffic of the non-independent private network is diverted through the locally sunken UPF and flows to the application platform carried by the private cloud or edge cloud (MEC) within the park; the signaling traffic of the non-independent private network is processed through the public network core network based on the user's demand for security isolation.

7. A method for constructing a power system, characterized in that: include: Obtaining the power supply demand of the user's power system; wherein the power supply demand at least includes data security and network transmission time extension; Based on the power supply demand of the user power system, a hybrid communication network is constructed; wherein the hybrid communication network includes at least one of the following: Virtual private network area, hybrid private network area and independent private network area; The virtual private network area adopts a virtual private network networking solution, and the virtual private network networking solution includes at least one of a first wireless network, a first bearer network, and a first core network; The hybrid private network area adopts a hybrid private network networking solution, and the hybrid private network networking solution includes at least one of a second wireless network, a second bearer network, and a second core network; The independent private network area adopts an independent private network networking solution, and the independent private network networking solution includes at least one of a third wireless network, a third bearer network, and a third core network; The data security of the third wireless network is greater than the data security of the second wireless network, and the data security of the second wireless network is greater than the data security of the first wireless network; The data security of the third bearer network is greater than the data security of the second bearer network, and the data security of the second bearer network is greater than the data security of the first bearer network; The data security of the third core network is greater than the data security of the second core network, and the data security of the second core network is greater than the data security of the first core network; The network transmission time delay of the third wireless network is greater than the network transmission time delay of the second wireless network, and the network transmission time delay of the second wireless network is greater than the network transmission time delay of the first wireless network; The network transmission delay of the third bearer network is greater than the network transmission delay of the second bearer network, and the network transmission delay of the second bearer network is greater than the network transmission delay of the first bearer network; The network transmission timing delay of the third core network is greater than the network transmission timing delay of the second core network, and the network transmission timing delay of the second core network is greater than the network transmission timing delay of the first core network.

8. The method for constructing a power system according to claim 7, characterized in that: The first wireless network adopts a DNN slice architecture; wherein the DNN slice architecture includes a first management information regional slice and a first production control regional slice; the first management information regional slice adopts 5QI priority protection on the wireless side and VPN isolation on the transmission side; The first bearer network adopts VPN isolation or time slot isolation; The first core network adopts the operator core network to form a network based on logical slices.

9. The method for constructing a power system according to claim 7, characterized in that: The second wireless network includes a second management information regional slice and a second production control regional slice; the second management information regional slice adopts 5QI priority protection on the wireless side and VPN isolation on the transmission side; The second production control measurement area slice uses RB resources on the wireless side, distinguishes the priorities of different services through 5QI priorities within the RB resource pool, uses FlexE hard pipe protection on the transmission side, and has VPN isolation inside the hard pipe; The second bearer network adopts VPN isolation or time slot isolation; The second core network uses power UPF deployed in substations, municipal companies, and provincial companies.

10. The method for constructing a power system according to claim 7, characterized in that: The third wireless network uses operator spectrum, power dedicated base station, UR_U dedicated base station, and 5G spectrum dedicated base station; The third bearer network is a self-built bearer network; The third core network is a self-built core network, and the third core network is used to connect to the operator network.

Images