A configuration method and system of a reliable main station, a storage medium and an electronic device

Abstract

The present application relates to the technical field of power grid operation and maintenance, and specifically provides a configuration method and system of a signal protection master station, comprising the following steps: calling a secondary security strategy table, and connecting a network communication with a substation; calling an SCD file of the substation, and configuring plant station information and secondary equipment information; calling primary equipment model data, and configuring a matching relationship between the secondary equipment and related primary equipment according to the primary equipment model data and the SCD file. The present application can automatically establish communication when a new substation is connected, and can accurately obtain various detailed information required for the configuration of the signal protection master station by means of the calling function of the signal protection master station, thereby automatically completing the configuration work of the substation connected to the signal protection master station. Therefore, the present application can improve the configuration efficiency and accuracy of the plant station connected to the master station, greatly save labor, greatly reduce the errors possibly caused by manual intervention, and improve the automation and intelligence of the master station configuration.

Description

Technical Field

[0001] This invention relates to the field of power grid operation and maintenance technology, and specifically to a configuration method, system storage medium, and electronic equipment for a power grid master station. Background Technology

[0002] With the development of technology, the operation and maintenance of secondary equipment in substations is gradually achieving three major transformations: from manual to automatic, from local to remote, and from decentralized to centralized. Among them, the Baoxin master station system, as the communication hub between the control center and the substation, can remotely collect and forward various information from equipment such as protection devices and waveform recorders, monitor the operating status of equipment, and remotely adjust the parameter settings of protection devices and control the start and stop of waveform recorders, which greatly improves the convenience and timeliness of operation and maintenance.

[0003] When substation equipment is connected to the security information control station, configuration work is required, including communication configuration, equipment information configuration, data configuration, and function configuration. The configuration quality of the security information control station has a profound impact on the remote operation and maintenance of secondary equipment, and directly affects the implementation of remote operation and maintenance of secondary equipment.

[0004] However, due to the numerous technical details and complex procedures involved, the configuration process for connecting substation waveform recorders to the main power grid is currently extremely complex and heavily reliant on manual operation. Errors are highly likely to occur during manual operation, such as incorrect equipment parameter settings or interface connection errors. These errors can lead to inaccurate equipment information acquisition and malfunction of monitoring and control functions, seriously threatening the stable operation of the power system. Summary of the Invention

[0005] The purpose of this disclosure is to provide a configuration method for a security information master station to solve the problems in related technologies.

[0006] To achieve the above objectives, the embodiments of this disclosure employ the following technical solutions:

[0007] According to one aspect of the present invention, a configuration method for a security information master station is provided, which is applied to the security information master station and the substation substation in a state of no communication connection.

[0008] The configuration method includes the following steps:

[0009] Summon the secondary security strategy table, read the communication information of the corresponding substation substation in the secondary security strategy table, and connect to the network communication with the substation substation according to the communication information;

[0010] Summon the SCD file of the substation substation, and configure the substation information and secondary equipment information according to the SCD file;

[0011] Summon primary equipment model data, and configure the matching relationship between secondary equipment and related primary equipment based on the primary equipment model data and the SCD file.

[0012] In some embodiments, obtaining the communication information of the substation according to the secondary security strategy table and establishing network communication with the substation according to the communication information includes:

[0013] Read the network communication address and port information of the corresponding substation substation from the secondary security strategy table, and establish network communication with the substation substation based on the network communication address and port information.

[0014] In some embodiments, configuring the plant information according to the SCD file includes:

[0015] Configure one or more of the following based on the SCD file: substation information, access type, protocol group, substation manufacturer, and substation type.

[0016] The step of configuring secondary device information according to the SCD file includes:

[0017] A secondary equipment device list is generated based on the SCD file, and the device information and monitoring parameters of each secondary equipment in the substation are configured based on the secondary equipment device list.

[0018] In some embodiments, configuring the device information of each secondary device in the substation according to the secondary device list includes:

[0019] Configure one or more of the following for each secondary device in the substation according to the secondary equipment device list: device name, type, substation, device model, manufacturer, commissioning time, and version number.

[0020] The step of configuring the monitoring parameters of each secondary device in the substation according to the secondary device list includes:

[0021] Configure the status parameters, analog parameters, and setpoint parameters of each secondary device in the substation according to the secondary equipment device list; wherein, the status parameters, analog parameters, and setpoint parameters respectively include one or more of ID, description, type, subtype, substation, and IED device.

[0022] In some embodiments, configuring the matching relationship between the secondary equipment and the relevant primary equipment based on the primary equipment model data and the SCD file includes:

[0023] Generate the primary equipment model tree of the substation based on the primary equipment model data;

[0024] The secondary equipment device list is configured to be associated with the primary equipment model tree to generate association information, and the matching relationship between the secondary equipment and the related primary equipment is configured according to the association information.

[0025] In some embodiments, the configuration method further includes:

[0026] After configuration, restart the channel.

[0027] In some embodiments, the configuration method further includes:

[0028] Receive the work plan and identify the substations that need to be configured from the work plan.

[0029] According to another aspect of the present invention, a configuration system for a security information master station is provided, comprising a security information master station, wherein the security information master station is in a state of no communication connection with the substation substation, the security information master station communicates with a network security remote operation and maintenance master station and an OCS, the network security remote operation and maintenance master station is capable of generating a secondary security policy table, and the OCS system is capable of generating primary equipment model data; the configuration system is used to implement the above-mentioned configuration method.

[0030] According to another aspect of the present invention, a storage medium is provided storing a computer program that, when executed by a processor, implements the steps of the above-described configuration method.

[0031] According to another aspect of the present invention, an electronic device is provided, comprising at least a memory and a processor, wherein a computer program is stored on the memory, and the processor implements the steps of the above-described configuration method when executing the computer program on the memory.

[0032] This invention achieves automatic communication establishment when a new substation substation is connected by establishing interfaces between the main substation and the OCS system, the network security remote operation and maintenance main station, and the power grid management platform. Utilizing the main substation's call function, it can accurately obtain various detailed information required for main substation configuration. Based on the work plan sent from the office network, it automatically completes the substation's connection configuration to the main substation. Therefore, this invention improves the efficiency and accuracy of substation connection configuration to the main station, significantly reduces manual labor and errors caused by human intervention, and enhances the automation and intelligence of main station configuration. Attached Figure Description

[0033] To more clearly illustrate the technical solutions in the embodiments of this disclosure or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this disclosure. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0034] Figure 1 This is a schematic diagram illustrating the steps of a configuration method for a security master station according to an embodiment of this disclosure;

[0035] Figure 2 This is a schematic diagram of the overall structure of a configuration system for a security master station according to an embodiment of this disclosure;

[0036] Figure 3 This is a schematic diagram illustrating the specific structure of a configuration system for a security master station according to an embodiment of this disclosure. Detailed Implementation

[0037] Various embodiments and features of this disclosure are described herein with reference to the accompanying drawings.

[0038] It should be understood that various modifications can be made to the embodiments described herein. Therefore, the above description should not be considered as limiting, but merely as an example of embodiments. Other modifications within the scope and spirit of this disclosure will be apparent to those skilled in the art.

[0039] The accompanying drawings, which are included in and form part of this specification, illustrate embodiments of the present disclosure and, together with the general description of the disclosure given above and the detailed description of the embodiments given below, serve to explain the principles of the disclosure.

[0040] These and other features of this disclosure will become apparent from the following description of preferred forms of embodiments given as non-limiting examples, with reference to the accompanying drawings.

[0041] It should also be understood that although this disclosure has been described with reference to some specific examples, those skilled in the art can certainly implement many other equivalent forms of this disclosure, which have the features described in the claims and are therefore all within the scope of protection defined herein.

[0042] The above and other aspects, features and advantages of this disclosure will become more apparent when taken in conjunction with the accompanying drawings and in view of the following detailed description.

[0043] Specific embodiments of this disclosure are described thereafter with reference to the accompanying drawings; however, it should be understood that the claimed embodiments are merely examples of this disclosure, which may be implemented in various ways. Well-known and / or repeated functions and structures are not described in detail to avoid unnecessary or redundant details that could obscure this disclosure. Therefore, the specific structural and functional details claimed herein are not intended to be limiting, but merely to serve as the basis and representative basis for the claims to teach those skilled in the art to use this disclosure in a variety of substantially any suitable detailed structures.

[0044] This specification may use the phrases “in one embodiment,” “in another embodiment,” “in yet another embodiment,” or “in still another embodiment,” all of which may refer to one or more of the same or different embodiments according to this disclosure.

[0045] In this disclosure, primary equipment refers to electrical equipment directly used for the production, transmission and distribution of electrical energy; secondary equipment refers to equipment in a substation used for protection, control, measurement and other functions, and in this case, it refers to relay protection devices, fault recorders, etc.

[0046] Example 1

[0047] like Figure 1 As shown, a configuration method for a security information management master station includes:

[0048] S1: Obtain the work plan of the substation substation, which includes the substation to be configured and the work tasks.

[0049] The work plan includes work time, substation information, and work tasks, such as "July 1, 2024, configuration of 110kV example station of Baoxin master station".

[0050] Furthermore, obtaining the work plans of the substation substations includes: obtaining the work plans from the office network.

[0051] Specifically, in combination Figure 2 , 3 According to the data, the main station 1 can receive the receiving work plan sent from the office network, identify the substation 4 that needs to be configured from the work plan, and then configure the substation 4.

[0052] The work plan is formulated by staff based on actual work needs. The work order can be uploaded to the employee client connected to the office network. The OA software reads the substation to be configured, the work task and the work time to generate the work plan, and then sends it to the main station 1 of Baoxin through the web server.

[0053] Furthermore, the aforementioned substation to be configured can describe the substation's identity information, and the main station 1 can accurately identify which substation in which substation needs to be configured based on the substation to be configured.

[0054] The above-mentioned task can describe the items that need to be configured. The main station 1 can configure the corresponding items according to the task. In this embodiment, the items that need to be configured are divided into plant information and primary equipment and secondary equipment association information.

[0055] The above-mentioned operation time is the time when the main station 1 needs to start configuration. The main station 1 can start configuration according to the operation time.

[0056] S2: Based on the work plan, summon the secondary security strategy table of the substation to be configured from the network security remote operation and maintenance master station.

[0057] According to the work plan, the remote operation and maintenance master station of the network security system requests the secondary security policy table of the substation to be configured. This includes: the security master station 1 identifies the substation 4 that needs to be configured according to the work plan, requests the secondary security policy table of the substation 4 from the remote operation and maintenance master station of the network security system, and the remote operation and maintenance master station 2 obtains the secondary security policy table from the secondary security device 42 of the substation 4 and sends it to the security master station 1.

[0058] The secondary security strategy table is an important document in the secondary security protection of power systems. It is mainly used to record and plan a series of security strategies, including those related to access control, security isolation, and data encryption, to ensure the safe and stable operation of the power system and prevent security threats such as network attacks and malicious interference to the substation's communication network.

[0059] Furthermore, the secondary security strategy table contains the necessary information for communication between the main station 1 and the substation 41, specifically including the IP address and port information of the substation 41, as well as communication configuration information involving security mechanisms such as encryption and authentication, such as identity authentication information, digital certificates, keys, access rules, and communication protocols used to build encrypted calls between the substation 41 and the main station 1.

[0060] S3: Retrieve the substation configuration file from the substation to be configured according to the work plan;

[0061] According to the work plan, the substation configuration file is summoned from the substation to be configured, including:

[0062] The main station 1 identifies the substation 4 that needs to be configured according to the work plan, and sends a request to the system that stores the configuration file (also known as the "SCD file") of the substation to request the SCD file.

[0063] Specifically, the SCD file, or Substation 4 Configuration Description File, is a tabular file based on the international standard IEC 61850 for Substation 4 communication networks and systems. It describes the configuration information, communication parameters, data models, and relationships between intelligent electronic devices (IEDs) within Substation 4.

[0064] In this embodiment, the SCD file includes the configuration information of the substation secondary equipment, the communication relationship between the equipment, and the data model of the secondary equipment. The aforementioned secondary equipment refers to the low-voltage electrical equipment required to monitor, control, regulate, and protect the operation of the primary equipment, as well as to provide operating conditions or production command signals to the operation and maintenance personnel.

[0065] Furthermore, if the main station 1 has already established communication with the substation 42, the SCD file can be retrieved directly from the substation 42.

[0066] If the main communication station 1 has not yet established communication with substation 42, the functions of the Operation Management System (also known as the "OMS system") can be utilized. Specifically, the OMS system is a management platform that exists independently of the communication link between the main communication station and the substation. It serves as a repository for equipment configuration information, facilitating maintenance personnel to obtain detailed substation configuration information when needed, such as in scenarios involving equipment upgrades, fault diagnosis, or the integration of new equipment. Since the operation of retrieving the SCD file extracts the file from the OMS system's storage medium (such as a database or file server) and does not rely on the real-time communication link between the main station and the substation, even at this time, because the main communication station 1 has not yet completed the configuration for the substation, it can still obtain the SCD file for that substation by establishing a connection with the OMS system.

[0067] Alternatively, based on the secondary security strategy table obtained in step S2, the IP address and port information, and communication configuration information of the substation 41 device in substation 4 can be obtained, and a communication link can be established between the main communication station 1 and the substation 42. This allows the main communication station 1 to directly retrieve the SCD file from the substation 42, ensuring the retrieved file has high timeliness and accuracy. This approach is equivalent to configuring part of the substation information; see step S5 for details.

[0068] S4: Summon the primary equipment model data of the substation to be configured from the operation control system according to the work plan;

[0069] The primary equipment model data of the substation to be configured is retrieved from the operation control system according to the work plan, including:

[0070] Baoxin Master Station 1 identifies the substation 4 that needs to be configured according to the work plan and sends a request to the OCS system. The OCS system sends the primary equipment model data associated with substation 4 to Baoxin Master Station.

[0071] Specifically, the Operation Control System (OCS) is mainly used for real-time control and monitoring of the power grid, enabling it to acquire real-time data on the grid's operating status, such as equipment operating parameters and power flow distribution. For substations, the OCS system stores data related to various devices within the substation, which is crucial for the normal operation, maintenance, and configuration upgrades of the substation.

[0072] In the aforementioned primary equipment model data, primary equipment refers to high-voltage electrical equipment directly used in the production, transmission, and distribution of electrical energy. In a substation, primary equipment includes transformers, circuit breakers, disconnectors, busbars, reactors, and capacitors. The primary equipment model data is a parametric description of these devices. It includes the electrical parameters of the equipment, such as the rated capacity, rated voltage, and short-circuit impedance of transformers; the rated current, rated breaking current, closing time, and opening time of circuit breakers; and the rated voltage, thermal stability current, and dynamic stability current of busbars.

[0073] In this embodiment, the primary equipment model data includes at least the primary wiring diagram, switch quantity data, and analog quantity data associated with substation 4.

[0074] S5: Configure the substation to be configured based on the secondary security strategy table, substation configuration file and primary equipment model data, and realize the configuration of substation substation access to the security master station.

[0075] The configuration for enabling substation substations to connect to the main station includes: configuring substation information and configuring the association between primary and secondary equipment in the substation.

[0076] Furthermore, the substation information includes the substation, access type, access protocol group, encryption mechanism, intelligent waveform recorder substation IP address, port number, substation manufacturer, and substation model. Configuring the substation information requires reading the corresponding information from the secondary security strategy table obtained in step S2 and the SCD file (substation configuration file) obtained in step S3, and writing it into the configuration table of the security master station 1. After configuring the substation information, the security master station 1 can establish communication connections with the substation equipment within the substation and record the corresponding information of the substations.

[0077] As described in step S2, if substation 42 is a newly connected substation and the main station 1 has not yet established communication with substation 42, in order to obtain an accurate SCD file, the communication-related part of the plant information can be configured according to the secondary security strategy table first, and after communication is established, the remaining part of the plant information in the SCD file can be obtained.

[0078] Furthermore, configuring plant information and associating primary and secondary equipment includes:

[0079] Generate a list of secondary equipment devices based on the SCD file;

[0080] Based on the primary equipment model data, generate the primary equipment model tree of the substation to be configured;

[0081] The primary and secondary equipment of the substation to be configured are associated based on the plant information, the secondary equipment list, and the primary equipment model tree.

[0082] Specifically, a secondary equipment device list is generated based on the SCD file. This list includes at least one of the following for each secondary device: device information, status variables, analog variables, and setpoints. The device information includes at least one of the following: device name, type, substation, device model, manufacturer, commissioning time, and version number. The status variables, analog variables, and setpoints each include at least one of the following: corresponding ID, description, type, subtype, substation, and IED device.

[0083] Specifically, generating the primary equipment model tree of the substation to be configured based on the primary equipment model data involves processing the primary equipment model data using specific software tools and data processing algorithms to analyze the parameters, types, connection methods, and other information of the primary equipment in detail, and generating the primary equipment model tree of substation 4. This model tree is used to present the hierarchical structure and logical relationships between various primary equipment. For example, equipment such as transformers, circuit breakers, and disconnect switches are arranged in the model tree according to their electrical connection order and functional partitions.

[0084] Specifically, the primary and secondary equipment of the substation to be configured are associated based on the substation information, the secondary equipment device list, and the primary equipment model tree. This includes: analyzing the branches and contacts of each secondary equipment with the matching primary equipment based on the substation information and the secondary equipment device list, and associating them with the primary equipment model tree according to preset data tags and association rules.

[0085] After configuring the association between primary and secondary equipment, the main station 1 ensures that the secondary equipment can accurately sense the operating status of the relevant primary equipment and respond quickly and correctly when the primary equipment experiences abnormalities or faults, such as issuing alarm signals in a timely manner and accurately performing tripping operations to isolate the fault area. This ensures the safe and stable operation of the entire power system, realizes an efficient and collaborative working mode between primary and secondary equipment, and provides solid technical support and guarantee mechanisms for the reliable transmission and distribution of power.

[0086] In specific embodiments, the configuration method provided in this disclosure further includes:

[0087] Determine if the communication channel of the main station has been restarted; if it has, confirm that the substation substation configuration is complete.

[0088] Since the communication channel needs to be restarted for the new configuration to take effect after configuration updates or new equipment access at a substation substation, the restart of the communication channel signifies that the substation substation configuration is complete. This step allows for quick verification of successful configuration. Specifically, determining whether the communication channel of the main substation has restarted can be done using software, message analysis, or by checking substation status lights or logs. For example, the time when communication between the substation and the main substation is established or re-established can be compared with the channel restart time of the main substation. If they match, the configuration is complete.

[0089] In summary, this invention achieves automatic communication establishment when a new substation substation is connected by establishing interfaces between the main substation and the OCS system, the network security remote operation and maintenance main station, and the power grid management platform. Utilizing the main substation's call function, it can accurately obtain various detailed information required for main substation configuration. Based on the work plan sent from the office network, it automatically completes the substation's connection configuration to the main substation. Therefore, this invention improves the efficiency and accuracy of substation connection configuration to the main station, significantly reduces manual labor and errors that may result from manual intervention, and enhances the automation and intelligence of main station configuration.

[0090] Example 2

[0091] This disclosure provides a configuration system for a security information management master station, used to implement the configuration method provided in Embodiment 1.

[0092] See Figure 2 The configuration system includes: a security information master station 1, which is in a state of no communication connection with the substation 41 of the equipment in the substation 4; the security information master station 1 communicates with the network security remote operation and maintenance master station 2 and the OCS; the network security remote operation and maintenance master station 2 can generate a secondary security policy table; and the OCS system 3 can generate primary equipment model data.

[0093] Furthermore, the network security remote operation and maintenance master station 2 can communicate with the secondary security equipment 42 in the substation 4 through the scheduling data network and generate a secondary security strategy table.

[0094] Furthermore, the OCS system 3 can collect descriptions of the electrical parameters, physical characteristics, and topological connections of primary equipment (such as transformers, circuit breakers, disconnectors, etc.) in the substation 4 from the remote control equipment 43, and generate primary equipment model data.

[0095] Furthermore, the configuration system also includes a power grid management platform 5, which communicates with the main station 1 via an office network and can send work plans to the main station 1.

[0096] For details, see Figure 3The main security information system 1 is configured in network security zone I, the web server 11 is configured in network security zone III, and the power grid management platform 5 is configured in network security zone IV.

[0097] Web server 11 and the main security station 1 use a forward isolation device and a reverse isolation device (abbreviated as forward / reverse isolation device in the figure) to perform security authentication to ensure communication security.

[0098] The main station 1 of the security information system is connected to the office network through a web server 11. The web server 11 can realize communication between the main station 1 of the security information system and the office network, and complete communication tasks such as converting communication protocols and performing security verification.

[0099] The configuration system provided in this disclosure makes full use of existing devices and network architectures, and can be used to implement the configuration method provided in Embodiment 1. It has high practicality and is suitable for promotion in this technical field.

[0100] Example 3

[0101] This disclosure provides a storage medium storing a computer program, which, when executed by a processor, implements the steps of the configuration method described in Embodiment 1.

[0102] Example 4

[0103] This disclosure provides an electronic device, which includes at least a memory and a processor. The memory stores a computer program, and the processor executes the computer program in the memory to implement the steps of the configuration method described in Embodiment 1.

[0104] As can be seen from the above description, the embodiments of the present invention achieve the following technical effects:

[0105] This disclosure enables automatic communication establishment when a new substation substation is connected by connecting the main station of the power supply and information technology system with the OCS system, the network security remote operation and maintenance main station, and the power grid management platform. Utilizing the main station's call function, it can accurately obtain various detailed information required for main station configuration. Furthermore, it automatically completes the substation connection configuration work based on the work plan sent from the office network, thereby improving the efficiency and accuracy of substation connection configuration, greatly saving manpower and reducing potential errors caused by manual intervention, and enhancing the automation and intelligence of main station configuration.

[0106] The aforementioned storage medium may be included in the aforementioned electronic device; or it may exist independently and not be assembled into the electronic device.

[0107] The aforementioned storage medium carries one or more programs, which, when executed by the electronic device, cause the electronic device to: acquire at least two Internet Protocol (IP) addresses; send a node evaluation request, including at least two IP addresses, to a node evaluation device, wherein the node evaluation device selects an IP address from the at least two IP addresses and returns it; and receive the IP address returned by the node evaluation device; wherein the acquired IP address indicates an edge node in the content delivery network.

[0108] Alternatively, the storage medium may carry one or more programs that, when executed by the electronic device, cause the electronic device to: receive a node evaluation request including at least two Internet Protocol (IP) addresses; select an IP address from the at least two IP addresses; and return the selected IP address; wherein the received IP address indicates an edge node in the content delivery network.

[0109] Computer program code for performing the operations of this disclosure can be written in one or more programming languages ​​or a combination thereof, including but not limited to object-oriented programming languages ​​such as Java, Smalltalk, and C++, as well as conventional procedural programming languages ​​such as the "C" language or similar programming languages. The program code can be executed entirely on the passenger's computer, partially on the passenger's computer, as a standalone software package, partially on the passenger's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving a remote computer, the remote computer can be connected to the passenger's computer via any type of network—including a local area network (LAN) or a wide area network (WAN)—or can be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0110] It should be noted that the storage medium described in this disclosure can be a computer-readable signal medium or a computer-readable storage medium, or any combination thereof. A computer-readable storage medium can be, for example,—but not limited to—an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of a computer-readable storage medium may include, but are not limited to: an electrical connection having one or more wires, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage device, magnetic storage device, or any suitable combination thereof. In this disclosure, a computer-readable storage medium can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. In this disclosure, a computer-readable signal medium can include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such propagated data signals can take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. A computer-readable signal medium may also be any storage medium other than a computer-readable storage medium, which can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device. The program code contained on the storage medium can be transmitted using any suitable medium, including but not limited to: wires, optical fibers, RF (radio frequency), etc., or any suitable combination thereof.

[0111] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of this disclosure. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions.

[0112] The units described in the embodiments of this disclosure can be implemented in software or hardware. The names of the units are not, in some cases, intended to limit the specific unit.

[0113] The functions described above in this document can be performed, at least in part, by one or more hardware logic components. For example, exemplary types of hardware logic components that can be used, without limitation, include: Field Programmable Gate Arrays (FPGAs), Application-Specific Integrated Circuits (ASICs), Application Standard Products (ASSPs), System-on-Chip (SoCs), Complex Programmable Logic Devices (CPLDs), and so on.

[0114] In the context of this disclosure, a machine-readable medium can be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, apparatus, or device. A machine-readable medium can be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium can be, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0115] The above description is merely a preferred embodiment of this disclosure and an explanation of the technical principles employed. Those skilled in the art should understand that the scope of this disclosure is not limited to technical solutions formed by specific combinations of the above-described technical features, but should also cover other technical solutions formed by arbitrary combinations of the above-described technical features or their equivalents without departing from the above-described concept. For example, technical solutions formed by substituting the above features with (but not limited to) technical features disclosed in this disclosure that have similar functions.

[0116] Furthermore, while the operations are described in a specific order, this should not be construed as requiring these operations to be performed in the specific order shown or in a sequential order. In certain environments, multitasking and parallel processing may be advantageous. Similarly, while several specific implementation details are included in the above discussion, these should not be construed as limiting the scope of this disclosure. Certain features described in the context of individual embodiments may also be implemented in combination in a single embodiment. Conversely, various features described in the context of a single embodiment may also be implemented individually or in any suitable sub-combination in multiple embodiments.

[0117] Although the subject matter has been described using language specific to structural features and / or methodological logic, it should be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or actions described above. Rather, the specific features and actions described above are merely illustrative examples of implementing the claims.

[0118] The foregoing has provided a detailed description of several embodiments of this disclosure. However, this disclosure is not limited to these specific embodiments. Those skilled in the art can make various variations and modifications based on the concept of this disclosure, and all such variations and modifications should fall within the scope of protection claimed by this disclosure.

Claims

1. A configuration method for a security information management master station, characterized in that, include: Obtain the work plan of the substation substation, wherein the work plan includes the substation to be configured and the work tasks; According to the work plan, the secondary security strategy table of the substation to be configured is summoned from the network security remote operation and maintenance master station; According to the work plan, the substation configuration file is summoned from the substation to be configured. According to the work plan, the primary equipment model data of the substation to be configured is retrieved from the operation control system; The substation to be configured is configured according to the secondary security strategy table, the substation configuration file and the primary equipment model data, so as to realize the configuration of substation substation access to the security master station; The substation to be configured is configured according to the secondary security strategy table, the substation configuration file, and the primary equipment model data, including: The substation information of the substation to be configured is generated based on the secondary security strategy table and the substation configuration file. A list of secondary equipment devices is generated based on the substation configuration file. Based on the primary equipment model data, generate the primary equipment model tree of the substation to be configured; Associate the primary and secondary equipment of the substation to be configured with the plant information, the secondary equipment list, and the primary equipment model tree; Associating the primary and secondary equipment of the substation to be configured with the plant information, the secondary equipment list, and the primary equipment model tree, including: Match each secondary device in the secondary setting device list with the primary device model tree; If a match is successful, the secondary device will be associated with the primary device model tree.

2. The configuration method according to claim 1, characterized in that, The secondary security strategy table contains the substation IP address and / or port number information of the substation to be configured; The substation configuration file includes at least one of the following: configuration information of substation secondary equipment, communication relationships between equipment, and data models of secondary equipment. The primary equipment model data includes at least one of the primary equipment wiring diagram, switch quantity data, and analog quantity data.

3. The configuration method according to claim 1, characterized in that, The plant information includes at least one of the following: substation, access type, protocol group, substation IP address, port number, substation manufacturer, and substation model.

4. The configuration method according to claim 1, characterized in that, The secondary equipment device list includes at least one of the following: device information, status variables, analog variables, and set values ​​of the secondary equipment. The device information includes at least one of the following: device name, type, substation, device model, manufacturer, commissioning time, and version number. The status variables, analog variables, and set values ​​each include at least one of the following: ID, description, type, subtype, substation, and IED device.

5. The configuration method according to claim 1, characterized in that, The method further includes: Determine whether the communication channel of the main security station has been restarted; If restarted, it confirms that the configuration of the substation substation is complete.

6. A configuration system for a credit guarantee master station, characterized in that, It includes a security information master station, a network security remote operation and maintenance master station, and an operation and control system. The security information master station is communicatively connected to the network security remote operation and maintenance master station and the operation and control system, respectively. The security information master station is used to implement the configuration method according to any one of claims 1 to 5.

7. A storage medium storing a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the configuration method according to any one of claims 1 to 5.

8. An electronic device, comprising at least a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program on the memory, it implements the steps of the configuration method according to any one of claims 1 to 5.

Images