Relay protection device constant value remote operation method and system

Abstract

The invention discloses a relay protection device constant value remote operation method and system, and the system comprises a main station, a local operation station and a plurality of relay protection devices, and a local operation station authorization management system instantiates an independent authorization management unit based on each relay protection device in a transformer substation. Verifying the validity of the relay protection device responding to the master station instruction according to the authorization information; the main station remotely manages the constant value of the relay protection device based on a file mode, and notifies the relay protection device to generate or execute a constant value file in an instruction remote control mode; the relay protection device is checked and permitted by the authorization management unit of the local operation station when responding to a constant value checking or modifying instruction of the master station. According to the technical scheme, the problem that the constant value of the protection device is illegally modified due to the fact that single-line communication between the master station and the relay protection device is influenced by illegal invasion can be avoided, and the reliability and the safety of the system are improved while the remote management efficiency of the constant value of the device is improved.

Description

Technical Field

[0001] The invention relates to a remote management technology for setting values ​​of a transformer substation relay protection device, and in particular to a remote operation method for setting values ​​of a relay protection device based on verification authorization of a local operation station. Background Art

[0002] The relay protection device is the first barrier to the safe and reliable operation of the power grid. The setting value is the basis for the correct operation of the relay protection device. The correctness and adaptability of the setting value play a very important role in the correct operation of the relay protection device and the safe operation of the power grid. At present, there are two main ways to set the setting value of the relay protection device. One is manual on-site modification and verification, and the other is forwarding modification step by step based on the information point table mapping method. The former involves a large number of manual operations and low efficiency, and the latter involves multi-level communication mapping conversion links, which increases the complexity of the system.

[0003] With the promotion of smart substations and unmanned operation, a file-based remote operation method for relay protection devices has been proposed, and the communication link has been simplified to file transmission and command response between the main station and the relay protection device. However, while the remote management of the setting is simplified, there are also security risks. The information security of the communication network inside the substation and the communication network between the substation and the dispatching end will affect the reliability of the remote operation of the relay protection device. Summary of the invention

[0004] The purpose of the present invention is to provide a method and system for remote operation of a relay protection device setting value, which can improve the reliability of remote operation of a relay protection device setting value while reducing system complexity.

[0005] In order to achieve the above object, the solution of the present invention is:

[0006] A method for remotely operating a relay protection device, comprising the following steps:

[0007] Step A, the master station sends the unique identification code, authorization information and signature of the relay protection device to the local operation station through encrypted communication;

[0008] Step B, the local operation station enters the authorization management unit corresponding to the relay protection device based on the unique identification code, verifies the validity of the information based on the authorization information and the signature, and opens the authorization function if the verification passes;

[0009] Step C, the master station initiates a command to view or modify a setting value to the relay protection device and sends the signature at the same time;

[0010] Step D, the relay protection device sends the received signature together with its own unique identification code to the local operation station to apply for authorization;

[0011] Step E: The local operation station enters the authorization management unit corresponding to the relay protection device based on the unique identification code and performs signature verification. If the signature verification is passed, an authorization command is fed back to the relay protection device, otherwise authorization is not granted;

[0012] Step F, the relay protection device responds to the master station's instruction to view or modify the setting value according to the authorization command, and generates or executes the setting value file.

[0013] The signature issued by the master station is formed based on the authorization information.

[0014] The above-mentioned local operation station authorization management system instantiates a separate authorization management unit based on each relay protection device in the substation.

[0015] The above-mentioned local operation station records authorization log information, including authorization information for each verification.

[0016] There is at most one valid authorization information in each authorization management unit. When the latest authorization information is received, the historical authorization information becomes invalid. Each piece of authorization information is used for authorization verification at most once and becomes invalid immediately after verification. After the authorization information becomes invalid, the authorization management unit will no longer respond to the authorization application of the corresponding relay protection device before the authorization information is updated.

[0017] In the above step F, the relay protection device responds to the master station's command to view the set value, generates an original set value file for the master station to view; or, the relay protection device responds to the master station's command to modify the set value, parses and verifies the updated set value file from the master station, and modifies the device set value.

[0018] Before initiating a command to view or modify a set value, the above-mentioned master station re-forms the authorization information and sends it to the local operation station to activate the authorization management unit.

[0019] A relay protection device fixed value remote operation system, used to implement the relay protection device fixed value remote operation method as described above; comprising a master station, a local operation station and a plurality of relay protection devices;

[0020] The master station is configured to send a unique identification code, authorization information and signature of the relay protection device to the local operation station through encrypted communication;

[0021] The local operation station is configured to enter the authorization management unit corresponding to the relay protection device based on the unique identification code, and verify the validity of the information based on the authorization information and the signature, and open the authorization function if the verification passes;

[0022] The master station is further configured to initiate a viewing or modifying setting value instruction to the relay protection device after opening the authorization function, and send the signature at the same time;

[0023] The relay protection device is also configured to send the received signature together with its own unique identification code to a local operating station to apply for authorization;

[0024] The local operation station is further configured to enter the authorization management unit corresponding to the relay protection device based on the unique identification code and perform signature verification. If the signature verification is passed, an authorization command is fed back to the relay protection device, otherwise, authorization is not granted;

[0025] The relay protection device is also configured to respond to the master station's instruction to view or modify set values ​​and generate or execute set value files according to the authorization command.

[0026] After adopting the above scheme, the present invention can prevent the single-line communication between the master station and the relay protection device from being affected by illegal intrusion, resulting in illegal modification of the protection device settings. While improving the efficiency of remote management of device settings, the reliability and safety of the system are improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Figure 1 is a schematic diagram of an embodiment of the present invention;

[0028] Figure 2 This is a schematic diagram of a master station consulting a certain relay protection setting N according to an embodiment of the present invention;

[0029] Figure 3 It is a schematic diagram of a master station modifying a certain relay protection setting N according to an embodiment of the present invention. DETAILED DESCRIPTION

[0030] The technical solutions and beneficial effects of the present invention will be described in detail below with reference to the accompanying drawings.

[0031] The present invention provides a remote operating system for setting values ​​of a relay protection device, comprising a main station, a local operating station and a relay protection device, wherein the functional responsibilities among the three can be simplified to that the main station remotely operates the setting values ​​of the relay protection device in a documented manner; before the relay protection device responds to the operating instructions of the main station, it must first apply for authorization from the local operating station; the local operating station authorizes and manages the relay protection device to respond to the remote operating setting value instructions of the main station, and the authorization basis comes from the main station, and the authorization log information is recorded at the same time.

[0032] The master station is a general term for the remote dispatching function system, including the fixed value management system, encryption management system, communication service management system, etc. As the initiator of fixed value viewing and modification, the master station, in addition to the fixed value management function, must also have the signature encryption distribution function. The local operation station instantiates a separate authorization management unit based on each relay protection device in the station, verifies and authorizes the relay protection device to respond to the master station request instruction, and records the verification authorization information. As a terminal responder, the relay protection device can only generate or execute the fixed value file with the authorization of the local operation station.

[0033] A unique identification code is established for the relay protection device in the substation, which can be used as a communication identifier between the local operation station, the master station and the relay protection device. The local operation station and the master station use encrypted communication to obtain the authorization information and signature issued by the master station as the basis for authorization management. There is at most one valid authorization information in the authorization management unit. When the latest one is received, the historical authorization information becomes invalid; each authorization information is used for authorization verification at most once and becomes invalid immediately after verification. After the authorization information becomes invalid, the authorization management unit will no longer respond to the authorization application of the corresponding relay protection device before the authorization information is updated.

[0034] The local operation station authorization management system instantiates a separate authorization management unit based on each relay protection device in the substation, and manages the authorization and permission of the relay protection device to respond to the master station to view or modify the setting command. At the same time, the local operation station has the function of recording and saving the relevant information of each authorization verification, which is convenient for tracing the log records of the remote management of the setting of each relay protection device in the substation.

[0035] The relay protection device and the master station follow the same setting model specification and both have the ability to independently interpret the setting file. After obtaining authorization from the local operation station, the relay protection device can respond to the master station's setting command to view the setting, generate the original setting file for the master station to view; it can respond to the master station's setting modification command, parse and verify the updated setting file from the master station, and modify the device setting.

[0036] Before initiating an instruction to view or modify the setting of a relay protection device, the master station must re-formulate the authorization information and send it to the local operation station to activate the authorization management unit.

[0037] The present invention also provides a method for remotely operating the setting value of a relay protection device, which realizes the management of the setting value of the relay protection device by the master station on the basis of the above-mentioned system.

[0038] The steps for the master station to check the setting of the relay protection device are:

[0039] 1) The master station generates authorization information according to certain rules, generates a summary based on the authorization information, and signs it.

[0040] 2) The master station sends the unique identification code, authorization information and signature of the relay protection device to the local operation station via an encrypted channel.

[0041] 3) The local operation station enters the corresponding authorization management unit according to the unique identification code, and verifies the validity of the information based on the authorization information and signature. If the verification is inconsistent, the authorization information and verification failure log are recorded, and the authorization function is kept closed; if the verification is passed, the authorization information of this unit is updated, the authorization function is opened, and the authorization application of the relay protection device is waited for.

[0042] 4) The master station sends the signature to the relay protection device and initiates a request to view the set value.

[0043] 5) The relay protection device sends the signature to the local operation station based on the unique identification code information, requesting the authorization of the master station to view the setting command;

[0044] 6) The local operation station enters the authorization management unit of the corresponding relay protection device based on the unique identification code. If the authorization function is closed, the authorization is denied and the authorization denial log is recorded. If the authorization function is open, the signature verification can be performed. If the signature verification fails, the authorization is denied, the authorization information and the authorization failure log are recorded, and the authorization function is closed; if the signature verification succeeds, the authorization device responds to the master station instruction, records the authorization information and the authorization success log, and closes the authorization function.

[0045] 7) After receiving the authorization command from the local operation station, the relay protection device generates the original setting file;

[0046] 8) The relay protection device notifies the master station that the setting file is generated successfully;

[0047] 9) The master station calls up the set value file through the file service and verifies the set value file according to the model specification.

[0048] The steps for the master station to modify the setting of the relay protection device are:

[0049] 1) The master station modifies the setting value based on the original setting value file called up to form an updated setting value file, and sends the updated setting value file to the relay protection device through the file service;

[0050] 2) The master station generates authorization information according to certain rules, generates a summary based on the authorization information, and signs it.

[0051] 3) The master station sends the unique identification code, authorization information and signature of the relay protection device to the local operation station via an encrypted channel.

[0052] 4) The local operation station enters the corresponding authorization management unit according to the unique identification code, and verifies the validity of the information based on the authorization information and signature. If the verification is inconsistent, the authorization information and verification failure log are recorded, and the authorization function is kept closed; if the verification is passed, the authorization information of this unit is updated, the authorization function is opened, and the authorization application of the relay protection device is waited for.

[0053] 5) The master station sends the signature to the relay protection device and initiates a request to modify the setting.

[0054] 6) The relay protection device sends the signature to the local operation station based on the unique identification code information, requesting a response to the authorization of the master station to view the setting command;

[0055] 7) The local operation station enters the authorization management unit of the corresponding relay protection device based on the unique identification code. If the authorization function is closed, the authorization is denied and the authorization denial log is recorded. If the authorization function is open, the signature verification can be performed. If the signature verification fails, the authorization is denied, the authorization information and the authorization failure log are recorded, and the authorization function is closed; if the signature verification succeeds, the authorization device responds to the master station instruction, records the authorization information and the authorization success log, and closes the authorization function.

[0056] 8) After receiving the authorization command from the local operation station, the relay protection device verifies the setting file according to the model specification;

[0057] 9) The relay protection device modifies the device setting according to the update items in the setting file;

[0058] 10) The relay protection device replies to the master station setting file and the execution is successful;

[0059] 11) The master station re-initiates the process of checking the set value to check whether the set value has been modified successfully.

[0060] In the process of the master station checking and modifying the setting values ​​of the relay protection device, if the relay protection device fails to receive the signature, fails to apply for authorization, or the device does not meet the conditions for viewing or modifying the setting values, it will reply to the master station that it failed to generate the setting value file or execute the setting value file.

[0061] As an embodiment of the present invention, the relay protection device setting remote operation system includes a local operation station, a master station and several relay protection devices in the substation. Using the IEC61850 communication device identifier IEDNAME as the unique ID of the relay protection device in the entire station, the local operation station can import the SCD to instantiate a separate authorization management unit for each relay protection device. The local operation station pre-stores the certificate issued by the master station, uses asymmetric encryption SM2 to negotiate a symmetric key, and performs SM4 symmetric encryption communication with the master station based on this symmetric key.

[0062] like Figure 2 As shown in the figure, the specific steps for the master station to check the setting value N of a certain relay protection are:

[0063] 1) The master station combines the current time, operator information, random character string and other information to form authorization information, uses SM3 to hash the information summary, and encrypts the information summary using the private key corresponding to the certificate to obtain the signature.

[0064] 2) The master station sends the IEDNAME, authorization information and signature of the relay protection device N to the local operation station via an encrypted channel.

[0065] 3) The local operation station enters the authorization management unit of the relay protection device N according to IEDNAME, performs hash calculation on the authorization information using SM3, decrypts the signature with the public key of the certificate to obtain another set of information summaries, and then verifies the consistency of the two. If the verification is inconsistent, the authorization information and the verification failure log are recorded, and the authorization function is kept closed; if the verification passes, the authorization information of this unit is updated, the authorization function is opened, and the authorization application of the relay protection device N is waited for.

[0066] 4) The master station sends the signature to the relay protection device N and initiates a request to view the set value.

[0067] 5) Relay protection device N sends the signature to the local operation station through IEC61850 communication, requesting a response to the authorization of the master station to view the set value command.

[0068] 6) The local operation station enters the authorization management unit of the relay protection device N based on IEDNAME. If the authorization function is closed, the authorization is denied and the authorization denial log is recorded. If the authorization function is open, the signature is decrypted with the public key of the certificate and a consistency check is performed with the information summary recorded in the authorization management unit. If the check fails, the authorization is denied, the authorization information and the authorization failure log are recorded, and the authorization function is closed; if the check succeeds, the authorization device responds to the master station instruction, records the authorization information and the authorization success log, and closes the authorization function.

[0069] 7) After receiving the authorization command from the local operating station, the relay protection device N generates an original setting file.

[0070] 8) Relay protection device N notifies the master station that the setting file is generated successfully.

[0071] 9) The master station calls up the set value file through the file service and verifies the set value file according to the model specification.

[0072] like Figure 3 As shown in the figure, the specific steps for the master station to modify the setting value N of a relay protection are:

[0073] 1) The master station modifies the setting based on the original setting file of the relay protection setting N to form an updated setting file.

[0074] 2) The master station sends the updated setting file to the relay protection device N through the file service.

[0075] 3) The master station combines the current time, operator information, information related to the updated fixed value file, random character string and other information to form authorization information, uses SM3 to hash the information summary, and encrypts the information summary using the private key corresponding to the certificate to obtain the signature.

[0076] 4) The master station sends the IEDNAME, authorization information and signature of the relay protection device N to the local operation station via the encrypted channel.

[0077] 5) The local operation station enters the authorization management unit of the relay protection device N according to IEDNAME, performs hash calculation on the authorization information using SM3, decrypts the signature with the public key of the certificate to obtain another set of information summaries, and then verifies the consistency of the two. If the verification is inconsistent, the authorization information and the verification failure log are recorded, and the authorization function is kept closed; if the verification passes, the authorization information of this unit is updated, the authorization function is opened, and the authorization application of the relay protection device N is waited for.

[0078] 6) The master station sends the signature to the relay protection device N and initiates a request to modify the setting.

[0079] 7) Relay protection device N sends the signature to the local operation station via IEC61850 communication, requesting authorization to respond to the master station's command to modify the set value.

[0080] 8) The local operation station enters the authorization management unit of the relay protection device N based on IEDNAME. If the authorization function is closed, the authorization is denied and the authorization denial log is recorded. If the authorization function is open, the signature is decrypted with the public key of the certificate and the consistency check is performed with the information summary recorded in the authorization management unit. If the check fails, the authorization is denied, the authorization information and the authorization failure log are recorded, and the authorization function is closed; if the check succeeds, the authorization device responds to the master station instruction, records the authorization information and the authorization success log, and closes the authorization function.

[0081] 9) After receiving the authorization command from the local operation station, the relay protection device N verifies the setting file according to the established rules and setting model specifications.

[0082] 10) Modify the setting of relay protection device N according to the update items of setting file

[0083] 11) Relay protection device N replies that the master station setting file has been successfully executed

[0084] 12) The master station re-initiates the process of checking the set value and verifies that the set value modification is effective by calling up the set value file again.

[0085] The above embodiments are only for illustrating the technical idea of ​​the present invention, and cannot be used to limit the protection scope of the present invention. Any changes made on the basis of the technical solution in accordance with the technical idea proposed by the present invention shall fall within the protection scope of the present invention.

Claims

1. A method for remotely operating a relay protection device, characterized in that The steps include: Step A, the master station sends the unique identification code, authorization information and signature of the relay protection device to the local operation station through encrypted communication; Step B, the local operation station enters the authorization management unit corresponding to the relay protection device based on the unique identification code, verifies the validity of the information based on the authorization information and the signature, and opens the authorization function if the verification passes; Step C, the master station initiates a command to view or modify a setting value to the relay protection device and sends the signature at the same time; Step D, the relay protection device sends the received signature together with its own unique identification code to the local operation station to apply for authorization; Step E: The local operation station enters the authorization management unit corresponding to the relay protection device based on the unique identification code and performs signature verification. If the signature verification is passed, an authorization command is fed back to the relay protection device, otherwise authorization is not granted; Step F, the relay protection device responds to the master station's instruction to view or modify the setting value according to the authorization command, and generates or executes the setting value file.

2. The method for remotely operating a relay protection device according to claim 1, characterized in that: The signature issued by the master station is formed based on the authorization information.

3. The method for remotely operating a relay protection device setting value according to claim 1, characterized in that: The local operation station authorization management system instantiates a separate authorization management unit based on each relay protection device in the substation.

4. The method for remotely operating a relay protection device setting value according to claim 1, characterized in that: The local operation station records authorization log information, including authorization information for each verification.

5. The method for remotely operating a relay protection device setting value according to claim 1, characterized in that: There is at most one valid authorization information in each authorization management unit. When the latest authorization information is received, the historical authorization information becomes invalid. Each piece of authorization information is used for authorization verification at most once and becomes invalid immediately after verification. After the authorization information becomes invalid, the authorization management unit will no longer respond to the authorization application of the corresponding relay protection device before the authorization information is updated.

6. The method for remotely operating a relay protection device setting value according to claim 1, characterized in that: In step F, the relay protection device responds to the master station's instruction to view the set value, generates an original set value file for the master station to view; or, the relay protection device responds to the master station's instruction to modify the set value, parses and verifies the updated set value file from the master station, and modifies the device set value.

7. The method for remotely operating a relay protection device setting value according to claim 1, characterized in that: Before initiating a command to view or modify a set value, the master station re-forms the authorization information and sends it to the local operation station to activate the authorization management unit.

8. A relay protection device setting remote operation system, used to implement the relay protection device setting remote operation method according to any one of claims 1 to 7; characterized in that: It includes the master station, local operation station and several relay protection devices; The master station is configured to send a unique identification code, authorization information and signature of the relay protection device to the local operation station through encrypted communication; The local operation station is configured to enter the authorization management unit corresponding to the relay protection device based on the unique identification code, and verify the validity of the information based on the authorization information and the signature, and open the authorization function if the verification passes; The master station is further configured to initiate a viewing or modifying setting value instruction to the relay protection device after opening the authorization function, and send the signature at the same time; The relay protection device is also configured to send the received signature together with its own unique identification code to a local operating station to apply for authorization; The local operation station is further configured to enter the authorization management unit corresponding to the relay protection device based on the unique identification code and perform signature verification. If the signature verification is passed, an authorization command is fed back to the relay protection device, otherwise, authorization is not granted; The relay protection device is also configured to respond to the master station's instruction to view or modify set values ​​and generate or execute set value files according to the authorization command.

Images