Electric power communication data processing method and system, electronic equipment and storage medium
By extracting and detecting the traffic data in the power communication network, identifying and processing network storm events, the speed limit and broadcast of network storms are achieved, network congestion caused by network storms are solved, and the stability and security of the power system are improved.
Patent Information
- Application Number
- CN202411741478.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-29
- Publication Date
- 2025-04-04
AI Technical Summary
Due to the large amount of data and the increase in complexity of the power communication network, the frequency of network storms increases, resulting in network congestion, affecting the communication quality and the stability and security of power equipment.
By extracting the current traffic data, storm detection and traffic detection are performed. If it is a network storm event, rate limiting and node broadcasting are performed; otherwise, the corresponding processing scheme is performed according to the subtype of the traffic data.
It effectively limits the spread of network storm events in the power communication network, reduces the use of network storms on communication bandwidth, maintains the communication capabilities of the power communication network, and improves the operating stability and security of the power system.
Smart Images

Figure CN119766734A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of data processing technology, and in particular to a power communication data processing method, system, electronic device and storage medium. Background Art
[0002] As the scale of power communication networks continues to expand, the amount of data transmitted within the communication networks has increased significantly, and the complexity of the data has also increased significantly; as a result, the frequency of network storms in communication networks has gradually increased, leading to network congestion, which in turn has led to a decline in communication quality and even paralysis of power equipment, seriously affecting the operational stability and safety of the power system. Summary of the invention
[0003] The main purpose of the embodiments of the present invention is to provide a power communication data processing method, system, electronic device and storage medium, which can improve the operation stability and safety of the power system.
[0004] To achieve the above object, an embodiment of the present invention provides a method for processing power communication data, the method comprising:
[0005] Acquire current traffic data, perform feature extraction on the current traffic data, and obtain first feature information; wherein the first feature information includes any one or more of traffic data packet type, message type, priority identifier, source and destination address information, or timestamp;
[0006] Perform storm detection on the current traffic data according to the first characteristic information to determine the type of the current traffic data;
[0007] If the type is a network storm event, rate limiting the current traffic data according to a first preset rate, and performing node broadcasting according to the network storm event;
[0008] Otherwise, flow detection is performed on the current flow data according to the first characteristic information to determine the subtype of the current flow data, and the current flow data is processed according to a target processing solution corresponding to the subtype.
[0009] In some embodiments, performing storm detection on the current traffic data according to the first characteristic information to determine the type of the current traffic data specifically includes:
[0010] Determine rate information of the current traffic data according to the first characteristic information, and compare the rate information with a first preset threshold;
[0011] If the rate information meets the first preset threshold, it is determined that the type of the current traffic data is a network storm event.
[0012] In some embodiments, performing flow detection on the current flow data according to the first characteristic information to determine the subtype of the current flow data specifically includes:
[0013] Determine the flow information of the current flow data according to the first characteristic information, and compare the flow information with a second preset threshold; wherein the flow information includes the number of data packets per unit time of the current flow data;
[0014] If the flow information is less than or equal to the second preset threshold, determining that the subtype of the current flow data is normal flow;
[0015] If the traffic information is greater than the second preset threshold, it is determined that the subtype of the current traffic data is abnormal traffic.
[0016] In some embodiments, the subtype of the current traffic data includes abnormal traffic or normal traffic, and the processing of the current traffic data according to the target processing scheme corresponding to the subtype specifically includes:
[0017] If the subtype is abnormal traffic, performing an alarm operation according to the abnormal traffic, and returning to execute the detection of the current traffic data according to the first characteristic information to determine the type of the current traffic data;
[0018] If the subtype is normal traffic, the network configuration of the current traffic data is determined according to the first characteristic information, and the current traffic is processed according to the network configuration.
[0019] In some embodiments, determining the network configuration of the current traffic data according to the first characteristic information specifically includes:
[0020] Determining the priority of the current traffic data according to the first characteristic information;
[0021] If the priority of the current traffic data is the first priority, performing bandwidth configuration on the current traffic data according to a first preset value;
[0022] If the priority of the current traffic data is the second priority, performing transmission event allocation for the current traffic data according to a second preset value;
[0023] If the priority of the current traffic data is the third priority, the rate of the current traffic data is limited according to a third preset value.
[0024] In some embodiments, the method further comprises:
[0025] Perform load analysis according to the first characteristic information to determine network load information, and compare the network load information with a third preset threshold;
[0026] If the network load information is greater than the third preset threshold, determining the priority of the current traffic data according to the first characteristic information;
[0027] If the priority is the third priority, the rate of the current traffic data is limited according to a fourth preset value, or the current traffic data is discarded.
[0028] In some embodiments, the method further comprises:
[0029] Performing flow change analysis on the current flow data to determine flow change information, and comparing the flow change information with a first preset range;
[0030] If the flow change information is within the first preset range, rate limiting the current flow data according to the first characteristic information and a fifth preset value;
[0031] If the flow change information is outside the first preset range, comparing the first characteristic information with a preset standard;
[0032] If the first characteristic information meets the preset standard, the current traffic data is processed according to the preset strategy; otherwise, the current traffic data is smoothed according to the preset algorithm, and the smoothed current traffic data is processed according to the preset strategy.
[0033] To achieve the above object, another aspect of an embodiment of the present invention provides a power communication data processing system, the system comprising:
[0034] The first module is used to obtain current traffic data, perform feature extraction on the current traffic data, and obtain first feature information; wherein the first feature information includes any one or more of traffic data packet type, message type, priority identifier, source and destination address information, or timestamp;
[0035] A second module is used to perform storm detection on the current traffic data according to the first characteristic information to determine the type of the current traffic data;
[0036] A third module is used for, if the type is a network storm event, limiting the rate of the current traffic data according to a first preset rate, and performing node broadcasting according to the network storm event;
[0037] Otherwise, flow detection is performed on the current flow data according to the first characteristic information to determine the subtype of the current flow data, and the current flow data is processed according to a target processing solution corresponding to the subtype.
[0038] To achieve the above-mentioned purpose, another aspect of an embodiment of the present application provides an electronic device, the electronic device comprising a memory and a processor, the memory storing a computer program, and the processor implementing the above-mentioned method when executing the computer program.
[0039] To achieve the above objective, another aspect of an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method described above is implemented.
[0040] Implementation of the embodiments of the present invention includes the following beneficial effects: the embodiments provide a method, system, electronic device and storage medium for processing electric power communication data, which obtains first characteristic information by extracting features from current flow data; performs storm detection on the current flow data based on the extracted first characteristic information to determine the type of the current flow data; if the current flow data is a network storm event, limits the speed of the current flow data according to a preset rate, and performs node broadcasting; if the current flow data is not a network storm event, determines the subtype of the current flow data according to the first characteristic information, and processes the current flow data according to the processing scheme corresponding to the subtype; detects the type of the current flow data according to the characteristic information of the current flow data; limits and broadcasts the flow data of the network storm event, thereby limiting the spread of the network storm event in the electric power communication network, reducing the occupation of the communication bandwidth by the network storm by the speed limit, maintaining the communication capability of the electric power communication network, improving the operating stability of the electric power system, reducing the impact of the network storm event on the electric power equipment, and improving the safety of the electric power system. BRIEF DESCRIPTION OF THE DRAWINGS
[0041] Figure 1 It is a schematic diagram of the steps of a method for processing power communication data provided by an embodiment of the present invention;
[0042] Figure 2 It is a schematic flow chart of the steps of determining a network storm event in a power communication data processing method provided by an embodiment of the present invention;
[0043] Figure 3 It is a schematic flow chart of the steps of determining a subtype in a method for processing power communication data provided by an embodiment of the present invention;
[0044] Figure 4 It is a schematic flow chart of steps of processing according to subtypes in a method for processing power communication data provided by an embodiment of the present invention;
[0045] Figure 5 It is a schematic flow chart of the steps of determining configuration according to priority in a power communication data processing method provided by an embodiment of the present invention;
[0046] Figure 6 It is a schematic flow chart of the steps of performing network load monitoring in a power communication data processing method provided by an embodiment of the present invention;
[0047] Figure 7 It is a schematic flow chart of steps for monitoring flow changes in a power communication data processing method provided by an embodiment of the present invention;
[0048] Figure 8 It is a schematic diagram of the steps of a distributed node collaborative protection mechanism provided in a specific embodiment of the present invention;
[0049] Fig. 9 It is a schematic diagram of the steps of a priority-based traffic control mechanism provided in a specific embodiment of the present invention;
[0050] Fig.10 It is a schematic diagram of the steps of a rate adaptive adjustment mechanism provided in a specific embodiment of the present invention;
[0051] Fig.11 is a structural block diagram of a power communication data processing system provided by an embodiment of the present invention;
[0052] Fig.12 It is a schematic diagram of the hardware structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION
[0053] The present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments. The step numbers in the following embodiments are only provided for the convenience of explanation and description, and the order between the steps is not limited in any way. The execution order of each step in the embodiment can be adaptively adjusted according to the understanding of those skilled in the art.
[0054] In the following description, reference is made to “some embodiments”, which describe a subset of all possible embodiments, but it will be understood that “some embodiments” may be the same subset or different subsets of all possible embodiments and may be combined with each other without conflict.
[0055] In the following description, the terms "first\second\third" involved are merely used to distinguish similar objects and do not represent a specific ordering of the objects. It can be understood that "first\second\third" can be interchanged with a specific order or sequence where permitted, so that the embodiments of the present invention described herein can be implemented in an order other than that illustrated or described herein.
[0056] Unless otherwise defined, all technical and scientific terms used in the embodiments of the present invention have the same meanings as those commonly understood by those skilled in the art of the present invention. The terms used in the embodiments of the present invention are only for the purpose of describing the embodiments of the present invention and are not intended to limit the present invention.
[0057] Before further describing the embodiments of the present invention in detail, the nouns and terms involved in the embodiments of the present invention are described. The nouns and terms involved in the embodiments of the present invention are subject to the following interpretations.
[0058] IEC 61850 protocol: a communication protocol used for data exchange and control in power automation systems.
[0059] GOOSE: Generic Object Oriented Substation Events (GOOSE) is a mechanism in the IEC 61850 standard to meet the fast messaging requirements of substation automation systems.
[0060] MMS: In the IEC61850 standard, MMS is used for communication between intelligent electronic devices. It ensures the clarity and efficiency of data exchange by defining clear object models and SAP.
[0061] FPGA (Field Programmable Gate Array): A programmable logic chip that allows users to change the internal structure through programming, with high flexibility and reconfigurability.
[0062] Figure 1 is an optional flowchart of a power communication data processing method provided by an embodiment of the present invention. Figure 1 The method may include but is not limited to steps S101 to S104.
[0063] Step S101, obtain current traffic data, extract features from the current traffic data, and obtain first feature information; wherein the first feature information includes any one or more of traffic data packet type, message type, priority identifier, source and destination address information, or timestamp.
[0064] Step S102, performing storm detection on the current traffic data according to the first characteristic information to determine the type of the current traffic data;
[0065] Step S103, if the type is a network storm event, rate limiting the current traffic data according to the first preset rate, and performing node broadcasting according to the network storm event;
[0066] Step S104: otherwise, perform flow detection on the current flow data according to the first characteristic information, determine the subtype of the current flow data, and process the current flow data according to the target processing solution corresponding to the subtype.
[0067] In the embodiment of the present application, in steps S101 to S104, flow data and data packets in the power communication network are parsed based on a field programmable gate array (FPGA) in the power communication network, and different communication bandwidths and transmission rates are configured for different types of flow data; in the control system of the power communication network established based on the FPGA, the flow in the power communication network is dynamically monitored, and the IEC The system uses the insulation characteristics of GOOSE messages and MMS messages specified in the 61850 protocol to extract features from the monitored traffic data and determine the data packet type, priority identifier, source address information, timestamp and other feature information in the traffic data; the system classifies the data packets in the traffic data according to the extracted traffic data features and transmits them according to the address information therein; when processing the data packets in the traffic data, the system monitors the flow rate of the traffic data in the power communication network in real time to determine whether the flow data rate is too large, and then determines that a network storm event has occurred; if the system determines that a network storm event has occurred, the system limits the rate of the current traffic data to a lower level to prevent a large amount of data from the network storm from entering the power communication network and affecting the transmission of important communication information; at the same time, after determining that a network storm event has occurred, the system generates corresponding warning information and transmits the warning information to other adjacent nodes in the power communication network through a broadcast mechanism. After receiving the warning information, the adjacent nodes also adjust the network rate accordingly to reduce the amount of data entering the communication network due to the network storm; for traffic data that is not a network storm, the system determines whether the traffic data is normal based on the feature information of the traffic data, and processes it according to the priority of normal data to ensure the stable transmission of high-priority data, so as to ensure the operational stability of the power system.
[0068] In step S101 of some embodiments, the flow data can be parsed by the system to extract characteristic information. It is also possible to extract key fields of the data packet in the flow data, including message type, timestamp, etc., by writing a corresponding program in the FPGA and extracting key fields of the data packet in the flow data through the hardware device; illustratively, in this embodiment, based on the IEC 61850 protocol, the hardware description language is written in the FPGA through VHDL to directly process the data packet to improve the processing efficiency; at the same time, the rate adaptive control logic is set in the FPGA to adjust the flow transmission rate in the network in real time to ensure the stable transmission of key data, but it is not limited to this.
[0069] See also Figure 2 In some embodiments, step S102 may include but is not limited to steps S201 to S202:
[0070] Step S201, determining rate information of current traffic data according to first characteristic information, and comparing the rate information with a first preset threshold;
[0071] Step S202: If the rate information meets the first preset threshold, it is determined that the type of the current traffic data is a network storm event.
[0072] In step S201 of some embodiments, the system parses the traffic data in real time, extracts characteristic information of the traffic data, analyzes the current traffic state of the traffic data according to the characteristic information, determines the current transmission rate of the traffic data, compares the current transmission rate with a preset threshold, and detects whether the current traffic data has a trend of network storm;
[0073] In step S202 of some embodiments, the system detects that the current transmission rate of the traffic data exceeds a preset threshold, and determines that the current traffic data has a network storm trend. Otherwise, the system performs a secondary detection on the current traffic data to detect whether the current traffic data is normal, and takes corresponding processing solutions; in this embodiment, if the current shipboard rate of the traffic data exceeds 35Mbps and lasts for more than 8 seconds, it is determined that the current traffic data has a network storm trend and is marked as a network storm event; the system generates an alarm event based on the network storm event, and sends it to the nodes in the communication network. The communication network nodes that receive the alarm event broadcast it to adjacent communication nodes through the set state sharing mechanism, so that the communication network can protect against the network storm event; at the same time, the system activates the traffic limiting strategy, limits the transmission rate of the traffic data of the network storm event to a low level, such as 10Mbps, and broadcasts it to all nodes in the communication network through the set state sharing mechanism to protect against the network storm event.
[0074] See also Figure 3 In some embodiments, step S104 may include but is not limited to steps S301 to S303:
[0075] Step S301, determining the flow information of the current flow data according to the first characteristic information, and comparing the flow information with the second preset threshold; wherein the flow information includes the number of data packets per unit time of the current flow data;
[0076] Step S302: if the flow information is less than or equal to the second preset threshold, determine that the subtype of the current flow data is normal flow;
[0077] Step S303: If the flow information is greater than the second preset threshold, determine that the subtype of the current flow data is abnormal flow.
[0078] In step S301 of some embodiments, the system further detects the flow data detected as non-network storms, determines the subtype of the flow data, and distinguishes normal flow from abnormal flow; based on the subtype of the flow data of non-network storms, the system performs corresponding processing, including bandwidth configuration and rate allocation, to ensure the normal operation of the power communication network and improve the operating stability of the power system; in this embodiment, the system analyzes the flow trend within a set 5-second sliding time window based on the characteristic information of the flow data of non-network storms, calculates the number of data packets transmitted per unit time of the flow data, and determines whether the calculation result exceeds 80 packets per second to determine the subtype of the flow data.
[0079] In step S302 of some embodiments, if the calculation result does not exceed the set threshold, it means that the amount of data transmitted by the current traffic data is within the normal range and will not cause congestion in the communication network. The subtype of the traffic data is marked as normal traffic, and further processing is performed based on the priority of each data packet in the normal traffic data to ensure stable communication of important message information.
[0080] In step S303 of some embodiments, if the calculation result exceeds the set threshold, the current flow data input into the power communication network may cause congestion in the communication network. The system will mark the subtype of the flow data as abnormal flow. The system will alarm based on the abnormal flow to remind the operation and maintenance personnel to deal with it in time, thereby reducing the risk of abnormal flow causing congestion in the communication network and the risk of abnormal flow causing network storms.
[0081] See also Figure 4 In some embodiments, step S104 may include but is not limited to steps S401 to S402:
[0082] Step S401, if the subtype is abnormal traffic, an alarm operation is performed according to the abnormal traffic, and the process returns to execute detection of the current traffic data according to the first characteristic information to determine the type of the current traffic data;
[0083] Step S402: If the subtype is normal traffic, determine the network configuration of the current traffic data according to the first characteristic information, and process the current traffic according to the network configuration.
[0084] In step S401 of some embodiments, after the system determines the subtype of the flow data that is not a network storm through further detection, it processes the flow data according to the subtype of the flow data to ensure normal communication of the power communication network; if the subtype of the flow data is abnormal flow, the system triggers an alarm based on the abnormal flow to remind the network operation and maintenance personnel; at the same time, the system performs secondary detection and analysis on the abnormal flow to reduce the misjudgment of abnormal data caused by the temporary increase in data volume due to fluctuations in communication quality.
[0085] In step S402 of some embodiments, when the system determines through further detection that the subtype of the traffic data other than the network storm is normal traffic, the system determines the priority of the current traffic according to the priority identifier in the characteristic information of the current traffic data, and then determines the corresponding network configuration to process the current traffic data according to the priority; illustratively, more bandwidth and rate are allocated to high-priority traffic data to ensure stable communication; for low-priority traffic data, communication can be delayed, etc.
[0086] See also Figure 5 In some embodiments, step S402 may include but is not limited to steps S501 to S504:
[0087] Step S501, determining the priority of current traffic data according to the first characteristic information;
[0088] Step S502, if the priority of the current traffic data is the first priority, bandwidth configuration is performed on the current traffic data according to a first preset value;
[0089] Step S503, if the priority of the current traffic data is the second priority, the current traffic data is assigned a transmission event according to the second preset value;
[0090] Step S504: If the priority of the current traffic data is the third priority, the rate of the current traffic data is limited according to the third preset value.
[0091] In step S501 of some embodiments, the system extracts a priority identifier from feature information of traffic data whose subtype is determined to be normal traffic, and determines the priority of the traffic data; the system determines a corresponding processing scheme to process the current traffic data according to the priority.
[0092] In step S502 of some embodiments, the system is pre-set with processing schemes corresponding to different priorities. The system determines the priority of the current traffic data as the first priority based on the priority identifier of the extracted traffic data, such as setting priority level 7 or above as the first priority; the system can determine that the current traffic data is high-importance traffic data, such as GOOSE messages, and the system allocates a higher proportion of bandwidth to the traffic data to prioritize the protection of the communication of the traffic data, such as 80%.
[0093] In step S503 of some embodiments, the system determines that the priority of the current traffic data is the second priority based on the priority identifier of the extracted traffic data, such as setting priority levels 4 to 6 as the second priority; the system determines that the current traffic data is relatively important traffic data, such as an MMS message, and while ensuring the communication of the first-priority traffic data, the system allocates the second-priority traffic data for normal communication, such as allocating 30 milliseconds to complete data transmission.
[0094] In step S504 of some embodiments, the system determines that the priority of the current traffic data is the third priority based on the priority identifier of the extracted traffic data, such as setting priority levels 1 to 3 as the third priority; the system determines that the current traffic data is traffic data of lower importance, such as log data, diagnostic data, etc.; the system limits the transmission rate of this type of traffic data to 30% of the channel transmission rate to give priority to the transmission of the first priority traffic data; in some embodiments, the system may temporarily delay the transmission of the third priority traffic data and transmit it when the channel resources are idle; after the system determines the corresponding processing plan based on the priority of the traffic data, it sends corresponding instructions to the hardware device to transmit the traffic data, such as switches and routers; at the same time, in order to improve transmission efficiency, a state sharing mechanism is set in the hardware device, such as setting the switch to share the state every 100 milliseconds, updating the current data transmission plan, and adjusting the rate and bandwidth according to the updated plan.
[0095] See also Figure 6 In some embodiments, a power communication data processing method provided by an embodiment of the present invention may include but is not limited to steps S601 to S603:
[0096] Step S601, performing load analysis according to the first characteristic information, determining network load information, and comparing the network load information with a third preset threshold;
[0097] Step S602: if the network load information is greater than a third preset threshold, determining the priority of the current traffic data according to the first characteristic information;
[0098] Step S603: If the priority is the third priority, the rate of the current traffic data is limited according to the fourth preset value, or the current traffic data is discarded.
[0099] In step S601 of some embodiments, the system determines the type of traffic data based on the characteristic information of the traffic data, determines the corresponding processing plan, generates corresponding instructions and sends them to each communication node of the communication network; each communication node is provided with a data packet analysis module and a rate adaptive adjustment module based on FPGA, and monitors the traffic load of the communication network in real time during the traffic data transmission process according to the instructions issued by the system, including the traffic data transmission rate and the traffic fluctuation amplitude within a period of time, and compares the real-time monitored traffic load with the set threshold, and adjusts the transmission configuration of the communication network in real time according to the comparison result to give priority to data with high importance, such as GOOSE messages.
[0100] In step S602 of some embodiments, if the traffic load in the communication network exceeds a set threshold, such as 20 Gbps, and the fluctuation range of traffic transmission is large, for example, due to factors such as communication interference, a large amount of data is concentratedly transmitted at a certain moment, and only a small amount of data is transmitted at a certain moment; the system sends instructions to the communication node, and the communication node stabilizes the data communication in the communication network according to the instructions sent by the system; in this embodiment, the system sends instructions to determine the priority of the traffic data through the communication node, and processes the traffic data according to the priority of the traffic data.
[0101] In step S603 of some embodiments, the system sends instructions to the communication node, and the communication node parses the traffic data according to the instructions to determine the priority of the traffic data; if the priority of the traffic data is low, the communication node adjusts the transmission rate of low-priority and other non-critical traffic data to 30% of the original according to the instructions sent by the system, and provides more communication resources to prioritize the transmission of critical data; an FPGA-based rate adaptive adjustment mechanism is set in the communication node, and the communication node monitors the traffic load of the communication network in real time, and adaptively adjusts the data transmission rate according to the traffic load situation; illustratively, when the communication node detects that the traffic load is low, the communication node limits the transmission rate of non-critical traffic data; when the communication node detects that the traffic load is high, the communication node discards the low-priority traffic data and releases communication resources to prioritize the stable transmission of high-priority data.
[0102] See also Figure 7 In some embodiments, a power communication data processing method provided by an embodiment of the present invention may include but is not limited to steps S701 to S704:
[0103] Step S701, performing flow change analysis on current flow data, determining flow change information, and comparing the flow change information with a first preset range;
[0104] Step S702: if the flow change information is outside the first preset range, rate limiting the current flow data according to the first characteristic information and the fifth preset value;
[0105] Step S703, if the flow change information is within the first preset range, the first characteristic information is compared with a preset standard;
[0106] Step S704, if the first characteristic information meets the preset standard, the current traffic data is processed according to the preset strategy; otherwise, the current traffic data is smoothed according to the preset algorithm, and the smoothed current traffic data is processed according to the preset strategy.
[0107] In step S701 of some embodiments, the system monitors the traffic load in the communication network through the communication nodes, and adjusts the data transmission rate in the communication network when the traffic load is high to ensure the transmission of high-priority traffic data; at the same time, the system issues instructions to monitor the traffic changes in the communication network in real time through the communication nodes, and determines the traffic data with low traffic load but large traffic fluctuations, processes such traffic data, improves the communication quality and communication stability of the communication network, and thus improves the stability of the power system.
[0108] In step S702 of some embodiments, the communication node performs feature analysis on the flow data in real time according to the instructions issued by the system, determines the change information of the flow, and compares the change information with the set threshold; if the change information of the flow data exceeds the set threshold, the system determines that the current flow data fluctuates greatly and may be interfered with; the system first limits the rate of flow data with large fluctuations through the communication node to maintain the stability of the flow data in the communication network, and then prioritizes the stable transmission of high-priority flow data.
[0109] In step S703 of some embodiments, if the change information of the flow data does not exceed the set threshold, the system determines that the fluctuation of the current flow data is small, and the communication node compares the change information of the flow data with the set flow stability standard, and determines whether the current flow data needs to be smoothed according to the comparison result to improve the stability of the flow data.
[0110] In step S704 of some embodiments, if the change information of the flow data meets the set flow stability standard, the system determines that the current flow data has high stability, and the communication node prioritizes the flow data with high priority according to the instructions issued by the system; if the change information of the flow data does not meet the set flow stability standard, the system determines that the stability of the current flow data is low and the flow data fluctuates slightly, and the communication node smoothes the current flow data through a preset flow smoothing algorithm to improve the stability of the flow data, and the communication node then prioritizes the flow data with high priority according to the instructions issued by the system.
[0111] The following is a detailed description and explanation of the solution of the embodiment of the present invention in conjunction with a specific application example:
[0112] See also Figures 8 to 10 In a specific embodiment, the electric power communication network system monitors the flow data transmitted in the network in real time, analyzes the flow data, and extracts characteristic information of the flow data; performs network storm detection on the flow data according to the characteristic information of the flow data, calculates the transmission rate of the flow data according to the characteristic information, and compares it with the 35Mbps threshold preset by the system, and determines the duration of the transmission rate of the current flow data exceeding the preset threshold; the transmission rate of the current flow data is 15Gbps, and the duration exceeds the preset time, the system determines that a network storm event occurs, and the system executes a preset distributed node collaborative protection mechanism, such as Figure 8 As shown, warning information of network storm events is generated and sent to switches and / or routers as communication network nodes. Switches and / or routers broadcast the received warning information to adjacent nodes according to the preset node sharing information strategy. After each communication node receives the warning information, it Figure 8 The distributed node collaborative protection mechanism shown in FIG. adjusts the forwarding strategy of the traffic data. The system determines the traffic type of the traffic data based on the characteristic information of the extracted traffic data, and determines the priority of the traffic data based on the characteristic information. Fig. 9 The priority-based traffic control mechanism shown in the figure transmits and processes the traffic data, generates corresponding instructions and sends them to each communication node in the communication network. Each communication node adjusts its own processing strategy according to the issued instructions and transmits and processes the traffic data. During the network storm event, each communication node in the communication network also monitors the traffic load in the network in real time to determine whether the traffic load in the communication network exceeds the preset threshold of 20Gbps. At the same time, it monitors the traffic changes in the communication network to determine the fluctuation of the traffic data. The communication node detects that the traffic load does not exceed the preset threshold, and determines that the current traffic data fluctuation is too large through the characteristic information of the traffic data. Each communication node adjusts its own processing strategy according to the issued instructions and transmits and processes the traffic data. Fig.10 The rate adaptive adjustment mechanism shown performs flow smoothing processing on the flow data, realizes the stable transmission of the flow data in the communication network, and gives priority to the transmission of high-priority data.
[0113] The implementation of the embodiments of the present invention includes the following beneficial effects: the embodiments provide a method, system, electronic device and storage medium for processing electric power communication data, which obtains first characteristic information by extracting features from current flow data; performs storm detection on the current flow data according to the extracted first characteristic information to determine the type of the current flow data; if the current flow data is a network storm event, limits the speed of the current flow data according to a preset rate, and performs node broadcasting; if the current flow data is not a network storm event, determines the subtype of the current flow data according to the first characteristic information, and processes the current flow data according to the processing scheme corresponding to the subtype; detects the type of the current flow data according to the characteristic information of the current flow data; processes the flow data of the network storm event Speed limiting and broadcasting are carried out to limit the spread of network storm events in the power communication network. The occupation of communication bandwidth by network storms is reduced by speed limiting, the communication capacity of the power communication network is maintained, the operation stability of the power system is improved, the impact of network storm events on power equipment is reduced, and the safety of the power system is improved; normal traffic is distinguished by feature information, and traffic is regulated based on the priority of traffic data, and communication resources for different data are dynamically allocated to improve the communication stability of the power communication network and the transmission stability of high-priority data; by monitoring the traffic status, setting the rate limiting method, and combining priority traffic regulation, the occupation of communication resources for non-critical data during network storms is effectively reduced, and the communication stability of the power communication network and the transmission stability of high-priority data are improved.
[0114] like Fig.11 As shown, an embodiment of the present invention further provides a power communication data processing system, which can implement the above-mentioned power communication data processing method, and the system includes:
[0115] The first module is used to obtain current traffic data, perform feature extraction on the current traffic data, and obtain first feature information; wherein the first feature information includes any one or more of traffic data packet type, message type, priority identifier, source and destination address information, or timestamp;
[0116] A second module is used to perform storm detection on the current traffic data according to the first characteristic information to determine the type of the current traffic data;
[0117] A third module is used for, if the type is a network storm event, limiting the rate of the current traffic data according to a first preset rate, and performing node broadcasting according to the network storm event;
[0118] Otherwise, flow detection is performed on the current flow data according to the first characteristic information to determine the subtype of the current flow data, and the current flow data is processed according to a target processing solution corresponding to the subtype.
[0119] It can be seen that the contents of the above method embodiments are all applicable to the present system embodiments, the functions specifically implemented by the present system embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.
[0120] The embodiment of the present application also provides an electronic device, the electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the above-mentioned power communication data processing method when executing the computer program. The electronic device can be any intelligent terminal including a tablet computer, a car computer, etc.
[0121] It can be understood that the contents of the above method embodiments are all applicable to the present device embodiments, the functions specifically implemented by the present device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.
[0122] See also Fig.12 , Fig.12 The hardware structure of an electronic device of another embodiment is illustrated, and the electronic device includes:
[0123] The processor 1201 may be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of the present application;
[0124] The memory 1202 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 1202 can store an operating system and other application programs. When the technical solution provided in the embodiment of this specification is implemented by software or firmware, the relevant program code is stored in the memory 1202, and the processor 1201 calls and executes a power communication data processing method of the embodiment of this application;
[0125] Input / output interface 1203, used to implement information input and output;
[0126] The communication interface 1204 is used to realize the communication interaction between the device and other devices. The communication can be realized through a wired manner (such as USB, network cable, etc.) or a wireless manner (such as mobile network, WIFI, Bluetooth, etc.);
[0127] A bus 1205 that transmits information between various components of the device (e.g., the processor 1201, the memory 1202, the input / output interface 1203, and the communication interface 1204);
[0128] The processor 1201 , the memory 1202 , the input / output interface 1203 and the communication interface 1204 are connected to each other in communication within the device via the bus 1205 .
[0129] An embodiment of the present application further provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the above-mentioned power communication data processing method is implemented.
[0130] It is understandable that the contents in the above method embodiments are all applicable to the present storage medium embodiment, and the functions specifically implemented by the present storage medium embodiment are the same as those in the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments. Among them, the memory, as a non-transient computer-readable storage medium, can be used to store non-transient software programs and non-transient computer executable programs. The memory may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage devices. In some embodiments, the memory may optionally include a remote memory remotely arranged relative to the processor, and these remote memories may be connected to the processor via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.
[0131] In addition, the embodiment of the present application also discloses a computer program product or a computer program, and the computer program product or the computer program is stored in a computer-readable storage medium. The processor of the computer device can read the computer program from the computer-readable storage medium, and the processor executes the computer program, so that the computer device performs the above method. Similarly, the contents in the above method embodiment are all applicable to the storage medium embodiment, and the functions specifically implemented by the storage medium embodiment are the same as those in the above method embodiment, and the beneficial effects achieved are also the same as those achieved by the above method embodiment.
[0132] It is understood that all or some steps and systems in the disclosed method above can be implemented as software, firmware, hardware and appropriate combinations thereof. Some physical components or all physical components can be implemented as software executed by a processor, such as a central processing unit, a digital signal processor or a microprocessor, or implemented as hardware, or implemented as an integrated circuit, such as an application-specific integrated circuit. Such software can be distributed on a computer-readable medium, and the computer-readable medium can include a computer storage medium (or a non-transitory medium) and a communication medium (or a temporary medium). As known to those of ordinary skill in the art, the term computer storage medium includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, program modules or other data). Computer storage media include, but are not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disk (DVD) or other optical disk storage, magnetic cassette, magnetic tape, disk storage or other magnetic storage device, or any other medium that can be used to store desired information and can be accessed by a computer. Furthermore, it is well known to those skilled in the art that communication media typically embodies computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media.
[0133] The above is a specific description of the preferred implementation of the present invention, but the invention is not limited to the embodiments. Those skilled in the art may make various equivalent modifications or substitutions without violating the spirit of the present invention. These equivalent modifications or substitutions are all included in the scope defined by the claims of this application.
Claims
1. A method for processing power communication data, characterized in that: The method comprises: Acquire current traffic data, perform feature extraction on the current traffic data, and obtain first feature information; wherein the first feature information includes any one or more of traffic data packet type, message type, priority identifier, source and destination address information, or timestamp; Perform storm detection on the current traffic data according to the first characteristic information to determine the type of the current traffic data; If the type is a network storm event, rate limiting the current traffic data according to a first preset rate, and performing node broadcasting according to the network storm event; Otherwise, flow detection is performed on the current flow data according to the first characteristic information to determine the subtype of the current flow data, and the current flow data is processed according to a target processing solution corresponding to the subtype.
2. The method according to claim 1, characterized in that The performing storm detection on the current traffic data according to the first characteristic information to determine the type of the current traffic data specifically includes: Determine rate information of the current traffic data according to the first characteristic information, and compare the rate information with a first preset threshold; If the rate information meets the first preset threshold, it is determined that the type of the current traffic data is a network storm event.
3. The method according to claim 1, characterized in that The performing flow detection on the current flow data according to the first characteristic information to determine the subtype of the current flow data specifically includes: Determine the flow information of the current flow data according to the first characteristic information, and compare the flow information with a second preset threshold; wherein the flow information includes the number of data packets per unit time of the current flow data; If the flow information is less than or equal to the second preset threshold, determining that the subtype of the current flow data is normal flow; If the traffic information is greater than the second preset threshold, it is determined that the subtype of the current traffic data is abnormal traffic.
4. The method according to claim 1, characterized in that The subtype of the current traffic data includes abnormal traffic or normal traffic, and the processing of the current traffic data according to the target processing scheme corresponding to the subtype specifically includes: If the subtype is abnormal traffic, performing an alarm operation according to the abnormal traffic, and returning to execute the detection of the current traffic data according to the first characteristic information to determine the type of the current traffic data; If the subtype is normal traffic, the network configuration of the current traffic data is determined according to the first characteristic information, and the current traffic is processed according to the network configuration.
5. The method according to claim 4, characterized in that The determining the network configuration of the current traffic data according to the first characteristic information specifically includes: Determining the priority of the current traffic data according to the first characteristic information; If the priority of the current traffic data is the first priority, performing bandwidth configuration on the current traffic data according to a first preset value; If the priority of the current traffic data is the second priority, performing transmission event allocation for the current traffic data according to a second preset value; If the priority of the current traffic data is the third priority, the rate of the current traffic data is limited according to a third preset value.
6. The method according to claim 1, characterized in that The method further comprises: Perform load analysis according to the first characteristic information to determine network load information, and compare the network load information with a third preset threshold; If the network load information is greater than the third preset threshold, determining the priority of the current traffic data according to the first characteristic information; If the priority is the third priority, the rate of the current traffic data is limited according to a fourth preset value, or the current traffic data is discarded.
7. The method according to claim 1, characterized in that The method further comprises: Performing flow change analysis on the current flow data to determine flow change information, and comparing the flow change information with a first preset range; If the flow change information is outside the first preset range, rate limiting the current flow data according to the first characteristic information and a fifth preset value; If the flow change information is within the first preset range, comparing the first characteristic information with a preset standard; If the first characteristic information meets the preset standard, the current traffic data is processed according to the preset strategy; otherwise, the current traffic data is smoothed according to the preset algorithm, and the smoothed current traffic data is processed according to the preset strategy.
8. A power communication data processing system, characterized in that: include: The first module is used to obtain current traffic data, perform feature extraction on the current traffic data, and obtain first feature information; wherein the first feature information includes any one or more of traffic data packet type, message type, priority identifier, source and destination address information, or timestamp; A second module is used to perform storm detection on the current traffic data according to the first characteristic information to determine the type of the current traffic data; A third module is used for, if the type is a network storm event, limiting the rate of the current traffic data according to a first preset rate, and performing node broadcasting according to the network storm event; Otherwise, flow detection is performed on the current flow data according to the first characteristic information to determine the subtype of the current flow data, and the current flow data is processed according to a target processing solution corresponding to the subtype.
9. An electronic device, characterized in that: include: at least one processor; at least one memory for storing at least one program; When the at least one program is executed by the at least one processor, the at least one processor implements the method according to any one of claims 1 to 7.
10. A computer-readable storage medium storing a program executable by a processor, characterized in that: The processor-executable program is used to perform the method according to any one of claims 1 to 7 when executed by the processor.
Citation Information
Patent Citations
Network congestion control method and system
CN102984077A
Network storm suppression method in intelligent transformer station process layer communication
CN104104558A
Detection equipment and detection method for network storm
CN107171886A
A method and apparatus for detecting traffic
CN109802973A
Detection method, defense method and detection device for Internet of Things DDoS based on distributed machine learning and block chain, and storage medium
CN113221113A
Cited By
Method, device and system for eliminating network storm
CN121098696A