A control management and monitoring method for equipment operation and maintenance of an electric power monitoring system
By establishing a case database that corresponds to threat events and categories and operation and maintenance operations, the operation and maintenance operations of the power monitoring system are assisted, and threat events in the operation and maintenance log are identified and analyzed, network security threats caused by the complex source of operation and maintenance terminals of the power monitoring system are solved, and the accuracy of operation and maintenance operations and network security situation awareness are improved.
Patent Information
- Application Number
- CN202411609739.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-12
- Publication Date
- 2025-04-08
AI Technical Summary
During the operation and maintenance process, the power monitoring system has complex sources of external operation and maintenance terminals, which can easily lead to virus transmission and network outreach, increasing network security threats, and it is difficult for existing technology to effectively control, manage and monitor.
By establishing a case database that corresponds to threat events and categories and operation and maintenance operations, assisting the operation and maintenance operations of operation and maintenance personnel, identifying and analyzing threat events in the operation and maintenance log, generating corresponding lost asset data and operation and maintenance operations, pushing operation and maintenance events and corresponding categories and operation and maintenance operations to the equipment operation and maintenance terminal, and accepting operation instructions from operation and maintenance personnel.
It improves the accuracy of operation and maintenance operations, solves the impact of the complex source of external operation and maintenance terminals, and enhances the network security situation awareness, early warning and emergency response capabilities of the power monitoring system.
Smart Images

Figure CN119787607A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of power monitoring operation and maintenance management, and in particular to a control management and monitoring method for equipment operation and maintenance of a power monitoring system. Background Art
[0002] As one of the core systems in the production system, the information security and reliability of the power monitoring system is directly related to the safe and stable operation of power production. However, in recent years, as hacker attack methods and technologies have become increasingly complex and advanced, attacks targeting industrial control systems have emerged in an endless stream, resulting in an increasing number of security threats to power monitoring systems. According to the "Guiding Opinions of the National Energy Administration on Strengthening Network Security in the Power Industry", the security situation awareness, early warning and emergency response capabilities of industrial control networks should be improved.
[0003] When carrying out power monitoring system operation and maintenance at substations, power plants and other locations, it is usually necessary to access operation and maintenance terminals such as portable computers. Since the sources of external operation and maintenance terminals are complex, high-risk behaviors such as virus transmission and network external connections are prone to occur. If the external operation and maintenance terminal successfully accesses the core control area, the network security incident caused by it may further cause serious consequences such as tripping and power outages. Therefore, it is very important to effectively control, manage and monitor the operation and maintenance equipment of the power monitoring system. Most of the existing technologies authenticate the identity of the operation and maintenance equipment through password login, etc., and lack control, management and monitoring of the operation and maintenance events themselves. Summary of the invention
[0004] In view of the technical problems existing in the prior art, the present invention provides a control, management and monitoring method for equipment operation and maintenance of an electric power monitoring system. By establishing a case database of the correspondence between threat events, categories and operation and maintenance operations, the operation and maintenance operations of operation and maintenance personnel are assisted, the influence caused by the complex sources of external operation and maintenance terminals is resolved, and the accuracy of operation and maintenance operations is improved.
[0005] According to a first aspect of the present invention, a control management and monitoring method for equipment operation and maintenance of a power monitoring system is provided, comprising: step 1, performing attack identification and analysis based on operation and maintenance logs to obtain various types of threat events; Step 2: Generate corresponding lost asset data and operation and maintenance operations for each type of threat event, generate categories of the threat event based on the lost asset data, and build a case database of the corresponding relationship between the threat event, category and operation and maintenance operation; Step 3: When an operation and maintenance event occurs in the power monitoring system, the category and operation and maintenance operation corresponding to the operation and maintenance event are generated based on the case database, the operation and maintenance event and the corresponding category and operation and maintenance operation are pushed to at least two equipment operation and maintenance terminals, and the operation and maintenance operation instructions returned by the operation and maintenance personnel through the equipment operation and maintenance terminals are accepted; when the operation and maintenance operation instruction is the same as the corresponding operation and maintenance operation, the operation and maintenance operation instruction is executed; when the operation and maintenance operation instruction is different from the corresponding operation and maintenance operation, the operation and maintenance operation instruction is executed when at least two equipment operation and maintenance terminals return the operation and maintenance operation instruction.
[0006] Based on the above technical solution, the present invention can also make the following improvements.
[0007] Optionally, the step 1 includes: After parsing the operation and maintenance logs of types such as traffic, audit, and threat, attack identification analysis is performed to obtain threat events of various types; Performing behavior analysis on the behavior data in the operation and maintenance log to obtain abnormal behavior, and performing attack identification analysis on the abnormal behavior to obtain the threat event.
[0008] Optionally, the data parsing process includes: Configuration through data source: protocol-related parameters for data collection, field extraction, conversion, and enhancement rules for access data, and metadata information related to data storage.
[0009] Optionally, the behavior analysis includes a static baseline model and a dynamic baseline model; The static baseline dynamic baseline model generates a baseline through traffic learning and detects abnormal behaviors that deviate from the baseline.
[0010] Optionally, the attack identification analysis matches the log content through built-in or custom rules, timing rules, and machine learning rules to identify logs that are consistent with the attack rule definition and obtain the threat event.
[0011] Optionally, the categories of the threat events include: warning events, emergencies, key events and other threat events; The key events include key events set by the user based on event type, asset and source; The step 3 also includes: issuing different types of alarms through a large screen and push notifications based on the category of the threat event.
[0012] Optionally, in step 3, the operation and maintenance operation instruction is different from the corresponding operation and maintenance operation, and when at least two equipment operation and maintenance terminals return the operation and maintenance operation instruction and execute the operation and maintenance operation instruction, the case database of the corresponding relationship between the threat event and the category and the operation and maintenance operation is modified based on the operation and maintenance operation instruction. According to a second aspect of the present invention, a control management and monitoring system for equipment operation and maintenance of an electric power monitoring system is provided, comprising: a threat event generation module, a case database construction module and an interaction module; The threat event generation module is used to perform attack identification and analysis based on the operation and maintenance log to obtain various types of threat events; The case database construction module is used to generate corresponding lost asset data and operation and maintenance operations for each type of threat event, generate the category of the threat event based on the lost asset data, and construct a case database of the correspondence between the threat event, the category and the operation and maintenance operation; The interactive module is used to generate a category and operation and maintenance operation corresponding to the operation and maintenance event based on the case database when an operation and maintenance event occurs in the power monitoring system, push the operation and maintenance event and the corresponding category and operation and maintenance operation to at least two equipment operation and maintenance terminals, and accept the operation and maintenance operation instructions returned by the operation and maintenance personnel through the equipment operation and maintenance terminals; when the operation and maintenance operation instruction is the same as the corresponding operation and maintenance operation, execute the operation and maintenance operation instruction; when the operation and maintenance operation instruction is different from the corresponding operation and maintenance operation, execute the operation and maintenance operation instruction when at least two equipment operation and maintenance terminals return the operation and maintenance operation instruction.
[0013] According to a third aspect of the present invention, there is provided an electronic device comprising a memory and a processor, wherein the processor is used to implement the steps of a control management and monitoring method for equipment operation and maintenance of an electric power monitoring system when executing a computer management program stored in the memory.
[0014] According to a fourth aspect of the present invention, there is provided a computer-readable storage medium having a computer management program stored thereon, which, when executed by a processor, implements the steps of a control, management and monitoring method for equipment operation and maintenance of an electric power monitoring system.
[0015] The present invention provides a control management monitoring method, system, electronic device and storage medium for equipment operation and maintenance of an electric power monitoring system, which parses and analyzes log data to generate threat events, and then establishes a case database of the corresponding relationship between threat events, categories and operation and maintenance operations, to assist the operation and maintenance operations of operation and maintenance personnel, solve the impact caused by the complex sources of external operation and maintenance terminals, improve the accuracy of operation and maintenance operations, and provide data support for realizing the automated management of operation and maintenance operations. BRIEF DESCRIPTION OF THE DRAWINGS
[0016] Figure 1A flow chart of a control management and monitoring method for equipment operation and maintenance of an electric power monitoring system provided by the present invention; Figure 2 A schematic diagram of a threat event generation process provided by an embodiment of the present invention; Figure 3 A schematic diagram of a data parsing process provided by an embodiment of the present invention; Figure 4 A schematic diagram of a behavior analysis process provided by an embodiment of the present invention; Figure 5 A schematic diagram of the hardware structure of a possible electronic device provided by the present invention; Figure 6 A schematic diagram of the hardware structure of a possible computer-readable storage medium provided by the present invention. DETAILED DESCRIPTION
[0017] The principles and features of the present invention are described below in conjunction with the accompanying drawings. The examples given are only used to explain the present invention and are not used to limit the scope of the present invention.
[0018] Figure 1 A flow chart of a control management and monitoring method for equipment operation and maintenance of an electric power monitoring system provided by the present invention, such as Figure 1 As shown, the method includes: Step 1: Perform attack identification and analysis based on operation and maintenance logs to obtain various types of threat events.
[0019] Step 2: Generate corresponding compromised asset data and operation and maintenance operations for each type of threat event, generate categories of threat events based on the compromised asset data, and build a case database of the correspondence between threat events, categories, and operation and maintenance operations.
[0020] Step 3: When an operation and maintenance event is generated by the power monitoring system, the category and operation and maintenance operation corresponding to the operation and maintenance event are generated based on the case database, the operation and maintenance event and the corresponding category and operation and maintenance operation are pushed to at least two equipment operation and maintenance terminals, and the operation and maintenance operation instructions returned by the operation and maintenance personnel through the equipment operation and maintenance terminals are accepted; when the operation and maintenance operation instruction is the same as the corresponding operation and maintenance operation, the operation and maintenance operation instruction is executed; when the operation and maintenance operation instruction is different from the corresponding operation and maintenance operation, the operation and maintenance operation instruction is executed when at least two equipment operation and maintenance terminals return the operation and maintenance operation instruction.
[0021] The present invention provides a control, management and monitoring method for equipment operation and maintenance of an electric power monitoring system. By establishing a case database of the correspondence between threat events, categories and operation and maintenance operations, the operation and maintenance operations of operation and maintenance personnel are assisted, the influence caused by the complex sources of external operation and maintenance terminals is resolved, and the accuracy of operation and maintenance operations is improved.
[0022] Example 1 Embodiment 1 of the present invention is an embodiment of a control management monitoring method for equipment operation and maintenance of an electric power monitoring system provided by the present invention, combined with Figure 1 It can be seen that the embodiment of the method includes: Step 1: Perform attack identification and analysis based on operation and maintenance logs to obtain various types of threat events.
[0023] like Figure 2 FIG. 1 is a schematic diagram of a threat event generation process provided by an embodiment of the present invention, Figure 1 and Figure 2 It can be seen that, in a possible implementation manner, step 1 includes: After parsing the data of operation and maintenance logs of types such as traffic, audit, and threat, attack identification analysis is performed to obtain various types of threat events.
[0024] Perform behavioral analysis on the behavioral data in the operation and maintenance log to obtain abnormal behavior, and perform attack identification analysis on the abnormal behavior to obtain threat events.
[0025] In the specific implementation, log data is uniformly stored in the Kafka message queue waiting for the next step of processing, and file data is stored in the distributed file system HDFS. Data parsing and storage are implemented through Spark Streaming tasks, supporting high-performance data access processing that can be horizontally expanded.
[0026] like Figure 3 FIG. 1 is a schematic diagram of a data parsing process provided by an embodiment of the present invention, Figure 1-Figure 3 It can be seen that, in a possible implementation manner, the data parsing process includes: Configuration through data source: protocol-related parameters for data collection, field extraction, conversion, and enhancement rules for access data, and metadata information related to data storage.
[0027] like Figure 4 The diagram is a schematic diagram of the behavior analysis process provided by an embodiment of the present invention, Figure 1-Figure 4 It can be seen that, in a possible embodiment, the behavior analysis includes a static baseline model and a dynamic baseline model.
[0028] The static baseline dynamic baseline model generates a baseline through traffic learning and detects abnormal behaviors that deviate from the baseline.
[0029] The behavior analysis engine receives normalized behavior data, loads built-in behavior analysis models and custom behavior models to detect abnormal behavior, and outputs the detection results to the attack identification engine. The behavior analysis engine is divided into a static baseline engine and a dynamic baseline engine based on the detection principle of the model. The static baseline engine does not require traffic learning, while the dynamic baseline engine needs to learn traffic for a period of time to generate a baseline and detect abnormal behaviors that deviate from the baseline.
[0030] In a possible implementation manner, the attack identification analysis matches the log content through built-in or custom rules, timing rules, machine learning rules, etc., identifies the logs that are consistent with the attack rule definition, and obtains the threat event.
[0031] Step 2: Generate corresponding compromised asset data and operation and maintenance operations for each type of threat event, generate categories of threat events based on the compromised asset data, and build a case database of the correspondence between threat events, categories, and operation and maintenance operations.
[0032] Step 3: When an operation and maintenance event is generated by the power monitoring system, the category and operation and maintenance operation corresponding to the operation and maintenance event are generated based on the case database, the operation and maintenance event and the corresponding category and operation and maintenance operation are pushed to at least two equipment operation and maintenance terminals, and the operation and maintenance operation instructions returned by the operation and maintenance personnel through the equipment operation and maintenance terminals are accepted; when the operation and maintenance operation instruction is the same as the corresponding operation and maintenance operation, the operation and maintenance operation instruction is executed; when the operation and maintenance operation instruction is different from the corresponding operation and maintenance operation, the operation and maintenance operation instruction is executed when at least two equipment operation and maintenance terminals return the operation and maintenance operation instruction.
[0033] In a possible implementation manner, categories of threat events include: warning events, emergencies, key events, and other threat events.
[0034] Key events include those set by users based on event type, asset, and source to focus on key events.
[0035] Step 3 also includes: issuing different types of alerts through a large screen and push notifications based on the category of the threat event.
[0036] In one possible implementation manner, in step 3, the operation and maintenance instruction is different from the corresponding operation and maintenance operation, and when at least two device operation and maintenance terminals return the operation and maintenance instruction and execute the operation and maintenance instruction, a case database of the correspondence between threat events, categories, and operation and maintenance operations is modified based on the operation and maintenance operation instruction.
[0037] Example 2 Embodiment 2 provided by the present invention is an embodiment of a control management and monitoring system for equipment operation and maintenance of an electric power monitoring system provided by the present invention, and the embodiment includes: a threat event generation module, a case database construction module and an interaction module.
[0038] The threat event generation module is used to perform attack identification and analysis based on operation and maintenance logs to obtain various types of threat events.
[0039] The case database construction module is used to generate corresponding lost asset data and operation and maintenance operations for each type of threat event, generate categories of threat events based on the lost asset data, and build a case database that corresponds to threat events, categories, and operation and maintenance operations.
[0040] The interactive module is used to generate a category and operation and maintenance operation corresponding to the operation and maintenance event based on a case database when an operation and maintenance event occurs in the power monitoring system, push the operation and maintenance event and the corresponding category and operation and maintenance operation to at least two equipment operation and maintenance terminals, and accept the operation and maintenance operation instructions returned by the operation and maintenance personnel through the equipment operation and maintenance terminals; when the operation and maintenance operation instruction is the same as the corresponding operation and maintenance operation, execute the operation and maintenance operation instruction; when the operation and maintenance operation instruction is different from the corresponding operation and maintenance operation, execute the operation and maintenance operation instruction when at least two equipment operation and maintenance terminals return the operation and maintenance operation instruction.
[0041] It can be understood that the control management and monitoring system for equipment operation and maintenance of the power monitoring system provided by the present invention corresponds to the control management and monitoring method for equipment operation and maintenance of the power monitoring system provided by the aforementioned embodiments. The relevant technical features of the control management and monitoring system for equipment operation and maintenance of the power monitoring system can refer to the relevant technical features of the control management and monitoring method for equipment operation and maintenance of the power monitoring system, which will not be repeated here.
[0042] See also Figure 5 , Figure 5 Schematic diagram of an electronic device provided by an embodiment of the present invention. Figure 5 As shown, an embodiment of the present invention provides an electronic device, including a memory 1310, a processor 1320, and a computer program 1311 stored in the memory 1310 and executable on the processor 1320. When the processor 1320 executes the computer program 1311, the following steps are implemented: performing attack identification analysis based on the operation and maintenance log to obtain various types of threat events; generating corresponding lost asset data and operation and maintenance operations for each type of threat event, generating categories of threat events based on the lost asset data, and constructing a case database of corresponding relationships between threat events, categories, and operation and maintenance operations; when the power monitoring system generates an operation and maintenance event, generating categories and operation and maintenance operations corresponding to the operation and maintenance event based on the case database, pushing the operation and maintenance event and the corresponding categories and operation and maintenance operations to at least two equipment operation and maintenance terminals, and accepting the operation and maintenance operation instructions returned by the operation and maintenance personnel through the equipment operation and maintenance terminals; when the operation and maintenance operation instruction is the same as the corresponding operation and maintenance operation, executing the operation and maintenance operation instruction; when the operation and maintenance operation instruction is different from the corresponding operation and maintenance operation, executing the operation and maintenance operation instruction when at least two equipment operation and maintenance terminals return the operation and maintenance operation instruction.
[0043] See also Figure 6 , Figure 6 Schematic diagram of an embodiment of a computer-readable storage medium provided by the present invention. Figure 6 As shown, this embodiment provides a computer-readable storage medium 1400, on which a computer program 1411 is stored. When the computer program 1411 is executed by the processor, the following steps are implemented: attack identification analysis is performed based on the operation and maintenance log to obtain various types of threat events; corresponding lost asset data and operation and maintenance operations are generated for each type of threat event, categories of threat events are generated based on the lost asset data, and a case database of the correspondence between threat events, categories and operation and maintenance operations is constructed; when the power monitoring system generates an operation and maintenance event, the category and operation and maintenance operation corresponding to the operation and maintenance event are generated based on the case database, the operation and maintenance event and the corresponding category and operation and maintenance operation are pushed to at least two equipment operation and maintenance terminals, and the operation and maintenance operation instructions returned by the operation and maintenance personnel through the equipment operation and maintenance terminals are accepted; when the operation and maintenance operation instruction is the same as the corresponding operation and maintenance operation, the operation and maintenance operation instruction is executed; when the operation and maintenance operation instruction is different from the corresponding operation and maintenance operation, the operation and maintenance operation instruction is executed when at least two equipment operation and maintenance terminals return the operation and maintenance operation instruction.
[0044] The embodiments of the present invention provide a control management monitoring method, system, electronic device and storage medium for equipment operation and maintenance of an electric power monitoring system, which parses and analyzes log data to generate threat events, and then establishes a case database of the corresponding relationship between threat events, categories and operation and maintenance operations, so as to assist the operation and maintenance operations of operation and maintenance personnel, solve the impact caused by the complex sources of external operation and maintenance terminals, improve the accuracy of operation and maintenance operations, and provide data support for realizing the automated management of operation and maintenance operations.
[0045] It should be noted that in the above embodiments, the description of each embodiment has its own emphasis, and for parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.
[0046] It will be appreciated by those skilled in the art that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Furthermore, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.
[0047] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded computer, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.
[0048] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.
[0049] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.
[0050] Although the preferred embodiments of the present invention have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present invention.
[0051] Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.
Claims
1. A control management and monitoring method for equipment operation and maintenance of an electric power monitoring system, characterized in that: The control management monitoring method comprises: Step 1: Perform attack identification and analysis based on operation and maintenance logs to obtain various types of threat events; Step 2: Generate corresponding lost asset data and operation and maintenance operations for each type of threat event, generate categories of the threat event based on the lost asset data, and build a case database of the corresponding relationship between the threat event, category and operation and maintenance operation; Step 3: When an operation and maintenance event occurs in the power monitoring system, the category and operation and maintenance operation corresponding to the operation and maintenance event are generated based on the case database, the operation and maintenance event and the corresponding category and operation and maintenance operation are pushed to at least two equipment operation and maintenance terminals, and the operation and maintenance operation instructions returned by the operation and maintenance personnel through the equipment operation and maintenance terminals are accepted; when the operation and maintenance operation instruction is the same as the corresponding operation and maintenance operation, the operation and maintenance operation instruction is executed; when the operation and maintenance operation instruction is different from the corresponding operation and maintenance operation, the operation and maintenance operation instruction is executed when at least two equipment operation and maintenance terminals return the operation and maintenance operation instruction.
2. The control management and monitoring method according to claim 1, characterized in that: The step 1 comprises: After parsing the operation and maintenance logs of types such as traffic, audit, and threat, attack identification analysis is performed to obtain threat events of various types; Performing behavior analysis on the behavior data in the operation and maintenance log to obtain abnormal behavior, and performing attack identification analysis on the abnormal behavior to obtain the threat event.
3. The control management and monitoring method according to claim 2, characterized in that: The data parsing process includes: Configuration through data source: protocol-related parameters for data collection, field extraction, conversion, and enhancement rules for access data, and metadata information related to data storage.
4. The control management and monitoring method according to claim 2, characterized in that: The behavior analysis includes a static baseline model and a dynamic baseline model; The static baseline dynamic baseline model generates a baseline through traffic learning and detects abnormal behaviors that deviate from the baseline.
5. The control management and monitoring method according to claim 2, characterized in that: The attack identification analysis matches the log content through built-in or custom rules, timing rules, and machine learning rules, identifies the logs that are consistent with the attack rule definition, and obtains the threat event.
6. The control management and monitoring method according to claim 1, characterized in that: The categories of threat events include: warning events, emergencies, key events and other threat events; The key events include key events set by the user based on event type, asset and source; The step 3 also includes: issuing different types of alarms through a large screen and push notifications based on the category of the threat event.
7. The control management and monitoring method according to claim 1, characterized in that: In step 3, the operation and maintenance operation instruction is different from the corresponding operation and maintenance operation. When at least two device operation and maintenance terminals return the operation and maintenance operation instruction and execute the operation and maintenance operation instruction, the case database of the correspondence between the threat event and the category and the operation and maintenance operation is modified based on the operation and maintenance operation instruction.
8. A control management and monitoring system for equipment operation and maintenance of an electric power monitoring system, characterized in that: include: Threat event generation module, case database construction module and interaction module; The threat event generation module is used to perform attack identification and analysis based on the operation and maintenance log to obtain various types of threat events; The case database construction module is used to generate corresponding lost asset data and operation and maintenance operations for each type of threat event, generate the category of the threat event based on the lost asset data, and construct a case database of the correspondence between the threat event, the category and the operation and maintenance operation; The interactive module is used to generate a category and operation and maintenance operation corresponding to the operation and maintenance event based on the case database when an operation and maintenance event occurs in the power monitoring system, push the operation and maintenance event and the corresponding category and operation and maintenance operation to at least two equipment operation and maintenance terminals, and accept the operation and maintenance operation instructions returned by the operation and maintenance personnel through the equipment operation and maintenance terminals; when the operation and maintenance operation instruction is the same as the corresponding operation and maintenance operation, execute the operation and maintenance operation instruction; when the operation and maintenance operation instruction is different from the corresponding operation and maintenance operation, execute the operation and maintenance operation instruction when at least two equipment operation and maintenance terminals return the operation and maintenance operation instruction.
9. An electronic device, characterized in that: It includes a memory and a processor, and the processor is used to implement the steps of the control management and monitoring method for equipment operation and maintenance of an electric power monitoring system as described in any one of claims 1 to 7 when executing a computer management program stored in the memory.
10. A computer-readable storage medium, characterized in that: A computer management program is stored thereon, and when the computer management program is executed by the processor, the steps of the control, management and monitoring method for equipment operation and maintenance of an electric power monitoring system as described in any one of claims 1 to 7 are implemented.