Regional centralized control emergency control communication system and method based on SD-WAN

Abstract

The invention provides a regional centralized control emergency control communication system and method based on an SD-WAN, and belongs to the technical field of regional centralized control. The system comprises a user side module of a regional centralized control center, which is used for starting emergency control service and transmitting emergency control information to an emergency communication module of the regional centralized control center; the emergency communication module of the regional centralized control center is used for receiving the emergency control information and then generating a control instruction; the SD-WAN routing module is arranged at the exits of the regional centralized control center and the station control center; the SD-WAN network management module is used for selecting an optimal transmission path from a multi-link physical network, so that the control instruction is transmitted to the emergency communication module of the station control center according to the optimal transmission path; and the emergency communication module of the station control center is used for analyzing the control instruction, so that the controlled target equipment of the station control center executes emergency operation according to the control instruction. The system has the characteristics of low cost, high efficiency, high reliability and the like.

Description

Technical Field

[0001] The present invention belongs to the technical field of regional centralized control, and specifically relates to a regional centralized control emergency control communication system based on SD-WAN and a regional centralized control emergency control communication method based on SD-WAN. Background Art

[0002] In the networking construction plan of regional centralized control centers and station control centers, the limitations of traditional wide area network (WAN) technology are becoming increasingly prominent. The cost of power dedicated lines is higher, and there are also physical link bottlenecks in emergency control communications. These limitations include high costs, low bandwidth utilization, and management complexity, which seriously affect the response speed and communication reliability of regional centralized control in emergency situations. For example, in traditional WAN, once the primary network has problems, there is often a lack of effective failover mechanisms, which may lead to the interruption of critical communications. At the same time, security is also a shortcoming of traditional WAN in emergency control communications, and it is difficult to meet high standards of security requirements.

[0003] At this stage, how to combine technological development and business development to provide a regional centralized emergency control communication architecture that can overcome the above pain points is a technical difficulty that needs to be overcome urgently in this field. Summary of the invention

[0004] In view of this, the purpose of an embodiment of the present invention is to provide a regional centralized control emergency control communication system based on SD-WAN and a regional centralized control emergency control communication method based on SD-WAN, so as to overcome at least one of the defects of the regional centralized control emergency control communication architecture based on traditional wide area network in the prior art, such as high cost, slow response speed, poor communication reliability and poor security.

[0005] In order to achieve the above-mentioned object, a first aspect of an embodiment of the present invention provides a regional centralized emergency control communication system based on SD-WAN, the system comprising:

[0006] The user terminal module is located in the regional centralized control center and is used to start the emergency control service and obtain the emergency control information, and transmit the emergency control information to the emergency communication module of the regional centralized control center;

[0007] The emergency communication module located in the regional centralized control center is used to receive emergency control information from the user end module and generate control instructions after processing the emergency control information;

[0008] SD-WAN routing module, installed at the exit of regional centralized control center and site control center;

[0009] The SD-WAN network management module is used to manage the physical network and use the path optimization function of the SD-WAN routing module to select the best transmission path from the multi-link physical network, so that the control command is transmitted to the emergency communication module located in the station control center through the best transmission path;

[0010] The emergency communication module located in the station control center is used to parse the control instructions so that the controlled target equipment within the control range of the station control center performs emergency operations according to the parsed control instructions.

[0011] Optionally, the service of the emergency communication module assumes both server and client functions; the management terminal devices of the production area network and the management terminal devices of the management area network in the regional control center are both loaded with the user-side module and the emergency communication module, and the management terminal devices of the production area network and the management terminal devices of the management area network in the site control center are both loaded with the emergency communication module; the SD-WAN routing module installed at the exit of the regional control center includes a first SD-WAN routing located at the exit of the production area network of the regional control center and a second SD-WAN routing located at the exit of the management area network of the regional control center, and the SD-WAN routing module installed at the exit of the site control center includes a third SD-WAN routing located at the exit of the production area network of the site control center and a fourth SD-WAN routing located at the exit of the management area network of the site control center, the first SD-WAN routing and the third SD-WAN routing constitute a virtual wide area network, and the second SD-WAN routing and the fourth SD-WAN routing constitute another virtual wide area network.

[0012] Optionally, when an emergency occurs, the emergency control information is obtained through an emergency analysis process in accordance with the management process.

[0013] Optionally, the types of emergency events include one or more physical network disconnections, equipment failures within the control range of a regional control center, equipment failures within the control range of a site control center, and service restarts.

[0014] Optionally, the types of emergency assessment content include event registration and reporting of management processes, preliminary assessment and evaluation of the impact of emergency events on hardware equipment, emergency event handling methods, emergency event handling methods, and emergency event information records.

[0015] Optionally, the content type of the emergency control information includes the identity information of the current operating user, the emergency service parameter information of the controlled target device node reachable by the network determined through testing, the controlled target device information, the emergency control mode and the emergency control content.

[0016] Optionally, when the emergency communication module executes the client function, the processing of the emergency control information includes verification, parsing, key data synchronization, encryption and encapsulation.

[0017] Optionally, when the emergency communication module executes the server function, the parsing of the control instruction includes decryption and verification.

[0018] Optionally, forward isolation devices and reverse isolation devices are deployed between the production area network and the management area network of the regional control center, and between the production area network and the management area network of the station control center.

[0019] A second aspect of an embodiment of the present invention provides a regional centralized control emergency control communication method based on SD-WAN, the method comprising:

[0020] The user-side module located in the regional centralized control center starts the emergency control service, initializes the system configuration, and prepares to handle the upcoming emergency events;

[0021] The emergency communication module located in the regional centralized control center as a client receives the emergency control information input by the user or system administrator;

[0022] Check the emergency control information. If the check passes, proceed to the next step, otherwise return to the previous step.

[0023] Parse the emergency control information. If the parsing passes, proceed to the next step. Otherwise, the process is reset and the user or system administrator is required to re-enter the emergency control information.

[0024] Perform key data synchronization, data encryption and packaging on the parsed emergency control information;

[0025] The encapsulated emergency control information is sent to the emergency communication module located in the regional centralized control center as the server through the forward isolation device or the reverse isolation device;

[0026] The emergency communication module located in the regional centralized control center as the server decrypts and verifies the encapsulated emergency control information. If the verification fails, the current emergency control task is terminated, otherwise the next step is executed;

[0027] According to the verified emergency control information, it is determined that the controlled target device located in the regional control center will perform the emergency operation, or the verified emergency control information will be forwarded to the next emergency communication module through the selected optimal transmission path, until it is determined that the controlled target device in the site control center where the current emergency communication module is located will perform the emergency operation.

[0028] In the above technical solution, firstly, SD-WAN technology is used to realize the transformation of the regional centralized emergency control communication architecture, integrate the existing network resources, have low-cost advantages in network construction and operation and maintenance, and improve the flexibility and scalability of the overall communication architecture; secondly, the optimal transmission path selection based on SD-WAN technology improves the transmission efficiency and accuracy of emergency control information and the bandwidth utilization rate of the physical network; thirdly, the emergency communication module carries out emergency control under the network deployed by SD-WAN, so that the emergency control rapid start-up and emergency information transmission functions can be realized. Compared with the traditional regional centralized emergency control communication architecture, it provides faster communication guarantee at critical moments and ensures that effective monitoring can be maintained in complex and changing environments; finally, SD-WAN equipment is easy to integrate security functions, such as data encryption transmission, intrusion defense, etc., which can also improve the security of the entire system. It can be seen that in terms of security expansion, it has strong scalability.

[0029] Other features and advantages of the embodiments of the present invention will be described in detail in the subsequent detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] The accompanying drawings are used to provide a further understanding of the embodiments of the present invention and constitute a part of the specification. Together with the following specific implementations, they are used to explain the embodiments of the present invention, but do not constitute a limitation on the embodiments of the present invention. In the accompanying drawings:

[0031] Figure 1 The structural block diagram of the regional centralized emergency control communication system based on SD-WAN according to an embodiment of the present invention is schematically shown;

[0032] Figure 2 The networking flow chart of the regional centralized emergency control communication system based on SD-WAN according to an embodiment of the present invention is schematically shown;

[0033] Figure 3 A schematic diagram of a structural block diagram of an emergency communication module of a regional centralized control center according to an embodiment of the present invention is shown;

[0034] Figure 4 A first flow chart of a regional centralized control emergency control communication method based on SD-WAN according to an embodiment of the present invention is schematically shown;

[0035] Figure 5 A second flow chart of the regional centralized control emergency control communication method based on SD-WAN according to an embodiment of the present invention is schematically shown. DETAILED DESCRIPTION

[0036] The specific implementation of the embodiment of the present invention is described in detail below in conjunction with the accompanying drawings. It should be understood that the specific implementation described here is only used to illustrate and explain the embodiment of the present invention, and is not used to limit the embodiment of the present invention.

[0037] Embodiment 1

[0038] An embodiment of the present invention provides a regional centralized control emergency control communication system based on SD-WAN, which can be applied to regionalized remote centralized control emergency control communication of substations, and can also be used in other regionalized centralized control emergency control communication scenarios except regionalized remote centralized control emergency control of substations. The present invention does not specifically limit the application field of the regional centralized control emergency control communication system based on SD-WAN.

[0039] Specifically, an SD-WAN-based regional centralized control emergency control communication system provided in an embodiment of the present invention includes a user terminal module, an emergency communication module located in a regional centralized control center, an SD-WAN routing module, an SD-WAN network management module, and an emergency communication module located in a station control center, wherein:

[0040] The user-end module is located in the regional control center and is used to start the emergency control service and obtain emergency control information, and transmit the emergency control information to the emergency communication module of the regional control center.

[0041] The emergency communication module located in the regional centralized control center is used to receive emergency control information from the user-end module and generate control instructions after processing the emergency control information.

[0042] SD-WAN routing modules are installed at the exits of regional control centers and site control centers.

[0043] The SD-WAN network management module is used to manage the physical network and use the path optimization function of the SD-WAN routing module to select the best transmission path from the multi-link physical network, so that the control instructions can be transmitted to the emergency communication module located in the station control center along the best transmission path.

[0044] The emergency communication module located in the station control center is used to parse the received control instructions so that the controlled target equipment within the control range of the station control center can perform emergency operations according to the parsed control instructions.

[0045] It should be understood that in the above technical solution, the emergency communication module is in a virtual wide area network formed by the SD-WAN routing module and the SD-WAN network management module. The multi-link physical network is a high-reliability network that can simultaneously support multiple types of physical networks, such as MPLS, the Internet, and LTE networks. The control instruction usually contains control content and controlled device information, so the controlled target device refers to the specific controlled device within the control range of the site control center specified by the control instruction. If the specific control device specified by the control instruction is a device within the control range of the regional control center, the emergency communication module located in the regional control center generates a control instruction after processing the emergency control information, so that the controlled target device in the regional control center directly performs emergency operations according to the control instruction.

[0046] Exemplarily, emergency control information can be obtained after emergency analysis and judgment according to the management process when an emergency event occurs.

[0047] Exemplarily, the types of emergency events include disconnection of one or more physical networks, equipment failure within the control range of a regional control center, equipment failure within the control range of a site control center, and service restart.

[0048] Exemplarily, the content types of emergency assessment include event registration and reporting of management processes, preliminary assessment and evaluation of the impact of emergency events on hardware equipment, emergency event handling methods, emergency event handling methods and emergency event information records, etc.

[0049] Exemplarily, the content types of the emergency control information include the identity information of the current operating user, the emergency service parameter information of the controlled target device nodes reachable through the network determined through testing, the controlled target device information, the emergency control method and the emergency control content, etc.

[0050] In order to improve the security performance of the entire system, in a specific embodiment, when the emergency communication module executes the client function, the processing of the emergency control information includes verification, analysis, key data synchronization, encryption and encapsulation; when the emergency communication module executes the server function, the analysis of the control instructions includes decryption and verification.

[0051] It can be known that verification usually verifies the validity and correctness of information. In the above embodiment, the verification of emergency control information refers to verifying the validity and correctness of emergency control information. Only when the emergency control information meets the predetermined standards can the next step of processing be carried out. Parsing refers to parsing the verified emergency control information and obtaining other required dependent data. The synchronous processing of key data is to ensure that each part of the system has a consistent data view, so as to ensure that emergency control measures can be implemented in a coordinated and consistent manner. The parsed emergency control information is encrypted so that it is not unauthorizedly accessed and tampered with during transmission. Encapsulating the encrypted emergency control information usually refers to adding necessary transmission header information to it, etc., to ensure that the emergency control information can be correctly received and parsed during transmission. The decryption of the control instruction is the inverse process of the above encryption. The verification of the control instruction can be a format check to ensure that the data structure is complete and has not been tampered with during transmission. Only data that passes the format check can be used for subsequent operations.

[0052] Furthermore, in one or more specific embodiments:

[0053] The service of the emergency communication module assumes both server and client functions, that is, the service of the emergency communication module is a client-client mode;

[0054] The management terminal equipment of the production area network in the regional centralized control center and the management terminal equipment of the management area network are loaded with the user terminal module and the emergency communication module;

[0055] The management terminal equipment of the production area network and the management terminal equipment of the management area network in the station control center are loaded with emergency communication modules;

[0056] The SD-WAN routing module installed at the exit of the regional centralized control center includes a first SD-WAN routing module located at the network exit of the production area of ​​the regional centralized control center and a second SD-WAN routing module located at the network exit of the management area of ​​the regional centralized control center;

[0057] The SD-WAN routing modules installed at the exit of the station control center include a third SD-WAN routing module located at the network exit of the production area of ​​the station control center and a fourth SD-WAN routing module located at the network exit of the management area of ​​the station control center;

[0058] The first SD-WAN router and the third SD-WAN router form a virtual LAN, and the second SD-WAN router and the fourth SD-WAN router form another virtual LAN.

[0059] In the above embodiment, the virtual WAN formed by SD-WAN routing allows for more flexible network configuration and more efficient bandwidth utilization, and can provide better cost-effectiveness and higher network reliability compared to traditional fixed-line networks. This technology choice significantly improves data transmission speed and network fault tolerance, especially in the face of multi-location distributed network environments. At the same time, by configuring SD-WAN routing to form two virtual WANs, one serving the production area and the other serving the management area, this redundant setting improves the efficiency and reliability of data transmission.

[0060] Furthermore, in one or more specific embodiments:

[0061] Forward and reverse isolation devices are deployed between the production area network and the management area network of the regional centralized control center;

[0062] Forward and reverse isolation devices are deployed between the production area network and the management area network of the station control center.

[0063] In the above embodiments, forward isolation devices and reverse isolation devices are selected as advanced network security devices to ensure the integrity and reliability of data in the production area and management area, effectively enhance the security protection performance of the system, and reduce potential network risks and the possibility of data leakage.

[0064] Figure 1 It is a composition architecture of a regional centralized control emergency control communication system based on SD-WAN in a specific application example. The production area terminal device shown in the architecture refers to the management terminal device in the production area network described in the above embodiment, the management area terminal device shown refers to the management terminal device in the management area network described in the above embodiment, the production area SD-WAN route shown at the production area exit of the regional centralized control center refers to the first SD-WAN route described in the above embodiment, the management area SD-WAN route shown at the management area exit of the regional centralized control center refers to the second SD-WAN route described in the above embodiment, the production area SD-WAN route shown at the production area exit of the station control center refers to the third SD-WAN route described in the above embodiment, the management area SD-WAN route shown at the management area exit of the station control center refers to the fourth SD-WAN route described in the above embodiment, and the forward and reverse isolation devices shown refer to the forward and reverse isolation devices described in the above embodiment. Figure 1Two virtual WANs are shown in the figure. On the basis of the two virtual WANs, combined with the services of the emergency communication module, they support the client and server functions at the same time, the loading of the user-side module and the emergency communication module on the management terminal equipment in the production area and the management terminal equipment in the management area of ​​the regional centralized control center, and the loading of the emergency communication module on the management terminal equipment in the production area and the management terminal equipment in the management area of ​​the station control center. When there is no physical network failure, the two virtual WANs are independent of each other and are respectively used for communication between the production areas of the regional centralized control and the station control, and communication between the management areas of the regional centralized control and the station control. When one virtual WAN fails, its information transmission can be completed through another virtual WAN. It can be seen that the two virtual WANs are redundant backups for each other.

[0065] To construct Figure 1 The composition architecture of the regional centralized emergency control communication system based on SD-WAN is shown, and the following content explains the networking process of the system.

[0066] like Figure 2 As shown in the figure, the system networking process includes the following implementation steps:

[0067] Step S100: both the regional centralized control center and the station control center set up a production area network and a management area network, and forward and reverse isolation devices are deployed between the production area and the management area.

[0068] Taking the network isolation of the power system as an example, in order to achieve network isolation, the system components used may include: network security equipment in the regional centralized control center, data exchange equipment in the station control center, etc. Among them, the specific steps for setting up forward and reverse isolation devices may include: designing the network architecture of the production area and the management area to ensure the physical or logical separation of the two; installing advanced network security equipment, such as forward and reverse isolation devices, to prevent network attacks from unauthorized access. Network security equipment may be firewalls, intrusion detection systems (IDS), and data encryption gateways. In combination with specific applications, appropriate forward and reverse isolation devices may be selected according to the security requirements of data transmission.

[0069] In step S200, SD-WAN routing is set at both the production area network exit and the management area network exit of the regional centralized control center and the station control center to form two virtual wide area networks.

[0070] Taking the network optimization of industrial automation enterprises as an example, to form two virtual WANs, the system components used include: SD-WAN routers located in the regional centralized control center, data communication equipment in the field station control center, etc. Among them, the specific steps of setting up SD-WAN routing to form two virtual WANs may include: evaluating network requirements and existing infrastructure, determining the target network area that needs SD-WAN technology improvement; installing SD-WAN routers at the exit of the production area network and management area network of the control center (regional centralized control center or field station control center) in the target network area.

[0071] For data communication equipment, an SD-WAN router with advanced encryption and data priority processing functions can be used. In combination with specific applications, this embodiment does not limit the type of SD-WAN routing equipment used, and can select appropriate SD-WAN routing equipment according to the data processing requirements of each control center. In addition, the carrier of the physical network can be composed of optical fiber, Ethernet cable or other high-bandwidth transmission media to ensure the high reliability and stability of the entire network.

[0072] Step S300: Emergency communication modules are deployed on the management terminal devices of the regional centralized control center and the station control center. It is known that the management terminal devices include Figure 1 The management terminal equipment shown in the figure is located in the production area network of the regional centralized control center, the management terminal equipment is located in the management area network of the regional centralized control center, the management terminal equipment is located in the production area network of the station control center, and the management terminal equipment is located in the management area network of the station control center.

[0073] Figure 3 The structure design diagram of the emergency communication module in this application example is shown. Taking the emergency control communication of the power system as an example, the core components of the emergency communication module may include: client program, server program, verification program, decryption program, encryption program, packaging program, key data synchronization program, execution and forwarding program, etc. Among them, the specific steps for deploying the emergency communication module may include: evaluating the communication needs of each control center, determining the management terminal equipment where the emergency communication module needs to be deployed; deploying the emergency communication module on the management terminal equipment. The emergency communication module can be a computer program package, which can be directly run on the management terminal equipment in the production area and the management area, or it can be an application on other physical servers or cloud servers. Based on this, it can be understood that the emergency communication module is a computer program package with quick startup and emergency information transmission functions. In combination with specific applications, a suitable emergency communication module can be selected according to the communication needs of each control center.

[0074] Step S400: deploy the manual judgment process execution of the regional centralized control center, the emergency control unit of the regional centralized control center and the station control center, etc. In the event of an emergency, emergency control is performed after manual judgment, and there is at least one channel in the network deployed by SD-WAN to reach the controlled target device, and emergency control information is generated.

[0075] Taking the emergency response of industrial control systems as an example, in order to achieve emergency control, the core components of the system may include: manual analysis and judgment process execution of the regional centralized control center, emergency control services executed by the emergency control unit of the regional centralized control center, and emergency control services executed by the emergency control unit of the site control center. Among them, the specific steps for emergency control may include: receiving emergency event alarms from on-site personnel or automatic monitoring systems; registering, reporting, and preliminarily evaluating the impact and possible treatment methods of emergency events through the manual analysis interface; ensuring that there is at least one channel under the SD-WAN deployed network that can reach the controlled target device to execute control instructions. The aforementioned emergency control unit can be a computer program package with a fast response algorithm and redundant channel selection functions. Combined with specific applications, this embodiment does not limit the specific type of emergency control unit. The content of manual analysis includes event registration and reporting of management processes, preliminary analysis and evaluation of the impact of emergency events on hardware equipment, emergency event handling methods and methods, emergency event information recording, and many other situations. Based on this, in the specific development process, it can be combined with Figure 3 Develop procedures to ensure effective emergency control communications in the event of partial network disruption or equipment failure.

[0076] Step S500, deploy the user-end module of the regional centralized control center. When an emergency occurs, the user or system administrator inputs the emergency control information through the user-end module, and the emergency communication module generates control instructions after verification, encryption, and encapsulation. The path selection function of SD-WAN routing selects the best transmission path from the multi-link physical network, and sends the control instructions to the controlled target device, thereby completing the emergency monitoring and control of the controlled device.

[0077] Taking the remote emergency control of smart grid as an example, the core components of the system may include: the operation interface of the regional centralized control center, the SD-WAN router of the site control center, etc. Among them, the specific steps to complete the emergency monitoring and control of the controlled equipment may include: verifying the identity of the user or system administrator through the user-side module, and after the verification, the user or system administrator inputs the emergency control information, and the input emergency control information includes the user identity information of the current operator, the emergency service parameter information of the controlled device node that can be reached through the network after testing, the controlled device information, the emergency control method and the emergency control content, etc.; the software application service selects the best transmission path through the path selection function (preferred channel transmission function) of the SD-WAN router according to the network status and the priority of the emergency control information; the control command is transmitted to the controlled target device through the selected best transmission path, and the actuator of the controlled target device performs the emergency operation to realize emergency monitoring and control.

[0078] Specifically, the SD-WAN router can be an advanced communication device with dynamic bandwidth adjustment and application priority management functions. It can intelligently adjust bandwidth allocation according to the urgency of the emergency event and the network load, and give priority to the transmission of key emergency control information. The dynamic bandwidth adjustment and application priority management functions of the SD-WAN router are used to select the optimal channel when transmitting emergency control information. Compared with the traditional static channel, the transmission efficiency and accuracy of emergency control information are greatly improved. This intelligent channel selection mechanism ensures that key emergency control information can still be prioritized and quickly executed when the network load is heavy or part of the network is interrupted, which significantly enhances the overall robustness and reliability of the system. In addition, the controlled target device is an intelligent terminal in the smart grid, which can fully execute remote control actions on its own and feedback the results of the action in a timely manner. Furthermore, the intelligent device can be designed to transmit its own device status and operating parameters to the emergency communication module by collecting or pushing, ensuring that data transmission and device control can be completed quickly and accurately in a complex network environment.

[0079] Embodiment 2

[0080] Combination Figures 3 to 5 The embodiment of the present invention provides a regional centralized control emergency control communication method based on SD-WAN. The method is carried out based on the regional centralized control emergency control communication system based on SD-WAN implemented in Example 1, and specifically includes the following implementation steps:

[0081] Step SS1, start emergency control service:

[0082] The user-side module located in the regional centralized control center starts the emergency control service, initializes the system configuration, and prepares to handle the upcoming emergency events;

[0083] Step SS2, input of emergency control information:

[0084] The emergency communication module located in the regional centralized control center as a client receives the emergency control information input by the user or system administrator;

[0085] Step SS3, verify emergency control information:

[0086] The emergency control information is checked to verify the validity and correctness of the emergency control information. If the check passes, SS4 is executed. Otherwise, the user or system administrator is prompted to re-enter the correct emergency control information and return to SS2.

[0087] Step SS4, parsing emergency control information:

[0088] Parse the emergency control information. The parsing process obtains other required dependent data. This step is to ensure that all data are accurate and can meet the needs of subsequent emergency control. If the parsing passes, SS5 is executed. Otherwise, the process is reset, requiring the user or system administrator to re-enter the emergency control information and return to SS2.

[0089] Step SS5, key data synchronization:

[0090] Synchronize the key data of the parsed emergency control information to ensure that each part of the system has a consistent data view. This step is the basis for ensuring that emergency control measures can be implemented in a coordinated and consistent manner.

[0091] Step SS6, data transmission encryption:

[0092] Encrypt the parsed emergency control information to ensure that the emergency control information is not accessed or tampered with by unauthorized persons during transmission;

[0093] Step SS7, data transmission encapsulation:

[0094] Encapsulate the encrypted emergency control information, such as adding necessary transmission header information, to ensure that the emergency control information can be correctly received and parsed during transmission;

[0095] Step SS8, client transmission sends:

[0096] The encapsulated emergency control information (control instructions) is sent to the emergency communication module located in the regional centralized control center as the server through the forward / reverse isolation device;

[0097] Step SS9, the server receives:

[0098] The emergency communication module located in the regional centralized control center as the server receives the packaged emergency control information;

[0099] Step SS10, data decryption and verification:

[0100] Decrypt and verify the received emergency control information. The decryption process is the reverse process of the encryption process in step SS6. The verification process here is mainly format verification. If the verification fails, the current emergency control task is terminated, otherwise, step SS11 is executed;

[0101] Step SS11, execute or forward data:

[0102] If, according to the transmission purpose and type of the emergency control information, the controlled device located in the regional centralized control center is the controlled target device specified in the control instruction, the control instruction can be directly executed at this time, that is, the controlled target device directly executes the emergency operation, such as using Figure 3 Otherwise, the emergency control information that has passed the verification is forwarded to the next emergency communication module through the best transmission path determined by the SD-WAN routing for further processing until the controlled target device of the station control center where the current emergency communication module is located can perform the emergency operation, such as using Figure 3 The repeater shown in ;

[0103] Step SS12, end the current emergency control task:

[0104] Once the current emergency control task is completed or the task is terminated due to an error, the current emergency control task is ended, and system resources will be cleaned up and released to prepare for possible subsequent emergency control tasks.

[0105] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0106] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0107] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A regional centralized emergency control communication system based on SD-WAN, characterized in that: The system comprises: The user terminal module is located in the regional centralized control center and is used to start the emergency control service and obtain the emergency control information, and transmit the emergency control information to the emergency communication module of the regional centralized control center; The emergency communication module located in the regional centralized control center is used to receive emergency control information from the user end module and generate control instructions after processing the emergency control information; SD-WAN routing module, installed at the exit of regional centralized control center and site control center; The SD-WAN network management module is used to manage the physical network and use the path optimization function of the SD-WAN routing module to select the best transmission path from the multi-link physical network, so that the control command is transmitted to the emergency communication module located in the station control center through the best transmission path; The emergency communication module located in the station control center is used to parse the control instructions so that the controlled target equipment within the control range of the station control center performs emergency operations according to the parsed control instructions.

2. The regional centralized emergency control communication system based on SD-WAN according to claim 1 is characterized in that: The service of the emergency communication module assumes both server and client functions; the management terminal equipment of the production area network and the management terminal equipment of the management area network in the regional control center are both loaded with the user-side module and the emergency communication module, and the management terminal equipment of the production area network and the management terminal equipment of the management area network in the station control center are both loaded with the emergency communication module; the SD-WAN routing module installed at the exit of the regional control center includes a first SD-WAN routing located at the exit of the production area network of the regional control center and a second SD-WAN routing located at the exit of the management area network of the regional control center, and the SD-WAN routing module installed at the exit of the station control center includes a third SD-WAN routing located at the exit of the production area network of the station control center and a fourth SD-WAN routing located at the exit of the management area network of the station control center, the first SD-WAN routing and the third SD-WAN routing constitute a virtual wide area network, and the second SD-WAN routing and the fourth SD-WAN routing constitute another virtual wide area network.

3. The regional centralized emergency control communication system based on SD-WAN according to claim 1 is characterized in that: When an emergency occurs, the emergency control information is obtained through an emergency analysis process in accordance with the management process.

4. The regional centralized emergency control communication system based on SD-WAN according to claim 3 is characterized in that: The types of emergency events include one or more physical network disconnections, equipment failures within the control range of the regional control center, equipment failures within the control range of the site control center, and service restarts.

5. The regional centralized emergency control communication system based on SD-WAN according to claim 3 is characterized in that: The types of emergency assessment content include event registration and reporting of management processes, preliminary assessment and evaluation of the impact of emergency events on hardware equipment, emergency event handling methods, emergency event handling methods, and emergency event information records.

6. The regional centralized emergency control communication system based on SD-WAN according to claim 1 is characterized in that: The content types of the emergency control information include the current operating user identity information, the emergency service parameter information of the controlled target device node reachable by the network determined through testing, the controlled target device information, the emergency control mode and the emergency control content.

7. The regional centralized emergency control communication system based on SD-WAN according to claim 2 is characterized in that: When the emergency communication module performs client functions, the processing of emergency control information includes verification, analysis, key data synchronization, encryption and packaging.

8. The regional centralized emergency control communication system based on SD-WAN according to claim 2 or 7, characterized in that: When the emergency communication module executes the server function, the analysis of the control instructions includes decryption and verification.

9. The regional centralized emergency control communication system based on SD-WAN according to claim 1 or 2, characterized in that: Forward isolation devices and reverse isolation devices are deployed between the production area network and the management area network of the regional control center, and between the production area network and the management area network of the station control center.

10. A regional centralized emergency control communication method based on SD-WAN, characterized in that: The method comprises: The user-side module located in the regional centralized control center starts the emergency control service, initializes the system configuration, and prepares to handle the upcoming emergency events; The emergency communication module located in the regional centralized control center as a client receives the emergency control information input by the user or system administrator; Check the emergency control information. If the check passes, proceed to the next step, otherwise return to the previous step. Parse the emergency control information. If the parsing passes, proceed to the next step. Otherwise, the process is reset and the user or system administrator is required to re-enter the emergency control information. Perform key data synchronization, data encryption and packaging on the parsed emergency control information; The encapsulated emergency control information is sent to the emergency communication module located in the regional centralized control center as the server through the forward isolation device or the reverse isolation device; The emergency communication module located in the regional centralized control center as the server decrypts and verifies the encapsulated emergency control information. If the verification fails, the current emergency control task is terminated, otherwise the next step is executed; According to the verified emergency control information, it is determined that the controlled target device located in the regional control center will perform the emergency operation, or the verified emergency control information will be forwarded to the next emergency communication module through the selected optimal transmission path, until it is determined that the controlled target device in the site control center where the current emergency communication module is located will perform the emergency operation.

Images