Data outlet security control system and method of substation centralized monitoring system
By working together with data catalogs, datasets, and target system modules, the complexity and security issues of data export in traditional substation centralized monitoring systems are resolved, enabling flexible, secure, and accurate data transmission to multiple target systems.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2025-02-14
- Publication Date
- 2026-04-14
AI Technical Summary
Traditional substation centralized monitoring systems have simple data export mechanisms, which leads to complex operations and high resource consumption when sending data to multiple target systems. Furthermore, it is difficult to flexibly manage data permissions according to the needs of different external systems, which can easily lead to data leakage and mistransmission.
The data catalog module reads the data model information of the centralized control data, the dataset module constructs a data set that meets the needs of different receiving systems, the target system module binds to the data receiving system, and the data sending module ensures that the data is accurately transmitted to the target system. Encryption and message broker technologies are used to improve security.
It enables the secure, accurate, and efficient transmission of centralized control data to various data receiving systems, reduces data leakage and mistransmission, simplifies management processes, and improves the flexibility and security of data transmission.
Smart Images
Figure CN120185189B_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of centralized monitoring systems for power systems, and in particular to a data export security control system and method, storage medium, and computer equipment for a centralized monitoring system for substations. Background Technology
[0002] With the development of the power industry, substation centralized monitoring systems generate a large amount of production data in their daily operations, covering multiple dimensions such as remote signaling, telemetry, and alarm events. This data is crucial for data analysis, processing, model training, and status monitoring. However, a series of challenges are faced in exporting this centralized control data to different external systems.
[0003] Traditionally, centralized monitoring systems have relatively simple data export mechanisms, typically sending all changing and periodic data to a single target system. This approach can only send data to a single target system. If data needs to be sent to multiple target systems, multiple system instances must be started, increasing operational complexity and resource consumption. Furthermore, different external systems often have different requirements for the dimensions of the data they need. According to the principle of least privilege, users should have the minimum set of permissions necessary to complete the task. In other words, centralized monitoring systems should minimize the amount and scope of data sent to target systems, sending only the data required by the recipient system. However, currently, managing the data range of different target systems relies on cumbersome configuration files, which is inefficient and prone to errors. Summary of the Invention
[0004] In view of this, this application provides a data export security control system and method for a substation centralized monitoring system, as well as a storage medium and computer equipment. By managing the target system module and the dataset module, each piece of centralized control data is broadcast only to all data receiving systems that need it, thereby avoiding leakage and mistransmission of centralized control data. The management is simple and flexible. All data model information that meets the data range can be added to a certain data set in batches, which is easy to use in setting the data range.
[0005] According to one aspect of this application, a data export security control system for a substation centralized monitoring system is provided, including a data catalog module, a dataset module, a target system module, and a data transmission module;
[0006] The data catalog module is used to read data model information of various data types from the substation centralized monitoring system, wherein the data types include centralized control measurement data, centralized control alarm data, and main transformer overload data.
[0007] The dataset module is used to construct multiple data sets based on the data receiving requirements of each data receiving system, and to set the data range corresponding to each data set. For each data set, data model information that conforms to the data range is added to the data set according to the data range corresponding to the data set.
[0008] The target system module is used to determine the target data set corresponding to each data receiving system and bind each data receiving system to the corresponding target data set;
[0009] The data sending module is used to obtain the data to be sent corresponding to the data sending task from the substation centralized monitoring system based on the data sending task, and to determine the target data receiving system and the target data corresponding to the target data receiving system based on the data to be sent and the target data bound to each data receiving system, and to send the target data to the corresponding target data receiving system.
[0010] According to another aspect of this application, a data export security control method for a substation centralized monitoring system is provided, comprising:
[0011] The data catalog module reads data model information for each data type from the substation centralized monitoring system. The data types include centralized control measurement data, centralized control alarm data, and main transformer overload data.
[0012] The dataset module constructs multiple datasets based on the data receiving requirements of each data receiving system and sets the data range corresponding to each dataset. For each dataset, data model information that conforms to the data range is added to the dataset according to the data range corresponding to the dataset.
[0013] The target system module determines the target data set corresponding to each data receiving system and binds each data receiving system to the corresponding target data set.
[0014] The data sending module obtains the data to be sent corresponding to the data sending task from the substation centralized monitoring system based on the data sending task, and determines the target data receiving system and the target data corresponding to the target data receiving system based on the data to be sent and the target data bound to each data receiving system, and sends the target data to the corresponding target data receiving system.
[0015] According to another aspect of this application, a storage medium is provided that stores a computer program thereon, which, when executed by a processor, implements the above-described data export security control method for a centralized monitoring system for substations.
[0016] According to another aspect of this application, a computer device is provided, including a storage medium, a processor, and a computer program stored on the storage medium and executable on the processor, wherein the processor executes the program to implement the above-described data export security control method for a centralized monitoring system for substations.
[0017] Using the above technical solution, this application provides a data export security control system and method for a substation centralized monitoring system, a storage medium, and a computer device. The data catalog module reads data model information of various data types from the centralized control data exported from the substation centralized monitoring system. After obtaining all data model information, the dataset module can construct multiple data sets based on the data receiving requirements of each data receiving system. Each data set has a specific data range to meet the needs of different data receiving systems. For each data set, the dataset module automatically adds data model information that conforms to the data range to the data set. Further, the target system module determines the target data set corresponding to each data receiving system. Then, each data receiving system is bound to its corresponding target data set. Subsequently, the data sending module obtains the data to be sent from the substation centralized monitoring system based on the data sending task. Based on the data to be sent and the target data sets bound to each data receiving system, the target data receiving system and its corresponding target data can be determined. Finally, the data sending module sends the target data to the corresponding target data receiving system. This application embodiment achieves the goal of broadcasting each piece of centralized control data only to all data receiving systems that need it through the management target system module and the dataset module, thereby avoiding the leakage and mistransmission of centralized control data, and making management simple and flexible; it also makes it easy to use to batch add all data model information that meets the data range to a certain data set and set the data range.
[0018] The above description is only an overview of the technical solution of this application. In order to better understand the technical means of this application and to implement it in accordance with the contents of the specification, and to make the above and other objects, features and advantages of this application more obvious and understandable, the following are specific embodiments of this application. Attached Figure Description
[0019] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:
[0020] Figure 1 This illustration shows a schematic diagram of the data export security control system of a substation centralized monitoring system according to an embodiment of this application;
[0021] Figure 2This invention illustrates a schematic diagram of the data export security control system of another substation centralized monitoring system provided in an embodiment of this application.
[0022] Figure 3 This illustration shows a schematic diagram of data model information obtained by a data catalog module according to an embodiment of this application;
[0023] Figure 4 This illustration shows a schematic diagram of the data set construction result of a dataset module provided in an embodiment of this application;
[0024] Figure 5 This illustration shows a schematic diagram of the binding result of a target system module according to an embodiment of this application;
[0025] Figure 6 This illustration shows a schematic diagram of the mapping relationship between data model information and a target system provided in an embodiment of this application;
[0026] Figure 7 A flowchart illustrating a data export security control method for a substation centralized monitoring system provided in an embodiment of this application is shown.
[0027] Figure 8 A schematic diagram of the device structure of a computer device provided in an embodiment of this application is shown. Detailed Implementation
[0028] The present application will be described in detail below with reference to the accompanying drawings and embodiments. It should be noted that, unless otherwise specified, the embodiments and features described in the embodiments of the present application can be combined with each other.
[0029] This embodiment provides a data export security control system for a substation centralized monitoring system, such as... Figure 1 As shown, the system includes a data catalog module, a dataset module, a target system module, and a data sending module;
[0030] The data catalog module is used to read data model information of various data types from the substation centralized monitoring system, wherein the data types include centralized control measurement data, centralized control alarm data, and main transformer overload data.
[0031] The dataset module is used to construct multiple data sets based on the data receiving requirements of each data receiving system, and to set the data range corresponding to each data set. For each data set, data model information that conforms to the data range is added to the data set according to the data range corresponding to the data set.
[0032] The target system module is used to determine the target data set corresponding to each data receiving system and bind each data receiving system to the corresponding target data set;
[0033] The data sending module is used to obtain the data to be sent corresponding to the data sending task from the substation centralized monitoring system based on the data sending task, and to determine the target data receiving system and the target data corresponding to the target data receiving system based on the data to be sent and the target data bound to each data receiving system, and to send the target data to the corresponding target data receiving system.
[0034] This application provides a data export security control system for a substation centralized monitoring system, which mainly consists of four core modules: a data directory module, a dataset module, a target system module, and a data transmission module. These modules work together to ensure the secure, accurate, and efficient transmission of centralized control data to various data receiving systems.
[0035] The data catalog module reads data model information for various types of centralized control data from the substation centralized monitoring system. These data types include, but are not limited to, centralized control measurement data, centralized control alarm data, and main transformer overload data. The data model information is the metadata for outgoing data such as centralized control measurement data (real-time measurement), centralized control alarm data, and main transformer overload data, including the substation to which the outgoing data belongs, the corresponding equipment, the associated bay, and the voltage level. The data catalog module is the cornerstone of the entire data outgoing security management system. It provides the basic framework and index for centralized control data, enabling other modules to efficiently access and process the data.
[0036] After the data catalog module acquires all data model information, the dataset module can construct multiple datasets based on the data receiving requirements of each data receiving system. Each dataset has a defined data range to meet the needs of different data receiving systems. Here, datasets can be manually constructed or automatically constructed by the system. For each dataset, the dataset module automatically adds data model information that matches the data range to the dataset. The data range can be used to filter data model information. It's important to note that a single data receiving system can have different datasets, and each dataset can be used for different data receiving systems. The dataset module provides high flexibility, allowing system administrators to dynamically create, modify, and delete datasets according to actual needs.
[0037] Furthermore, the target system module determines the target data set corresponding to each data receiving system. One data receiving system can correspond to one or more target data sets. For example, there are five data sets, designated as Data Set 1 to Data Set 5. Additionally, there are two data receiving systems, designated as Data Receiving System 1 to Data Receiving System 2. Data Receiving System 1 corresponds to Data Sets 1, 3, and 4, while Data Receiving System 2 corresponds to Data Sets 1, 2, and 5. The target system module then binds each data receiving system to its corresponding target data set. In this way, when data is sent, the data egress security control system can accurately determine which data should be sent to which data receiving system. Therefore, the target system module is crucial for ensuring the correct transmission of data to the target data receiving system. It achieves precise data distribution by establishing a mapping relationship between data receiving systems and data sets.
[0038] Furthermore, based on the data transmission task, the data transmission module obtains the data to be transmitted from the substation centralized monitoring system. According to the data to be transmitted and the target data sets bound to each data receiving system, it can determine the target data receiving system and the corresponding target data. Finally, the data transmission module sends the target data to the corresponding target data receiving system. The data transmission module is the executor of the entire system; it is responsible for efficiently and securely transmitting the processed data to the target data receiving system.
[0039] By applying the technical solution of this embodiment, the data catalog module reads data model information of various data types from the centralized control data of the substation's external output from the substation's centralized monitoring system. After obtaining all the data model information, the dataset module can construct multiple data sets based on the data receiving requirements of each data receiving system. Each data set has a specific data range to meet the needs of different data receiving systems. For each data set, the dataset module automatically adds data model information that conforms to the data range to the data set. Further, the target system module determines the target data set corresponding to each data receiving system. Then, each data receiving system is bound to its corresponding target data set. Subsequently, the data sending module obtains the data to be sent from the substation's centralized monitoring system based on the data sending task. Based on the data to be sent and the target data sets bound to each data receiving system, the target data receiving system and the corresponding target data can be determined. Finally, the data sending module sends the target data to the corresponding target data receiving system. This application embodiment achieves the goal of broadcasting each piece of centralized control data only to all data receiving systems that need it through the management target system module and the dataset module, thereby avoiding the leakage and mistransmission of centralized control data, and making management simple and flexible; it also makes it easy to use to batch add all data model information that meets the data range to a certain data set and set the data range.
[0040] Optionally, in this embodiment, when the data transmission task is a periodic transmission task, the data transmission module is configured to: respond to the triggering command of the periodic transmission task, obtain multiple centralized control measurement data to be transmitted from the substation centralized monitoring system, identify the data model information corresponding to each centralized control measurement data, and represent each centralized control measurement data and its corresponding data model information in the form of key-value pairs to obtain multiple key-value pairs; determine the data model information list corresponding to each data receiving system according to the data model information in the target data set bound to each data receiving system; determine a first target data receiving system from each data receiving system based on the data model information list corresponding to each data receiving system and the multiple key-value pairs; for each first target data receiving system, obtain the target key-value pair corresponding to the first target data receiving system from the multiple key-value pairs based on the data model information list corresponding to the first target data receiving system, use the target key-value pair as target data, and send the target data to the corresponding first target data receiving system.
[0041] In this embodiment, the data transmission module can automatically acquire centralized control measurement data from the substation centralized monitoring system according to a preset period, and accurately send this data to the corresponding first target data receiving system according to the needs of each data receiving system. Specifically, the data transmission module can listen for or wait for a periodic trigger command in real time. This command is usually issued by the timer or scheduler of the data export security management system, indicating that the preset transmission period has arrived. Once the data transmission module receives the trigger command for the periodic transmission task, it can obtain all the centralized control measurement data to be pushed from the real-time database of the substation centralized monitoring system. This centralized control measurement data can include various data such as voltage, current, and power.
[0042] For each piece of centralized control measurement data acquired, the data sending module can identify and extract its corresponding data model information. To facilitate subsequent processing, the data sending module combines each piece of centralized control measurement data with its corresponding data model information into a key-value pair. In this way, all centralized control measurement data is represented as a set of key-value pairs. Furthermore, the data sending module can also generate a data model information list for each data receiving system based on the data model information bound to each system. This list contains the data model information corresponding to the data that the system needs to receive.
[0043] For each first target data receiving system, the data sending module can also filter out matching keys from multiple key-value pairs based on its data model information list, and then determine the centralized control measurement data based on the values corresponding to these matching keys. This centralized control measurement data is then used as the target data for that first target data receiving system. The filtered target data is then sent to the corresponding first target data receiving system. In one embodiment, the data sending module can also obtain the quality code for each piece of centralized control measurement data from the real-time database and send the quality code along with the data to the corresponding first target data receiving system. A quality code is a code or marker used to describe the data quality status. In a data system, each data item can be associated with a quality code to represent the data's accuracy, completeness, consistency, timeliness, and other quality characteristics.
[0044] This application's embodiments represent the centralized control measurement data to be sent in key-value pairs, achieving flexible data management and efficient transmission. Simultaneously, by maintaining the correspondence between the data receiving system and the data model information, it ensures that data is accurately sent to the data receiving system that requires it.
[0045] Optionally, when the data transmission task is a triggered transmission task, the data transmission module is configured to: trigger the generation of an emergency data transmission task when receiving emergency data sent by the substation centralized monitoring system; obtain data model information corresponding to the emergency data, wherein the emergency data includes centralized control alarm data and / or main transformer overload data; determine a data model information list corresponding to each data receiving system based on the data model information in the target data set bound to each data receiving system; determine a second target data receiving system from each data receiving system based on the data model information list corresponding to each data receiving system and the data model information corresponding to the emergency data; and send the emergency data to all second target data receiving systems.
[0046] In this embodiment, the substation centralized monitoring system can also generate emergency data such as centralized control alarm data and main transformer overload data. After generating this emergency data, the data sending module can obtain it through real-time messages or other channels. When the data sending module obtains a sudden change in a centralized control remote signaling data or centralized control alarm data, it can automatically trigger the generation of an emergency data sending task. In other words, the emergency data sending task is a triggered task, based on a specific event, specifically triggered when receiving emergency data sent by the substation centralized monitoring system. Here, emergency data can include centralized control alarm data and / or main transformer overload data. When the data sending module receives abnormal or important data of these types, it can automatically trigger the emergency data sending task.
[0047] Upon triggering an emergency data transmission task, the data transmission module first acquires the data model information associated with the emergency data. Additionally, each data receiving system is bound to one or more target data sets, which define the data that the receiving system expects to receive. Next, the data transmission module generates a list containing the data model information corresponding to the data that each receiving system expects to receive, based on the target data sets bound to each system. Then, the data transmission module determines which receiving systems should receive the emergency data by comparing the data model information corresponding to the emergency data with the list of data model information for each receiving system.
[0048] Based on the matching logic described above, the data sending module filters out qualified second target data receiving systems from all possible data receiving systems. These second target data receiving systems are determined based on the data model information of the emergency data and the data that each data receiving system expects to receive. Finally, the data sending module sends the emergency data to these selected second target data receiving systems. In one embodiment, the data sending module can also obtain the quality code of each piece of emergency data from the real-time database and send the quality code along with the data to the corresponding second target data receiving system.
[0049] This application embodiment allows the determination of the target for emergency data transmission based on the data model information of the emergency data and the needs of each data receiving system, thereby improving the accuracy of emergency data transmission. By matching the data model information, the data transmission module can quickly and accurately determine which data receiving systems should receive the emergency data, reducing unnecessary data transmission and processing overhead.
[0050] It should be noted that, for both periodic and triggered sending tasks in this application, regardless of how many target data receiving systems are sent to, the target data acquisition process only needs to be performed once. This can effectively avoid duplicate data acquisition and reduce unnecessary data transmission and processing overhead.
[0051] In this embodiment of the application, optionally, the target system module is further configured to: determine the importance level of the data received by each data receiving system, and set an encryption key for the data receiving system with an importance level greater than a preset level; correspondingly, the data sending module is further configured to: after determining the target data receiving system and the target data corresponding to the target data receiving system, read the encryption key corresponding to the target data receiving system from the target system module, and when the encryption key is successfully read, encrypt the target data based on the encryption key, and send the encrypted target data to the corresponding target data receiving system.
[0052] In this embodiment, the target system module can also determine the importance level of the data received by the data receiving system and set encryption keys for data receiving systems with higher importance levels. Specifically, the target system module can evaluate the importance level of the data received by each data receiving system. This level can be determined based on factors such as the type of data, its sensitivity, and its impact on business operations. For data receiving systems with an importance level greater than a preset level, the target system module can set an encryption key for them. This encryption key is used to ensure the confidentiality and integrity of the data during data transmission.
[0053] Subsequently, after the data sending module identifies the target data receiving system and its corresponding target data, it can further read the encryption key corresponding to the target data receiving system from the target system module. If the encryption key is successfully read, the data sending module can encrypt the target data based on the encryption key. Various encryption algorithms and techniques can be used, such as symmetric encryption, asymmetric encryption, and hash functions. Encryption ensures that the data is not stolen or tampered with by unauthorized personnel during transmission. Finally, the data sending module sends the encrypted target data to the corresponding target data receiving system.
[0054] The embodiments of this application can significantly improve the security of data transmission by setting an encryption key for a data receiving system with a high importance level.
[0055] In this embodiment of the application, optionally, the target system module is further configured to: set corresponding message broker information for each data receiving system; correspondingly, the data sending module is further configured to: after determining the target data receiving system and the target data corresponding to the target data receiving system, read the message broker information corresponding to the target data receiving system from the target system module, generate a producer instance of the message broker corresponding to the target data receiving system based on the read message broker information, and send the target data to the message broker of the corresponding target data receiving system through the producer instance.
[0056] In this embodiment, the target system module can also set corresponding message broker information for each data receiving system. Here, the message broker information may include the message broker's address (such as IP address and port number), queue or topic name, authentication information, etc. Setting the message broker information helps the data sending module correctly send data to the message broker of the target data receiving system. A message broker is typically middleware used to provide asynchronous, decoupled communication between the data sender and data receiver.
[0057] Subsequently, after the data sending module identifies the target data receiving system and its corresponding target data, it can read the message broker information corresponding to that target data receiving system from the target system module. Then, based on the read message broker information, the data sending module can generate a producer instance for the message broker corresponding to the target data receiving system. The producer instance acts as a bridge between the data sending module and the message broker, responsible for sending data to the message broker. Finally, the data sending module sends the target data to the corresponding message broker of the target data receiving system through the producer instance. The message broker is responsible for storing the data in a queue or topic and waiting for the target data receiving system (i.e., the consumer) to consume this data.
[0058] This application's embodiments introduce a message broker, enabling asynchronous and decoupled communication between data senders and receivers. This helps reduce system complexity and improves system scalability and fault tolerance. The message broker provides multiple communication modes (such as point-to-point, publish / subscribe, etc.) and multiple data persistence options (such as memory storage, disk storage, etc.), allowing the data sending module to flexibly configure and use the message broker according to different business needs. Message brokers typically have functions such as data persistence, message acknowledgment, and retry mechanisms to ensure data reliability and integrity. Even if the data sender or receiver fails, the message broker can ensure that data is not lost or resent.
[0059] In this embodiment of the application, optionally, the dataset module is configured to: in response to a data set addition instruction, construct a new data set, obtain the data range corresponding to the new data set, and add data model information conforming to the data range to the new data set; and / or, in response to a data set deletion instruction, determine the data set to be deleted corresponding to the deletion instruction, and determine whether there is a data receiving system bound to the data set to be deleted in each current data receiving system, and delete the data set to be deleted if it does not exist; and / or, in response to a data set modification instruction, determine the data set to be modified corresponding to the modification instruction, obtain the modification task corresponding to the data set to be modified, identify the data model information and target operation corresponding to the modification task, execute the target operation on the data model information corresponding to the modification task, and obtain the modified data set.
[0060] In this embodiment, to enhance the flexibility of data set operations, the dataset module can also perform add, delete, and modify operations on the data set under user input. When a new data set addition instruction is received, the dataset module can construct a new data set according to the requirements of the instruction. Subsequently, the data range corresponding to this new data set is determined. Specifically, the user can manually set the data range corresponding to the new data set. After determining the data range, the dataset module can iterate through the data model information that conforms to the range. For each data model information that conforms to the data range, the dataset module adds it to the new data set. Finally, a new data set containing all data model information indicating the data range is obtained.
[0061] When a deletion command is received for a dataset, the dataset module can identify the dataset to be deleted based on the command. However, to ensure that the data receiving system can receive the required target data normally, the dataset module can check whether any data receiving system is currently bound to the dataset to be deleted before deletion. This ensures that the deletion operation will not affect other data receiving systems that depend on the dataset. If no data receiving system is bound to the dataset, the dataset module performs the deletion operation, completely removing the dataset and all its contained data. If a data receiving system is bound to the dataset, the module can warn the user of the risks of deleting the dataset, allowing the user to decide whether to continue the deletion.
[0062] When a modification instruction for a dataset is received, the dataset module identifies the dataset to be modified based on the instruction. Further, the dataset module parses the instruction to obtain the specific modification task. The modification task can include operations such as adding, deleting, or updating data model information. Subsequently, the dataset module identifies the data model information to be manipulated and the specific target operation (e.g., adding, deleting, updating), and executes the target operation on the corresponding data model information in the dataset to be modified. After completing the modification task, the modified dataset is obtained.
[0063] The dataset module in this embodiment can respond to commands for adding, deleting, and modifying data sets, allowing the data sets to be adjusted according to user needs, increasing the flexibility of data set management to adapt to different business requirements.
[0064] Optionally, in this embodiment of the application, the dataset module is further configured to: when new data model information exists in the substation centralized monitoring system, determine the target data range to which the new data model information belongs based on the data range corresponding to each data set, and add the new data model information to the data set corresponding to the target data range.
[0065] In this embodiment, data model information is crucial for the operation and monitoring of a substation centralized monitoring system. This data model information may be continuously updated with system upgrades, expansions, or the addition of new equipment. Based on this, the dataset module can also monitor the substation centralized monitoring system in real time for the presence of new data model information. This is typically achieved through system logs, event triggers, or periodic scans. Once new data model information is detected, the dataset module can determine the target data range to which the new data model information belongs, based on the data range corresponding to each dataset. After determining the target data range, the dataset module can automatically add the new data model information to the corresponding dataset. At this point, the new data model information is formally integrated into the dataset for subsequent processing and analysis.
[0066] This application embodiment automatically integrates new data model information, enabling subsequent analysis to obtain the data corresponding to the new data model information more timely and accurately, thereby improving the monitoring capabilities of the data export security management system and providing more comprehensive and accurate protection for the safe operation of substations.
[0067] In one embodiment, the data export security control system of the substation centralized monitoring system can be as follows: Figure 2 As shown. Figure 2 As shown, the data export security management system of a substation centralized control system can include a presentation layer, a business layer, a basic service layer, and a persistence layer. The presentation layer is used for front-end display via Web technology to achieve visualization of data management, such as displaying... Figures 3-6 The business layer may include the data catalog module, dataset module, target system module, and data sending module of this application, used to implement the data export security control method of this application. The basic service layer includes the centralized control system message bus and MQ (Message Queue) component. The persistence layer includes real-time database and commercial database. Real-time database (RTDB) is a branch of database system development, resulting from the combination of database technology and real-time processing technology. It can collect and acquire various data during the operation of the substation centralized monitoring system in real time. Commercial database refers to database systems specifically used for commercial applications and business management. The data sending module in the business layer is used to send target data to external systems; here, the target system is the aforementioned data receiving system.
[0068] In another embodiment, a data catalog module, dataset module, target system module, and data transmission module are provided as part of a data export security control system for a substation centralized monitoring system. Among them, such as... Figure 3As shown, the data directory module can acquire data model information corresponding to real-time measurement data (i.e., centralized control measurement data), alarm messages (i.e., centralized control alarm data), and main transformer overload data. Here, the data directory module can contain a real-time measurement data subdirectory, containing measurement data one through six; an alarm message subdirectory, containing alarm data seven through twelve; and a main transformer overload data subdirectory, containing main transformer overload data thirteen through fourteen. Here, measurement data one through six, alarm data seven through twelve, and main transformer overload data thirteen through fourteen can be referred to as data model information.
[0069] Next, as Figure 4 As shown, the dataset module can construct multiple datasets according to the data receiving requirements of each data receiving system. Specifically, the dataset module constructs four datasets, namely dataset one to dataset four. Among them, dataset one adds measurement data one to measurement data three; dataset two adds measurement data four to measurement data six; dataset three adds alarm data seven to alarm data nine; and dataset four adds alarm data ten.
[0070] Subsequently, as Figure 5 As shown, the target system module binds a data set to each target system (i.e., the data receiving system). Specifically, target system one is bound to data sets one, two, and four; target system two is bound to data sets two, three, and four. This yields the following... Figure 6 The mapping relationship between each target system and data model information is shown.
[0071] Subsequently, assuming an alarm occurs in the substation centralized monitoring system, when the data sending module receives emergency data from the message bus or database alarm table of the substation centralized monitoring system's data exit security control system, it can trigger the generation of an emergency data sending task. Then, it determines the corresponding secondary target data receiving system and sends the emergency data to that system.
[0072] Taking alarm data nine as an example, assuming that the data model information corresponding to the emergency data is alarm data nine, if it is determined that the data set bound to target system two contains alarm data nine, then the emergency data can be sent to target system two.
[0073] Taking alarm data ten as an example, assuming that the data model information corresponding to the emergency data is alarm data ten, and it is determined that the data sets bound to both target system one and target system two contain alarm data ten, then the emergency data can be sent to target system one and target system two.
[0074] Taking alarm data eleven as an example, assuming that the data model information corresponding to the emergency data is alarm data eleven, if it is determined that no target system's data set contains alarm data eleven, that is, the second target data receiving system for the emergency data is empty, then the emergency data will not be sent, and the sending process will end directly.
[0075] Furthermore, as Figure 1 In terms of specific system implementation, this application provides a data export security control method for a substation centralized monitoring system, such as... Figure 7 As shown, the method includes:
[0076] The data catalog module reads data model information for each data type from the substation centralized monitoring system. The data types include centralized control measurement data, centralized control alarm data, and main transformer overload data.
[0077] The dataset module constructs multiple datasets based on the data receiving requirements of each data receiving system and sets the data range corresponding to each dataset. For each dataset, data model information that conforms to the data range is added to the dataset according to the data range corresponding to the dataset.
[0078] The target system module determines the target data set corresponding to each data receiving system and binds each data receiving system to the corresponding target data set.
[0079] The data sending module obtains the data to be sent corresponding to the data sending task from the substation centralized monitoring system based on the data sending task, and determines the target data receiving system and the target data corresponding to the target data receiving system based on the data to be sent and the target data bound to each data receiving system, and sends the target data to the corresponding target data receiving system.
[0080] Optionally, when the data transmission task is a periodic transmission task, the method further includes:
[0081] The data sending module responds to the trigger command of the periodic sending task, obtains multiple centralized control measurement data to be sent from the substation centralized monitoring system, identifies the data model information corresponding to each centralized control measurement data, and represents each centralized control measurement data and the corresponding data model information in the form of key-value pairs to obtain multiple key-value pairs.
[0082] The data sending module determines the data model information list corresponding to each data receiving system based on the data model information in the target data set bound to each data receiving system;
[0083] The data sending module determines the first target data receiving system from each data receiving system based on the data model information list corresponding to each data receiving system and the multiple key-value pairs.
[0084] For each first target data receiving system, the data sending module obtains the target key-value pair corresponding to the first target data receiving system from the plurality of key-value pairs based on the data model information list corresponding to the first target data receiving system, uses the target key-value pair as target data, and sends the target data to the corresponding first target data receiving system.
[0085] Optionally, when the data transmission task is a triggered transmission task, the method further includes:
[0086] When the data sending module receives emergency data sent by the substation centralized monitoring system, it triggers the generation of an emergency data sending task and obtains the data model information corresponding to the emergency data. The emergency data includes centralized control alarm data and / or main transformer overload data.
[0087] The data sending module determines the data model information list corresponding to each data receiving system based on the data model information in the target data set bound to each data receiving system;
[0088] The data sending module determines the second target data receiving system from each data receiving system based on the data model information list corresponding to each data receiving system and the data model information corresponding to the emergency data, and sends the emergency data to all the second target data receiving systems.
[0089] Optionally, the method further includes:
[0090] The target system module determines the importance level of the data received by each data receiving system and sets an encryption key for data receiving systems with an importance level greater than a preset level;
[0091] Accordingly, the method further includes:
[0092] After determining the target data receiving system and the target data corresponding to the target data receiving system, the data sending module reads the encryption key corresponding to the target data receiving system from the target system module. After successfully reading the encryption key, the module encrypts the target data based on the encryption key and sends the encrypted target data to the corresponding target data receiving system.
[0093] Optionally, the method further includes:
[0094] The target system module sets corresponding message broker information for each data receiving system;
[0095] Accordingly, the method further includes:
[0096] After determining the target data receiving system and the target data corresponding to the target data receiving system, the data sending module reads the message broker information corresponding to the target data receiving system from the target system module, generates a producer instance of the message broker corresponding to the target data receiving system based on the read message broker information, and sends the target data to the message broker of the corresponding target data receiving system through the producer instance.
[0097] Optionally, the method further includes:
[0098] The dataset module, in response to a data set addition instruction, constructs a new data set, obtains the data range corresponding to the new data set, and adds data model information conforming to the data range to the new data set; and / or, in response to a data set deletion instruction, determines the data set to be deleted corresponding to the deletion instruction, and determines whether there is a data receiving system bound to the data set to be deleted in the current data receiving systems. If not, the data set to be deleted is deleted; and / or, in response to a data set modification instruction, determines the data set to be modified corresponding to the modification instruction, obtains the modification task corresponding to the data set to be modified, identifies the data model information and target operation corresponding to the modification task, executes the target operation on the data model information corresponding to the modification task, and obtains the modified data set.
[0099] Optionally, the method further includes:
[0100] When new data model information exists in the substation centralized monitoring system, the dataset module determines the target data range to which the new data model information belongs based on the data range corresponding to each data set, and adds the new data model information to the data set corresponding to the target data range.
[0101] It should be noted that other corresponding descriptions of the functional units involved in the data export security control method for a substation centralized monitoring system provided in this application embodiment can be found in the following references. Figures 1 to 6 The corresponding descriptions in the system will not be repeated here.
[0102] This application also provides a computer device, which may specifically be a personal computer, a server, a network device, etc. Figure 8As shown, the computer device includes a bus, a processor, memory, and a communication interface, and may also include an input / output interface and a display device. The processor provides computing and control capabilities. The memory includes a non-volatile storage medium and internal memory. The non-volatile storage medium stores an operating system, computer programs, and a database. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage medium. The database stores location information. The network interface allows communication with external terminals via a network connection. When the computer program is executed by the processor, it implements the steps in the various method embodiments.
[0103] Those skilled in the art will understand that Figure 8 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.
[0104] In one embodiment, a computer-readable storage medium is provided, which may be non-volatile or volatile, having stored thereon a computer program that, when executed by a processor, implements the steps in the above method embodiments.
[0105] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps in the above method embodiments.
[0106] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties.
[0107] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.
[0108] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.
[0109] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.
Claims
1. A data export security control system for a substation centralized monitoring system, characterized in that, It includes a data catalog module, a dataset module, a target system module, and a data sending module; The data catalog module is used to read data model information of various data types from the substation centralized monitoring system, wherein the data types include centralized control measurement data, centralized control alarm data, and main transformer overload data. The dataset module is used to construct multiple data sets based on the data receiving requirements of each data receiving system, and to set the data range corresponding to each data set. For each data set, data model information that conforms to the data range is added to the data set according to the data range corresponding to the data set. The target system module is used to determine the target data set corresponding to each data receiving system and bind each data receiving system to the corresponding target data set; The data sending module is used to obtain the data to be sent corresponding to the data sending task from the substation centralized monitoring system based on the data sending task, and determine the target data receiving system and the target data corresponding to the target data receiving system based on the data to be sent and the target data bound to each data receiving system, and send the target data to the corresponding target data receiving system. The dataset module is also used for: When new data model information exists in the substation centralized monitoring system, the target data range to which the new data model information belongs is determined based on the data range corresponding to each data set, and the new data model information is added to the data set corresponding to the target data range.
2. The system according to claim 1, characterized in that, When the data transmission task is a periodic transmission task, the data transmission module is used to: In response to the trigger command of the periodic transmission task, multiple centralized control measurement data to be transmitted are obtained from the substation centralized monitoring system, and the data model information corresponding to each centralized control measurement data is identified. Each centralized control measurement data and the corresponding data model information are represented in the form of key-value pairs to obtain multiple key-value pairs. Based on the data model information in the target data set bound to each data receiving system, determine the data model information list corresponding to each data receiving system; Based on the data model information list corresponding to each data receiving system and the multiple key-value pairs, the first target data receiving system is determined from each data receiving system; For each first target data receiving system, based on the data model information list corresponding to the first target data receiving system, a target key-value pair corresponding to the first target data receiving system is obtained from the plurality of key-value pairs, the target key-value pair is used as target data, and the target data is sent to the corresponding first target data receiving system.
3. The system according to claim 1, characterized in that, When the data transmission task is a triggered transmission task, the data transmission module is used to: When emergency data is received from the substation centralized monitoring system, an emergency data sending task is triggered to obtain the data model information corresponding to the emergency data. The emergency data includes centralized control alarm data and / or main transformer overload data. Based on the data model information in the target data set bound to each data receiving system, determine the data model information list corresponding to each data receiving system; Based on the data model information list corresponding to each data receiving system and the data model information corresponding to the emergency data, a second target data receiving system is determined from each data receiving system, and the emergency data is sent to all second target data receiving systems.
4. The system according to claim 1, characterized in that, The target system module is also used for: Determine the importance level of the data received by each data receiving system, and set an encryption key for data receiving systems with an importance level greater than a preset level; Accordingly, the data sending module is further configured to: After determining the target data receiving system and the target data corresponding to the target data receiving system, the encryption key corresponding to the target data receiving system is read from the target system module. After successfully reading the encryption key, the target data is encrypted based on the encryption key, and the encrypted target data is sent to the corresponding target data receiving system.
5. The system according to claim 1, characterized in that, The target system module is also used for: Configure corresponding message broker information for each data receiving system; Accordingly, the data sending module is further configured to: After determining the target data receiving system and the target data corresponding to the target data receiving system, the message broker information corresponding to the target data receiving system is read from the target system module. Based on the read message broker information, a producer instance of the message broker corresponding to the target data receiving system is generated, and the target data is sent to the message broker of the corresponding target data receiving system through the producer instance.
6. The system according to any one of claims 1 to 5, characterized in that, The dataset module is used for: In response to a new data set instruction, a new data set is constructed, and the data range corresponding to the new data set is obtained. Data model information that conforms to the data range is added to the new data set. And / or, In response to a deletion instruction for a data set, the system determines the data set to be deleted corresponding to the deletion instruction and checks whether there is a data receiving system bound to the data set to be deleted in each current data receiving system. If there is no such system, the system deletes the data set to be deleted. And / or, In response to a modification instruction for a data set, the system determines the data set to be modified corresponding to the modification instruction, obtains the modification task corresponding to the data set to be modified, identifies the data model information and target operation corresponding to the modification task, executes the target operation on the data model information corresponding to the modification task, and obtains the modified data set.
7. A method for data export security control of a substation centralized monitoring system, characterized in that, include: The data catalog module reads data model information for each data type from the substation centralized monitoring system. The data types include centralized control measurement data, centralized control alarm data, and main transformer overload data. The dataset module constructs multiple datasets based on the data receiving requirements of each data receiving system and sets the data range corresponding to each dataset. For each dataset, data model information that conforms to the data range is added to the dataset according to the data range corresponding to the dataset. The target system module determines the target data set corresponding to each data receiving system and binds each data receiving system to the corresponding target data set. The data sending module obtains the data to be sent corresponding to the data sending task from the substation centralized monitoring system based on the data sending task, and determines the target data receiving system and the target data corresponding to the target data receiving system based on the data to be sent and the target data bound to each data receiving system, and sends the target data to the corresponding target data receiving system. The method further includes: When new data model information exists in the substation centralized monitoring system, the dataset module determines the target data range to which the new data model information belongs based on the data range corresponding to each data set, and adds the new data model information to the data set corresponding to the target data range.
8. A storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the method of claim 7.
9. A computer device, comprising a storage medium, a processor, and a computer program stored on the storage medium and executable on the processor, characterized in that, The processor implements the method of claim 7 when executing the computer program.
Citation Information
Patent Citations
Data outgoing method, device and equipment and computer readable storage medium
CN119011390A