AGC master station upper and lower level coordination control anti-error method and system

Abstract

The invention provides an AGC (Automatic Gain Control) master station superior and subordinate coordination control anti-error method and system. The method comprises the following steps: configuring a first anti-error rule for a superior mechanism in a new energy AGC system, and configuring a second anti-error rule for a subordinate mechanism; when the superior mechanism performs data interaction with the subordinate mechanism, the superior mechanism receives first interaction information from the subordinate mechanism; the subordinate mechanism receives second interaction information from the superior mechanism; the superior mechanism performs anti-misoperation logic judgment on the first interaction information by using a first anti-misoperation rule, analyzes a first abnormal condition and executes corresponding anti-misoperation operation; and the subordinate mechanism performs anti-misoperation logic judgment on the second interaction information by using a second anti-misoperation rule, analyzes a second abnormal condition and executes corresponding anti-misoperation operation. According to the invention, a more comprehensive anti-error rule is set, verification and judgment are carried out on data interacted by the upper and lower levels, and corresponding measures are taken when abnormity is found, so that the safety, the reliability, the stability and the maintainability of the new energy AGC system are remarkably improved.

Description

Technical Field

[0001] The present invention relates to the technical field of power dispatching, and particularly relates to a method and system for preventing errors in the coordinated control between the upper and lower levels of an AGC master station. Background Art

[0002] With the large-scale grid connection of new energy, new energy AGC plays an increasingly important role in the power system. In order to achieve regional power balance, a hierarchical control architecture is usually adopted, that is, the upper-level dispatching agency coordinates and controls the lower-level agencies. However, during the process of coordinated control between the upper and lower levels, due to factors such as communication failures and data anomalies, control instructions may be incorrect, and even system accidents may be triggered. Therefore, how to ensure the security of the coordinated control between the upper and lower levels of the new energy AGC master station is crucial.

[0003] Based on this, the following several AGC control systems have been proposed in the prior art:

[0004] AGC control system based on redundant communication: Some AGC systems adopt redundant communication links to improve the reliability of communication. However, relying solely on redundant communication cannot completely solve the problems of data anomalies and incorrect instructions. For example, if the instruction sent by the upper-level dispatching agency is itself incorrect, even if it is reliably transmitted to the lower-level agency through the redundant link, it will still lead to misoperations.

[0005] AGC control system based on state estimation: Some AGC systems adopt state estimation technology to obtain the operating state of the system, thereby improving the accuracy of control. However, state estimation itself may also have errors and cannot completely avoid communication failures and data anomalies.

[0006] AGC control system with simple error prevention logic: Some AGC systems already have some simple error prevention logics. For example, when the communication is interrupted, the control is suspended. However, these simple error prevention logics are usually not comprehensive enough, lacking a perfect error prevention mechanism for coordinated control between the upper and lower levels, and it is difficult to cover various possible data anomalies and communication failures; they may only verify some key data while ignoring other data that may cause misoperations; since the control is simply suspended without more refined processing strategies, the system may also stop running when encountering minor anomalies, affecting the availability of the system.

[0007] In summary, the existing new energy AGC systems have technical problems such as lacking a perfect error prevention mechanism, single error prevention actions, and lacking consistency verification of target values and increment values, which may lead to incorrect control instructions and cause the output of new energy power stations to deviate from the expected values. Summary of the Invention

[0008] To this end, the present invention provides a method and system for preventing errors in the coordinated control between the upper and lower levels of an AGC master station, aiming to solve the technical problems in the prior art that there is a lack of a comprehensive, effective, and refined error prevention mechanism, making it difficult to effectively cope with various data anomalies, communication failures, and instruction errors.

[0009] To achieve the above object, the present invention adopts the following technical solutions:

[0010] According to the first aspect of the present invention, the present invention provides a method for preventing errors in the coordinated control between the upper and lower levels of an AGC master station, and the method includes:

[0011] Configuring a first error prevention rule for the upper-level organization in the new energy AGC system; and, configuring a second error prevention rule for the lower-level organization in the new energy AGC system;

[0012] When data interaction occurs between the upper-level organization and the lower-level organization, the upper-level organization receives first interaction information from the lower-level organization; and, the lower-level organization receives second interaction information from the upper-level organization;

[0013] The upper-level organization uses the first error prevention rule to perform an error prevention logic judgment on the first interaction information, analyze a first abnormal situation, and perform corresponding error prevention operations according to the first abnormal situation; and, the lower-level organization uses the second error prevention rule to perform an error prevention logic judgment on the second interaction information, analyze a second abnormal situation, and perform corresponding error prevention operations according to the second abnormal situation.

[0014] Further, both the first interaction information and the second interaction information include at least one of an operating state, a time stamp, and a remote signal;

[0015] Among them, the remote signal includes at least a target value and an increment value.

[0016] Further, the first error prevention rule includes a first abnormal analysis rule for each item of the first interaction information and a first mapping rule representing the mapping relationship between the first abnormal situation and the corresponding first error prevention operation;

[0017] The second error prevention rule includes a second abnormal analysis rule for each item of the second interaction information and a second mapping rule representing the mapping relationship between the second abnormal situation and the corresponding second error prevention operation.

[0018] Further, the upper-level organization uses the first error prevention rule to perform an error prevention logic judgment on the first interaction information and analyze a first abnormal situation, including:

[0019] The upper-level organization uses the first abnormal analysis rule to perform an error prevention logic judgment on each item of the first interaction information to obtain the first abnormal situation;

[0020] Among them, the first abnormal analysis rule includes performing validity judgment on the operation status, time stamp, and / or remote signal of the subordinate institution and / or performing consistency judgment on the time stamp of the subordinate institution;

[0021] The first abnormal situation includes at least one of the invalid operation status of the subordinate institution, the invalid remote signal of the subordinate institution, the invalid time stamp of the subordinate institution, and the inconsistent time stamp of the subordinate institution.

[0022] Further, the corresponding anti-misoperation is performed according to the first abnormal situation, including:

[0023] The superior institution determines the first anti-misoperation corresponding to the first abnormal situation according to the first mapping rule and executes the first anti-misoperation;

[0024] Among them, the first mapping rule includes: when the first abnormal situation is the invalid operation status of the subordinate institution, the corresponding first anti-misoperation is that the superior institution suspends the control of the equivalent PLC of the subordinate institution, switches the equivalent PLC of the subordinate dispatching institution from the controlled mode to the PAUS mode, and sends an alarm of the invalid operation status of the subordinate institution to the backend monitoring platform;

[0025] And / or,

[0026] When the first abnormal situation is the invalid remote signal of the subordinate institution, the corresponding first anti-misoperation is that the superior institution suspends the control of the equivalent PLC of the subordinate institution, switches the equivalent PLC of the subordinate dispatching institution from the controlled mode to the PAUS mode, and sends an alarm of the invalid remote signal of the subordinate institution to the backend monitoring platform;

[0027] And / or,

[0028] When the first abnormal situation is the invalid time stamp of the subordinate institution of the subordinate institution, the corresponding first anti-misoperation is that the superior institution suspends the control of the equivalent PLC of the subordinate institution, switches the equivalent PLC of the subordinate dispatching institution from the controlled mode to the PAUS mode, and sends an alarm of the invalid time stamp of the subordinate institution to the backend monitoring platform;

[0029] And / or,

[0030] When the first abnormal situation is the inconsistent time stamp deviation of the subordinate institution, the corresponding first anti-misoperation is that the superior institution suspends the control of the equivalent PLC of the subordinate institution, switches the equivalent PLC of the subordinate dispatching institution from the controlled mode to the PAUS mode, and sends an alarm of the inconsistent time stamp deviation of the subordinate institution to the backend monitoring platform.

[0031] Further, the validity judgment of the operating status, time stamp, and / or remote signal of the subordinate institution includes:

[0032] Perform at least one data verification for the operating status, time stamp, and / or remote signal of the subordinate institution respectively. If any of the data verifications fails, it is considered invalid;

[0033] Among them, the data verification includes at least one of data range verification, data integrity verification, data type / format verification, data credibility verification, and response feedback verification;

[0034] and / or,

[0035] The consistency judgment of the time stamp of the subordinate institution includes:

[0036] Calculate the time stamp difference between the time stamp of the subordinate institution and the local time stamp, and judge whether the time stamp difference exceeds a preset difference threshold. If the time stamp difference exceeds the preset difference threshold, it is considered that the time stamp of the subordinate institution is inconsistent.

[0037] Further, the subordinate institution uses the second anti-error rule to perform anti-error logic judgment on the second interaction information and analyze the second abnormal situation, including:

[0038] The subordinate institution uses the second abnormal analysis rule to perform anti-error logic judgment on each piece of the second interaction information to obtain the second abnormal situation;

[0039] Among them, the second abnormal analysis rule includes validity judgment of the operating status and / or time stamp of the superior institution, consistency judgment of the time stamp of the superior institution, and / or co-directional anti-error judgment of the received target value and increment value;

[0040] The second abnormal situation includes at least one of invalid operating status of the superior institution, invalid time stamp of the subordinate institution, inconsistent time stamp of the superior institution, and non-co-directionality of the received target value and increment value.

[0041] Further, the corresponding anti-error operation is performed according to the second abnormal situation, including:

[0042] The subordinate institution determines the second anti-error operation corresponding to the second abnormal situation according to the second mapping rule and executes the second anti-error operation;

[0043] Among them, the second mapping rule includes: when the second abnormal situation is that the operating status of the superior institution is invalid, the corresponding second anti-error operation is that the subordinate institution suspends the new energy AGC and sends an alarm of invalid operating status of the superior institution to the backend monitoring platform;

[0044] and / or

[0045] When the second abnormal situation is that the time stamp of the superior institution is invalid, the corresponding second anti-misoperation is that the subordinate institution suspends the new energy AGC and sends an alarm of invalid time stamp of the superior institution to the back-end monitoring platform;

[0046] and / or

[0047] When the second abnormal situation is that the time stamp deviation of the superior institution is inconsistent, the corresponding second anti-misoperation is that the subordinate institution suspends the new energy AGC and sends an alarm of inconsistent time stamp deviation of the superior institution to the back-end monitoring platform;

[0048] and / or

[0049] When the second abnormal situation is that the received target value and the increment value are not in the same direction, the corresponding second anti-misoperation is that the subordinate institution locks the coordination control instruction and sends an alarm of different directions of the target value and the increment value to the back-end monitoring platform.

[0050] Further, the validity judgment on the operation state and / or time stamp of the superior institution includes:

[0051] Perform at least one data verification on the operation state and / or time stamp of the superior institution respectively. If any of the data verifications fails, it is considered invalid;

[0052] Among them, the data verification includes at least one of data range verification, data consistency verification, data type verification, status code verification, data source verification, and data integrity verification;

[0053] and / or

[0054] The consistency judgment on the time stamp of the superior institution includes:

[0055] Calculate the time stamp difference between the time stamp of the superior institution and the local time stamp, and judge whether the time stamp difference exceeds the preset difference threshold. If the time stamp difference exceeds the preset difference threshold, it is considered that the time stamp of the superior institution is inconsistent;

[0056] and / or

[0057] The co-directional anti-misoperation judgment on the received target value and the increment value includes:

[0058] Judge whether the adjustment directions of the target value and the increment value are in the same direction;

[0059] If the target value increases and the increment value is negative; or, if the target value decreases and the increment value is positive, it is considered that the received target value and the increment value are not in the same direction.

[0060] According to the second aspect of the present invention, the present invention provides an anti - error system for coordinated control between the upper and lower levels of an AGC master station, and the system includes:

[0061] A rule configuration module, configured to configure a first anti - error rule for the upper - level institution in the new - energy AGC system; and configure a second anti - error rule for the lower - level institution in the new - energy AGC system;

[0062] A data interaction module, configured to when data interaction occurs between the upper - level institution and the lower - level institution, the upper - level institution receives first interaction information from the lower - level institution; and the lower - level institution receives second interaction information from the upper - level institution;

[0063] An exception analysis module, configured to use the upper - level institution to perform an anti - error logic judgment on the first interaction information according to the first anti - error rule to analyze a first abnormal situation; and use the lower - level institution to perform an anti - error logic judgment on the second interaction information according to the second anti - error rule to analyze a second abnormal situation;

[0064] An anti - error operation module, configured to use the upper - level institution to perform corresponding anti - error operations according to the first abnormal situation; and use the lower - level institution to perform corresponding anti - error operations according to the second abnormal situation.

[0065] The present invention adopts the above - mentioned technical solutions and has at least the following beneficial effects:

[0066] Through the solution of the present invention, a first anti - error rule is configured for the upper - level institution in the new - energy AGC system; and a second anti - error rule is configured for the lower - level institution in the new - energy AGC system; when data interaction occurs between the upper - level institution and the lower - level institution, the upper - level institution receives first interaction information from the lower - level institution; and the lower - level institution receives second interaction information from the upper - level institution; the upper - level institution uses the first anti - error rule to perform an anti - error logic judgment on the first interaction information, analyzes a first abnormal situation, and performs corresponding anti - error operations according to the first abnormal situation; and the lower - level institution uses the second anti - error rule to perform an anti - error logic judgment on the second interaction information, analyzes a second abnormal situation, and performs corresponding anti - error operations according to the second abnormal situation. Thus, by verifying and judging the data interacted between the upper and lower levels and taking corresponding measures when abnormalities are found, the correctness and safety of the control instructions are ensured; a more comprehensive and effective anti - error function is realized, and the safety, reliability, stability, and maintainability of the new - energy AGC system are significantly improved.

[0067] It should be understood that the above general description and the following detailed description are only exemplary and explanatory, and cannot limit the present invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0068] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the accompanying drawings required for the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other accompanying drawings can also be obtained based on these drawings.

[0069] Figure 1 The flowchart shows the method for preventing errors in the coordinated control of the upper and lower levels of the AGC master station provided by an embodiment of the present invention;

[0070] Figure 2 The flowchart shows the method for preventing errors in the coordinated control of the upper and lower levels of the AGC master station provided by another embodiment of the present invention;

[0071] Figure 3 The structural diagram shows the AGC master station upper and lower level coordinated control error prevention system provided by an embodiment of the present invention;

[0072] Figure 4 The structural diagram shows the physical structure of a computer device provided by an embodiment of the present invention. Detailed implementation manners

[0073] The following will describe the exemplary embodiments of the present disclosure in more detail with reference to the accompanying drawings. Although the exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided so that the present disclosure can be more thoroughly understood and the scope of the present disclosure can be fully conveyed to those skilled in the art.

[0074] It should be noted that, in this document, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the term "comprising", "including" or any other variation thereof is intended to cover a non-exclusive inclusion, so that a process, method, article or device including a series of elements not only includes those elements, but also includes other elements not explicitly listed, or further includes elements inherent to such process, method, article or device. Without further limitation, the elements defined by the statement "including..." do not exclude the existence of additional identical elements in the process, method, article or device including the said elements.

[0075] To strengthen the understanding of those skilled in the art of the present invention, the following will explain the professional terms related to the present invention:

[0076] Equivalent PLC: Refers to the virtual PLC representing the new energy power stations controlled by the lower-level dispatching agencies. The upper-level dispatching agency indirectly controls the new energy power stations at the lower level by controlling the equivalent PLC.

[0077] PAUS mode: Pause mode, which refers to a mode in which the PLC stops executing control instructions and maintains the current output state unchanged.

[0078] Operating status: Refers to the real-time operating conditions of the new energy power stations, such as information on output power, voltage, frequency, etc.

[0079] Remote signal: The control signal sent by the upper-level dispatching agency to the lower-level dispatching agency for remotely controlling the lower-level equipment; the remote signal in the present invention can be a coordinated control instruction.

[0080] Time scale deviation: Refers to the difference in time scales between the upper and lower-level dispatching agencies.

[0081] The embodiment of the present invention provides a method for preventing misoperation in the coordinated control between the upper and lower levels of the AGC master station, as Figure 1 shown, which may at least include the following steps S101 to S103:

[0082] Step S101, configuring a first anti-misoperation rule for the upper-level agency in the new energy AGC system; and, configuring a second anti-misoperation rule for the lower-level agency in the new energy AGC system.

[0083] In the embodiment of the present invention, anti-misoperation rules are respectively set for the upper-level dispatching agency (subsequently collectively referred to as the upper-level agency) and the lower-level dispatching agency (subsequently collectively referred to as the lower-level agency) in the new energy AGC system. As Figure 2 shown, when data interaction occurs between the upper and lower-level agencies, the anti-misoperation rules are used to perform validity verification and consistency judgment on the received interaction information, and corresponding anti-misoperation operations are taken when abnormal situations are found, so as to ensure the safe and stable operation of the new energy AGC system; if no abnormal situations are found, the new energy AGC control is continued to be normally executed.

[0084] Step S102, when data interaction occurs between the upper-level agency and the lower-level agency, the upper-level agency receives the first interaction information from the lower-level agency; and, the lower-level agency receives the second interaction information from the upper-level agency.

[0085] In the embodiment of the present invention, the interaction information generated by the data interaction between the upper and lower-level agencies includes operating status, time scale, remote signal (coordinated control instruction), etc.; among them, the coordinated control instruction should simultaneously include the interaction target value and the increment value.

[0086] In step S103, the superior institution uses the first anti-error rule to perform anti-error logic judgment on the first interaction information, analyze the first abnormal situation, and perform corresponding anti-error operations according to the first abnormal situation; and the subordinate institution uses the second anti-error rule to perform anti-error logic judgment on the second interaction information, analyze the second abnormal situation, and perform corresponding anti-error operations according to the second abnormal situation.

[0087] In the embodiment of the present invention, the first anti-error rule configured for the superior institution includes a first abnormal analysis rule for each item of the first interaction information and a first mapping rule representing the mapping relationship between the first abnormal situation and the corresponding first anti-error operation. Thus, the superior institution can use the first anti-error rule to perform anti-error logic judgment on the first interaction information, analyze the first abnormal situation; and determine the first anti-error operation corresponding to the first abnormal situation according to the first mapping rule, and perform the first anti-error operation.

[0088] Specifically, as shown in Table 1 below, it is the first anti-error rule table in the embodiment of the present invention:

[0089] Table 1 (First anti-error rule table):

[0090]

[0091] According to Table 1, the first abnormal analysis rule may include judging the validity of the operating state, time stamp, and remote signal of the subordinate institution, and judging the consistency of the time stamp of the subordinate institution; the first abnormal situation may include the invalid operating state of the subordinate institution, the invalid remote signal of the subordinate institution, the invalid time stamp of the subordinate institution, and the inconsistent time stamp of the subordinate institution.

[0092] In practical applications, when performing validity judgment using the first abnormal analysis rule, at least one data verification can be performed respectively on the operating state, time stamp, and remote signal of the subordinate institution. If any data verification fails, the anti-error item is considered invalid. Data verification may include data range verification, data integrity verification, data type / format verification, data credibility verification, and response feedback verification, etc.

[0093] Among them, data range verification means that the superior institution pre-sets the numerical range required by the station for each data parameter (such as power, voltage, frequency, time stamp, etc.) sent by the subordinate institution, and any data outside this range will be judged as invalid. It should be noted that the setting of the preset numerical range needs to be reasonably demonstrated in combination with the operating parameters of the actual equipment and the system design, and the present invention does not limit this.

[0094] Data integrity verification means verifying whether the data has errors during transmission by means of adding a checksum and / or CRC check code, etc. If the received check code does not match the calculated check code, the data is judged as invalid.

[0095] Data type / format verification refers to verifying whether the received data conforms to the predetermined data type and format. For example, if numerical data is expected to be received but a string is actually received, the data is determined to be invalid.

[0096] Data credibility verification is designed by combining specific application scenarios and determining whether the current data deviates abnormally from the normal value based on historical data.

[0097] Response feedback verification means that after the superior institution sends a control instruction, it can require the subordinate institution to return a confirmation signal. If the confirmation signal is not received or is incorrect, the remote signal transmission is determined to be invalid.

[0098] Further, when judging the consistency of the time stamp of the subordinate institution, the time stamp difference between the time stamp of the subordinate institution and the local time stamp can be calculated, and it is judged whether the time stamp difference exceeds the preset difference threshold. If the time stamp difference exceeds the preset difference threshold (for example, 60 seconds), it is considered that the time stamp of the subordinate institution is inconsistent and the deviation is too large. It should be noted that the setting of the preset difference threshold can be determined according to the delay situation of the communication network in actual applications, and the present invention does not limit this.

[0099] For different first abnormal situations, corresponding first anti-error operations are performed based on the first mapping rule, which can specifically include the following four situations:

[0100] 1. When the first abnormal situation is that the operating status of the subordinate institution is invalid, the corresponding first anti-error operation is that the superior institution suspends the control of the equivalent PLC of the subordinate institution, switches the equivalent PLC of the subordinate scheduling institution from the controlled mode to the PAUS mode, and sends an alarm of invalid operating status of the subordinate institution to the backend monitoring platform.

[0101] 2. When the first abnormal situation is that the remote signal (coordination control instruction) of the subordinate institution is invalid, the corresponding first anti-error operation is that the superior institution suspends the control of the equivalent PLC of the subordinate institution, switches the equivalent PLC of the subordinate scheduling institution from the controlled mode to the PAUS mode, and sends an alarm of invalid remote signal of the subordinate institution to the backend monitoring platform.

[0102] It should be noted that in actual applications, the invalid alarm information for the operating status or remote signal of the subordinate institution should include the name of the subordinate institution, the time stamp, and the specific invalid information of the AGC operating status; among them, the specific invalid information of the AGC operating status can be communication interruption, data anomaly, status code, etc.

[0103] 3. When the time stamp of the lower-level organization of the lower-level organization is invalid for the first abnormal situation, the corresponding first anti-misoperation is that the higher-level organization suspends the control of the equivalent PLC of the lower-level organization, switches the equivalent PLC of the lower-level dispatching organization from the controlled mode to the PAUS mode, and sends an alarm of invalid time stamp of the lower-level organization to the back-end monitoring platform.

[0104] 4. When the time stamp deviation of the lower-level organization is inconsistent for the first abnormal situation, the corresponding first anti-misoperation is that the higher-level organization suspends the control of the equivalent PLC of the lower-level organization, switches the equivalent PLC of the lower-level dispatching organization from the controlled mode to the PAUS mode, and sends an alarm of inconsistent time stamp deviation of the lower-level organization to the back-end monitoring platform.

[0105] It should be noted that in practical applications, the invalid alarm information of the time stamp of the lower-level organization should include the name or identifier of the lower-level organization where the fault occurs, and the specific invalid information of the time stamp. Among them, the specific invalid information of the time stamp can be time stamp jump, time stamp loss, time stamp inconsistency, etc. If the AGC system can give the detailed error code of the lower-level organization, it can also be used as the specific invalid information for alarm.

[0106] Further, in the embodiment of the present invention, the second anti-misoperation rule configured for the lower-level organization includes a second abnormal analysis rule for each second interaction information and a second mapping rule representing the mapping relationship between the second abnormal situation and the corresponding second anti-misoperation. Thus, the lower-level organization can use the second anti-misoperation rule to perform anti-misoperation logic judgment on the second interaction information, analyze the second abnormal situation; and determine the first anti-misoperation corresponding to the second abnormal situation according to the second mapping rule, and execute the second anti-misoperation.

[0107] Specifically, as shown in Table 2 below, it is the second anti-misoperation rule table in the embodiment of the present invention:

[0108] Table 2 (Second anti-misoperation rule table):

[0109]

[0110] According to Table 2, the second abnormal analysis rule can include judging the validity of the operation status and time stamp of the higher-level organization, judging the consistency of the time stamp of the higher-level organization, and performing a co-directional anti-misoperation judgment on the received target value and increment value; the second abnormal situation can include invalid operation status of the higher-level organization, invalid time stamp of the lower-level organization, inconsistent time stamp of the higher-level organization, and non-co-directionality of the received target value and increment value.

[0111] In practical applications, when using the second anomaly analysis rule to perform validity judgment, at least one data verification can be performed separately on the operating status and time stamp of the superior institution. If any data verification fails, the anti-error item is considered invalid. Data verification can include data range verification, data consistency verification, data type verification, status code verification, data source verification, data integrity verification, and time stamp validity verification, etc.

[0112] Among them, data range verification means that for each data parameter (such as power, voltage, frequency, time stamp, etc.) sent by the subordinate institution to the superior institution, a numerical range required by the station is preset in advance, and any data beyond this range will be judged as invalid. It should be noted that the setting of the preset numerical range needs to be reasonably demonstrated in combination with the operating parameters of the actual equipment and system design, and the present invention does not limit this.

[0113] Data type verification means checking whether the received data type is consistent with the expected type. For example, if the expected is numerical data and the actually received is character data, then the parameter is judged as invalid.

[0114] Data consistency verification means that when the operating status of the superior institution contains multiple related parameters, the consistency between these parameters can be checked. Data consistency verification mainly lies in checking whether the data remains consistent among different levels, modules, interfaces, databases, and applications, and whether the data changes or is lost during operations, conversions, transmissions, and storage. For example, if there is an unreasonable association between power output and frequency, it can be judged as invalid.

[0115] Status code verification means that when the operating status of the superior institution contains a status code, the subordinate institution can judge the validity of the operating status based on the status code. For example, if a specific status code indicates a system failure, then the operating status is considered invalid.

[0116] Data source verification means using digital signatures or digital certificates to verify the source and integrity of the data to prevent the data from being tampered with.

[0117] Data integrity verification means verifying whether errors occur in the data during transmission by means of adding check sums and / or CRC check codes, etc. If the received check code does not match the calculated check code, the data is judged as invalid.

[0118] Time stamp validity verification means that the subordinate institution can check whether the received time stamp data of the superior institution is within a reasonable range. For example, whether it is a positive number and whether it is too different from the current system time, etc.

[0119] Further, when judging the consistency of the time stamp of the superior institution, the time stamp difference between the time stamp of the superior institution and the local time stamp can be calculated, and it is judged whether the time stamp difference exceeds a preset difference threshold. If the time stamp difference exceeds the preset difference threshold (for example, 60 seconds), it is considered that the time stamp of the superior institution is inconsistent and the deviation is too large. It should be noted that the setting of the preset difference threshold can be determined according to the delay situation of the communication network in actual applications, and the present invention does not limit this.

[0120] Further, when performing co-directional anti-error judgment on the received target value and increment value, it can be judged whether the adjustment directions of the target value and the increment value are co-directional. Specifically, the meanings represented by the positive and negative directions of the target value and the increment value can be clearly defined. If the target value increases, the increment value should be positive. If the increment value is negative, it is considered that the received target value and increment value are not co-directional. If the target value decreases, the increment value should be negative. If the increment value is positive, it is considered that the received target value and increment value are not co-directional.

[0121] For different second abnormal situations, corresponding second anti-error operations are performed based on the second mapping rule, which can specifically include the following four situations:

[0122] 5. When the second abnormal situation is that the operating state of the superior institution is invalid, the corresponding second anti-error operation is that the subordinate institution suspends the new energy AGC and sends an alarm that the operating state of the superior institution is invalid to the backend monitoring platform.

[0123] 6. When the second abnormal situation is that the time stamp of the superior institution is invalid, the corresponding second anti-error operation is that the subordinate institution suspends the new energy AGC and sends an alarm that the time stamp of the superior institution is invalid to the backend monitoring platform.

[0124] 7. When the second abnormal situation is that the time stamp deviation of the superior institution is inconsistent, the corresponding second anti-error operation is that the subordinate institution suspends the new energy AGC and sends an alarm that the time stamp deviation of the superior institution is inconsistent to the backend monitoring platform.

[0125] 8. When the second abnormal situation is that the received target value and increment value are not co-directional, the corresponding second anti-error operation is that the subordinate institution locks the coordination control instruction and sends an alarm that the target value and increment value are not co-directional to the backend monitoring platform. Among them, "locking the coordination control instruction" means that the subordinate institution no longer executes the coordination control instruction received from the superior. The subordinate institution can still send its own status information or other necessary information to the superior, but stops executing the locked coordination control instruction from the superior. Based on this protection measure, the misoperation of the subordinate institution caused by incorrect instructions can be effectively prevented.

[0126] It should be noted that in the embodiments of the present invention, the back-end monitoring platform for receiving alarms can be a SCADA system (Supervisory Control and Data Acquisition system). By integrating alarm information into the SCADA system, subsequent system actions can be automatically triggered, and operators can also be reminded to view the alarm information and take corresponding measures. The SCADA system usually has various alarm display and management functions, and can classify, sort, and handle the priorities of alarms. The format of alarm information can include timestamp, alarm type, severity, source, etc.

[0127] In addition, the "anti-error level" in Table 1 refers to the importance of anti-error measures and the urgency of response measures. A "mandatory" error represents a critical fault that requires immediate suspension of the control function and generation of a high-priority alarm. An "optional" error represents a non-mandatory deviation, allowing continued operation while starting monitoring and recording of abnormal situations. Generally, non-mandatory deviations allow continued operation for a certain period. In the embodiments of the present invention, the "anti-error level" for abnormal situations is set to "mandatory", that is, mandatory operations are performed for abnormal situations detected during the data interaction process, effectively preventing misoperations caused by data anomalies, communication failures, and instruction errors, thereby improving the security and reliability of the system.

[0128] The embodiments of the present invention provide an anti-error method for coordinated control between the upper and lower levels of an AGC master station, including: configuring a first anti-error rule for the upper-level organization and a second anti-error rule for the lower-level organization in the new energy AGC system; when data interaction occurs between the upper-level organization and the lower-level organization, the upper-level organization receives the first interaction information from the lower-level organization; the lower-level organization receives the second interaction information from the upper-level organization; the upper-level organization uses the first anti-error rule to perform anti-error logic judgment on the first interaction information, analyze the first abnormal situation, and perform corresponding anti-error operations; the lower-level organization uses the second anti-error rule to perform anti-error logic judgment on the second interaction information, analyze the second abnormal situation, and perform corresponding anti-error operations. Through the present invention, anti-error logics are respectively set for the upper-level master station and the lower-level organization, the received data is subjected to validity verification and consistency judgment, and corresponding suspension control or instruction locking measures are taken when abnormalities are found, effectively preventing misoperations caused by data anomalies, communication failures, and instruction errors, thereby improving the security and reliability of the system. In addition, by promptly discovering and handling abnormal situations, the impact of misoperations on the system is prevented, thereby enhancing the stability of the system, avoiding fluctuations in the output of new energy power stations caused by incorrect control instructions, and maintaining the stable operation of the power grid.

[0129] Furthermore, as Figure 1 a specific implementation, the embodiments of the present invention provide an anti-error system for coordinated control between the upper and lower levels of an AGC master station, as Figure 3As shown in the figure, the system may include: a rule configuration module 310, a data interaction module 320, an exception analysis module 330, and an anti-error operation module 340.

[0130] The rule configuration module 310 can be used to configure a first anti-error rule for the superior institution in the new energy AGC system; and configure a second anti-error rule for the inferior institution in the new energy AGC system.

[0131] The data interaction module 320 can be used to, when data interaction occurs between the superior institution and the inferior institution, the superior institution receives first interaction information from the inferior institution; and the inferior institution receives second interaction information from the superior institution.

[0132] The exception analysis module 330 can be used to utilize the superior institution to perform anti-error logic judgment on the first interaction information according to the first anti-error rule to analyze the first abnormal situation; and utilize the inferior institution to perform anti-error logic judgment on the second interaction information according to the second anti-error rule to analyze the second abnormal situation.

[0133] The anti-error operation module 340 can be used to utilize the superior institution to perform corresponding anti-error operations according to the first abnormal situation; and utilize the inferior institution to perform corresponding anti-error operations according to the second abnormal situation.

[0134] It should be noted that for other corresponding descriptions of each functional module involved in the AGC master station superior-inferior coordination control anti-error system provided by the embodiments of the present invention, reference can be made to Figure 1 the corresponding description of the method shown in the figure, which will not be elaborated here.

[0135] Based on the above method as Figure 1 shown in the figure, correspondingly, the embodiments of the present invention also provide a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the AGC master station superior-inferior coordination control anti-error method in any of the above embodiments are implemented.

[0136] Based on the above method as Figure 1 shown in the figure and the embodiments of the system as Figure 3 shown in the figure, the embodiments of the present invention also provide an entity structure diagram of a computer device. As Figure 4 shown in the figure, the computer device may include a communication bus, a processor, a memory, and a communication interface, and may also include an input / output interface and a display device. Among them, each functional unit can complete mutual communication through the bus. The memory stores a computer program, and the processor is used to execute the program stored on the memory to perform the steps of the AGC master station superior-inferior coordination control anti-error method in the above embodiments.

[0137] Those skilled in the art can clearly understand the specific working processes of the above-described systems, devices, modules, and units. They can refer to the corresponding processes in the foregoing method embodiments. For the sake of brevity, they will not be described in detail here.

[0138] In addition, in each embodiment of the present invention, the functional units may be physically independent of each other, or two or more functional units may be integrated together, or all functional units may be integrated in a processing unit. The above-mentioned integrated functional units may be implemented in the form of hardware, or in the form of software or firmware.

[0139] Those of ordinary skill in the art can understand that if the integrated functional unit is implemented in the form of software and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on such an understanding, the technical solution of the present invention, in essence, or all or part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, which includes several instructions for causing a computing device (such as a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present invention when the instructions are run. The foregoing storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard disks, read-only memories (ROMs), random access memories (RAMs), magnetic disks, or optical discs.

[0140] Alternatively, all or part of the steps of implementing the foregoing method embodiments can be completed by hardware related to program instructions (such as a computing device such as a personal computer, a server, or a network device). The program instructions can be stored in a computer-readable storage medium. When the program instructions are executed by the processor of the computing device, the computing device executes all or part of the steps of the method described in each embodiment of the present invention.

[0141] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that within the spirit and principles of the present invention, they can still modify the technical solutions described in the foregoing embodiments, or perform equivalent replacements for some or all of the technical features; and these modifications or replacements do not cause the corresponding technical solutions to deviate from the protection scope of the present invention.

Claims

1. A method for preventing errors in upper and lower coordinated control of an AGC master station, characterized in that: The method comprises: Configuring a first error prevention rule for a superior organization in the new energy AGC system; and configuring a second error prevention rule for a subordinate organization in the new energy AGC system; When the superior organization and the subordinate organization perform data interaction, the superior organization receives first interaction information from the subordinate organization; and the subordinate organization receives second interaction information from the superior organization; The superior organization uses the first error prevention rule to perform an error prevention logic judgment on the first interactive information, analyzes the first abnormal situation, and performs a corresponding error prevention operation based on the first abnormal situation; and the subordinate organization uses the second error prevention rule to perform an error prevention logic judgment on the second interactive information, analyzes the second abnormal situation, and performs a corresponding error prevention operation based on the second abnormal situation.

2. The method according to claim 1, characterized in that The first interactive information and the second interactive information both include at least one of an operating state, a time stamp, and a remote signal; The remote signal at least includes a target value and an incremental value.

3. The method according to claim 1, characterized in that The first error prevention rule includes a first abnormality analysis rule for each item of the first interaction information and a first mapping rule characterizing a mapping relationship between the first abnormal situation and a corresponding first error prevention operation; The second error prevention rules include a second abnormality analysis rule for each item of the second interaction information and a second mapping rule characterizing a mapping relationship between the second abnormal situation and a corresponding second error prevention operation.

4. The method according to claim 3, characterized in that The superior organization uses the first error prevention rule to perform error prevention logic judgment on the first interaction information and analyzes the first abnormal situation, including: The superior organization uses the first abnormality analysis rule to perform error-proof logical judgment on each item of the first interactive information to obtain the first abnormal situation; Wherein, the first abnormal analysis rule includes making validity judgment on the operation status, time scale and / or remote signal of the subordinate mechanism and / or making consistency judgment on the time scale of the subordinate mechanism; The first abnormal situation includes at least one of an invalid operating state of the subordinate mechanism, an invalid remote signal of the subordinate mechanism, an invalid time stamp of the subordinate mechanism, and an inconsistent time stamp of the subordinate mechanism.

5. The method according to claim 4, characterized in that The performing corresponding error-prevention operation according to the first abnormal situation includes: The superior organization determines a first error prevention operation corresponding to the first abnormal situation according to a first mapping rule, and executes the first error prevention operation; Among them, the first mapping rule includes: when the first abnormal situation is that the operating state of the subordinate mechanism is invalid, the corresponding first anti-misoperation is that the superior mechanism suspends the control of the subordinate mechanism equivalent PLC, switches the subordinate dispatching mechanism equivalent PLC from the controlled mode to the PAUS mode, and sends an invalid operating state alarm of the subordinate mechanism to the back-end monitoring platform; and / or, When the first abnormal situation is that the remote signal of the subordinate mechanism is invalid, the corresponding first anti-misoperation is that the superior mechanism suspends the control of the PLC equivalent to the subordinate mechanism, switches the PLC equivalent to the subordinate dispatching mechanism from the controlled mode to the PAUS mode, and sends an invalid remote signal alarm of the subordinate mechanism to the back-end monitoring platform; and / or, When the first abnormal situation is that the time scale of the subordinate mechanism of the subordinate mechanism is invalid, the corresponding first anti-misoperation is that the superior mechanism suspends the control of the equivalent PLC of the subordinate mechanism, switches the equivalent PLC of the subordinate scheduling mechanism from the controlled mode to the PAUS mode, and sends an invalid time scale alarm of the subordinate mechanism to the back-end monitoring platform; and / or, When the first abnormal situation is that the time deviation of the subordinate mechanism is inconsistent, the corresponding first anti-error operation is that the superior mechanism suspends the control of the equivalent PLC of the subordinate mechanism, switches the equivalent PLC of the subordinate scheduling mechanism from the controlled mode to the PAUS mode, and issues an inconsistent time deviation alarm for the subordinate mechanism to the back-end monitoring platform.

6. The method according to claim 4, characterized in that The validity judgment of the operation status, time scale and / or remote signal of the subordinate mechanism includes: Perform at least one data check on the operating status, time stamp and / or remote signal of the subordinate mechanism respectively; if any of the data checks are not passed, the data is considered invalid; The data verification includes at least one of data range verification, data integrity verification, data type / format verification, data credibility verification and response feedback verification; and / or, The consistency judgment of the time scale of the subordinate organization includes: The time scale difference between the time scale of the subordinate organization and the local time scale is calculated to determine whether the time scale difference exceeds a preset difference threshold. If the time scale difference exceeds the preset difference threshold, it is considered that the time scale of the subordinate organization is inconsistent.

7. The method according to claim 3, characterized in that The subordinate organization uses the second error prevention rule to perform error prevention logic judgment on the second interaction information and analyzes the second abnormal situation, including: The subordinate organization uses the second abnormality analysis rule to perform error-prevention logic judgment on each item of the second interactive information to obtain the second abnormal situation; Wherein, the second abnormal analysis rule includes judging the validity of the operation status and / or time scale of the superior mechanism, judging the consistency of the time scale of the superior mechanism, and / or judging the same direction error prevention of the received target value and incremental value; The second abnormal situation includes at least one of an invalid operating state of the superior mechanism, an invalid time stamp of the subordinate mechanism, an inconsistent time stamp of the superior mechanism, and a received target value and an increment value being in different directions.

8. The method according to claim 7, characterized in that The performing corresponding error prevention operation according to the second abnormal situation includes: The subordinate organization determines the second error prevention operation corresponding to the second abnormal situation according to the second mapping rule, and performs the second error prevention operation; Among them, the second mapping rule includes: when the second abnormal situation is that the operation state of the superior mechanism is invalid, the corresponding second anti-misoperation is that the subordinate mechanism suspends the new energy AGC and sends an invalid operation state alarm of the superior mechanism to the back-end monitoring platform; and / or, When the second abnormal situation is that the time scale of the superior organization is invalid, the corresponding second anti-misoperation is that the subordinate organization suspends the new energy AGC and sends an invalid time scale alarm of the superior organization to the back-end monitoring platform; and / or, When the second abnormal situation is that the time scale deviation of the superior mechanism is inconsistent, the corresponding second anti-misoperation is that the subordinate mechanism suspends the new energy AGC and sends an inconsistent time scale deviation alarm of the superior mechanism to the back-end monitoring platform; and / or, The second abnormal situation is that when the received target value and the incremental value are in different directions, the corresponding second anti-misoperation is that the subordinate mechanism locks the coordination control instruction and sends an alarm that the target value and the incremental value are in different directions to the back-end monitoring platform.

9. The method according to claim 7, characterized in that: The determining of the validity of the operation status and / or time scale of the superior mechanism includes: Perform at least one data check on the operation status and / or time stamp of the superior mechanism respectively. If the data fails any of the data checks, it is considered invalid. Wherein, the data verification includes at least one of data range verification, data consistency verification, data type verification, status code verification, data source verification and data integrity verification; and / or, The consistency judgment of the time scale of the superior organization includes: Calculating the time difference between the time of the superior organization and the local time, and determining whether the time difference exceeds a preset difference threshold. If the time difference exceeds the preset difference threshold, it is considered that the time of the superior organization is inconsistent. and / or, The performing the same-direction error prevention judgment on the received target value and the incremental value includes: Determining whether the adjustment directions of the target value and the incremental value are in the same direction; If the target value increases and the incremental value is negative; or, if the target value decreases and the incremental value is positive, it is considered that the received target value and the incremental value are in different directions.

10. An AGC master station upper and lower coordinated control error prevention system, characterized in that: The system comprises: A rule configuration module, configured to configure a first error prevention rule for a superior organization in the new energy AGC system; and to configure a second error prevention rule for a subordinate organization in the new energy AGC system; A data interaction module, configured to, when the superior organization and the subordinate organization perform data interaction, the superior organization receives first interaction information from the subordinate organization; and the subordinate organization receives second interaction information from the superior organization; an abnormality analysis module, configured to use the superior mechanism to perform an error prevention logic judgment on the first interactive information according to the first error prevention rule, and analyze a first abnormality; and use the subordinate mechanism to perform an error prevention logic judgment on the second interactive information according to the second error prevention rule, and analyze a second abnormality; The anti-misoperation module is used to utilize the upper-level mechanism to perform a corresponding anti-misoperation according to the first abnormal situation; and utilize the lower-level mechanism to perform a corresponding anti-misoperation according to the second abnormal situation.

Images