Vector Slice Service Hierarchical Management System Based on Multi-Scale Distribution Network Model

Abstract

The present invention relates to the technical field of distribution network management, and discloses a vector slice service hierarchical management system based on a multi-scale distribution network model, comprising: a semantic vector slice generation module for generating an asset layer and writing power semantic attributes, and calculating tile sensitivity levels; an incremental slice push module for generating incremental tile data based on distribution network operation event information, and updating real-time status identification and tile sensitivity levels; an attribute access control module for calculating user authority scores based on role information, access qualifications, and geographic location information, and performing desensitization or encryption processing; a front-end display module for receiving map tile data and completing decryption, verification, and layer display; and a policy monitoring and control module for dynamically adjusting weight parameters in user authority score calculations based on access records. The present invention achieves fine visualization, secure access, and efficient management of distribution network map data.

Description

Technical Field

[0001] The present invention belongs to the technical field of distribution network management, and in particular relates to a vector slice service hierarchical management system based on a multi-scale distribution network model. Background Art

[0002] As the scale of distribution networks continues to expand, visualization services, intelligent operation and maintenance, and zoning control for power systems have placed higher demands on the accuracy of distribution network information expression, service granularity, and data security. Traditional distribution network visualization methods are mostly based on static primitives or overall layers, lacking the ability to express topological structures at multiple scales and making it difficult to support on-demand layer loading for different business scenarios. In addition, the operating status of distribution networks changes frequently in real time. Events such as fault tripping and load fluctuations have a significant impact on the safe operation of the system. However, existing systems generally lack an efficient data incremental update mechanism, resulting in the coexistence of map data lag and information overload.

[0003] In terms of data access management, existing power distribution information service platforms mostly adopt unified permissions or role-based access strategies, making it difficult to accommodate the differentiated access needs of multiple roles, regions, and levels. They also lack secure processing mechanisms for sensitive power data. Furthermore, existing map slicing mechanisms are primarily targeted at general geographic information scenarios and lack integrated support for power semantic attributes such as voltage level, phase, load, and impedance, making it difficult to organically integrate power business characteristics with spatial service capabilities. Summary of the Invention

[0004] The present invention provides a vector slice service hierarchical management system based on a multi-scale distribution network model to solve technical problems in related technologies.

[0005] The present invention provides a vector slice service hierarchical management system based on a multi-scale distribution network model, including:

[0006] The semantic vector tile generation module is used to obtain and cluster the distribution network topology map, generate asset layers at three scales, convert the asset layers into map tile data, write power semantic attributes, and calculate and label the tile sensitivity levels.

[0007] The incremental tile push module is used to receive distribution network operation event information collected by the power monitoring system and energy management system, identify the affected distribution network elements based on the distribution network operation event information, extract the distribution network elements to generate incremental tile data, and update the real-time status identification and tile sensitivity level of the incremental tile data;

[0008] Among them, the distribution network elements refer to the basic components that constitute the distribution network topology graph, including nodes and edges;

[0009] The real-time status flag is used to indicate whether the tile contains data content affected by event information;

[0010] The attribute access control module is used to obtain the user's role information, access qualifications and geographic location information, calculate the user's permission score, match the user's permission score with the tile sensitivity level, perform desensitization or encryption based on the matching result, and generate an access tag;

[0011] The front-end display module is used to carry the identity token to request the corresponding map tile data, decrypt the received map tile data, perform integrity verification, and use the verified map tile data for client map layer display;

[0012] The policy monitoring and control module is used to collect user access records to map tile data, perform statistical analysis on access denials in the access records, calculate the access denial rate, dynamically adjust the weight parameters in the user authority score calculation, and feed back the adjustment results to the attribute access control module.

[0013] Furthermore, the distribution network topology graph includes a node set and an edge set;

[0014] Clustering is performed on the distribution network topology map to generate asset layers at three scales, including:

[0015] S201, removing nodes with a degree of zero from the distribution network topology graph, and converting all node coordinates into a standard projection coordinate system;

[0016] S202, performing three-level clustering based on the geographical location distance and electrical characteristic distance between nodes, and generating a node cluster mapping table, wherein the electrical characteristic distance is represented by the collected electrical impedance value;

[0017] S203 , splitting the standardized distribution network topology map into three asset layers at macro, meso, and micro scales according to the node cluster mapping table.

[0018] Furthermore, power semantic attributes include voltage level, phase difference, impedance, and load. The asset layer is converted into map tile data and written with power semantic attributes. The tile sensitivity level is calculated and marked, including:

[0019] S301, obtaining the geometric center coordinates of each object in the asset layer and calculating the corresponding tile index, where the objects include: nodes and edges;

[0020] S302, encoding the object into a vector tile file that complies with the MVT standard according to the tile index, and recording the mapping relationship between the object and the macro, meso, and micro scale levels to which it belongs, thereby generating map tile data;

[0021] S303, writing voltage level, phase, impedance and load to each object of the map tile data to form a complete set of power semantic fields;

[0022] S304: Obtain the voltage level, key facility identifier, and real-time status identifier of each object in the map tile data, and perform weighted cumulative calculation to obtain the tile sensitivity level.

[0023] Furthermore, based on the distribution network operation event information, the affected distribution network network elements are identified, and the network elements are extracted to generate incremental tile data, including:

[0024] S401, receiving distribution network operation event information, extracting device identification and event type, wherein the distribution network operation event information includes: device identification, event type and timestamp;

[0025] S402, searching the node set and edge set in the distribution network topology map according to the extracted device identifier to determine the affected distribution network network elements;

[0026] S403 , calculating tile indexes according to the spatial locations of the affected distribution network elements and re-encoding the distribution network elements into corresponding vector tile files to form incremental tile data.

[0027] Furthermore, in the process of generating the incremental tile data, a real-time status flag is set for each incremental tile in the incremental tile data, and a new tile sensitivity level is calculated and written.

[0028] Furthermore, the role information is mapped to the role level, the access qualification is mapped to the security qualification level, and the matching degree between the user's geographic location information and the geographic area to which the requested tile belongs is determined to obtain the location matching degree. The role level, security qualification level and location matching degree are weighted according to the preset weights to calculate the user authority score.

[0029] Furthermore, the user authority score is matched with the tile sensitivity level, and desensitization or encryption is performed based on the matching result, and an access tag is generated, including:

[0030] S501, comparing the user authority score with the tile sensitivity level to set an access mark. If the user authority score is greater than or equal to the tile sensitivity level, it is marked as fully accessible, otherwise it is marked as restricted access;

[0031] S502, when marked as restricted access, performing desensitization processing on the power semantic attributes in the map tile data; if marked as fully accessible, performing encryption processing on the map tile data;

[0032] S503: Output the processed map tile data and access mark to the front-end display module.

[0033] Furthermore, the identity token is carried to request the corresponding map tile data, the received map tile data is decrypted, and an integrity check is performed, including:

[0034] S601, the user carries the identity token to request map tile data and receives the access token at the same time;

[0035] S602: If the access mark is fully accessible, the map tile data is decrypted; if the access mark is restricted access, the desensitized map tile data is directly read;

[0036] S603: Perform a hash integrity check on the decrypted or desensitized map tile data.

[0037] Furthermore, the user's access records to the map tile data are collected, and statistical analysis is performed on the access denials in the access records to calculate the access denial rate, including:

[0038] Collecting user access records to map tile data in a preset time window, the access records include: the number of accesses marked as restricted access, the total number of accesses, and the timestamp;

[0039] The access denial rate is calculated based on the ratio of the number of restricted accesses to the total number of accesses and is written into the policy monitoring database.

[0040] Furthermore, when the access rejection rate exceeds a preset target rejection rate, the weight of the user role level in the calculation of the user authority score is increased according to a preset ratio.

[0041] The beneficial effects of the present invention are as follows: the present invention meets the distribution network visualization needs of different scenarios by generating asset layers at three scales: macro, meso, and micro, thereby improving the validity and consistency of topological data. The power semantic attributes are written into the map tile data, so that it has both spatial display and business analysis capabilities, and combined with the tile sensitivity level calculated by multi-dimensional weighted calculation, it provides a scientific basis for security access control. The event-based incremental tile data generation mechanism accurately locates the affected elements and improves data timeliness and update efficiency. By matching and judging the user authority score with the tile sensitivity level, refined data access control is achieved, balancing security and availability. The policy monitoring and control module dynamically adjusts the weight parameters to reduce unnecessary access rejections, further optimizes system performance, and ensures the security and efficient use of distribution network data. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] Figure 1 It is a module schematic diagram of the vector slice service hierarchical management system based on the multi-scale distribution network model of the present invention. DETAILED DESCRIPTION

[0043] The subject matter described herein will now be discussed with reference to exemplary embodiments. It should be understood that these embodiments are discussed solely to enable those skilled in the art to better understand and implement the subject matter described herein, and that the functions and arrangements of the elements discussed may be varied without departing from the scope of this specification. Various examples may omit, substitute, or add various processes or components as needed. In addition, features described with respect to some examples may also be combined in other examples.

[0044] It should be noted that, unless otherwise defined, the technical or scientific terms used in one or more embodiments of the present invention should have the usual meanings understood by people with ordinary skills in the field to which the present invention belongs. The "first", "second" and similar words used in one or more embodiments of the present invention do not indicate any order, quantity or importance, but are only used to distinguish different components. "Include" or "comprising" and similar words mean that the elements or objects appearing before the word include the elements or objects listed after the word and their equivalents, but do not exclude other elements or objects. "Connect" or "connected" and similar words are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect. "Up", "down", "left", "right" and the like are only used to indicate relative positional relationships. When the absolute position of the object being described changes, the relative positional relationship may also change accordingly.

[0045] like Figure 1 As shown in the figure, the vector slice service hierarchical management system based on the multi-scale distribution network model includes:

[0046] The semantic vector slice generation module 101 is used to obtain the distribution network topology map, perform clustering on the distribution network topology map, generate asset layers at three scales, convert the asset layers into map tile data and write power semantic attributes, and calculate and label the tile sensitivity levels;

[0047] The incremental tile push module 102 is configured to receive distribution network operation event information collected by the power monitoring system and the energy management system, identify the affected distribution network elements based on the distribution network operation event information, extract the distribution network elements to generate incremental tile data, and update the real-time status identifier and tile sensitivity level of the incremental tile data;

[0048] Among them, the distribution network elements refer to the basic components that constitute the distribution network topology graph, including nodes and edges;

[0049] The real-time status flag is used to indicate whether the tile contains data content affected by event information;

[0050] The attribute access control module 103 is used to obtain the user's role information, access qualifications and geographic location information, calculate the user's authority score, match the user's authority score with the tile sensitivity level, perform desensitization or encryption based on the matching result, and generate an access token;

[0051] The front-end display module 104 is used to carry the identity token to request the corresponding map tile data, decrypt the received map tile data, perform integrity verification, and use the verified map tile data for client map layer display;

[0052] The policy monitoring and control module 105 is used to collect user access records to map tile data, perform statistical analysis on access denials in the access records, calculate the access denial rate, dynamically adjust the weight parameters in the user authority score calculation, and feed back the adjustment results to the attribute access control module.

[0053] In one embodiment of the present invention, the distribution network topology diagram includes a node set and an edge set; the nodes are used to represent equipment entities such as transformers, switches, feeder terminals, etc. in the distribution system, and the edges are used to represent the physical connection relationship between the nodes.

[0054] Clustering is performed on the distribution network topology map to generate asset layers at three scales, including:

[0055] S201: Remove nodes with zero degree from the distribution network topology graph and convert all node coordinates into a standard projection coordinate system. Specifically, nodes with zero degree are nodes without any connected edges, and these are removed to eliminate interference of invalid data on subsequent processing. The standard projection coordinate system is preferably a Gauss-Krüger projection coordinate system, as the same coordinate system ensures consistency in the spatial positions of the nodes.

[0056] S202: Perform three-level clustering based on the geographic location distance and electrical characteristic distance between nodes, and generate a node cluster mapping table, where the electrical characteristic distance is represented by the collected electrical impedance value. Specifically, a comprehensive distance is obtained by weighted calculation based on the geographic location distance and the electrical characteristic distance. A hierarchical clustering algorithm is used to perform three-level clustering on the nodes. The first level of clustering generates macro-scale node clusters. The second level further clusters within the macro-node clusters to generate meso-scale node clusters. The third level clusters within the meso-node clusters to generate micro-scale node clusters. A node cluster mapping table is also generated simultaneously. The table records the macro-, meso-, and micro-node cluster numbers and corresponding scale information to which each original node belongs.

[0057] S203. According to the node cluster mapping table, the standardized distribution network topology map is split into three asset layers at the macro, meso, and micro scales. The macro-scale asset layer includes all macro node clusters and the edges connecting the macro node clusters. The meso-scale asset layer includes the meso node clusters within each macro node cluster and the edges connecting the meso node clusters. The micro-scale asset layer includes the micro node clusters within each meso node cluster and the corresponding connecting edges, thereby forming three asset layers at different scales.

[0058] By removing isolated nodes and standardizing coordinates, the validity and consistency of topological data are improved. By integrating geographic location distance and electrical characteristic distance for clustering, the generated node clusters conform to the spatial distribution law and reflect the electrical connection characteristics, ensuring the consistency of the physical and electrical meanings of the multi-scale layers. The multi-scale splitting achieved through three-level clustering and node cluster mapping table can meet the distribution network visualization needs in different scenarios. For example, the macro scale is used for full network planning, the meso scale is used for regional monitoring, and the micro scale is used for equipment operation and maintenance.

[0059] In one embodiment of the present invention, power semantic attributes include voltage level, phase difference, impedance, and load. Converting the asset layer into map tile data and writing the power semantic attributes, and calculating and marking the tile sensitivity level include:

[0060] S301: Obtain the geometric center coordinates of each object in the asset layer and calculate the corresponding tile index. Objects include nodes and edges. Specifically, for each object, extract its two-dimensional geometric boundary, calculate the geometric center coordinates, and then perform spatial gridding based on the Gauss-Krüger projection coordinate system with the set tile edge length. Calculate the corresponding tile index using the following formula: ,in, Represents the tile index, L represents the tile side length, and are the geometric center coordinates, and is the coordinate of the reference point in the lower left corner of the distribution network coverage area, Express Round down;

[0061] S302: Encode the object into a vector tile file that complies with the MVT standard based on the tile index, and record the mapping relationship between the object and the macro, meso, and micro scale levels to which it belongs, thereby generating map tile data. During the process of encoding the object into the vector tile file, record the asset layer of which the object originates and store it in the vector tile file, thereby generating map tile data containing scale association information.

[0062] S303: Write voltage level, phase, impedance, and load to each object in the map tile data to form a complete set of power semantic fields, so that the map tile data has the ability to describe power business attributes;

[0063] S304: Obtain the voltage level, key facility identifier, and real-time status identifier of each object in the map tile data, and perform weighted cumulative calculation to obtain the tile sensitivity level. The voltage level is converted into a voltage score according to preset rules. The higher the voltage level, the higher the voltage score. The key facility identifier is converted into a facility score based on whether it is a key facility such as a hub substation or an important line. A facility score of 1 indicates a key facility, and 0 indicates a non-key facility. The real-time status identifier is converted into a status score based on whether it contains fault information. A status score of 1 indicates that it contains fault information, and a status score of 0 indicates that it does not contain fault information. The tile sensitivity level is calculated using a weighted summation formula. The calculation formula for the tile sensitivity level is: ,in, Indicates the tile sensitivity level, n indicates the number of objects in the map tile data, i indicates the object index, 、 and represent the first weight coefficient, the second weight coefficient and the third weight coefficient respectively, represents the voltage score of the i-th object, represents the facility score of the i-th object, Represents the status score of the i-th object.

[0064] This embodiment ensures the standardization and compatibility of vector tiles through standardized tile index calculation and MVT encoding, facilitating parsing and display by front-end systems. By writing complete power semantic attributes, map tile data not only has spatial display capabilities but also carries the key parameters required for power business analysis, providing a data foundation for clients to make business decisions directly based on tiles. The tile sensitivity level is determined through weighted calculation that integrates multi-dimensional factors, providing a scientific basis for subsequent security access control.

[0065] In one embodiment of the present invention, the distribution network operation event information refers to event data collected in real time by the power monitoring system or energy management system during the operation of the distribution network, including information such as equipment status changes, load fluctuations, fault alarms, and switch actions, which are used to reflect real-time changes in the distribution network topology or load status.

[0066] In one embodiment of the present invention, identifying affected distribution network network elements based on distribution network operation event information, extracting the network elements and generating incremental tile data includes:

[0067] S401, receiving distribution network operation event information, extracting device identification and event type, wherein the distribution network operation event information includes: device identification, event type and timestamp; the device identification includes: transformer number and line number; event types include: fault trip, temperature limit exceeding, load overload and planned maintenance;

[0068] S402: Search the node set and edge set in the distribution network topology map based on the extracted device identifier to determine the affected distribution network network elements. Specifically, a bidirectional search is performed in the distribution network topology map based on the extracted device identifier, searching the device node in the node set and all edges directly connected to the node in the edge set. If the event type is a fault trip, a propagation analysis is further performed based on the topological relationship, and the affected secondary node set and edge set are determined using a breadth-first search algorithm, ultimately obtaining the affected distribution network network elements.

[0069] S403, calculate the tile index according to the spatial position of the affected distribution network elements and re-encode the distribution network elements into the corresponding vector tile file to form incremental tile data; wherein, the geometric center coordinates are calculated according to the spatial position, and then the tile index is calculated, and re-encoded into a vector tile file that complies with the MVT standard to obtain incremental tile data.

[0070] This embodiment achieves rapid mapping from event information to physical network elements through standardized event parsing and topological association retrieval. Based on the tile index calculation and incremental encoding mechanism of spatial position, the affected elements are accurately located to the corresponding tiles, thereby improving the data timeliness and local update efficiency of the map layer.

[0071] In one embodiment of the present invention, during the process of generating incremental tile data, a real-time status flag is set for each incremental tile in the incremental tile data, and a new tile sensitivity level is calculated and written. Specifically, a real-time status flag is assigned to each incremental tile based on each incremental tile, wherein when the event type is a fault trip, temperature exceeding a limit, or load overload, the real-time status flag is set to 1, and when the event type is a planned maintenance, the real-time status flag is set to 0. Such events have a low impact on power grid security and do not require an increase in the tile sensitivity level; a new tile sensitivity level is calculated based on the real-time status flag and written into the map tile data.

[0072] In one embodiment of the present invention, role information is mapped to role level, access qualification is mapped to security qualification level, and the matching degree between the user's geographic location information and the geographic area to which the requested tile belongs is determined to obtain the location matching degree. The role level, security qualification level and location matching degree are weighted according to preset weights to calculate the user authority score.

[0073] Specifically, the user's role information is mapped to the corresponding role level according to the preset mapping relationship table; the user's access qualification is converted into a security qualification level, for example, the power monitoring qualification is set to 7; the user's location area is set according to the geographic location information submitted by the user when logging in, and compared with the tile geographic range determined by the tile index of the requested tile to determine the location match. The calculation formula for the location match is: ,in, Indicates the position matching degree, Indicates the overlapping area between the user location area and the tile geographic range, Represents the area of ​​the user's location region; finally, the role level, security qualification level and location matching degree are weighted and summed according to the preset weights to obtain the user permission score, which is used to quantify the user's access permission to the distribution network tile data.

[0074] In one embodiment of the present invention, the user authority score is matched with the tile sensitivity level, desensitization or encryption is performed based on the matching result, and an access tag is generated, including:

[0075] S501, comparing the user authority score with the tile sensitivity level to set an access mark. If the user authority score is greater than or equal to the tile sensitivity level, it means that the user has the authority to access the complete data of the tile, and the tile is marked as fully accessible; otherwise, it is marked as restricted access;

[0076] S502: When marked as restricted access, desensitize the power semantic attributes in the map tile data. If marked as fully accessible, encrypt the map tile data. Specifically, desensitization includes: displaying voltage levels in intervals, such as displaying 110kV as 100-200kV; hiding the specific phase sequence of each phase, such as displaying the same phase as three phases; approximating impedance and load, such as retaining one significant digit; and encrypting the map tile data using the AES256 encryption algorithm when marked as fully accessible. The encryption key is generated through a hierarchical key derivation mechanism to ensure that only authorized users can decrypt and obtain the complete data.

[0077] S503, output the processed map tile data and access mark to the front-end display module; specifically, associate and integrate the desensitized or encrypted map tile data with the corresponding access mark to form a data packet containing the processed data, access mark and tile index, and output it to the front-end display module through a secure channel, providing a data basis that meets the permission requirements for the client's map display.

[0078] This embodiment uses strict permission matching and differentiated processing to ensure the security of highly sensitive data while ensuring that authorized users can obtain complete information, thereby achieving refined management and control of data access. It not only meets the security requirements of distribution network operation and management, but also takes into account the actual usage needs of users with different permissions.

[0079] In one embodiment of the present invention, the identity token is carried to request the corresponding map tile data, the received map tile data is decrypted, and integrity verification is performed, including:

[0080] S601: A user requests map tile data with an identity token and receives an access token. The identity token is generated by the system when the user logs in and contains the user's identity and the validity period of the permission. After the server verifies the validity of the identity token, it returns the corresponding map tile data and access token to the front end.

[0081] S602: If the access mark is fully accessible, the local decryption interface is called to decrypt the encrypted map tile data using the tile key obtained after the user authority verification is passed, restoring the complete geometric information and power semantic attributes contained in the tile. If the access mark is restricted access, the desensitized map tile data is directly read.

[0082] S603, perform hash integrity check on the decrypted or desensitized map tile data; specifically, calculate the SHA-256 hash value of the tile data and compare it with the original hash check value returned by the server; if the two are consistent, it indicates that the tile data has not been tampered with during transmission and can be used for client map layer display; if they are inconsistent, it is determined that there is an abnormality in the data, triggering a re-request mechanism or prompting the user that the data verification has failed.

[0083] In one embodiment of the present invention, the policy monitoring and control module first sets a preset time window, and continuously collects all user access records to map tile data within the preset time window, and the access records include: the number of visits marked as restricted access, the total number of visits and the timestamp; after the preset time window ends, the system performs statistical analysis on the collected access records, calculates the access rejection rate by the ratio of the number of visits with restricted access to the total number of visits, and writes the access rejection rate into the policy monitoring database as the key basis for the subsequent dynamic adjustment of the user authority score calculation weight.

[0084] In one embodiment of the present invention, when the access rejection rate exceeds a preset target rejection rate, it indicates that the current user permission score calculation model may be overly strict in determining permissions. The system then increases the weight coefficient of the user's role level in the user permission score calculation by a preset ratio. The adjusted weight parameter takes effect immediately and is synchronously fed back to the attribute access control module for subsequent user permission score calculations. This dynamic adjustment mechanism enhances the influence of role level in permission determinations, moderately increases the permission scores of legitimate users while ensuring a safe baseline, reduces unnecessary access rejections, and balances system security and usability.

[0085] It should be noted that the intervals and thresholds are set for ease of comparison. The threshold size depends on the amount of sample data and the cardinality set by those skilled in the art for each set of sample data, as long as it does not affect the proportional relationship between the parameter and the quantized value. Furthermore, the above formulas are all dimensionless numerical calculations. These formulas are derived from software simulations of the most recent real-world conditions using large amounts of data. The preset parameters in these formulas are set by those skilled in the art based on actual conditions.

[0086] The above describes the embodiments of the present invention, but the present invention is not limited to the above specific implementation methods. The above specific implementation methods are merely illustrative and not restrictive. Ordinary technicians in this field can also make many forms based on the inspiration of this embodiment, all of which are protected by this embodiment.

Claims

1. A vector slice service hierarchical management system based on a multi-scale distribution network model, characterized by: include: The semantic vector tile generation module is used to obtain and cluster the distribution network topology map, generate asset layers at three scales, convert the asset layers into map tile data, write power semantic attributes, and calculate and label the tile sensitivity levels. Among them, the distribution network topology graph includes a node set and an edge set; Clustering is performed on the distribution network topology, including: S201, removing nodes with a degree of zero from the distribution network topology graph, and converting all node coordinates into a standard projection coordinate system; S202, performing three-level clustering based on the geographical distance and electrical characteristic distance between nodes, and generating a node cluster mapping table, wherein the electrical characteristic distance is represented by the collected electrical impedance value; the node cluster mapping table records the macro, meso, and micro node cluster numbers and corresponding scale information to which each node belongs; S203, splitting the standardized distribution network topology map into three asset layers at macro, meso, and micro scales according to the node cluster mapping table; The incremental tile push module is used to receive distribution network operation event information collected by the power monitoring system and energy management system, identify the affected distribution network elements based on the distribution network operation event information, extract the distribution network elements to generate incremental tile data, and update the real-time status identification and tile sensitivity level of the incremental tile data; The distribution network operation event information includes: device identification, event type and timestamp; Distribution network elements refer to the basic components that constitute the distribution network topology, including nodes and edges; The real-time status flag is used to indicate whether the tile contains data content affected by event information; The attribute access control module is used to obtain the user's role information, access qualifications and geographic location information, calculate the user's permission score, match the user's permission score with the tile sensitivity level, perform desensitization or encryption based on the matching result, and generate an access tag; The front-end display module is used to carry the identity token to request the corresponding map tile data, decrypt the received map tile data, perform integrity verification, and use the verified map tile data for client map layer display; The policy monitoring and control module is used to collect user access records to map tile data, perform statistical analysis on access denials in the access records, calculate the access denial rate, dynamically adjust the weight parameters in the user authority score calculation, and feed back the adjustment results to the attribute access control module.

2. The vector slice service hierarchical management system based on the multi-scale distribution network model according to claim 1 is characterized in that: Power semantic attributes include voltage level, phase difference, impedance, and load. Asset layers are converted into map tile data and written with power semantic attributes. Tile sensitivity levels are calculated and labeled, including: S301, obtaining the geometric center coordinates of each object in the asset layer and calculating the corresponding tile index, where the objects include: nodes and edges; S302, encoding the object into a vector tile file that complies with the MVT standard according to the tile index, and recording the mapping relationship between the object and the macro, meso, and micro scale levels to which it belongs, thereby generating map tile data; S303, writing voltage level, phase, impedance and load to each object of the map tile data to form a complete set of power semantic fields; S304: Obtain the voltage level, key facility identifier, and real-time status identifier of each object in the map tile data, and perform weighted cumulative calculation to obtain the tile sensitivity level.

3. The vector slice service hierarchical management system based on the multi-scale distribution network model according to claim 1 is characterized in that: Identifying affected distribution network network elements based on distribution network operation event information, extracting the network elements to generate incremental tile data, including: S401, receiving distribution network operation event information, extracting device identification and event type; S402, searching the node set and edge set in the distribution network topology map according to the extracted device identifier to determine the affected distribution network network elements; S403 , calculating tile indexes according to the spatial locations of the affected distribution network elements and re-encoding the distribution network elements into corresponding vector tile files to form incremental tile data.

4. The vector slice service hierarchical management system based on the multi-scale distribution network model according to claim 3 is characterized in that: In the process of generating incremental tile data, a real-time status flag is set for each incremental tile in the incremental tile data, and a new tile sensitivity level is calculated and written.

5. The vector slice service hierarchical management system based on the multi-scale distribution network model according to claim 1 is characterized in that: Map role information to role level, map access qualifications to security qualification levels, and determine the matching degree between the user's geographic location information and the geographic area to which the requested tile belongs to obtain the location matching degree. Weight the role level, security qualification level and location matching degree according to the preset weights to calculate the user authority score.

6. The vector slice service hierarchical management system based on the multi-scale distribution network model according to claim 5 is characterized in that: The user permission score is matched with the tile sensitivity level, and desensitization or encryption is performed based on the matching result. An access tag is generated, including: S501, comparing the user authority score with the tile sensitivity level to set an access mark. If the user authority score is greater than or equal to the tile sensitivity level, it is marked as fully accessible, otherwise it is marked as restricted access; S502, when marked as restricted access, performing desensitization processing on the power semantic attributes in the map tile data; if marked as fully accessible, performing encryption processing on the map tile data; S503: Output the processed map tile data and access mark to the front-end display module.

7. The vector slice service hierarchical management system based on the multi-scale distribution network model according to claim 6 is characterized in that: Carry the identity token to request the corresponding map tile data, decrypt the received map tile data, and perform integrity verification, including: S601, the user carries the identity token to request map tile data and receives the access token at the same time; S602: If the access mark is fully accessible, the map tile data is decrypted; if the access mark is restricted access, the desensitized map tile data is directly read; S603: Perform a hash integrity check on the decrypted or desensitized map tile data.

8. The vector slice service hierarchical management system based on the multi-scale distribution network model according to claim 1 is characterized in that: Collect user access records to map tile data, perform statistical analysis on access denials in the access records, and calculate the access denial rate, including: Collecting user access records to map tile data in a preset time window, the access records include: the number of accesses marked as restricted access, the total number of accesses, and the timestamp; The access denial rate is calculated based on the ratio of the number of restricted accesses to the total number of accesses and is written into the policy monitoring database.

9. The vector slice service hierarchical management system based on the multi-scale distribution network model according to claim 8, characterized in that: When the access rejection rate exceeds the preset target rejection rate, the weight of the user role level in the user permission score calculation is increased according to the preset ratio.

Images