Power failure and transmission operation safety locking system and method and storage medium

Abstract

The invention relates to a power failure and transmission operation safety locking system and method, and the system and method achieve the precise locking management of an isolation switch device through the integration of SCADA real-time data, a dynamic locking counter mechanism and multiple safety verification. The system generates a unique job command number based on a Hash algorithm, dynamically renders a locking range in combination with a visual interface, and supports a multi-task superposition locking and priority strategy. Through triple protection of checking the state of the disconnecting switch equipment during plate hanging, checking the operation number during plate removing and forcibly removing the whole plate before power transmission, the problems of misoperation and electrified risks in traditional power failure and power transmission operation are solved, and the power supply dispatching safety is remarkably improved.

Description

Technical Field

[0001] The present invention relates to the field of power outage operations, and in particular to a power outage operation safety locking system, method and storage medium. Background Art

[0002] The power supply dispatching SCADA system is an important control system and key equipment for railways. It is directly related to the safety of railway power supply and affects the safe production of railway transportation. With the development of electrified railways, the power supply dispatching SCADA system plays an increasingly important role. In the SCADA system, operational safety is of paramount importance, especially during power outage operations.

[0003] The traction power supply dispatching SCADA system has the following characteristics in daily dispatching work:

[0004] (1) Conduct unified dispatching, commanding and managing of the traction power supply system, with numerous lines under its jurisdiction;

[0005] (2) Skylight points are relatively dense and compact;

[0006] (3) There may be multiple groups of operations being carried out simultaneously in the same skylight point, and the completion time of the operations may be different;

[0007] (4) There is a lack of a dynamic locking mechanism for the status of the disconnector (disconnector device), which poses a risk of accidental closing;

[0008] (5) There is no logical connection between the operation instructions and the equipment lockout, and unauthorized operation cannot be prevented;

[0009] (6) Safe power supply after the completion of a single operation is crucial and must be ensured to be accident-free.

[0010] To sum up, operations during power outage operations must be safely locked to ensure safety. Summary of the Invention

[0011] In view of the technical defects and technical drawbacks in the prior art, the embodiments of the present invention provide a power outage operation safety locking system, method, and storage medium that overcome the above problems or at least partially solve the above problems. The specific solutions are as follows:

[0012] As a first aspect of the present invention, a power outage operation safety locking system is provided, comprising the following modules:

[0013] SCADA Integration Module: used to interact with the SCADA system to obtain real-time grid status data, including the opening and closing status of disconnecting switchgear;

[0014] ‌Job Command Number Binding Module‌: used to create maintenance job design parameters based on the maintenance job task, and generate a unique and encrypted job command number using a hash algorithm based on the job design parameters, wherein the job design parameters include the disconnector device associated with the maintenance job;

[0015] Maintenance card management module: used to configure maintenance cards of corresponding types based on maintenance tasks. The maintenance cards are bound to the corresponding operation command numbers and the associated disconnector devices.

[0016] ‌Blocking Logic Engine‌: This engine is used to obtain the operation command number entered by the dispatcher and, based on the maintenance operation card and disconnecting switch device associated with the operation command number, verify the status of the associated disconnecting switch devices in real time. If all are in the open state, the associated maintenance operation card is posted at the corresponding position and a blocking instruction is sent to the associated disconnecting switch device to block the closing operation of the associated disconnecting switch device.

[0017] ‌Command Verification Unit‌: This unit verifies the operation command number entered by the dispatcher upon receiving the operation completion notification. Upon verification, it removes the associated maintenance operation card and unlocks the associated disconnector device based on the dynamic lockout counter mechanism.

[0018] ‌Visual Interface‌: Dynamically render the location of maintenance work signs, lockout ranges, and disconnector status indicators on the SCADA system topology map.

[0019] Furthermore, when the job command number binding module generates a job command number, it is achieved through the following steps: a. Select a maintenance area or maintenance line in the SCADA power supply system diagram, automatically associate the disconnector device in the maintenance area or maintenance line, and obtain the operator ID, timestamp, job type and random salt value; b. Input the disconnector device information, operator ID, timestamp, job type and random salt value into the hash algorithm to generate an encrypted unique job command number.

[0020] Furthermore, the lockout logic engine includes a dynamic lockout counter mechanism, specifically:

[0021] Each disconnector device is bound to an independent counter. The counter increases by 1 each time the maintenance operation sign associated with the disconnector device is posted, and decreases by 1 each time the sign is removed.

[0022] Only when the counter returns to zero and all related maintenance operation cards are removed, the corresponding isolating switch device locking state is released;

[0023] It also supports dividing the locking tasks into "AND logic groups" or "OR logic groups", and independent counting within the group.

[0024] Furthermore, the dynamic blocking counter mechanism includes a priority blocking strategy:

[0025] The locking operation of the high-priority operation group takes precedence, and the low-priority locking operation can only be released after the high-priority operation group is unlocked.

[0026] Locking tasks are grouped by work area or type, and locking and unlocking operations within the group do not affect each other.

[0027] Furthermore, the maintenance card management module's card operation must meet the following conditions:

[0028] The real-time status of all associated disconnecting switch devices is open; otherwise, an alarm is triggered and the listing is prohibited;

[0029] After the listing is successful, the corresponding isolation switch equipment will display a locked sign in the SCADA main wiring diagram.

[0030] Furthermore, when the instruction verification unit performs the removal operation, the following steps are included: a. Verify whether the input job command number matches the current job; b. If the match is successful, decrement the lockout counter value of the corresponding disconnector device; c. If the counter value returns to zero and there is no other lockout task, release the lockout and update the visual interface; d. Before supplying power, check whether all associated maintenance operation cards have been removed, otherwise power supply is prohibited.

[0031] Furthermore, when the instruction verification unit performs the delisting operation, the following steps are included, and the visual interface includes the following functions:

[0032] 3D topological mapping: Dynamically mark maintenance operation card icons, operation order numbers and blocking ranges;

[0033] Real-time status synchronization: The status of the disconnector device is distinguished by red / green signs, and the blocking range is dynamically rendered as the operation progresses;

[0034] Abnormal blocking prompt: When it is detected that the locking isolation switch device is in the closed state, the SCADA remote control authority is frozen and an alarm is triggered.

[0035] As a second aspect of the present invention, a method for safely locking a power outage operation is provided, comprising the following steps:

[0036] Interact with the SCADA system to obtain real-time grid status data, including the opening and closing status of disconnecting switchgear;

[0037] Creating maintenance operation design parameters based on the maintenance operation task, and generating a unique and encrypted operation command number through a hash algorithm based on the operation design parameters, wherein the operation design parameters include the disconnector device associated with the maintenance operation;

[0038] A maintenance operation card of a corresponding type is configured based on the maintenance operation task, and the maintenance operation card is bound to the corresponding operation command number and the associated disconnecting switch device;

[0039] Obtain the operation order number entered by the dispatcher, and based on the corresponding maintenance operation card and disconnecting switch equipment associated with the operation order number, verify the status of the associated disconnecting switch equipment in real time. If all are in the open state, perform the associated maintenance operation card hanging operation at the corresponding position and send a locking instruction to the associated disconnecting switch equipment;

[0040] After receiving the notification of the end of the operation, the operation command number entered by the dispatcher is verified. If the verification is passed, the associated maintenance operation card is removed and the associated disconnecting switch equipment is unlocked based on the dynamic locking counter mechanism;

[0041] Dynamically render the location of maintenance work signs, locking range and disconnector equipment status identification on the SCADA system topology map.

[0042] Furthermore, it also includes the implementation of multi-task superposition locking, including:

[0043] When the same disconnector device is locked by multiple operations, the counter is incremented by 1 each time the operation is locked, and the counter is decremented by 1 when the associated maintenance operation card is removed;

[0044] Only when all associated operations are removed and the counters are reset to zero, the corresponding isolating switch device is unlocked to allow power to be supplied.

[0045] As a third aspect of the present invention, a computer-readable storage medium is provided, characterized in that a computer program is stored in the computer-readable storage medium, and when the computer program is executed by a computer, the computer executes any of the power outage operation safety locking methods described above.

[0046] The present invention has the following beneficial effects:

[0047] The core of this invention is a safety lockout system for power outage operations. Developed based on and integrated with the power supply dispatching SCADA system, it implements safety lockouts during power outages to ensure operational safety. Through a SCADA integration module, an operation command number binding module, a maintenance card management module, a lockout logic engine module, a command verification unit module, and a visual interface module, this system binds the operation command number to the lockout status of the disconnector device and implements full card removal verification for power-on operations based on real-time SCADA data. The present invention deeply integrates equipment status monitoring, operation process management and information security technology to form a closed-loop safety control system. During the power outage operation, the operation safety lock is operated, and the different input parameters of different operations are encrypted by a hash algorithm to generate an operation command number. This makes the present invention have strict password protection and realizes full-process encryption management. It uses a dynamic lock counter mechanism to realize multi-task superimposed lock, uses a layered lock strategy to ensure that high-priority locks are processed first, and supports collaborative control of different operation groups. At the same time, it realizes real-time status synchronization and abnormal blocking, and the operation process is fast and convenient. The interface is correct, intuitive, and displays the SCADA power grid status and the lock status and range of the maintenance operation card in real time; the database and graphical interface are simple to modify and easy to learn, which is convenient for daily maintenance. In general, the power outage operation safety lock system of the present invention can effectively solve the key safety problems in railway power supply scheduling through the triple lock of pre-inspection of the isolation switch equipment status, verification of the operation number, and removal of the full card before power transmission, eliminating the risk of live operation and having great safety. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] Figure 1 A schematic diagram of a power outage safety locking system according to an embodiment of the present invention;

[0049] Figure 2 A schematic flow chart of a method for safely locking a power outage operation provided by an embodiment of the present invention;

[0050] Figure 3 A schematic diagram of a job command coding database provided by an embodiment of the present invention;

[0051] Figure 4 A schematic diagram of a locking switch database provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0052] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts are within the scope of protection of the present invention.

[0053] Example 1: See Figure 1 FIG. 1 is a schematic diagram of a power outage safety locking system according to an embodiment of the present invention, which mainly includes the following modules:

[0054] SCADA Integration Module: used to interact with the SCADA system to obtain real-time grid status data, including the opening and closing status of disconnecting switchgear;

[0055] ‌Job Command Number Binding Module‌: used to create maintenance job design parameters based on the maintenance job task, and generate a unique and encrypted job command number using a hash algorithm based on the job design parameters, wherein the job design parameters include the disconnector device associated with the maintenance job;

[0056] Maintenance card management module: used to configure maintenance cards of corresponding types based on maintenance tasks. The maintenance cards are bound to the corresponding operation command numbers and the associated disconnector devices.

[0057] ‌Blocking Logic Engine‌: This engine is used to obtain the operation command number entered by the dispatcher. Based on the maintenance operation card and disconnecting switch device associated with the operation command number, it verifies the status of the associated disconnecting switch devices in real time. If all are in the open state, it will hang the associated maintenance operation card at the corresponding position and send a locking instruction to the associated disconnecting switch device.

[0058] ‌Command Verification Unit‌: This unit verifies the operation command number entered by the dispatcher upon receiving the operation completion notification. Upon verification, it removes the associated maintenance operation card and unlocks the associated disconnector device based on the dynamic lockout counter mechanism.

[0059] ‌Visualization Interface‌: Used to dynamically render the location of maintenance work signs, locking ranges, and disconnector status indicators on the SCADA system topology map.

[0060] In the above embodiment, the SCADA system can obtain the opening and closing status of the disconnector and the grounding switch status in real time, and analyze the topology of the power grid to determine the blocking range.

[0061] The "job command number binding module" generates a unique encrypted number through SHA-256 hashing using input parameters including the maintenance area ID, the associated disconnect switch equipment code, the dispatcher ID, the timestamp, and the digital signature. The dynamic blocking counter of the "blocking logic engine" records the number of superimposed blocking times and supports "and logic group" (all blockings are effective) and "or logic group" (any blocking is effective) strategies.

[0062] Optionally, when the job command number binding module generates a job command number, it is achieved through the following steps: a. Select a maintenance area or maintenance line in the SCADA power supply system diagram, automatically associate the disconnector device in the maintenance area or maintenance line, and obtain the operator ID, timestamp, job type and random salt value; b. Input the disconnector device information, operator ID, timestamp, job type and random salt value into the hash algorithm to generate an encrypted unique job command number.

[0063] In the above embodiment, the "selection of maintenance area" in step a needs to be based on the SCADA system topology map, and the associated disconnecting switch equipment is determined through high-precision coordinate mapping. The hash algorithm output of step b includes a device status check code to prevent illegal numbers from being generated when the power is not cut off.

[0064] Optionally, the lockout logic engine includes a dynamic lockout counter mechanism, specifically:

[0065] Each disconnector device is bound to an independent counter. The counter increases by 1 each time the maintenance operation sign associated with the disconnector device is posted, and decreases by 1 each time the sign is removed.

[0066] The locking state of the corresponding isolating switch device will be released only when the counter returns to zero and all associated maintenance operation signs are removed.

[0067] In the above embodiment, a hierarchical interlocking strategy is adopted. For example, the isolation switch equipment on the main power side (such as the 220kV incoming line switch) has a higher priority than the branch side equipment, and the high-priority interlocking needs to be released first. The interlocking grouping rules are preset through the database (such as the equipment across the booths must belong to the same logical group) to ensure the effectiveness of the regional interlocking.

[0068] Optionally, the dynamic blocking counter mechanism includes a priority blocking strategy:

[0069] The locking operation of the high-priority operation group takes precedence, and the low-priority locking operation can only be released after the high-priority operation group is unlocked.

[0070] Locking tasks are grouped by work area or type, and locking and unlocking operations within the group do not affect each other.

[0071] In the above embodiment, high-priority locking requires dispatcher authority ≥ level 2 authority. When releasing, authority matching and input of double verification codes are required, and the locking timestamps are processed in reverse order to prevent the later locking from overwriting the earlier locking state.

[0072] Optionally, the maintenance card management module's card operation must meet the following conditions:

[0073] The real-time status of all associated disconnecting switch devices is open; otherwise, an alarm is triggered and the listing is prohibited;

[0074] After the listing is successful, the corresponding isolation switch equipment will display a locked sign in the SCADA main wiring diagram.

[0075] In the above embodiment, a hierarchical interlocking strategy is adopted. For example, the isolation switch equipment on the main power side (such as the 220kV incoming line switch) has a higher priority than the branch side equipment, and the high-priority interlocking needs to be released first. The interlocking grouping rules are preset through the database (such as the equipment across the booths must belong to the same logical group) to ensure the effectiveness of the regional interlocking.

[0076] Optionally, when the instruction verification unit performs the removal operation, the following steps are included: a. Verify whether the input job command number matches the current job; b. If the match is successful, decrement the lockout counter value of the corresponding disconnector device; c. If the counter value returns to zero and there is no other lockout task, release the lockout and update the visual interface; d. Before supplying power, check whether all associated maintenance operation cards have been removed, otherwise power supply is prohibited.

[0077] In the above embodiment, the counter adopts decrement logic. When the same disconnecting switch device is locked by multiple operations, each time the card is removed, only the current operation lock count is released. After the counter returns to zero, unlocking is automatically triggered, and a check is performed before power is supplied. The status of the associated grounding knife switch is forcibly scanned to prevent the risk of power supply with ground wire in the "five protection" rules.

[0078] Optionally, when the instruction verification unit performs the delisting operation, the following steps are included, and the visual interface includes the following functions:

[0079] 3D topological mapping: Dynamically mark maintenance operation card icons, operation order numbers and blocking ranges;

[0080] Real-time status synchronization: The status of the disconnector device is distinguished by red / green signs, and the blocking range is dynamically rendered as the operation progresses;

[0081] Abnormal blocking prompt: When it is detected that the locking isolation switch device is in the closed state, the SCADA remote control authority is frozen and an alarm is triggered.

[0082] In the above embodiment, a 3D topological map is used, based on real-time data from the SCADA system, to dynamically render the blockage boundary (red dashed line) and a floating prompt showing the job command number. Furthermore, a hierarchical display of permissions is implemented, with the dispatcher's view filtering and displaying blockage tasks based on their permission level. Low-privilege users only see their own operating range.

[0083] See also Figure 2 FIG. 1 is a flow chart of a method for safely locking a power outage operation provided by an embodiment of the present invention.

[0084] Embodiment 2: This embodiment includes:

[0085] Database part: Based on the operation command interlocking relationship table used in daily dispatch (including: operation command code, line type, interlocking zone booth name, interlocking zone booth switch number, interlocking substation name, interlocking substation switch number, etc.), establish the relevant database table structure in the existing SCADA system database and enter the data one by one, as follows Figure 3-4 As shown, Figure 3 Encoding database tables for job commands, Figure 4 This is the locking switch database table, and the separated ones in the figure are the isolating switch devices.

[0086] The above database configuration enables each operation to automatically associate the required disconnector devices when the maintenance work card is displayed. Specifically, a single operation command code can be configured to correspond to the corresponding disconnector device in the booth, automatically associating different operations with the required devices. Of course, a single operation command can include disconnector devices across multiple booths, allowing the blocking logic engine module to verify the disconnector device status against the maintenance work card blocking conditions in real time and generate blocking commands.

[0087] Dispatcher interface:

[0088] The dispatcher's daily power outage operations are all completed on the interface. Combined with the dispatcher's daily operation process, the visual interface of the present invention mainly has the following features:

[0089] Operation lock interface:

[0090] In the power supply system diagram, various operation command codes are pre-drawn. The operation command codes here correspond to each data in the operation command code database table in the above-mentioned database, not the operation command numbers. When the dispatcher performs an operation, they click the corresponding operation code, enter the corresponding operation command number generated by the hash algorithm in the pop-up dialog box, and click the confirmation button to lock the associated disconnector device. At the same time, the corresponding "Maintenance Operation" sign and operation command number appear on the diagram, reminding the dispatcher in real time. If the disconnector device is not in the open state, an alarm will also be issued to remind the dispatcher not to display the "Maintenance Operation" sign.

[0091] Toggle lock:

[0092] When the locking operation is performed, a locking sign will appear on the main wiring diagram of each isolation switch device corresponding to each station booth and each isolation switch device automatically associated with the corresponding operation. At this time, the control operation will be prohibited to avoid the occurrence of accidental closing and power supply.

[0093] Unlock the interface:

[0094] When a job is completed, the lock corresponding to that job command is released. At this point, in the power supply system diagram, the dispatcher clicks on the corresponding "Maintenance Job" card, enters the corresponding job command number in the pop-up dialog box, and clicks the confirmation button to release the corresponding lock. At the same time, the corresponding "Maintenance Job" card graphic icon and the job command number appear on the diagram disappear; when there are multiple groups of jobs, only the job command number disappears, while the remaining job command numbers remain. When all jobs are unlocked, all command numbers disappear.

[0095] To release the switch lock:

[0096] When an operation is completed and the lock is released, the lock mark of the corresponding lock switch on the main wiring diagram of the booth where the disconnector equipment associated with the operation is located disappears, allowing control operations to be performed, thereby allowing safe power transmission. Switch unlocking interface.

[0097] Example 3: This example mainly includes:

[0098] 1. Operation command number binding mechanism, full process encryption management:

[0099] The hash algorithm is used to generate a unique number to achieve traceability and tamper resistance. The core of the hash algorithm to generate the job command number is to convert multi-dimensional parameters into a unique and irreversible identifier, ensuring the traceability and tamper resistance of the entire operation process. The following is the specific implementation process:

[0100] (1) Input parameter design

[0101] The generation of the operation command number requires the integration of multi-dimensional parameters to ensure the global uniqueness of the number. Refer to the table below. The disconnector device is included in the booth device list in the format of <booth ID>:<device ID1>;<device ID2>;..., and multiple booths are distinguished by |.

[0102]

[0103] ‌Example input parameters‌:

[0104] timestamp = "20241001143025876"

[0105] substation_devices = "SUBSTATION-01:201;203;202|SUBSTATION-05:301;302"

[0106] operator_id = "OP-9921"

[0107] job_type = "CROSS-MAINTENANCE"

[0108] nonce = "a9Fg7xZ2qW8vB4t"

[0109] (2) Parameter preprocessing and standardized sorting

[0110] ‌a. Parse the list of kiosk devices‌:

[0111] Split the input string into a list of kiosks and their devices:

[0112] The Python operation is as follows:

[0113] # Input example: SUBSTATION-01:201;203;202|SUBSTATION-05:301;302

[0114] substation_groups = substation_devices.split("|")

[0115] # Result: ["SUBSTATION-01:201;203;202", "SUBSTATION-05:301;302"]

[0116] b. Pavilion sorting:

[0117] Sort by ID alphabetically (to avoid generating different hashes in different orders):

[0118] The Python operation is as follows:

[0119] substation_groups = sorted(substation_groups) # Sort in ascending order by string

[0120] # Result: ["SUBSTATION-01:201;203;202", "SUBSTATION-05:301;302"]

[0121] c. Equipment sorting:

[0122] Arrange the devices in each kiosk in ascending order of value (to ensure consistency in the order of devices):

[0123] Python operations are as follows

[0124] sorted_substation_devices = []

[0125] for group in substation_groups:

[0126] substation_id, devices = group.split(":")

[0127] device_list = sorted(devices.split(";")) # Device ID in ascending order

[0128] sorted_group = f"{substation_id}:{';'.join(device_list)}"

[0129] sorted_substation_devices.append(sorted_group)

[0130] # Result: ["SUBSTATION-01:201;202;203", "SUBSTATION-05:301;302"]

[0131] d. Restructure the normalized string:

[0132] The Python operation is as follows:

[0133] normalized_substation_devices = "|".join(sorted_substation_devices)

[0134] # Result: SUBSTATION-01:201;202;203|SUBSTATION-05:301;302

[0135] (3) Hash generation algorithm

[0136] Generate a unique job number using the ‌double SHA-256 hashing algorithm‌:

[0137] The Python operation is as follows:

[0138] import hashlib

[0139] # Concatenate original strings

[0140] raw_str = f"{timestamp}|{normalized_substation_devices}|{operator_id}|{job_type}|{nonce}"

[0141] # Calculate double hash

[0142] first_hash = hashlib.sha256(raw_str.encode()).digest()

[0143] final_hash = hashlib.sha256(first_hash).hexdigest() # Convert to hexadecimal string

[0144] #Truncate the first 24 digits as the job command number (the length can be adjusted as needed)

[0145] job_id = final_hash[:24].upper()

[0146] # Example result: B50D9F2C4A6E7A3B812E4F

[0147] (4) Key design points

[0148] a. Anti-collision design:

[0149] Salt (Nonce): A random string that prevents the same device combination from generating the same hash at different times.

[0150] Double hashing: Double hashing is performed twice using SHA-256 to enhance uniqueness and reduce the probability of hash collisions.

[0151] b. Cross-kiosk device binding:

[0152] Hierarchical identification: Use the format of <kiosk ID>:<device ID> to clearly identify the device and avoid cross-region ID conflicts.

[0153] Predefined device groups: Supports defining commonly used cross-kiosk device combinations as templates (such as GROUP-X1), simplifying input and reducing parameter length.

[0154] c. Verification process:

[0155] Reverse parsing: Query the database by job number to obtain the original parameters, reorder the devices, generate hashes, and compare the consistency.

[0156] Status consistency check: The device status of all associated kiosks must be synchronized (for example, all locked successfully) before the unlocking operation can be performed.

[0157] (5) Application Examples

[0158] Scenario: Disconnectors 201, 202, and 203 of SUBSTATION-01 and disconnectors 301 and 302 of SUBSTATION-05 need to be jointly locked.

[0159] ‌a. Input parameters‌:

[0160] timestamp = "20241001143025876"

[0161] substation_devices = "SUBSTATION-01:203;201;202|SUBSTATION-05:302;301"

[0162] operator_id = "OP-9921"

[0163] job_type = "CROSS-MAINTENANCE"

[0164] nonce = "kL9gY7xZ2qW8vB4t"

[0165] ‌b. After normalization sort‌:

[0166] SUBSTATION-01:201;202;203|SUBSTATION-05:301;302

[0167] ‌c. Generate hash‌:

[0168] raw_str = "20241001143025876|SUBSTATION-01:201;202;203|SUBSTATION-05:301;302|OP-9921|CROSS-MAINTENANCE|kL9gY7xZ2qW8vB4t"

[0169] final_hash = "c3a8b50d9f2e4a6b812e4f8d5c7a9b1e6f2d4a7" # Example

[0170] job_id = "C3A8B50D9F2E4A6B812E4F"

[0171] d. Verification and Operation:

[0172] The system issues a blocking instruction to SUBSTATION-01 and SUBSTATION-05, and binds the job number to C3A8B50D9F2E4A6B812E4F.

[0173] When removing the sign, verify that the equipment in both booths is in a safe state, otherwise the operation will be blocked and an alarm will be issued.

[0174] (5) Advantages

[0175] a. Dynamic binding: The hash value is naturally bound to the input parameter. Modifying any parameter will cause the number to change, achieving "one job, one password".

[0176] b. Irreversibility: The original parameters (such as device ID and operator information) cannot be reversed through the job command number, thus protecting privacy.

[0177] c. Cross-system compatibility: The generated job number is in pure string format and can be seamlessly integrated into heterogeneous systems such as SCADA.

[0178] 2. Dynamic Lock Counter Mechanism

[0179] In this invention, multiple operating commands can sequentially lock the same disconnector device. However, the device remains locked until all operating groups have unlocked it. This means that the locking tasks of multiple operating groups for the device are in an "AND logic group." Only after all locks are removed can power be safely restored to the device. Once all associated maintenance operation cards are removed, the total locking strength returns to zero, and the virtual topology logical isolation is complete, allowing power to be restored.

[0180] This technology utilizes a dynamic block counter and complex logic to support an unlimited number of block stacking operations, enabling AND / OR logic configurations and adapting to complex power outage scenarios. It also solves the challenge of managing the stacking of block operations on the same device from multiple commands.

[0181] a. Multi-task superposition and locking

[0182] By maintaining an independent counter for each disconnector, the system supports lockout management for multiple operating commands. The counter increments when the lock is engaged and decrements when the lock is removed. Only when the counter reaches zero does the lock release allow power to be supplied.

[0183] b. Logical group classification management

[0184] The blocking tasks are divided into "AND logic groups" (all conditions must be met) and "OR logic groups" (any condition must be met). Each group is counted independently, supporting nested differentiated blocking strategies.

[0185] Function: Each device is associated with a separate counter. Locking (padlock / electronic lock) increments the counter by 1, while unlocking decrements the counter by 1. The lock is released only when the counter reaches zero and all physical locks are removed.

[0186] When multiple groups of operation commands need to perform locking operations on the same device, the locking tasks are divided into "AND logic groups", which are counted independently to achieve multiple locking and unlocking. Only when all are completed can power be supplied safely.

[0187] Technical implementation:

[0188] / / Lock counter logic

[0189] void handleLockOperation(Device device, OperationType op) {

[0190] if (op == LOCK)

[0191] device.counter++;

[0192] else if (op == UNLOCK)

[0193] device.counter--;

[0194] if (device.counter == 0 && checkPhysicalLocksRemoved(device))

[0195] device.setUnlocked();

[0196] }

[0197] 3. Layered blocking strategy:

[0198] The core of the hierarchical blocking strategy is to ensure that high-priority blocking is handled first through priority division and logical group management, and to support collaborative control of different work groups.

[0199] Priority Lockout: When a high-priority task group is locked, lower-priority tasks cannot be unlocked in advance. If multiple task groups are locked, and the high-priority task group is then locked, the lower-priority task group cannot unlock the device in advance. The device is not unlocked until the high-priority task group is also unlocked.

[0200] Logical Group Locking: Group multiple lock operations (e.g., by job type or area) with independent counting and full release determination within each group. Groups of different job types can be locked and unlocked independently without affecting each other. Similarly, groups of jobs in different areas can also be locked and unlocked independently without affecting each other.

[0201] 4. Real-time status synchronization and exception blocking:

[0202] The present invention has a state synchronization engine: it realizes millisecond-level synchronization of SCADA equipment status and maintenance operation card lock status, and updates the virtual lock status to the graphical interface in real time, ensuring that the dispatcher's view is consistent with the system logic.

[0203] The present invention has the function of blocking live isolating switchgear: if it is detected that the locked isolating switchgear is in the closed state, an audible and visual alarm is immediately triggered and the SCADA remote control operation authority is frozen.

[0204] 5. Visual lockout management:

[0205] The present invention has three-dimensional topological mapping: the location of maintenance work signs, locking range and disconnector equipment status (red / green logo) are dynamically rendered on the SCADA power supply system diagram.

[0206] The present invention has graphical dynamic rendering: the maintenance operation card icon is vividly marked in the power supply system diagram and the operation command number is displayed.

[0207] 6. Multiple security protection:

[0208] The present invention implements multiple safety protections when hanging and removing signs. After a power outage, before hanging the maintenance work sign, an automatic pre-check of the state of the isolating switch equipment is performed. If the state is not open, hanging the sign is refused. When removing the sign, the operation number is first verified. If the verification fails, removal is refused. Before power is supplied again, when multiple operation plans lock the same equipment at the same time, all signs must be removed before the lock can be released. This triple combination of safety protection ensures power supply safety and prevents live operation.

[0209] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A power outage operation safety locking system, characterized in that: Includes the following modules:‌ SCADA Integration Module: used to interact with the SCADA system to obtain real-time grid status data, including the opening and closing status of disconnecting switchgear; ‌Job Command Number Binding Module‌: used to create maintenance job design parameters based on the maintenance job task, and generate a unique and encrypted job command number using a hash algorithm based on the job design parameters, wherein the job design parameters include the disconnector device associated with the maintenance job; Maintenance card management module: used to configure maintenance cards of corresponding types based on maintenance tasks. The maintenance cards are bound to the corresponding operation command numbers and the associated disconnector devices. ‌Blocking Logic Engine‌: This engine is used to obtain the operation command number entered by the dispatcher. Based on the maintenance operation card and disconnecting switch device associated with the operation command number, it verifies the status of the associated disconnecting switch devices in real time. If all are in the open state, it will hang the associated maintenance operation card at the corresponding position and send a locking instruction to the associated disconnecting switch device. ‌Command Verification Unit‌: This unit verifies the operation command number entered by the dispatcher upon receiving the operation completion notification. Upon verification, it removes the associated maintenance operation card and unlocks the associated disconnector device based on the dynamic lockout counter mechanism. ‌Visualization Interface‌: Used to dynamically render the location of maintenance work signs, locking ranges, and disconnector status indicators on the SCADA system topology map.

2. The power outage operation safety locking system according to claim 1 is characterized in that: When the job command number binding module generates a job command number, it is achieved through the following steps: a. Selecting a maintenance area or maintenance line in the SCADA power supply system diagram, automatically associating the isolation switch equipment in the maintenance area or maintenance line, and obtaining the operator ID, timestamp, job type and random salt value; b. Input the disconnect switch device information, operator ID, timestamp, job type, and random salt value into the hash algorithm to generate an encrypted unique job command number.

3. The power outage operation safety locking system according to claim 1, characterized in that: The lockout logic engine includes a dynamic lockout counter mechanism, specifically: Each disconnector device is bound to an independent counter. The counter increases by 1 each time the maintenance operation sign associated with the disconnector device is posted, and decreases by 1 each time the sign is removed. The locking state of the corresponding isolating switch device will be released only when the counter returns to zero and all associated maintenance operation signs are removed.

4. The power outage operation safety locking system according to claim 3 is characterized in that: The dynamic blocking counter mechanism includes a priority blocking strategy: The locking operation of the high-priority operation group takes precedence, and the low-priority locking operation can only be released after the high-priority operation group is unlocked. Locking tasks are grouped by work area or type, and locking and unlocking operations within the group do not affect each other.

5. The power outage operation safety locking system according to claim 1, characterized in that: The maintenance card management module's hanging card operation must meet the following conditions: The real-time status of all associated disconnecting switch devices is open; otherwise, an alarm is triggered and the listing is prohibited; After the listing is successful, the corresponding isolation switch equipment will display a locked sign in the SCADA main wiring diagram.

6. The power outage operation safety locking system according to claim 1, characterized in that: When the instruction verification unit performs the removal operation, the following steps are included: a. Verify whether the input operation command number matches the current operation; b. If the match is successful, decrement the lockout counter value of the corresponding disconnector device; c. If the counter value returns to zero and there is no other lockout task, release the lockout and update the visual interface; d. Before supplying power, check whether all associated maintenance operation cards have been removed, otherwise power supply is prohibited.

7. The power outage operation safety locking system according to claim 1, characterized in that: When the instruction verification unit performs the delisting operation, the following steps are included, and the visual interface includes the following functions: 3D topological mapping: Dynamically mark maintenance operation card icons, operation order numbers and blocking ranges; Real-time status synchronization: The status of the disconnector device is distinguished by red / green signs, and the blocking range is dynamically rendered as the operation progresses; Abnormal blocking prompt: When it is detected that the locking isolation switch device is in the closed state, the SCADA remote control authority is frozen and an alarm is triggered.

8. A safety locking method for power outage operation, characterized in that: The following steps are involved: Interact with the SCADA system to obtain real-time grid status data, including the opening and closing status of disconnecting switchgear; Creating maintenance operation design parameters based on the maintenance operation task, and generating a unique and encrypted operation command number through a hash algorithm based on the operation design parameters, wherein the operation design parameters include the disconnector device associated with the maintenance operation; A maintenance operation card of a corresponding type is configured based on the maintenance operation task, and the maintenance operation card is bound to the corresponding operation command number and the associated disconnecting switch device; Obtain the operation order number entered by the dispatcher, and based on the corresponding maintenance operation card and disconnecting switch equipment associated with the operation order number, verify the status of the associated disconnecting switch equipment in real time. If all are in the open state, perform the associated maintenance operation card hanging operation at the corresponding position and send a locking instruction to the associated disconnecting switch equipment; After receiving the notification of the end of the operation, the operation command number entered by the dispatcher is verified. If the verification is passed, the associated maintenance operation card is removed and the associated disconnecting switch equipment is unlocked based on the dynamic locking counter mechanism; Dynamically render the location of maintenance work signs, locking range and disconnector equipment status identification on the SCADA system topology map.

9. The power outage operation safety locking method according to claim 8, characterized in that: It also includes the implementation of multi-task superposition locking, including: When the same disconnector device is locked by multiple operations, the counter is incremented by 1 each time the operation is locked, and the counter is decremented by 1 when the associated maintenance operation card is removed; Only when all associated operations are removed and the counters are reset to zero, the corresponding isolating switch device is unlocked to allow power to be supplied.

10. A computer-readable storage medium, characterized in that The computer-readable storage medium stores a computer program, and when the computer program is executed by a computer, the computer executes the power outage operation safety locking method according to any one of claims 8 to 9.

Images