Transformer substation intelligent access control system based on trusted WLAN (Wireless Local Area Network)

Abstract

The invention provides a transformer substation intelligent access control system based on a trusted WLAN (Wireless Local Area Network), which is realized based on a fireproof door with an electromagnetic lock, and comprises a user side used for initiating an access control request and displaying a door lock state of the fireproof door to a requester; the edge controller is used for driving an electromagnetic lock executing mechanism of the fireproof door and collecting the door lock state; the trusted WLAN gateway is used for collecting a door lock state signal of the edge controller and converting a communication protocol; and the central server is used for analyzing the user side request and generating a door lock control instruction according to the door lock state signal in the trusted WLAN gateway. The electromagnetic lock of the fireproof door is ingeniously used as the warning device, the state of the fireproof door can be detected, and the shielding effect of the fireproof door is fully utilized.

Description

Technical Field

[0001] The present application relates to the field of power grid system security technology, and specifically to a substation intelligent access control system based on a trusted WLAN. Background Art

[0002] The power industry stipulates that "keys to high-voltage rooms within substations are the responsibility of operations and maintenance personnel." In the power industry, each regulation is based on extensive practical experience, and each seemingly simple and commonplace rule has its own rationale for strict adherence. While regulations must be followed, they can also be followed in various ways. Under the aforementioned regulations, power system maintenance work requires operations and maintenance personnel to retrieve the keys from the substation operations and maintenance team and then arrive at the substation for processing. This process is cumbersome and requires the simultaneous participation of multiple personnel.

[0003] Another rule in the power industry prohibits unauthorized work beyond the scope of operation. To prevent such work, fences are typically installed at the work site. However, this method is insufficient to restrict access, and unauthorized personnel may enter hazardous rooms, such as high-voltage and low-voltage rooms.

[0004] Generally speaking, dangerous rooms are equipped with fire doors, which have electromagnetic lock control signals. However, the prior art does not provide a relevant technical solution for utilizing the electromagnetic lock control signals of fire doors to achieve access control management. Summary of the Invention

[0005] 1. A trusted WLAN-based intelligent access control system for substations. This system is implemented based on fire doors with electromagnetic locks and includes: The user side is used to initiate access control requests and display the fire door lock status to the requester; The edge controller is used to drive the electromagnetic lock actuator of the fire door and collect the door lock status; Trusted WLAN gateway, which is used to collect door lock status signals from the edge controller and convert communication protocols; The central server is used to parse the user's request and generate the door lock control instruction according to the door lock status signal in the trusted WLAN gateway.

[0006] Furthermore, the system also includes an operation ticket linkage module. The user terminal includes the executed operation ticket ID in the access control request initiated. After receiving the user terminal request, the central server checks whether there is a door lock opening instruction.

[0007] Furthermore, the system also includes an alarm module, which is used to scan the opening and closing status of the fire door after the user initiates a fire door closing request, and send a reminder signal to the user end when opening is detected.

[0008] Furthermore, the alarm module integrates an audible and visual alarm device, and sends a reminder signal to the user terminal when no door lock opening instruction is detected and the door lock state is open.

[0009] Furthermore, the edge controller is equipped with an emergency unlocking interface. When the communication with the central server is interrupted, the local emergency unlocking mechanism is triggered by the physical key. After unlocking, the operation log is automatically generated and encrypted and stored.

[0010] Furthermore, the trusted WLAN gateway adopts a dual-frequency redundant communication mechanism and automatically switches to a backup frequency band when the interference of the main channel exceeds a threshold.

[0011] Furthermore, the operation ticket linkage module automatically associates the corresponding fire door according to the fire door control instruction in the operation ticket to generate an access control authorization set.

[0012] Due to the adoption of the above technical solution, the beneficial effects of this application are as follows: 1. This application cleverly utilizes the fire door's built-in electromagnetic lock as a warning device, enabling both detection of the door's status and full utilization of its shielding function. This facilitates verification of the fire door's functionality while performing electrical work. In actual electrical operation scenarios, the function of fire doors is crucial yet often overlooked. This approach can identify various malfunctions caused by prolonged disuse.

[0013] 2. This application greatly simplifies the process of maintenance personnel going back and forth to retrieve keys through the intelligent linkage of operation tickets and access control systems, thereby significantly shortening the fault handling time, improving the efficiency of fault handling, and simplifying personnel allocation.

[0014] 3. This application uses a hardware-level permission verification mechanism, and unauthorized fire door opening actions can be promptly fed back to the user end. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings: Figure 1 This is a system architecture diagram of a substation intelligent access control system based on trusted WLAN in this application. DETAILED DESCRIPTION

[0016] Based on the background technology, as shown in the attached Figure 1 As shown in the figure, a substation intelligent access control system based on trusted WLAN is implemented based on fire doors with electromagnetic locks, including: The user side is used to initiate access control requests and display the fire door lock status to the requester; The edge controller is used to drive the electromagnetic lock actuator of the fire door and collect the door lock status; Trusted WLAN gateway, which is used to collect door lock status signals from the edge controller and convert communication protocols; The central server is used to parse the user's request and generate the door lock control instruction according to the door lock status signal in the trusted WLAN gateway.

[0017] The system also includes an operation ticket linkage module. When a user initiates an access control request, the user includes the ID of the operation ticket being executed. Upon receiving the user's request, the central server verifies whether a door unlock instruction exists. The system also includes an alarm module. After a user initiates a fire door closing request, the alarm module scans the fire door's open / closed status and sends a warning signal to the user if an open state is detected.

[0018] Fire doors are equipped with electromagnetic locks. For fire doors without electromagnetic locks, a 12V DC power-off locking electromagnetic lock can be installed. The lock tongue displacement is monitored using a linear Hall sensor, and the signal line is connected to the edge controller using an RVVP shielded cable. Due to the higher importance of the power system, an industrial-grade edge controller is required when installing the edge controller. When necessary, the electromagnetic lock needs to be equipped with an emergency unlocking interface, equipped with a physical key, and kept strictly in accordance with power system regulations. In specific implementation, the edge controller has a physical key interface. Inserting a dedicated mechanical key triggers the local relay circuit, directly disconnecting the electromagnetic lock power supply circuit to achieve hard-wired unlocking.

[0019] Trusted WLAN networking: The gateway typically uses an industrial router, configured with a communication protocol, and connected to the power dispatch data network. In this application, the trusted WLAN architecture uses the 802.1X protocol for enterprise-level authentication, ensuring only authorized users can access the network. WPA3 encryption technology also protects the confidentiality and integrity of data transmission, preventing data from being eavesdropped or tampered with. This combination of authentication and encryption technologies enables the system to build a zero-trust wireless network, significantly improving WLAN security.

[0020] In practice, this application is based on operation ticket instructions. The operation ticket implementation process requires establishing a mapping between fire doors and a central server. Specifically, the central server imports a BIM model of the substation, annotates key areas such as the high-voltage and low-voltage rooms, and then establishes a mapping table between device codes and fire door IDs. When creating an operation ticket, the operating equipment is selected. The system automatically retrieves the associated access control system to generate an authorization set. The authorization policy is compiled into binary instructions, encrypted, and sent to the edge controller for storage.

[0021] Currently, all operation tickets for power systems are electronic. When the user initiates a request to open the access control, the central server verifies the validity and time and space permissions of the operation ticket, and sends a 12V power-off unlocking command to the edge controller through the communication protocol. The edge controller drives the solid-state relay (SSR) to cut off the power supply circuit of the electromagnetic lock, and the fire door opens.

[0022] The alarm module integrates an audible and visual alarm device, and sends a reminder signal to the user end when no door lock opening instruction is detected and the door lock state is open.

[0023] The trusted WLAN gateway uses a dual-band redundant communication mechanism, automatically switching to a backup frequency band when interference on the primary channel exceeds a threshold. In practice, the trusted WLAN gateway has dual built-in radio frequency modules. The primary channel (5.8 GHz) and the backup channel (2.4 GHz) use time-division multiplexing. A spectrum analysis chip monitors the channel signal-to-noise ratio in real time, automatically triggering a frequency band switch when the SNR falls below 20 dB. The switching process utilizes a seamless roaming protocol.

[0024] Anything not described in this application can be achieved by adopting or drawing on existing technologies.

[0025] The foregoing is merely an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present application should all be included within the scope of the claims of the present application.

Claims

1. A substation intelligent access control system based on trusted WLAN, which is implemented based on fire doors with electromagnetic locks and is characterized by: include: The user side is used to initiate access control requests and display the fire door lock status to the requester; The edge controller is used to drive the electromagnetic lock actuator of the fire door and collect the door lock status; Trusted WLAN gateway, which is used to collect door lock status signals from the edge controller and convert communication protocols; The central server is used to parse the user's request and generate the door lock control instruction according to the door lock status signal in the trusted WLAN gateway.

2. The intelligent access control system for substations based on trusted WLAN according to claim 1, characterized in that: The system also includes an operation ticket linkage module. The user terminal includes the executed operation ticket ID in the access control request initiated. After receiving the user terminal request, the central server checks whether there is a door lock opening instruction.

3. The intelligent access control system for substations based on trusted WLAN according to claim 2, characterized in that: The system further comprises an alarm module, which is used to scan the opening and closing status of the fire door after the user initiates a request to close the fire door, and to send a reminder signal to the user terminal when an opening is detected.

4. The intelligent access control system for substations based on a trusted WLAN according to claim 3, characterized in that: The alarm module integrates an audible and visual alarm device, and sends a reminder signal to the user end when no door lock opening instruction is detected and the door lock state is open.

5. The intelligent access control system for substations based on a trusted WLAN according to claim 1, characterized in that: The edge controller is equipped with an emergency unlocking interface. When the communication with the central server is interrupted, the local emergency unlocking mechanism is triggered by the physical key. After unlocking, the operation log is automatically generated and stored in encrypted form.

6. The intelligent access control system for substations based on trusted WLAN according to claim 1, characterized in that: The trusted WLAN gateway adopts a dual-frequency redundant communication mechanism and automatically switches to a backup frequency band when the interference of the main channel exceeds a threshold.

7. The intelligent access control system for substations based on a trusted WLAN according to claim 2, characterized in that: The operation ticket linkage module automatically associates the corresponding fire door according to the fire door control instruction in the operation ticket to generate an access control authorization set.

Images