Subway line network power equipment control right transfer method and system
By introducing the asymmetric encryption algorithm SM2 and a security verification mechanism into the power equipment control system of the metro network, the parallel transfer of control over multiple lines was realized, solving the problems of low security and efficiency in the existing technology and improving the system's security and fault recovery efficiency.
Patent Information
- Application Number
- CN202511015583.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-07-23
- Publication Date
- 2025-11-07
AI Technical Summary
The existing methods for transferring control of power equipment in the metro network have not undergone safety verification, and there are potential risks to data integrity and accuracy. Manual transfer is inefficient, fault recovery time is long, and it is impossible to transfer control of multiple lines in parallel. In particular, the efficiency is low in the case of cross-line faults.
The system employs the asymmetric encryption algorithm SM2 for data encryption and signing, introduces a security verification mechanism, generates control transfer requests and forced retrieval requests through network communication between the network and the lines, supports manual, semi-automatic or fully automatic triggering modes, enables parallel control transfer of multiple lines, and introduces an event-driven mechanism to reduce system coupling.
It improves system security and the efficiency of control transfer, shortens fault handling time, enhances emergency response efficiency, ensures rapid switching of control and system coordination capabilities, and meets the mutual exclusion principle of equipment control.
Smart Images

Figure CN120909174A_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the field of subway power equipment control, and particularly relates to a subway line network power equipment control right transfer method and system. BACKGROUND
[0002] With the multi-level development of rail transit construction, the subway power supply system also develops in the direction of networking. The single line power monitoring mode cannot meet the control requirements of line network equipment, and the line network system not only can realize the monitoring of multiple line equipment, but also can plan and manage the support power supply, rapid fault recovery and the like across regions and lines, which is beneficial to improve the execution efficiency and power supply reliability of the overall line network operation. Therefore, it is crucial to study the control right transfer method between the line network and the line.
[0003] However, according to the operation exclusion principle, the control right of the same equipment cannot be owned by multiple systems at the same time. Moreover, the existing device control right transfer scheme does not perform safety checking on the control right transfer message, and there are certain risks in data integrity and correctness. At the same time, manual intervention is required throughout the device control right transfer process, and the execution efficiency is low. In particular, in the case of main transformer failure and the like requiring cross-line operation, the control right of the fault-related equipment needs to be quickly transferred from the line to the line network and the fault recovery operation is performed. If the operation completely depends on manual operation, the fault recovery time is relatively long, and the execution efficiency needs to be improved. Especially for emergency situations such as cross-line fault recovery, there is a lack of full-automatic or semi-automatic control right transfer process, which is not conducive to rapid fault recovery.
[0004] Therefore, a subway line network power equipment control right transfer method and system capable of improving system security, fully-automatic or semi-automatic control right transfer, multiple line parallel control right transfer, and high transfer efficiency is needed. SUMMARY
[0005] The present application is to solve the defects of the existing control right transfer method, such as no safety checking, data integrity and correctness, low manual transfer efficiency, long fault recovery time, and only single line control right transfer one by one, and provides a subway line network power equipment control right transfer method and system capable of improving system security, fully-automatic or semi-automatic control right transfer, multiple line parallel control right transfer, and high transfer efficiency.
[0006] The subway line network power equipment control right transfer method comprises the following steps: When the network communication between the line network and the line is normal: The line network transfers the control right of the power equipment to one or more lines through preset different trigger modes; The line network forcibly retrieves the control right of the power equipment from one or more lines through preset different trigger modes; When the network communication between the line network and the line fails, the line network and the line automatically generate a network failure event and automatically transfer the control right to the line to which the power equipment belongs; When the control right transfer operation is not performed, the line network compares the control right position real-time information sent by the line with the corresponding control right position real-time value in real time, and if they are inconsistent, the real-time value is modified synchronously, so that the control right position state of the line network and the line is kept consistent.
[0007] Further, when the network communication between the line network and the line is normal, the line network transfers the control right of the power equipment to one or more lines through a preset different trigger mode, and the specific steps are as follows: S1, read the preset trigger mode, generate event information of the control right transfer request; S2, the data encryption module encrypts the event information of the control right transfer request; S3, the interactive service module sends the encrypted event information of the control right transfer request to the target line system; S4, the target line system decrypts and restores the encrypted event information of the control right transfer request, then generates a corresponding execution instruction according to the user's operation instruction, and sends the encrypted execution instruction to the interactive service module; S5, the data encryption module decrypts and restores the encrypted execution instruction, and modifies the real-time value of the control right position; S6, the control right transfer process from the line network to the line ends.
[0008] Further, in S1, the specific process of generating the event information of the control right transfer request includes: When in manual trigger mode, the user with control right manually selects the control right sequence to be transferred and initiates the control right transfer request; When in semi-automatic trigger mode, whether the trigger condition set for the control right sequence is met is detected in real time, and when the condition is met, the preset control right transfer sequence is automatically popped up, and the user with control right confirms and initiates the control right transfer request; When in full-automatic trigger mode, whether the trigger condition set for the control right sequence is met is detected in real time, and when the condition is met, the preset control right transfer sequence is automatically popped up, and the control right transfer request is automatically initiated without user confirmation.
[0009] Further, in S2, the specific process of encrypting the event information of the control right transfer request includes: The event information of the control right transfer request is encrypted and signed by using an asymmetric encryption algorithm, the encryption and signature uses the national standard SM2, and SM2 digital certificates are issued to the lines participating in the control right transfer; The digital certificate is updated periodically; the public key generated by the private key in the digital certificate is used to encrypt the control transfer information, and then the private key is used for signature.
[0010] Further, in S4, the specific step of decrypting and restoring the encrypted control transfer request information includes: The decryption and restoration is based on the public key in the digital certificate to verify the signature and confirm that the ciphertext has not been tampered with, and then the private key is used for decryption. The operation instruction includes accepting the transfer request, rejecting the transfer request, or doing nothing. The execution instruction includes control acceptance, control rejection, or timeout transaction; In S5, the specific process of decrypting and restoring the encrypted execution instruction includes: The data encryption module first verifies the signature using the public key to ensure that the ciphertext has not been tampered with, and then uses the private key to decrypt and restore the control transfer request feedback information, and modifies the real-time value of the system control position; If the operation instruction type is accept, the control position real-time value is modified to line center; if the operation instruction type is reject or timeout, the control position real-time value remains unchanged.
[0011] Further, when the network communication between the line network and the line is normal, the line network forcibly retrieves the control of the power equipment from one or more lines by presetting different trigger modes, and the specific steps are as follows: S10, the control transfer module reads the preset trigger mode and generates control forced retrieval request information; S20, the data encryption module encrypts the control forced retrieval request information; S30, the interactive service module sends the encrypted control forced retrieval request information to the target line system; S40, the target line system decrypts and restores the encrypted control forced retrieval request information, generates control forced retrieval confirmation information, and sends the encrypted control forced retrieval confirmation information to the line network; S50, the process of the line network forcibly retrieving the control of the line ends.
[0012] Further, in S10, the specific process of generating control forced retrieval request information includes: When in manual trigger mode, the user with control authority manually selects the control sequence to be forcibly retrieved and initiates the control forced retrieval request; When in semi-automatic trigger mode, the trigger condition set by the control sequence is detected in real time, and when the condition is met, the preset control transfer sequence is automatically popped up, and the user with control authority confirms and initiates the control forced retrieval request; When in the full-automatic triggering mode, whether the triggering condition set by the real-time detection control right sequence meets the condition is detected, when the condition is met, the preset control right transfer sequence is automatically popped up, and the control right forced retrieval request is automatically initiated without user confirmation.
[0013] Further, in S20, the specific step of encrypting the matter information of the control right forced retrieval request comprises: The matter information of the control right forced retrieval request is encrypted and signed by using an asymmetric encryption algorithm, the encryption and signature are performed by using a national encryption SM2, and SM2 digital certificates are issued to lines participating in the control right forced retrieval; The digital certificates are regularly updated, the public key generated by using the private key in the digital certificate is used to encrypt the control right transfer matter information, and then the private key is used for signature.
[0014] Further, in S40, the specific process of decrypting and restoring the encrypted matter information of the control right forced retrieval request comprises: The decryption and restoration are performed according to the public key in the digital certificate to verify the signature, confirm that the ciphertext is not tampered with, and then decrypt and restore the control right forced retrieval confirmation matter by using the private key, and modify the real-time value of the control right position to the line network.
[0015] The control right transfer system for implementing the metro line network power equipment control right transfer method comprises a control right transfer module, a data encryption module and an interactive service module. The control right transfer module is used for operating the control right transfer process. The data encryption module is used for encrypting or decrypting the matter information generated in the control right transfer process, so that the matter information is prevented from being tampered with. The interactive service module is used for monitoring the network state between the line network and the line and receiving and sending the encrypted information in the control right transfer process.
[0016] The metro line network power equipment control right transfer method and system have the following beneficial effects: The metro line network power equipment control right transfer method and system can realize the remote control of the power equipment and the quick switching of the control right between the line network and the line, and meet the mutual exclusion principle of the equipment control right.
[0017] In order to enhance the system security, a security check mechanism is introduced in the control right transfer process, the messages transmitted between the line network and the line are encrypted and signed by using a national encryption algorithm SM2, the transfer command information is prevented from being maliciously tampered with, the integrity and correctness of the transmitted data are ensured, and through the preset manual, semi-automatic or full-automatic triggering mode and intuitive and various triggering conditions, the control right transfer strategy can be flexibly adjusted, and the system collaborative ability is improved.
[0018] The subway line network power equipment control right transfer system provided by the application is used for remote control power equipment control right transfer operation between a line network and a line.
[0019] The subway line network power equipment control right transfer method provided by the application is based on a transaction driving mechanism, which is beneficial to reduce system coupling degree and improve system real-time response.
[0020] The control right transfer of cross-line equipment can be preset as a control right sequence. Each control right sequence can be preset with a trigger condition, such as time trigger or fault condition trigger, so as to realize full-automatic or semi-automatic trigger, reduce manual intervention, and improve execution efficiency. Through the full-automatic or semi-automatic transfer mode, the equipment control right is transferred, which can effectively shorten the fault disposal time and improve the emergency response efficiency. The control right transfer between multiple lines is carried out concurrently, and if one or more line control right transfer fails, it does not affect the transfer process of other lines.
[0021] The line network and line control right transfer method provided by the application ensures that the control right of the same equipment can only be owned by one system at any time. The line network and line control right transfer has important significance for unified control operation such as cross-line power supply operation mode adjustment and inter-line rapid fault recovery. BRIEF DESCRIPTION OF DRAWINGS
[0022] Figure 1 is a schematic diagram of the line network transferring equipment control right to the line in the application; Figure 2 is a schematic diagram of the line network forcibly taking back the line equipment control right in the application; Figure 3 is a schematic diagram of automatic transfer of control right in the line network and line network communication interruption in the application. DETAILED DESCRIPTION
[0023] The following is only a preferred specific embodiment of the application, but the protection scope of the application is not limited thereto, and any person skilled in the art can easily think of changes or replacements within the technical range disclosed by the application. The following examples are only used to explain the application, and cannot be explained as a limitation of the application, and the protection scope of the application should be subject to the protection scope of the claims. The embodiments of the application are described in detail below. In order to facilitate the description of the application and simplify the description, the technical terms used in the specification of the application should be interpreted broadly, including but not limited to conventional replacement schemes not mentioned in the application, and including direct implementation mode and indirect implementation mode.
[0024] Example 1 In combination Figures 1-3 To illustrate the embodiment, the control transfer system of the metro line network power equipment control transfer method disclosed in the embodiment comprises a control transfer module, a data encryption module and an interactive service module. The control transfer module is used for operating the control transfer process. The data encryption module is used for encrypting or decrypting the transaction information generated in the control transfer process, so as to prevent the transaction information from being tampered with. The interactive service module is used for monitoring the network state between the line network and the line and receiving and sending the encrypted information in the control transfer process.
[0025] Generally, the control mode of the power equipment is divided into local mode and remote mode. In the local mode, the equipment can only perform body control operation; in the remote mode, the equipment can perform remote control operation at any position of the line network, line center or station. The control right involved in the present application only considers the case that the equipment is remotely controllable. The control right transfer between the line network and the line refers to the transfer between the line network and the line center.
[0026] The granularity of the power equipment control right transfer can be a single device or a group of devices. By grouping the remotely controllable power equipment, the flexible configuration of the control right transfer granularity is realized. For the case of cross-line collaborative control, when the control right transfer of the equipment of different lines is more, a control right sequence can be preset, and the control right sequence can be dynamically adjusted as needed. Each control right sequence can be preset with a trigger condition, such as time trigger or fault condition trigger, so as to realize full-automatic or semi-automatic trigger, reduce manual intervention and improve execution efficiency.
[0027] The transfer of the control right between the line network and the line is based on a transaction-driven mechanism, which is beneficial to reduce the coupling degree of the system and improve the scalability of the system. Transaction information is generated in the control right transfer process, and the line network and each line complete the transfer of the control right through the transaction information interaction. The operation of the line network system user on the control right transfer module interface will generate a transaction network message, which is sent to the interactive service module through the TCP / IP protocol, and then sent to the target line through the network TCP / IP protocol. After receiving the message, the target line performs corresponding analysis and processing. The transaction-driven mechanism records each link of the control right transfer process, ensuring the traceability of the transfer process. In order to enhance the security of the system, the messages transmitted between the line network and each line are encrypted by using the SM2 national encryption algorithm, so as to ensure the integrity and correctness of the transmitted messages.
[0028] The line network control right transfer system collects the remote signaling and remote measurement of the power equipment in real time, including the control right position state information, and saves them to the system real-time library.
[0029] For the control transfer operation, it can be triggered manually, semi-automatically or automatically, and the system is preset to achieve the triggering mode. The manual triggering mode is that the user with control authority initiates the control transfer request manually on the control transfer interface. The semi-automatic triggering mode is that the system detects the triggering condition set by the control sequence in real time, and when the condition is met, it automatically pops up the predefined control transfer sequence, and the user with control authority confirms the control transfer request on the control transfer interface. The automatic triggering mode is that the system detects the triggering condition set by the control sequence in real time, and when the condition is met, it automatically pops up the predefined control transfer sequence, and the user confirms the control transfer request automatically.
[0030] Embodiment 2 This embodiment is explained in combination with Embodiment 1. The metro line network power equipment control transfer method disclosed in this embodiment is as follows in the case of normal network communication: S1, the control transfer module of the line network provides a human-computer operation interface, and the system reads the preset triggering mode. If it is manually triggered, the user with control authority manually selects the control sequence to be transferred on the control transfer interface and initiates the control transfer request. If it is semi-automatically triggered, the system detects whether the triggering condition set by the control sequence is met in real time, and when the condition is met, it automatically pops up the predefined control transfer sequence, and the user with control authority confirms the control transfer request on the control transfer interface. If it is an automatic triggering mode, the system detects whether the triggering condition set by the control sequence is met in real time, and when the condition is met, it automatically pops up the predefined control transfer sequence, and the user confirms the control transfer request automatically. Then the system generates control transfer request information.
[0031] S2, the data encryption module of the line network uses an asymmetric encryption algorithm for signature, and the encryption signature uses the national standard SM2. The line involved in the control transfer is issued with an SM2 digital certificate, and the certificate is updated regularly. The public key generated by the private key in the certificate is used to encrypt the control transfer information in S1, and then the private key is used for signature.
[0032] S3, the interactive service module of the line network sends the encrypted control transfer request information in S2 to the target line system through the network.
[0033] S4, the target line system receives the encrypted control transfer request information sent by S3, first verifies the signature through the public key according to the certificate to confirm that it has not been tampered with. Secondly, the private key is used for decryption to restore the control transfer request information. Then according to the user's selection of accepting / rejecting the transfer request / doing nothing, the system generates the corresponding control authority acceptance / rejection / timeout items, and sends them to the line network system after encryption and signature.
[0034] S5, after the line network interactive service module receives the encrypted information sent by the target line in S4, the data encryption module first verifies the signature using the public key to ensure that the ciphertext has not been tampered with. Secondly, the private key is used for decryption to restore the control right transfer request feedback information, and the real-time value of the control right position of the system is modified. If the command type is accept, the control right position real-time value is modified to the line center; if the command type is reject or timeout, the control right position real-time value remains unchanged.
[0035] S6, the control right transfer process from the line network to the line ends.
[0036] The line network can simultaneously perform control right transfer for different power equipment of multiple lines, and the control right transfer between multiple lines is performed concurrently. If one or more line control right transfer fails, it does not affect the transfer process of other lines.
[0037] The line network can forcibly retrieve the control right of the line equipment through manual, semi-automatic or automatic triggering mode without the confirmation of the line. The control right forced retrieval process is as follows: S10, assuming that the device control right is in the line, the control right transfer module of the line network reads the preset triggering mode. If it is a manual trigger, the user with control right selects the control right sequence to be forcibly retrieved manually in the control right transfer interface and initiates the control right forced retrieval request. If it is a semi-automatic trigger, the system detects whether the triggering condition set by the control right sequence is met in real time. When the condition is met, the pre-defined control right transfer sequence is automatically popped up, and the user with control right confirms the control right transfer interface to initiate the control right forced retrieval request. If it is an automatic triggering mode, the system detects whether the triggering condition set by the control right sequence is met in real time. When the condition is met, the pre-defined control right transfer sequence is automatically popped up, and the control right forced retrieval request is automatically initiated without user confirmation. Then the system generates control right forced retrieval request transaction information.
[0038] S20, the data encryption module of the line network uses asymmetric encryption algorithm for signature, and the encryption signature uses the national standard SM2. The line to be retrieved control right is issued with an SM2 digital certificate, and the certificate is updated regularly. The public key generated using the private key in the certificate is used to encrypt the control right forced retrieval request transaction information in S10, and then the private key is used for signature, and then sent to the target line system.
[0039] S30, the target line system receives the encrypted request information sent by S20, first verifies the signature through the public key according to the certificate to confirm that it has not been tampered with, and then decrypts it through the private key to restore the control right forced retrieval request information. Then generate control right forced retrieval confirmation transaction, encrypt and sign, and send to the line network.
[0040] S40, after the line network interactive service module receives the encrypted information sent by the target line in S30, the data encryption module first verifies the signature using the public key to ensure that the ciphertext has not been tampered with. Then the private key is used for decryption to restore the control right to forcibly retrieve the confirmation information, and the real-time value of the control right position of the system is modified to the line network.
[0041] S50, the process of forcibly retrieving the control right of the line by the line network ends.
[0042] The line network can forcibly retrieve the control right of multiple power equipment lines at the same time. The control right retrieval of multiple lines is performed concurrently, and if one or more line control rights fail to be forcibly retrieved, it does not affect the forcibly retrieval results of other lines.
[0043] When the network communication between the line network and the line fails, normal control right transfer cannot be performed. The line network and the line automatically generate a network failure event and automatically transfer the control right to the line to which the power equipment belongs. When the network state returns to normal, the line network and the line can perform normal control right transfer.
[0044] Without performing the control right transfer operation, the interactive service module of the line network receives the control right position real-time information sent by the line at regular time intervals, and compares it with the corresponding control right position real-time value of the system. If they are not consistent, the real-time value is modified synchronously to keep the control right position state of the line network and the line consistent.
[0045] Considering the influence of network communication state and other factors, the final control right position calculation formula is as follows: CtrlPosVal = NetStaVal* CmdValue…………………………………(1); Wherein, CtrlPosVal represents the pre-defined final control right position value, CtrlPosVal = 0 indicates that the control right is on the line, and CtrlPosVal = 1 indicates that the control right is on the line network.
[0046] NetStaVal represents the network communication state, NetStaVal = 1 indicates that the network communication is normal, and NetStaVal = 0 indicates that the network communication is faulty. Wherein: NetStaVal = round(1- ConLossRate+F)……………………………(2); In the above formula, ConLossRate represents the continuous loss packet rate, and F represents the maximum allowed loss factor.
[0047] ConLossRate=ConLossCnt* DetInterTime / MaxFaultTime…………(3); F=[(MaxFaultTime / DetInterTime)-1] / (MaxFaultTime / DetInterTime)…(4); Wherein, ConLossCnt represents the number of consecutive lost packets, DetInterTime represents the packet monitoring interval, and MaxFaultTime represents the maximum fault monitoring time.
[0048] CmdValue represents the command value issued by the line network and line for the control right transfer operation, CmdValue = 0 represents transferring to the line, and CmdValue = 1 represents transferring to the line network.
[0049] Embodiment 3 In combination with Embodiment 1 and Embodiment 2, a method for remote control of power equipment control right transfer between a line network system and a line system is described. Assuming that subway line one is taken as an example, the line network and line one define control right position state information in advance, and the information granularity can be single power equipment control right or grouped equipment control right. The line system and the line network system need to keep consistent for the control right position definition of the same equipment or grouped equipment.
[0050] The control right transfer between the line network and the line is based on a transaction-driven mechanism. The control right transfer process generates a transaction network packet, mainly including the line number to be transferred (LnNumber), the host name of the initiator of the transfer (SrcHost), the host name of the transfer destination (DestHost), the transfer command type (CmdType), the transfer command value (CmdValue), the user name (UserID), and the like. The control right transfer command type mainly includes request transfer, accept transfer, reject transfer, transfer timeout, forced retrieval, and the like. The transfer command value is 0, indicating transferring to the line, and 1, indicating transferring to the line network.
[0051] The line network and the line need to set control right position state variables CtrlPosVal 线网 and CtrlPosVal 线路 respectively in the real-time library, which are used to represent the real-time value of the control right position of the current system of the line network or the line.
[0052] The interaction service module of the wired network and the line monitors heartbeat messages at a certain frequency to determine whether the other party's network status is normal. Assume that the heartbeat message monitoring interval (DetInterTime) is 4 seconds and the maximum fault monitoring time (MaxFaultTime) is 20 seconds. If a heartbeat message is lost once, the consecutive lost message count (ConLossCnt) is incremented by one. If the heartbeat message recovers normally and does not exceed the maximum fault monitoring time, the consecutive lost message count is reset to zero. From formula (3), it can be seen that the consecutive lost message rate is less than 1 under normal network communication conditions. From formula (4), it can be seen that the maximum allowable loss factor F = 0.8. From formula (2), it can be seen that NetStaVal = 1 when network communication is normal.
[0053] Assuming normal network communication (NetStaVal=1), control is located on the network. For example... Figure 1 The process of transferring control from the network to the center of line 1 is as follows: S1, the control transfer module for the network provides a human-machine interface, and the system reads the preset triggering methods. If manually triggered, the user with control permissions manually selects the control sequence to be transferred and initiates a control transfer request on the control transfer interface. If semi-automatically triggered, the system continuously monitors whether the triggering conditions set for the control sequence are met. When the conditions are met, a predefined control transfer sequence automatically pops up, and the user with control permissions confirms and initiates a control transfer request on the control transfer interface. If fully automatically triggered, the system continuously monitors whether the triggering conditions set for the control sequence are met. When the conditions are met, a predefined control transfer sequence automatically pops up, and the control transfer request is initiated automatically without user confirmation. Subsequently, the system generates control transfer request information, including the line number to be transferred as Line 1, the hostname initiating the transfer as the network operation workstation hostname, the transfer destination hostname as the workstation hostname of Line 1 center, the transfer command type (CmdType) as a request for transfer, the transfer command value CmdValue = 0 (transfer to Line 1 center), and the transfer user name as the current operation user ID.
[0054] S2, the data encryption module of the network uses an asymmetric encryption algorithm for signing. The encryption signature adopts the national cryptographic standard SM2. SM2 digital certificates are issued to the lines participating in the transfer of control, and the certificates are updated periodically. The public key generated from the private key in the certificate is used to encrypt the information on the transfer of control in S1, and then the private key is used to sign it.
[0055] The S3 and network interaction service modules send the control transfer request information encrypted by S2 to the Line 1 central system via the network.
[0056] S4, the line system receives the encryption control transfer request information sent by S3, first, according to the certificate, the public key is used for signature verification, to confirm that it has not been tampered with. Secondly, the private key is used for decryption, and the control transfer request information is restored. Then, according to the user's selection of accepting / rejecting the transfer request / doing nothing, the system generates the corresponding control right acceptance / rejection / timeout matter, and sends it to the line network system after encryption and signature.
[0057] S5, after the line network interactive service module receives the encrypted information sent by S4 line, the data encryption module first uses the public key to verify the signature to ensure that the ciphertext has not been tampered with. Secondly, the private key is used for decryption, and the control transfer request feedback information is restored, and the real-time value of the control right position of the system is modified. If the command type is accept, the control right position real-time value is modified to line center (CtrlPosVal 线网 =0); if the command type is reject or timeout, the control right position real-time value is unchanged (CtrlPosVal 线网 =1).
[0058] S6, the control right transfer process from the line network to the line one center is completed.
[0059] The line network can simultaneously perform control right transfer on multiple lines, and the control right transfer between multiple lines is performed concurrently, and if one or more line control right transfer fails, it does not affect the transfer process of other lines.
[0060] The line network can forcibly retrieve the device control right of the line without the line confirmation through manual, semi-automatic or full-automatic triggering mode. In special cases, such as line power supply operation mode adjustment due to main transformer maintenance or fault, the control right transfer sequence can be preset with triggering conditions, and the control right is forcibly retrieved through full-automatic or semi-automatic triggering mode.
[0061] As shown in Figure 2 , the line network forcibly retrieves the control right from the line one center as follows: S10, assuming that the device control right is in the line one center, the control right transfer module of the line network reads the preset trigger mode. If it is manual triggering, the user with control right manually selects the control right sequence to be forcibly retrieved in the control right transfer interface and initiates the control right forced retrieval request. If it is semi-automatic triggering, the system detects whether the trigger condition set by the control right sequence is met in real time, and when the condition is met, the pre-defined control right transfer sequence is automatically popped up, and the user with control right confirms the control right forced retrieval request in the control right transfer interface. If it is an automatic triggering mode, the system detects whether the trigger condition set by the control right sequence is met in real time, and when the condition is met, the pre-defined control right transfer sequence is automatically popped up, and the control right forced retrieval request is automatically initiated without user confirmation. Then the system generates control right forced retrieval request information. The transfer command type (CmdType) is forced retrieval, and the transfer command value CmdValue = 1 (transfer to the line network).
[0062] S20, the data encryption module of the line network uses an asymmetric encryption algorithm for signature, and the encryption signature uses the national standard SM2. The line network issues an SM2 digital certificate to the line to be retrieved, and the certificate is updated regularly. The public key generated by the private key in the certificate is used to encrypt the control right forced retrieval request information in S10, and then the private key is used for signature, and then sent to the line one center.
[0063] S30, the line one center receives the encrypted request information sent by S20, first verifies the signature through the public key according to the certificate, confirms that it has not been tampered with, and then decrypts it through the private key to restore the control right forced retrieval request information. Then generate control right forced retrieval confirmation information, and send it to the line network after encryption and signature.
[0064] S40, the line network interactive service module receives the encrypted information sent by the line in S30, and the data encryption module first verifies the signature using the public key to ensure that the ciphertext has not been tampered with. Then use the private key to decrypt and restore the control right forced retrieval confirmation information, and modify the real-time value of the control right position of the system to the line network (CtrlPosVal 线网 =1).
[0065] S50, the process of the line network forcibly retrieving the control right of the line one center ends.
[0066] The line network can forcibly retrieve the control right of multiple lines at the same time, and the control right retrieval processes of multiple lines are concurrent. If one or more line control rights are forcibly retrieved, it does not affect the forced retrieval result of other lines.
[0067] When the network communication between the line network and the line one center fails (NetStaVal = 0), the normal control right transfer cannot be performed. For example Figure 3As shown, the interactive service module of the line network and the line center automatically generates a network fault event and automatically modifies the control position real-time value to the line center (CtrlPosVal 线网 = CtrlPosVal 线路 = 0), thereby realizing automatic transfer of the control right to the line center. When the system monitors that the network communication state has returned to normal (NetStaVal = 1), the line network and the line center can perform normal transfer of the control right.
[0068] Without the control right transfer operation, the interactive service module of the line network receives the control position real-time information sent by the line every 20 seconds and compares it with the corresponding control position real-time value of the system, and if they are not consistent, the real-time value is modified synchronously, thereby realizing that the control position state of the line network and the line is consistent.
Claims
1. A method of handing over control of metro network power equipment, characterized by, It comprises the following steps: When the network communication between the line network and the line is normal: The line network transfers the control right of the power equipment to one or more lines through preset different trigger modes; The line network forcibly takes back the control right of the power equipment from one or more lines through preset different trigger modes; When the network communication between the line network and the line fails, the line network and the line automatically generate network failure events and automatically transfer the control right to the line to which the power equipment belongs; When the control right transfer operation is not performed, the line network compares the control right position real-time information sent by the line with the corresponding control right position real-time value in a timely manner, and if they are inconsistent, the real-time value is modified synchronously, so that the control right position state of the line network and the line is kept consistent.
2. The metro line network power equipment control right transfer method according to claim 1, characterized in that, When the network communication between the line network and the line is normal, the line network transfers the control right of the power equipment to one or more lines through preset different trigger modes, and the specific steps are as follows: S1, read the preset trigger mode, generate the event information of the control right transfer request; S2, the data encryption module encrypts the event information of the control right transfer request; S3, the interactive service module sends the encrypted event information of the control right transfer request to the target line system; S4, the target line system decrypts and restores the encrypted event information of the control right transfer request, then generates the corresponding execution instruction according to the user's operation instruction, and sends the encrypted execution instruction to the interactive service module; S5, the data encryption module decrypts and restores the encrypted execution instruction, and modifies the real-time value of the control right position; S6, the control right transfer process from the line network to the line is completed.
3. The metro line network power equipment control right transfer method according to claim 2, characterized in that, In S1, the specific process of generating the event information of the control right transfer request comprises: When in manual trigger mode, the user with control right manually selects the control right sequence to be transferred and initiates the control right transfer request; When in semi-automatic trigger mode, whether the trigger condition set by the control right sequence meets the condition is detected in real time, and when the condition is met, the preset control right transfer sequence is automatically popped up, and the user with control right confirms and initiates the control right transfer request; When in full-automatic trigger mode, whether the trigger condition set by the control right sequence meets the condition is detected in real time, and when the condition is met, the preset control right transfer sequence is automatically popped up, and the user confirmation is automatically initiated.
4. The metro line network power equipment control right transfer method according to claim 2, characterized in that, In S2, the specific process of encrypting the event information of the control right transfer request comprises: The asymmetric encryption algorithm is used to encrypt and sign the event information of the control right transfer request, the encryption signature uses the national secret SM2, and the SM2 digital certificate is issued to the line participating in the control right transfer; The digital certificate is updated regularly; the public key generated by using the private key in the digital certificate is used to encrypt the control right transfer event information, and then the private key is used for signature.
5. The metro line network power equipment control right transfer method according to claim 2, characterized in that, In S4, the specific steps of decrypting and restoring the encrypted event information of the control right transfer request comprise: The decryption restoration is signature verification of the signature according to the public key in the digital certificate, confirmation that the ciphertext is not tampered with, decryption by the private key, the operation instruction includes accepting the handover request, rejecting the handover request or not doing anything, and the execution instruction includes control right acceptance, control right rejection or timeout matter; In S5, the specific process of the decryption restoration of the encrypted execution instruction includes: The data encryption module first verifies the signature using the public key to ensure that the ciphertext has not been tampered with, and then decrypts using the private key to restore the control right handover request feedback information and modify the real-time value of the system control right position; If the type of the operation instruction is acceptance, the control right position real-time value is modified to the line center; if the type of the operation instruction is rejection or timeout, the control right position real-time value remains unchanged.
6. The metro line network power equipment control right transfer method according to claim 1, characterized in that, When the network communication between the line network and the line is normal, the line network forcibly retrieves the control right of the power equipment from one or more lines by presetting different trigger modes, and the specific steps are as follows: S10, the control right handover module reads the preset trigger mode to generate matter information of the control right forcibly retrieved request; S20, the data encryption module encrypts the matter information of the control right forcibly retrieved request; S30, the interactive service module sends the encrypted matter information of the control right forcibly retrieved request to the target line system; S40, the target line system decrypts and restores the encrypted matter information of the control right forcibly retrieved request to generate a control right forcibly retrieved confirmation matter, and sends the encrypted control right forcibly retrieved confirmation matter to the line network; S50, the process of the line network forcibly retrieving the control right of the line ends.
7. The metro line network power equipment control right transfer method according to claim 6, characterized in that, In S10, the specific process of generating the matter information of the control right forcibly retrieved request includes: When in the manual trigger mode, the user with the control right manually selects the control right sequence to be forcibly retrieved and initiates the control right forcibly retrieved request; When in the semi-automatic trigger mode, the trigger condition set by the control right sequence is detected in real time, and when the condition is met, the preset control right handover sequence is automatically popped up, and the control right forcibly retrieved request is initiated after the user with the control right confirms; When in the full-automatic trigger mode, the trigger condition set by the control right sequence is detected in real time, and when the condition is met, the preset control right handover sequence is automatically popped up, and the control right forcibly retrieved request is automatically initiated without user confirmation.
8. The metro line network power equipment control right transfer method according to claim 6, characterized in that, In S20, the specific steps of encrypting the matter information of the control right forcibly retrieved request include: The matter information of the control right forcibly retrieved request is encrypted and signed using an asymmetric encryption algorithm, the encryption and signature uses the national SM2, and the line participating in the control right forcibly retrieved is issued with an SM2 digital certificate; The digital certificate is updated regularly; the public key generated using the private key in the digital certificate is used to encrypt the control right handover matter information, and then the private key is used for signature.
9. The method according to claim 6, wherein, In S40, the specific process of decrypting and restoring the encrypted matter information of the control right forcibly retrieved request includes: The decryption restoration is signature verification of the signature according to the public key in the digital certificate, confirmation that the ciphertext is not tampered with, decryption by the private key, restoration of the control right forced retrieval of the confirmation matter, and modification of the real-time value of the control right position to the line network.
10. A control handover system for implementing a control handover method of a metro network power device according to any one of claims 1-9, characterized in that, The control right transfer module, the data encryption module, and the interactive service module are included. The control right transfer module is used for operating the control right transfer process. The data encryption module is used for encrypting or decrypting the matter information generated in the control right transfer process to prevent the matter information from being tampered with. The interactive service module is used for monitoring the network state between the line network and the line and transmitting and receiving the encrypted information in the control right transfer process.
Citation Information
Patent Citations
Method for transferring control authority of urban rail traffic comprehensive monitoring system
CN109760719A
Multi-control room authority handover method for SCADA system control center
CN111125684A
Distributed parallel control method and system for subway line network electric power SCADA
CN111562774A
Equipment management method and device, mobile platform and storage medium
CN112567435A
Permission handover method, device and system, electronic equipment and storage medium
CN113485175A