Five-prevention implementation protocol conversion system and method in localization transformation of thermal power plant

Abstract

The invention discloses a protocol conversion system and method for five-prevention implementation in localization transformation of a thermal power plant, and relates to the technical field of automatic control of the thermal power plant. The system comprises a first data communication interface module for receiving an original protocol message of first equipment; the data analysis module analyzes the original protocol message into an intermediate data set. And the data evaluation module evaluates the intermediate data set and outputs a trusted data set. And the first five-prevention verification module executes first five-prevention locking logic verification on the trusted data set. And the protocol conversion and model generation module converts the first verification data set into a target protocol message and generates a CID file. And the second five-prevention verification module executes second five-prevention locking logic verification on the target protocol message. And the second data communication interface module sends the second verification protocol message to the second equipment. And the system configuration and management module realizes visual configuration and CID file version management. The invention aims to form a continuous, complete and reliable safety protection system in a transformation transition period.

Description

Technical Field

[0001] This invention relates to the field of automation control technology for thermal power plants, and in particular to a protocol conversion system and method for implementing five-prevention measures in the localization transformation of thermal power plants. Background Technology

[0002] In the automation system of thermal power plants, the five-prevention function is a key guarantee for ensuring the safe operation of the power system. With the continuous advancement of equipment localization and substitution, thermal power plants face the challenge of incompatibility between the DNP3.0 proprietary communication protocol used by foreign equipment and the GOOSE protocol of the IEC 61850 standard followed by domestic equipment when replacing foreign equipment.

[0003] In existing technologies, five-proof systems typically only support a single protocol architecture, making it difficult to directly achieve reliable interaction between foreign proprietary protocols and the domestic GOOSE protocol. During the transition period of localization, due to the lack of a protocol conversion mechanism, data from foreign equipment often cannot be correctly parsed and identified by the domestic five-proof system, leading to the loss or parsing errors of critical operation commands. At the same time, the five-proof interlocking rules are difficult to cover foreign equipment still connected to the system, thus bringing the risk of misoperation and posing a serious threat to the safe operation of power plants. Summary of the Invention

[0004] To address the issues of insufficient coverage of the five-prevention functions and security vulnerabilities during the transition period caused by protocol incompatibility in existing technologies, this invention proposes a protocol conversion system and method for implementing the five-prevention measures during the localization transformation of thermal power plants. The aim is to ensure the formation of a continuous, complete and reliable security protection system during the transformation transition period by constructing a two-way protocol conversion mechanism and integrating multiple data status evaluation mechanisms and a flexibly configurable five-prevention interlocking rule base.

[0005] The present invention achieves the above objectives through the following technical solutions:

[0006] A protocol conversion system for implementing five-prevention measures during the localization retrofitting of thermal power plants, the system comprising:

[0007] The first data communication interface module is used to receive the original protocol messages sent by the first device;

[0008] The data parsing module is used to parse the received raw protocol messages into an intermediate data set;

[0009] The data evaluation module is used to perform dead value state evaluation and multi-source comparison evaluation on the intermediate data set and output a reliable data set.

[0010] The first five-prevention verification module is used to perform the first five-prevention interlocking logic verification on the trusted data set according to the built-in five-prevention interlocking rule base; if the verification passes, the first verification data set is output; if the verification fails, the dataset is discarded and an alarm message containing the interlocking reason code is sent.

[0011] The protocol conversion and model generation module is used to convert the first verification data set into the target protocol message according to the preset model matching rule library, and generate a CID file for configuring GOOSE communication of domestic equipment;

[0012] The second five-prevention verification module is used to perform a second five-prevention interlocking logic verification on the target protocol message according to the built-in five-prevention interlocking rule library; if the verification passes, the second verification protocol message is output; if the verification fails, the protocol message is discarded and an alarm message containing the interlocking reason code is sent.

[0013] The second data communication interface module is used to send the second verification protocol message to the second device;

[0014] The system configuration and management module provides a human-computer interaction interface, visualizes the configuration and management of the pre-set model matching rule base and the built-in five-prevention interlocking rule base, and implements version management of CID files to support version rollback and audit traceability.

[0015] As a preferred embodiment of the present invention, both the first device and the second device include domestically produced equipment and foreign equipment; both the first data communication interface module and the second data communication interface module include:

[0016] The DNP3.0 interface is used to establish communication connections with external devices.

[0017] The GOOSE interface is used to establish communication connections with domestically produced equipment.

[0018] Both the DNP3.0 interface and the GOOSE interface support physical layer and data link layer communication of the corresponding protocols.

[0019] As a preferred embodiment of the present invention, the original protocol message includes the original DNP3.0 protocol message and the original...

[0020] GOOSE protocol messages; the intermediate data set includes a DNP3.0 data object set and a GOOSE dataset set; the data parsing module is specifically used to: parse the received original DNP3.0 protocol messages into a DNP3.0 data object set; and parse the received original GOOSE protocol messages into a GOOSE dataset set.

[0021] As a preferred embodiment of the present invention, the data evaluation module includes:

[0022] The dead value state assessment submodule is used to monitor the frequency of change of analog quantities and state quantities in the intermediate data set within a preset sliding time window. If the frequency of change is lower than the preset frequency threshold, the intermediate data set is determined to be unreliable.

[0023] The multi-source comparison and evaluation submodule is used to logically compare the analog quantities and status quantities in the intermediate data set with the auxiliary criteria obtained by the electrical associated devices when there are electrical associated devices. If the logic is inconsistent, the intermediate data set is determined to be unreliable. The electrical associated devices refer to devices in the same electrical circuit or logic interlocking group.

[0024] The comprehensive judgment submodule is used to mark the intermediate data set as a reliable dataset and merge it into the output when the intermediate data set passes the dead value state evaluation and multi-source comparison evaluation.

[0025] The trusted data set includes a trusted DNP3.0 data object set and a trusted GOOSE dataset set.

[0026] As a preferred embodiment of the present invention, the five-prevention interlocking rule library predefines the five-prevention interlocking logic for thermal power plant operation, including but not limited to: the operation interlocking logic of circuit breakers and disconnect switches, the interlocking logic of grounding switches, and the linkage interlocking logic across bays.

[0027] As a preferred embodiment of the present invention, the first verification data set includes a first verification DNP3.0 data set and a first verification GOOSE data set; the first five-proof verification module is specifically used for:

[0028] Perform the first five-prevention interlocking logic verification on the trusted DNP3.0 data object set; if the verification passes, output the first verified DNP3.0 data set;

[0029] Perform the first five-defense interlocking logic check on the trusted GOOSE dataset set; if the check passes, output the first checked GOOSE dataset set.

[0030] If any check fails, the corresponding data set is discarded and an alarm message containing the locking reason code is sent.

[0031] In a preferred embodiment of the present invention, the target protocol message includes a GOOSE protocol message and a DNP3.0 protocol message; the protocol conversion and model generation module includes:

[0032] The data mapping submodule is used to map the first verification DNP3.0 dataset to the GOOSE protocol dataset model and to the DNP3.0 protocol data object model according to the preset model matching rule library. The preset model matching rule library defines the mapping relationship between DNP3.0 protocol data points and logical nodes, data objects and data attributes of the IEC 61850 standard.

[0033] The data encapsulation submodule is used to encapsulate the mapped GOOSE protocol dataset model data into GOOSE protocol messages; and to encapsulate the mapped DNP3.0 protocol data object model data into DNP3.0 protocol messages.

[0034] The model generation submodule is used to generate a CID file for configuring GOOSE communication of domestic equipment based on the mapping relationship between the first verification DNP3.0 dataset and the GOOSE protocol dataset model.

[0035] The model update submodule is used to monitor the operating status of thermal power plant equipment or changes in electrical network topology in real time. When changes are detected to affect the GOOSE communication configuration, the CID file is automatically updated.

[0036] The template management submodule provides a CID template library categorized by device model and manufacturer, and supports batch generation and deployment of CID files.

[0037] As a preferred embodiment of the present invention, the second verification protocol message includes a second verification DNP3.0 protocol message and a second verification GOOSE protocol message; the second five-proof verification submodule is specifically used for:

[0038] Perform a second five-prevention interlocking logic check on the DNP3.0 protocol message after protocol conversion; if the check passes, send the second checked DNP3.0 protocol message to the external device in the second device via the second data communication interface module; if the check fails, discard the protocol message and send an alarm message containing the interlocking reason code.

[0039] A second five-prevention interlocking logic check is performed on the GOOSE protocol message after protocol conversion; if the check passes, the second checked GOOSE protocol message is sent to the domestic device in the second device via the second data communication interface module; if the check fails, the protocol message is discarded and an alarm message containing the interlocking reason code is sent.

[0040] As a preferred embodiment of the present invention, the first five-proof verification module and the second five-proof verification module are further configured to perform the following operations:

[0041] Verify the data quality and validity of the five-prevention participation quantities;

[0042] Verify and control the communication link status of the equipment;

[0043] Dynamic logic judgment is made based on the current power grid operation mode and the real-time status of equipment.

[0044] If any verification fails, an alarm message containing the lockout reason code is generated, and a pop-up notification is displayed through the human-machine interface of the system configuration and management module, and the alarm log is recorded.

[0045] A protocol conversion method for a protocol conversion system implementing five-prevention measures during the localization retrofitting of a thermal power plant, the method comprising a first conversion process for processing messages from foreign equipment to domestic equipment and a second conversion process for processing messages from domestic equipment to foreign equipment; the first conversion process includes:

[0046] Receive raw DNP3.0 protocol messages sent by foreign equipment;

[0047] The original DNP3.0 protocol message is parsed into a set of DNP3.0 data objects;

[0048] Perform dead value state assessment and multi-source comparison assessment on the DNP3.0 data object set, and output a reliable DNP3.0 data object set;

[0049] Based on the five-prevention interlocking rule base, the trusted DNP3.0 data object set is subjected to the first five-prevention interlocking logic verification; if the verification passes, the first verified DNP3.0 data set is output; if the verification fails, the trusted DNP3.0 data object set is discarded and an alarm message is sent.

[0050] Based on the pre-set model matching rule library, the first verification DNP3.0 dataset is mapped to the GOOSE protocol dataset model, and a CID file is generated;

[0051] The mapped GOOSE protocol dataset model data is encapsulated into GOOSE protocol messages;

[0052] According to the five-prevention interlocking rule base, the GOOSE protocol message after protocol conversion is subjected to a second five-prevention interlocking logic verification; if the verification passes, the second verified GOOSE protocol message is sent to the domestic equipment; if the verification fails, the protocol message is discarded and an alarm message containing the interlocking reason code is sent.

[0053] The second conversion process includes:

[0054] Receive raw GOOSE protocol messages sent by domestically produced equipment;

[0055] Parse the original GOOSE protocol message into a GOOSE dataset set;

[0056] Perform dead value state evaluation and multi-source comparison evaluation on the GOOSE dataset set, and output a reliable GOOSE dataset set;

[0057] Based on the five-prevention interlocking rule base, the trusted GOOSE dataset is subjected to the first five-prevention interlocking logic verification; if the verification passes, the first verified GOOSE dataset is output; if the verification fails, the dataset is discarded and an alarm message is sent.

[0058] Based on the pre-set model matching rule base, the first verification GOOSE data set is mapped to the DNP3.0 protocol data object model;

[0059] The mapped DNP3.0 protocol data object model data is encapsulated into a DNP3.0 protocol message;

[0060] According to the five-prevention interlocking rule base, a second five-prevention interlocking logic verification is performed on the DNP3.0 protocol message; if the verification passes, the second verification DNP3.0 protocol message is sent to the external device; if the verification fails, the protocol message is discarded and an alarm message containing the interlocking reason code is sent.

[0061] The beneficial effects of this invention are as follows: This system comprehensively verifies the credibility of intermediate data sets by combining dead-value state evaluation with multi-source comparison evaluation, effectively identifying and filtering abnormal data, and providing a high-quality, reliable data set for the first five-prevention interlocking logic verification. By introducing a dual five-prevention verification mechanism, the system performs the first five-prevention interlocking logic verification on the reliable data set before protocol conversion and the second five-prevention interlocking logic verification on the target protocol message after protocol conversion, thus constructing a closed-loop security protection system. Based on a pre-set model matching rule base, semantic mapping and data conversion between DNP3.0 and GOOSE protocols are realized, and CID files are generated, reducing manual configuration workload, improving the access efficiency of domestic equipment, and reducing system failures caused by manual configuration errors. Embedding the five-prevention interlocking logic into the protocol conversion process enables millisecond-level real-time interlocking judgment, directly and forcibly intercepting illegal operations from the communication protocol layer, effectively preventing misoperations caused by protocol conversion errors, data anomalies, or communication delays, and fundamentally eliminating security risks. The system provides a visual interface that supports flexible configuration and management of the model matching rule base and the five-prevention interlocking rule base. It also implements version control and audit traceability for CID files, greatly facilitating later system maintenance, rule updates, and troubleshooting. This reduces the time investment by maintenance personnel in system configuration, data verification, and fault handling, improving the level of automated operation and maintenance and overall operational efficiency of power plants. Combined with a modular design, each module has clear responsibilities and well-defined interfaces, which not only improves the system's scalability and reusability but also facilitates customized deployment for the specific needs of different power plants. Attached Figure Description

[0062] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the following description of the embodiments will be briefly introduced. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0063] in:

[0064] Figure 1 This is a system architecture block diagram of a protocol conversion system for implementing five-prevention measures in the localization transformation of thermal power plants, as proposed in this invention.

[0065] Figure 2 This is a schematic diagram of the modular structure of a protocol conversion system for implementing five-prevention measures in the localization transformation of thermal power plants, as proposed in this invention.

[0066] Figure 3 This is a flowchart of the first conversion process in the protocol conversion method for implementing five-prevention measures in the localization transformation of thermal power plants proposed in this invention;

[0067] Figure 4 This is a flowchart of the second conversion process in a protocol conversion method for implementing five-prevention measures during the localization transformation of thermal power plants proposed in this invention. Detailed Implementation

[0068] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. All other embodiments obtained by those skilled in the art based on the described embodiments of the present invention are within the scope of protection of the present invention.

[0069] Existing five-prevention systems are mostly limited to a single protocol, unable to achieve bidirectional conversion between foreign proprietary protocols and the domestic GOOSE protocol. During the localization process, the lack of a protocol conversion mechanism often leads to incorrect parsing of data from foreign equipment, resulting in lost or misread instructions. Furthermore, the five-prevention rules are insufficient to cover foreign equipment, posing a risk of misoperation. To address these issues, this invention proposes a protocol conversion system and method for implementing five-prevention measures in the localization of thermal power plants. This system ensures the authenticity and reliability of subsequent process data sets by integrating dead-value state assessment and multi-source comparative assessment. Based on this, a dual five-prevention interlocking logic mechanism is adopted, performing real-time logical verification before and after protocol conversion to form a closed-loop security protection, forcibly intercepting illegal operations from the communication layer and effectively eliminating the risk of misoperation. Based on a pre-set model matching rule base, the system automatically implements DNP3.0 and...

[0070] GOOSE protocol conversion and CID file generation reduce manual configuration and improve transformation efficiency. A visual interface supports flexible configuration and management of the model matching rule base and the five-prevention interlocking rule base, and enables version control and audit traceability of CID files, greatly facilitating later system maintenance, rule updates, and troubleshooting. The system adopts a modular design, improving reusability and customization capabilities. Through automated protocol conversion, data evaluation, and centralized management, it is compatible with both new and old equipment, supports phased transformation, and not only reduces costs and implementation difficulty but also significantly improves the automation level and operational efficiency of power plant operations and maintenance.

[0071] like Figure 1 The diagram shows the system architecture of a protocol conversion system for implementing five-prevention measures during the localization retrofitting of a thermal power plant, as proposed in this invention. The original NCS system operating in parallel during the retrofitting process refers to the existing NCS system within the plant; the localized NCS system refers to the replaced NCS system. During the localization retrofitting process, the original NCS system and the localized NCS system will coexist in parallel, potentially for up to 3 to 5 years. A / B represents the A / B dual network. The station control layer is responsible for collecting the four remote sensing information (remote control, remote telemetry, and remote sensing) from the original foreign equipment, which belongs to the station control layer. GOOSE information, as the interaction of five-prevention information, may occur at the process layer or the station control layer. This system obtains data information from the foreign equipment from the station control layer network and can simultaneously communicate with the retrofitted domestic equipment in the process layer network, forwarding the processed relevant data information to the foreign equipment and the NCS system at the station control layer, and vice versa.

[0072] like Figure 2 As shown, this is an embodiment of the present invention. This embodiment provides a protocol conversion system for implementing five-prevention measures in the localization transformation of thermal power plants. The system includes a first data communication interface module, a data parsing module, a data evaluation module, a first five-prevention verification module, a protocol conversion and model generation module, a second five-prevention verification module, a second data communication interface module, and a system configuration and management module.

[0073] The first data communication interface module is used to receive raw protocol messages sent by the first device. The first device includes domestically produced equipment and foreign equipment, and the raw protocol messages include raw DNP3.0 protocol messages and raw GOOSE protocol messages.

[0074] Furthermore, the first data communication interface module includes a DNP3.0 interface and a GOOSE interface, both of which support physical layer and data link layer communication of their respective protocols. The DNP3.0 interface receives raw DNP3.0 protocol messages from external devices, and the GOOSE interface receives raw GOOSE protocol messages from domestic devices.

[0075] The data parsing module is used to parse the received raw protocol messages into an intermediate data set, which includes the DNP3.0 data object set and the GOOSE dataset set.

[0076] Furthermore, this module is implemented using an embedded processor and includes a built-in DNP3.0 protocol parser, a GOOSE protocol parser, and a GOOSE protocol stack. The specific processing flow is as follows:

[0077] It receives raw DNP3.0 protocol messages transmitted by the data communication interface module, extracts application layer data objects through the DNP3.0 protocol parser, and generates a set of DNP3.0 data objects that conform to the internal processing specifications.

[0078] Simultaneously, it receives raw GOOSE protocol messages transmitted by the data communication interface module, parses the GOOSE dataset content through the GOOSE protocol parser and protocol stack, and generates a standardized GOOSE dataset set.

[0079] In some embodiments, a raw DNP3.0 protocol message is received from a foreign device. The structure of this protocol message fully conforms to the DNP3.0 standard protocol format, as follows:

[0080] 0564cc 440a 00450870b2 d7 a18100002002280100000001ec 3501ac 1a010100001f004105986a 010201200020f686000001010121002600010102012700...

[0081] The parsing results of this protocol message show that it originates from a foreign device with address 2117 and contains a link layer frame header and an application layer data unit.

[0082] First, the DNP3.0 protocol parser identifies the starting position and header of the application layer data unit, parsing the object header and data content item by item. During this process, it parses the object frame structure of Group 2 variant 32, extracts the state information of the binary input (BI) data points, and parses it into a DNP3.0 data object set, which serves as an intermediate data set.

[0083] For example: The link layer frame header is 0564cc 440a 00450870, the application layer data unit starts at b2d7, and the application layer header is b2 d7 a18100002002. The first object header of the application layer belongs to group 2, variant 32, and the corresponding frame is 280100000001ec 3501ac 1a 01010000. The second object header of the application layer belongs to group 1, variant 2, and the BI data is 1f004105986a 010201200020f68600000101012100260001.

[0084] The data evaluation module is used to perform dead value state evaluation and multi-source comparison evaluation on the intermediate dataset, and output a reliable dataset, which includes a reliable DNP3.0 data object set and a reliable GOOSE dataset set.

[0085] Furthermore, this module includes a dead value state assessment submodule, a multi-source comparison assessment submodule, and a comprehensive judgment submodule. The specific processing flow is as follows:

[0086] The dead value state assessment submodule is used to monitor the frequency of changes of analog quantities and state quantities in the intermediate data set within a preset sliding time window. If the frequency of changes is lower than the preset frequency threshold, the intermediate data set is determined to be unreliable.

[0087] In some embodiments, assuming the sliding time window is set to 5 minutes, the analog quantity change frequency threshold requires that the current value should change by more than 5A at least three times within 5 minutes; the state quantity change frequency threshold is specified to be within 5 minutes, and the switch state should not remain at an absolutely fixed value. For example, the current line current is 120A, and the switch is in the closed state. The historical data sequence of the line current over the past 5 minutes is obtained as: [117,120,130,128,116,118,127], and the switch has always remained in the closed state. After evaluation by the dead value state evaluation submodule, the results show that both the line current and the switch state are reliable data.

[0088] The multi-source comparison and evaluation submodule is used to logically compare the analog and status quantities in the intermediate data set with the auxiliary criteria obtained from the electrically associated devices when electrical associated devices are present. If the logic is inconsistent, the intermediate data set is determined to be unreliable. Electrically associated devices refer to devices in the same electrical circuit or logic interlocking group.

[0089] In some embodiments, within the same substation, the upstream power supply equipment for the 10kV Furong line is the 10kV #1 busbar. An auxiliary criterion, the busbar-side disconnector position, is obtained from the protection and control device of the 10kV #1 busbar, and its value is 1. The specific logical comparison rules are as follows:

[0090] Rule 1: If the line switch is closed and the bus disconnect switch is closed, the line current should theoretically be greater than 0A, indicating that there is a load on the line.

[0091] Rule 2: If the line switch or busbar disconnector is tripped, the line current should theoretically be 0A.

[0092] If the line current suddenly drops to 0, while the line switch and bus disconnector are still in the closed state, rule 1 is triggered, and the internal data of the system is determined to be unreliable.

[0093] The comprehensive judgment submodule is used to mark the intermediate data set as a reliable dataset and merge it into the output when the intermediate data set passes the dead value state evaluation and multi-source comparison evaluation.

[0094] In this way, the system adopts a dead value and multi-source comparison dynamic evaluation mechanism to actively identify and filter out abnormal, invalid and dead data, ensuring that the data sent into the first five-prevention interlocking logic verification is true and reliable, and improving the accuracy of security decisions from the source.

[0095] The first five-prevention verification module performs the first five-prevention interlocking logic verification on the trusted dataset based on the built-in five-prevention interlocking rule base. If the verification passes, the first verification dataset is output. If the verification fails, the dataset is discarded and an alarm message containing the interlocking reason code is sent. The first verification dataset includes the first verification DNP3.0 dataset and the first verification GOOSE dataset. The specific processing flow of this module is as follows:

[0096] Perform the first five-prevention interlocking logic check on the trusted DNP3.0 data object set. If the check passes, output the first checked DNP3.0 data set. If the check fails, discard the trusted DNP3.0 data object set and send an alarm message containing the interlocking reason code.

[0097] Perform the first five-prevention interlocking logic check on the trusted GOOSE dataset set. If the check passes, output the first verified GOOSE dataset set. If the check fails, discard the trusted GOOSE dataset set and send an alarm message containing the interlocking reason code.

[0098] Furthermore, the five-prevention interlocking rule library predefines the five-prevention interlocking logic for thermal power plant operation, including but not limited to the operation interlocking logic of circuit breakers and disconnect switches, the interlocking logic of grounding switches, and the linkage interlocking logic across bays.

[0099] In some embodiments, the five-prevention interlocking logic includes, but is not limited to, the following:

[0100] The interlocking logic for the operation of circuit breakers and disconnectors is as follows: When the disconnector is not open, the circuit breaker is prohibited from closing; when the circuit breaker is not open, the disconnector is prohibited from opening or closing.

[0101] Interlocking logic of grounding switch: When the bus grounding switch is closed, the bus-side disconnector is prohibited from operation; when the line grounding switch is closed, the line-side disconnector is prohibited from operation.

[0102] Interlocking logic across bays: When the power supply switching bay is in the "switching" state, voltage regulation operation of the main transformer bay is prohibited; when the bus section bay circuit breaker is open, cross-operation of the disconnecting switches of the two bus sections is prohibited.

[0103] The fifth-level anti-verification module is also used to perform the following operations:

[0104] Verify the data quality and validity of the five-prevention participation quantities;

[0105] Verify and control the communication link status of the equipment;

[0106] Dynamic logic judgment is made based on the current power grid operation mode and the real-time status of equipment.

[0107] If any verification fails, an alarm message containing the locking reason code is generated, and a pop-up notification is displayed on the human-machine interface and the alarm log is recorded.

[0108] Taking the tripping operation rules of the 501167 grounding switch of a certain factory as an example, the five-prevention interlocking logic of the present invention is described in detail.

[0109] Assume that the opening operation of the 501167 grounding switch needs to meet the following conditions:

[0110] 1.50112 Disconnect switch is in the open position;

[0111] 2.50121 Disconnecting switch is in the open position;

[0112] 3. The voltage of the Beidian 5011 outgoing line is lower than the preset safety threshold, for example: the voltage of the Beidian 5011 outgoing line is ≤0.5kV, to ensure that the line is unvoltageed.

[0113] Traditional methods typically only perform static judgments on the signal values ​​of the above three conditions, as follows: if the position signals of the disconnecting switches 50112 and 50121 show "open", and the voltage value of the outgoing line of the north wire 5011 meets the preset conditions, the grounding disconnecting switch operation can be performed.

[0114] However, traditional methods neither verify the communication status of the signal acquisition device nor assess the validity of the signal itself, which may lead to misjudgments due to communication interruptions or data distortion.

[0115] When performing the 501167 grounding switch opening operation, this invention implements three-layer verification of communication status, data quality, and logical conditions through the first five-proof verification module. The specific steps are as follows:

[0116] The communication status of the position signal acquisition device for the 50112 disconnector switch and the 50121 disconnector switch, as well as the sensing device for the voltage of the 5011 outgoing line of the North Cable, with the system is monitored in real time.

[0117] If communication with any device is interrupted, an alarm message containing the COMM-001 lockout reason code, device identifier 501167 / 50112 / 50121, and timestamp is immediately generated. The alarm message is displayed in a pop-up window on the human-machine interface of the system configuration and management module, and the alarm log is recorded. The tripping operation is then suspended for further judgment.

[0118] If there is a quality abnormality in the 5011 voltage signal of the Northwire, the operation is locked and a data abnormality lockout alarm is generated, with the lockout reason code being DATA-002.

[0119] The basic tripping rules are only judged if the above communication link verification passes and the data quality of the five-prevention participation quantities is valid.

[0120] If both disconnectors 50112 and 50121 are in the open position, and the voltage of the north line 5011 is ≤0.5kV, then the opening condition is met, and the operation is allowed.

[0121] If any logical condition is not met, a logical condition failure interlocking alarm will be generated, and the interlocking reason code will be LOGIC-003, prohibiting the tripping operation.

[0122] The protocol conversion and model generation module is used to convert the first verification data set into target protocol messages based on a preset model matching rule base, and generate a CID file for configuring GOOSE communication of domestically produced equipment. The target protocol messages include DNP3.0 protocol messages and GOOSE protocol messages.

[0123] Furthermore, this module includes a data mapping submodule, a data encapsulation submodule, a model generation submodule, a model update submodule, and a template management submodule. The specific process is as follows:

[0124] The data mapping submodule is used to map the first verification DNP3.0 dataset to the GOOSE protocol dataset model and the first verification GOOSE dataset to the DNP3.0 protocol data object model according to the preset model matching rule base.

[0125] The pre-defined model matching rule base defines the mapping relationship between DNP3.0 protocol data points and logical nodes, data objects, and data attributes of the IEC 61850 standard.

[0126] In some embodiments, the GOOSE protocol dataset model file includes:

[0127]

[0128]

[0129] The GOOSE protocol dataset model is designed based on the IEC 61850 standard. Its core adopts a single logic device and multiple logic node infrastructure, while also supporting on-demand expansion to a multi-logic device mode, which can fully meet the data interaction needs of the five preventions within the thermal power plant.

[0130] In this model, a logical device serves as the top-level organizational unit of the GOOSE protocol dataset, representing a collection of devices for a specific functional module or bay. For example, the logical device PIGO01 is related to a grounding switch. Logical nodes, as lower-level functional units of logical devices, handle the interaction of specific data types.

[0131] A logical device supports four standardized logical node modes, which correspond to:

[0132] Floating-point telemetry, such as continuous quantities like voltage and current;

[0133] Integer telemetry, such as normalized quantities like power and frequency;

[0134] Single-point remote signaling, such as binary signals like the open / closed status of a disconnector switch;

[0135] Two-point remote signaling, such as circuit breaker energy storage status, alarm status and other multi-state signals.

[0136] Compared to traditional protocol conversion devices that use fixed, hard-coded mapping rules, this model's conversion rules rely entirely on a pre-built model matching rule library. This rule library is highly configurable, with the following specific advantages:

[0137] The number of logic devices can be flexibly adjusted according to the actual number of bays and equipment types in a thermal power plant;

[0138] By modifying the mapping relationships in the model matching rule base, it is possible to adapt to the GOOSE data interaction requirements of domestically produced equipment from different manufacturers without making any changes to the underlying system code.

[0139] Taking the voltage data of the 5011 outgoing line of the north power plant as an example, this paper details how it is mapped to a pre-set model matching rule base.

[0140] The complete process of GOOSE protocol data includes 5 core mapping rules:

[0141] Rule 1: Select and generate one or more logical devices based on the multi-logical device matching mode or the single logical device matching mode.

[0142] For example: If using single LD mode, create an empty LD in advance and name it PIGO01.

[0143] Rule 2: Match logical nodes based on the Description keyword.

[0144] Specifically, if the Description field of a data point contains "Voltage" or "voltage," then the data point is mapped to the General Input / Output Logic Node (GGIO) in the IEC 61850 standard. The GGIO node is suitable for custom data interaction for non-standard functions, allowing for flexible access to five-proof voltage data.

[0145] For example, the description of point (2117,7,3) is 5011 Line Voltage, and its mapped logical node is GGIO01.

[0146] Rule 3: Match data objects and data attributes based on Description and Units.

[0147] Specifically, if Units is kV and Description includes Line or outgoing line, then it is mapped to mag.f under GGIO.PhV.phsA, where GGIO.PhV.phsA is the phase voltage of phase A, and mag.f is the floating-point amplitude value.

[0148] For example: if the Units of this point are kV and the Description contains Line, then the complete mapping path is determined as: CL2201PLGO01GGIO01.PhV.phsA.mag.f.

[0149] Rule 4: Automatic data type conversion rule.

[0150] Specifically, this includes automatically mapping the GROUP of data points according to the DNP3.0 protocol to the data class of the IEC 61850 standard.

[0151] For example, the GROUP of point (2117,7,3) is 7. Therefore, the data class in the CID file is defined as MV to ensure that the data type of the GOOSE message is consistent with the receiving requirements of domestic equipment.

[0152] Rule 5: Configure address and dataset rules.

[0153] Specifically, all GOOSE data mapped to the same logical device will be organized into the same GOOSE send control block and the same dataset.

[0154] For example, the system will create a GoCB named GGIO / LLN0$GO$gocbPub and create a dataset dsGoose for it, and the point (2117,7,3) will be added to this dataset.

[0155] The key mapping relationships between the first verification GOOSE data set and the DNP3.0 protocol data object model are shown in Table 1.

[0156] Table 1. Key mapping relationships from the first verification GOOSE dataset to the DNP3.0 protocol data object model data.

[0157]

[0158] As can be seen from Table 1:

[0159] First, the system identifies the device identifier in the first verification GOOSE data set and converts it into the target DNP3.0 slave device address by querying the preset address mapping table.

[0160] For example: map device identifier CL2201PLGO01 to target DNP3.0 foreign device address 5011.

[0161] Next, each data attribute in the first verification GOOSE dataset is parsed and mapped to the corresponding data object type in the DNP3.0 protocol according to the rule base.

[0162] For example, the data attribute MMXU1.PhV.phsA.cVal.mag.f is mapped to analog input Group 30, Variation 1. Simultaneously, a unique DNP3.0 object index is assigned to this data point, ensuring that this index maintains consistent mapping with the internal reference number of the GOOSE data attribute.

[0163] Finally, the data values ​​of the first verification GOOSE data set are directly converted into the corresponding data types supported by the DNP3.0 protocol and filled into the application data field of the DNP3.0 message.

[0164] For a detailed explanation of DNP3.0 data quality, please refer to Table 2.

[0165] Table 2. Explanation of DNP3.0 Data Quality

[0166]

[0167]

[0168] The system converts the quality of GOOSE data according to predefined quality mapping rules, as detailed in Table 3.

[0169] Table 3. Mapping relationship between GOOSE data quality attributes and DNP3.0 flag bits

[0170]

[0171]

[0172] The data encapsulation submodule is used to encapsulate the mapped GOOSE protocol dataset model data into GOOSE protocol messages; and to encapsulate the mapped DNP3.0 protocol data object model data into DNP3.0 protocol messages.

[0173] Furthermore, the GOOSE protocol message is an ASN.1 encoded message conforming to the IEC 61850-8-1 standard.

[0174] In some embodiments, the structure of a GOOSE protocol message is as follows:

[0175]

[0176] The encoded GOOSE message is as follows:

[0177]

[0178]

[0179] After the data encapsulation is completed, the system will begin the process of generating the CID file, and finally output a complete CID file that conforms to the IEC61850SCL standard.

[0180] The model generation submodule is used to generate a CID file for configuring GOOSE communication of domestic equipment based on the mapping relationship between the first verification DNP3.0 dataset and the GOOSE protocol dataset model.

[0181] In some embodiments, the CID file contains the following:

[0182] IED: CL2201 (the protocol conversion device itself);

[0183] Server: Contains a logical device PIGO;

[0184] Logical Device: Includes logical nodes LLN0, GGIO, RREC, etc.

[0185] Logical Node: GGIO contains data PhV;

[0186] Data Object: PhV contains a member phsA;

[0187] DataAttribute: The address of mag.f points to (2117,7,3), and CDC = MV;

[0188] DataSet: dsGoose contains all mapped data attributes such as GGIO1.PhV.phsA.mag.f;

[0189] GoCB: Configures the publishing parameters for GOOSE messages, such as MAC address, AppID, MinTime, MaxTime, etc.

[0190] In this way, the system intelligently maps the data points of foreign equipment to the IEC 61850 standard data model, generating a standardized CID configuration file, laying the foundation for efficient and reliable bidirectional conversion between the DNP 3.0 foreign protocol and the GOOSE protocol.

[0191] The model update submodule is used to monitor the operating status of thermal power plant equipment or changes in electrical network topology in real time. When changes are detected that affect the GOOSE communication configuration, the CID file is automatically updated.

[0192] In some embodiments, when maintenance is detected on a busbar, the system infers, based on preset grid topology rules, that all bay units connected to that busbar have been de-energized. This change is determined to affect the GOOSE communication configuration. Once it is confirmed that the change does indeed affect the configuration, the system automatically removes all affected smart electronic devices from the subscription list of the CID file that subscribe to the GOOSE messages for that busbar voltage and generates a new CID file. The update operation typically employs atomic operations to ensure that in the event of an unexpected event during file writing, the system can roll back to the previous stable version, avoiding configuration errors. After the update is complete, a notification is sent to the system configuration and management module, informing the user that the configuration has been automatically updated.

[0193] In addition, before writing the new CID file, the system will automatically create a backup of the old CID file and record the version number, update timestamp, change summary and associated device identifier.

[0194] The template management submodule provides a CID template library categorized by device model and manufacturer, supporting batch generation and deployment of CID files. This submodule maintains a CID template library based on device model and manufacturer. Each template is a semi-finished CID file, pre-defined with the necessary logical devices, logical nodes, datasets, and data objects for the corresponding device model.

[0195] Users can select the model and manufacturer of domestically produced equipment, as well as a list of equipment to be deployed, through the human-computer interaction interface of the system configuration and management module. Based on the user's selection, the template invocation and batch generation engine retrieves the corresponding CID template from the template library and instantiates the abstract template by combining it with a pre-set model matching rule base and the current first verification data set. After generating the CID file, this submodule also provides multiple deployment methods, including online and offline deployment, as detailed below:

[0196] Online deployment utilizes the IEC 61850 MMS service, which downloads the CID files to each target domestically produced device via the station control layer network.

[0197] Offline deployment packages and compresses the generated CID files in batches, providing them to debugging personnel for offline configuration via tools such as USB drives.

[0198] Once deployment is complete, the system will generate a deployment report, recording a list of successful and failed devices for easy user tracking.

[0199] In this way, a seamless conversion between the DNP3.0 proprietary protocol and the IEC 61850 GOOSE protocol is achieved through a two-way protocol conversion mechanism, effectively solving the protocol compatibility problem between existing foreign equipment and domestic five-prevention systems during the localization retrofitting of thermal power plants. This design supports phased equipment upgrades in power plants, eliminating the need to replace all foreign equipment at once, significantly reducing the economic cost and implementation difficulty of the retrofit.

[0200] The second fifth-level security check module serves as the final security line before data exit. The second verification protocol message includes the second verification DNP3.0 protocol message and the second verification GOOSE protocol message. The specific processing flow is as follows:

[0201] Perform a second five-prevention interlocking logic check on the DNP3.0 protocol message after protocol conversion; if the check passes, send the second checked DNP3.0 protocol message to the external device in the second device via the second data communication interface module; if the check fails, discard the protocol message and send an alarm message containing the interlocking reason code.

[0202] A second five-prevention interlocking logic check is performed on the GOOSE protocol message after protocol conversion; if the check passes, the second checked GOOSE protocol message is sent to the domestic device in the second device via the second data communication interface module; if the check fails, the protocol message is discarded and an alarm message containing the interlocking reason code is sent.

[0203] In some embodiments, this module extracts key five-prevention participation quantities from the DNP3.0 protocol message after protocol conversion, including but not limited to: circuit breaker opening and closing status, disconnector switch position, grounding switch status, equipment activation / deactivation status, and analog quantity over-limit information. Based on a pre-set five-prevention interlocking rule base, combined with the current power grid operation mode and real-time equipment status, the extracted participation quantities are dynamically and logically judged. The specific logical judgment process includes:

[0204] First, check for the risk of "closing the disconnecting switch with the grounding switch": determine whether the current disconnecting switch operation command conflicts with the actual opening state of the corresponding grounding switch.

[0205] Next, verify the "misoperated circuit breaker" logic: determine whether the circuit breaker operation command meets the current bus operation mode and load conditions.

[0206] Finally, perform cross-bay linkage interlocking verification: when the operation involves multiple bay devices, comprehensively judge whether the status of the relevant devices meets the linkage conditions.

[0207] While performing logical verification, the communication link status with the control device is acquired. If a communication interruption, delay exceeding the limit, or message abnormality is detected in the target external device, the operation is deemed unreliable, resulting in verification failure. If all verifications pass, the protocol message is forwarded to the second data communication interface module and ultimately sent to the target external device. If any verification fails, the current message is immediately discarded, preventing it from being sent to the target external device, and an alarm message is generated. This alarm message includes at least a lockout reason code, associated device identifier, and timestamp, and is uploaded to the system configuration and management module for centralized display and logging.

[0208] In this way, the second fifth-level verification module builds an independent security barrier above the protocol conversion layer, effectively improving the reliability and security of operation commands between heterogeneous systems during the localization transformation of thermal power plants.

[0209] The second data communication interface module is used to send the second verification protocol message to the second device. The second device includes both domestically produced and foreign-made equipment.

[0210] Furthermore, the second data communication interface module includes a DNP3.0 interface and a GOOSE interface, both of which support physical layer and data link layer communication of their respective protocols. The second verification is transmitted via the DNP3.0 interface.

[0211] The DNP3.0 protocol message is sent to the foreign device in the second device, and the second verification GOOSE protocol message is sent to the domestic device in the second device through the GOOSE interface.

[0212] The system configuration and management module provides a human-computer interaction interface, visualizes the configuration and management of the pre-set model matching rule base and the built-in five-prevention interlocking rule base, and implements version management of CID files to support version rollback and audit traceability.

[0213] In some embodiments, this module enables centralized configuration, management, and maintenance of key system parameters and rules through a human-computer interaction interface.

[0214] A graphical user interface (GUI) is provided for the pre-built model matching rule base management function, used to import, parse, and display model files of external devices. This interface allows users to associate and bind data points of external devices with logical nodes, data objects, and data attributes in the IEC 61850 standard model through drag-and-drop matching, manual association, or template-based batch mapping. Furthermore, the system provides mapping relationship verification and simulation testing functions, allowing users to verify the correctness of mapping relationships before deployment, ensuring the generation of high-quality CID files.

[0215] The system includes a logic editing tool for the built-in five-prevention interlocking rule base management function, used for visual editing and compilation of the five-prevention logic. This tool supports defining, but is not limited to: operation interlocking logic for circuit breakers and disconnectors, interlocking logic for grounding switches, and cross-bay linkage interlocking logic. Furthermore, the system supports online debugging and simulation of rules, allowing for the simulation of equipment states by injecting data to test the triggering and interlocking results of logic conditions.

[0216] The version management function for CID files supports automatic or manual saving of historical versions of configuration modifications, recording detailed information such as version number, modification time, operator, and modification summary. Users can easily compare differences between different versions and roll back to any historical version with a single click.

[0217] In addition, the system provides a logical orchestration function for determining thresholds or ranges, used to centrally set the thresholds or ranges for each sub-module within the data evaluation module. Users can configure the sliding time window length and preset threshold for the frequency of change of dead value judgments, and set reasonable numerical ranges for each state quantity in the data state evaluation, i.e., preset ranges. Simultaneously, it supports configuring the enabling and disabling conditions for logical judgments in multi-source comparison evaluations.

[0218] The system also provides a form-based interface for configuring communication parameters with external devices, including the baud rate, data bits, and link maintenance parameters of the DNP3.0 serial port. Additionally, the system has a dedicated interface for configuring GOOSE publish / subscribe parameters with domestically produced devices, including key settings such as GoCBRef, GoID, APPID, destination MAC address, minimum time interval, and maximum time interval.

[0219] The system also integrates a permission management system, which is used to assign personalized operation permissions to different users, such as read-only, editable, and administrator, to ensure the security and auditability of operations.

[0220] In this way, with the help of the human-computer interaction interface, flexible configuration of model matching strategies, five-prevention interlocking logic, thresholds and ranges, and version management of CID files are supported, which effectively reduces the complexity of system debugging, deployment and subsequent maintenance, and comprehensively improves operation and maintenance efficiency and user experience.

[0221] This invention provides a protocol conversion method for a protocol conversion system implementing five-prevention measures in the localization transformation of thermal power plants. The method includes a first conversion process for processing protocol messages from foreign equipment to domestic equipment and a second conversion process for processing protocol messages from domestic equipment to foreign equipment.

[0222] like Figure 3 As shown, another embodiment of the present invention provides a first conversion process for a protocol conversion method of a protocol conversion system for the implementation of five-prevention measures in the localization transformation of thermal power plants, specifically including:

[0223] S31, Receive raw DNP3.0 protocol messages sent by the foreign device;

[0224] S32, parse the original DNP3.0 protocol message into a set of DNP3.0 data objects;

[0225] S33, perform dead value state evaluation and multi-source comparison evaluation on the DNP3.0 data object set, and output a reliable DNP3.0 data object set;

[0226] S34. Based on the five-prevention interlocking rule base, perform the first five-prevention interlocking logic verification on the trusted DNP3.0 data object set; if the verification passes, output the first verified DNP3.0 data set; if the verification fails, discard the trusted DNP3.0 data object set and send an alarm message.

[0227] S35, based on the preset model matching rule base, map the first verification DNP3.0 dataset to the GOOSE protocol dataset model and generate a CID file;

[0228] S36, encapsulate the mapped GOOSE protocol dataset model data into a GOOSE protocol message;

[0229] S37. Based on the five-prevention interlocking rule base, perform a second five-prevention interlocking logic verification on the GOOSE protocol message after protocol conversion; if the verification passes, send the second verified GOOSE protocol message to the domestic equipment; if the verification fails, discard the protocol message and send an alarm message containing the interlocking reason code.

[0230] like Figure 4 As shown, another embodiment of the present invention provides a second conversion process for a protocol conversion method of a protocol conversion system for the implementation of five-prevention measures in the localization transformation of thermal power plants, specifically including:

[0231] S41, receive raw GOOSE protocol messages sent by domestically produced equipment;

[0232] S42, parse the original GOOSE protocol message into a GOOSE dataset set;

[0233] S43, perform dead value state evaluation and multi-source comparison evaluation on the GOOSE dataset set, and output a reliable GOOSE dataset set;

[0234] S44, Based on the five-prevention interlocking rule base, perform the first five-prevention interlocking logic verification on the trusted GOOSE dataset set; if the verification passes, output the first verified GOOSE dataset set; if the verification fails, discard the trusted GOOSE dataset set and send an alarm message.

[0235] S45, based on the preset model matching rule base, map the first verification GOOSE data set to the DNP3.0 protocol data object model;

[0236] S46, encapsulate the mapped DNP3.0 protocol data object model data into a DNP3.0 protocol message;

[0237] S47. Based on the five-prevention interlocking rule base, perform a second five-prevention interlocking logic verification on the DNP3.0 protocol message; if the verification passes, send the second verified DNP3.0 protocol message to the external device; if the verification fails, discard the protocol message and send an alarm message containing the interlocking reason code.

[0238] In summary, this invention aims to solve the core technical challenges faced during the localization process of thermal power plants. Through automated protocol conversion, intelligent data evaluation, dual five-proof verification, and visualized centralized management, it effectively overcomes the predicament of protocol incompatibility between new and old equipment during the localization process. This allows thermal power plants to retain and utilize existing foreign equipment, gradually replacing it in phases, avoiding the need for a large-scale one-time investment, reducing the technical threshold and overall cost of the transformation, and ensuring the construction of a continuous, complete, and reliable safety protection system during the transition period. Firstly, the system uses dead-value state evaluation and multi-source comparison evaluation to verify the credibility of intermediate data sets, effectively identifying and filtering abnormal data sets, ensuring the accuracy and reliability of the data sets, and providing a high-quality data foundation for the five-proof logic verification. Furthermore, a dual five-prevention verification mechanism is introduced. Logical verification of the trusted data set is performed before protocol conversion, and secondary verification of the target protocol message is performed after conversion, constructing a closed-loop security protection system. This system enables millisecond-level real-time blocking judgment, directly and forcibly intercepting illegal operations from the communication protocol layer, effectively preventing erroneous operations caused by protocol conversion errors, data anomalies, or communication delays, fundamentally eliminating security risks. At the protocol conversion level, the system uses a pre-set model matching rule base to achieve semantic mapping and data conversion between DNP3.0 and GOOSE protocols, automatically generating CID files. This reduces manual configuration workload, improves the access efficiency of domestic equipment, and reduces the risk of system failures due to manual configuration errors. In addition, the system provides a human-machine interface, supporting flexible configuration and management of the model matching rule base and the five-prevention blocking rule base, and implementing version control and audit traceability of CID files, enhancing the system's maintainability and scalability. The modular design ensures clear responsibilities and interfaces for each module, facilitating customized deployment according to the needs of different power plants.

[0239] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any person skilled in the art can easily conceive of various variations or substitutions within the technical scope disclosed in this application, and these should all be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A protocol conversion system for five prevention implementation in a domestic reform of a thermal power plant, characterized in that, The system comprises: a first data communication interface module for receiving original protocol messages sent by a first device; a data analysis module for analyzing the received original protocol messages into intermediate data sets; a data evaluation module for evaluating the intermediate data sets for dead value state and multi-source comparison, and outputting trusted data sets; a first five-prevention check module for performing a first five-prevention lockout logic check on the trusted data sets according to a built-in five-prevention lockout rule base; if the check passes, outputting a first check data set; if the check fails, discarding the data set and sending an alarm message containing a lockout reason code; a protocol conversion and model generation module for converting the first check data set into a target protocol message according to a pre-set model matching rule base, and generating a CID file for configuring GOOSE communication of a domestic device; a second five-prevention check module for performing a second five-prevention lockout logic check on the target protocol message according to a built-in five-prevention lockout rule base; if the check passes, outputting a second check protocol message; if the check fails, discarding the protocol message and sending an alarm message containing a lockout reason code; a second data communication interface module for sending the second check protocol message to a second device; a system configuration and management module for providing a human-computer interaction interface, visualizing configuration and management of the pre-set model matching rule base and the built-in five-prevention lockout rule base, and realizing version management of the CID file to support version rollback and audit traceability.

2. The protocol conversion system for five-prevention implementation in the localization reconstruction of a thermal power plant according to claim 1, characterized in that, The first device and the second device both comprise a domestic device and a foreign device; the first data communication interface module and the second data communication interface module both comprise: a DNP3.0 interface for establishing a communication connection with the foreign device; a GOOSE interface for establishing a communication connection with the domestic device; wherein the DNP3.0 interface and the GOOSE interface both support physical layer and data link layer communication of corresponding protocols.

3. The protocol conversion system for five prevention implementation in the localization reconstruction of thermal power plants according to claim 2, characterized in that, The original protocol message comprises an original DNP3.0 protocol message and an original GOOSE protocol message; the intermediate data set comprises a DNP3.0 data object set and a GOOSE data set; the data analysis module is specifically configured to analyze the received original DNP3.0 protocol message into the DNP3.0 data object set, and analyze the received original GOOSE protocol message into the GOOSE data set.

4. The protocol conversion system for five-prevention implementation in the localization reconstruction of a thermal power plant according to claim 3, characterized in that, The data evaluation module comprises: a dead value state evaluation submodule for monitoring the change frequency of analog and state quantities in the intermediate data set within a pre-set sliding time window, and determining that the intermediate data set is untrusted if the change frequency is lower than a pre-set frequency threshold; a multi-source comparison evaluation submodule for performing logical comparison between analog and state quantities in the intermediate data set and auxiliary criteria obtained by an electrically associated device when the electrically associated device exists, and determining that the intermediate data set is untrusted if the logic is inconsistent; the electrically associated device refers to a device in the same electrical circuit or logical lockout group; a comprehensive determination submodule for marking the intermediate data set as a trusted data set and outputting when the intermediate data set passes the dead value state evaluation and the multi-source comparison evaluation; The trusted data set includes a trusted DNP3.0 data object set and a trusted GOOSE data set.

5. A protocol conversion system for five prevention implementation in the localization reconstruction of a thermal power plant according to claim 4, characterized in that, The five-prevention interlocking rule library is pre-defined with five-prevention interlocking logic of the operation of the thermal power plant, including but not limited to: operation interlocking logic of circuit breakers and disconnectors, interlocking logic of grounding switches and linkage interlocking logic across intervals.

6. A protocol conversion system for five prevention implementation in the localization reconstruction of a thermal power plant according to claim 5, characterized in that, The first verification data set includes a first verification DNP3.0 data set and a first verification GOOSE data set; and the first five-prevention verification module is specifically configured to: perform first five-prevention interlocking logic verification on the trusted DNP3.0 data object set; if the verification is passed, output the first verification DNP3.0 data set; perform first five-prevention interlocking logic verification on the trusted GOOSE data set; if the verification is passed, output the first verification GOOSE data set; if any verification fails, discard the corresponding data set and send alarm information containing an interlocking reason code. The target protocol message includes a GOOSE protocol message and a DNP3.0 protocol message; and the protocol conversion and model generation module includes:

7. The protocol conversion system for five prevention implementation in the localization reconstruction of thermal power plants according to claim 6, characterized in that, a data mapping submodule configured to map the first verification DNP3.0 data set to a GOOSE protocol data set model and map the first verification GOOSE data set to a DNP3.0 protocol data object model according to a pre-set model matching rule library; the pre-set model matching rule library defines a mapping relationship between DNP3.0 protocol data points and logical nodes, data objects and data attributes of the IEC 61850 standard; a data encapsulation submodule configured to encapsulate the mapped GOOSE protocol data set model data into a GOOSE protocol message and encapsulate the mapped DNP3.0 protocol data object model data into a DNP3.0 protocol message; a model generation submodule configured to generate a CID file for configuring GOOSE communication of the domestic equipment according to a mapping relationship between the first verification DNP3.0 data set and the GOOSE protocol data set model; a model update submodule configured to monitor a running state of the thermal power plant equipment or a change in the electrical network topology in real time, and automatically update the CID file when it is detected that the change has an impact on the GOOSE communication configuration; a template management submodule configured to provide a CID template library classified by equipment model and manufacturer, and support batch generation and deployment of the CID file. The second verification protocol message includes a second verification DNP3.0 protocol message and a second verification GOOSE protocol message; and the second five-prevention verification submodule is specifically configured to:

8. The protocol conversion system for five prevention implementation in the localization reconstruction of thermal power plants according to claim 7, characterized in that, perform second five-prevention interlocking logic verification on the converted DNP3.0 protocol message; if the verification is passed, send the second verification DNP3.0 protocol message to an external device in the second equipment via the second data communication interface module; if the verification fails, discard the protocol message and send alarm information containing an interlocking reason code; perform second five-prevention interlocking logic verification on the converted GOOSE protocol message; if the verification is passed, send the second verification GOOSE protocol message to the domestic equipment in the second equipment via the second data communication interface module. ​ If the check fails, the protocol message is discarded and an alarm message containing the lockout reason code is sent.

9. The protocol conversion system for five prevention implementation in the localization reconstruction of thermal power plants according to claim 8, characterized in that, The first five-prevention check module and the second five-prevention check module are further configured to perform the following operations: checking the data quality validity of the five-prevention participation amount; checking the communication link state of the control device; performing dynamic logical judgment based on the current power grid operation mode and the real-time state of the device; If any check fails, an alarm message containing the lockout reason code is generated, and the alarm message is prompted through the human-computer interaction interface pop-up window of the system configuration and management module and recorded in the alarm log.

10. A protocol conversion method for a protocol conversion system for five prevention implementation in a domestic reform of a thermal power plant according to any one of claims 1 to 9, characterized in that, The first conversion process for processing protocol messages from foreign devices to domestic devices and the second conversion process for processing protocol messages from domestic devices to foreign devices are included; the first conversion process includes: receiving an original DNP3.0 protocol message sent by a foreign device; parsing the original DNP3.0 protocol message into a DNP3.0 data object set; performing dead value state evaluation and multi-source comparison evaluation on the DNP3.0 data object set, outputting a trusted DNP3.0 data object set; performing a first five-prevention lockout logical check on the trusted DNP3.0 data object set according to the five-prevention lockout rule library; if the check passes, outputting a first checked DNP3.0 data set; if the check fails, discarding the trusted DNP3.0 data object set and sending an alarm message; mapping the first checked DNP3.0 data set to a GOOSE protocol data set model according to a pre-set model matching rule library, and generating a CID file; encapsulating the mapped GOOSE protocol data set model data into a GOOSE protocol message; performing a second five-prevention lockout logical check on the GOOSE protocol message converted according to the five-prevention lockout rule library; if the check passes, sending the second checked GOOSE protocol message to a domestic device; if the check fails, discarding the protocol message and sending an alarm message containing the lockout reason code; The second conversion process includes: receiving an original GOOSE protocol message sent by a domestic device; parsing the original GOOSE protocol message into a GOOSE data set collection; performing dead value state evaluation and multi-source comparison evaluation on the GOOSE data set collection, outputting a trusted GOOSE data set collection; performing a first five-prevention lockout logical check on the trusted GOOSE data set collection according to the five-prevention lockout rule library; if the check passes, outputting a first checked GOOSE data set; if the check fails, discarding the data set and sending an alarm message; mapping the first checked GOOSE data set to a DNP3.0 protocol data object model according to a pre-set model matching rule library; encapsulating the mapped DNP3.0 protocol data object model data into a DNP3.0 protocol message; performing a second five-prevention lockout logical check on the DNP3.0 protocol message according to the five-prevention lockout rule library; if the check passes, sending the second checked DNP3.0 protocol message to a foreign device; if the check fails, discarding the protocol message and sending an alarm message containing the lockout reason code.

Images