A monitoring and early warning method for running state of power mobile application server across security partition

Abstract

The application belongs to the technical field of safe operation of electric power automation system, and particularly relates to a monitoring and early warning method for the running state of a cross-security-partition electric power mobile application server, comprising the following steps: arranging a mobile application server running state monitoring submodule and a monitoring information transmission submodule in different security partitions; collecting the running state information of a monitoring device; transmitting the running state information to a cross-security-partition mobile application server running information receiving general module; grading the running state information; displaying the graded running state information through a state display general module; and displaying the running state information of an abnormal state through an abnormal early warning general module. The application realizes the monitoring and early warning functions by centralized display of the running state of the mobile application server in different security partitions, which is convenient for the automation personnel to timely find the abnormal running state of the device, effectively shortens the abnormal processing time of the device, and ensures the safe and stable operation of the main station of the electric power system.

Description

Technical Field

[0001] This invention relates to a method for monitoring and early warning of the operating status of a power mobile application server across security zones, belonging to the field of power automation system safety operation technology. Background Technology

[0002] With the continuous development of the national economy, China's electricity load is steadily increasing, the power grid is becoming increasingly complex, and the difficulty of power grid dispatch is rising. Power grid dispatch is becoming increasingly reliant on power automation systems, and the monitoring, dispatching, and control of the power grid status directly depend on the remote signaling, telemetry, and remote control data provided by these systems. The stability of the power automation system directly affects the power grid dispatching capability. Mobile application servers for power automation systems are key components of the power system automation master station. Centralized monitoring, collaborative analysis, anomaly warning, and comprehensive display of the operational status of these mobile application servers enable timely detection of equipment malfunctions and potential risks, saving time spent on anomaly handling by the mobile application servers and improving the stability and security of the power automation system.

[0003] Currently, to ensure the security of power monitoring systems, the National Energy Administration's "Regulations on Security Protection of Power Monitoring Systems" and its supporting schemes clearly require that horizontal isolation be implemented between the power production control area (security zone I / II) and the management information area (security zone III / IV). This is achieved by deploying dedicated security equipment such as forward or reverse isolation devices to realize unidirectional data transmission and logical isolation, in order to prevent high-security-level areas from being attacked by low-security-level areas.

[0004] Under a strict security partitioning architecture, monitoring and early warning of the operational status of power mobile application servers (usually deployed in the management information zone) faces the following prominent technical challenges: 1. Fragmented monitoring perspective, making it difficult to perceive the whole picture; 2. Difficulty in cross-regional data collection and synchronization; 3. Rigid early warning mechanism, lacking intelligent correlation. Summary of the Invention

[0005] The purpose of this invention is to provide a method for monitoring and early warning of the operating status of a power mobile application server across security partitions, addressing the problems existing in the prior art.

[0006] The technical solution provided by this invention to solve the above-mentioned technical problems is: a method for monitoring and early warning of the operating status of a cross-security partition power mobile application server, comprising the following steps: Step 1: Deploy mobile application server operation status monitoring submodules and monitoring information transmission submodules in different security zones; at the same time, deploy cross-security zone mobile application server operation information receiving module, status display module, comprehensive information query module, and anomaly warning module in the management information area. Step 2: Collect the operating status information of the monitoring devices through the mobile application server operating status monitoring submodule in different security partitions; Step 3: Transmit the running status information of different security zones to the cross-security zone mobile application server running information receiving module through the monitoring information transmission submodule; Step 4: Classify the operating status information according to the set thresholds for abnormal, limit-crossing, and normal states; Step 5: Display the graded operation status information through the status display module, and then display alarms for operation status information in abnormal states through the anomaly warning module.

[0007] A further technical solution is that the different security zones include a real-time production control zone, a non-real-time production control zone, and a management information zone, which are divided according to the security level of the power automation system.

[0008] A further technical solution is that the operating status information includes CPU utilization, memory utilization, device response time, device unreachability rate, device temperature, interface receive rate, interface send rate, interface input bandwidth utilization, and interface output bandwidth utilization.

[0009] A further technical solution is that the monitoring information transmission submodule generates the running status information into a CIM-E format running status CIM-E file, and then transmits the running status CIM-E file to the cross-security zone mobile application server running information receiving main module.

[0010] A further technical solution is that the cross-security zone mobile application server operation information receiving module receives and parses the operation status CIM-E file to obtain the operation status information of the monitoring devices in all security zones.

[0011] A further technical solution is that the comprehensive information query module queries the running status information of the mobile application server based on different security partitions, different device names, and different limit methods.

[0012] A further technical solution is that the mobile application server running status monitoring submodule has a device adding function, which can add devices in the security partition to the monitoring according to needs.

[0013] A further technical solution is that the mobile application server operation status monitoring submodule is deployed on the local area network of the security partition.

[0014] The present invention has the following beneficial effects: By centrally displaying the operating status of mobile application servers in different security partitions, the present invention realizes the monitoring and early warning functions, which makes it easier for automation personnel to promptly detect abnormal equipment operating status, effectively shorten the equipment abnormality handling time, and ensure the safe and stable operation of the power system main station. Attached Figure Description

[0015] Figure 1 The flowchart shows the method for monitoring and early warning of the operation status of mobile application servers in power automation systems across security zones proposed in this invention. Figure 2 This is a diagram illustrating an example of the method for monitoring and early warning of the operation status of a mobile application server in a power automation system across security zones, as proposed in this invention. Detailed Implementation

[0016] The technical solution of the present invention will now be clearly and completely described with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0017] like Figure 1 As shown, the present invention provides a method for monitoring and early warning of the operating status of a cross-security partition power mobile application server, comprising the following steps: Step 1: Deploy mobile application server operation status monitoring submodules and monitoring information transmission submodules in different security zones; at the same time, deploy cross-security zone mobile application server operation information receiving module, status display module, comprehensive information query module, and anomaly warning module in the management information area. The safety zones include Production Control Real-Time Zone 1, Production Control Non-Real-Time Zone 2, and Management Information Zone 3, which are divided according to the safety level of the power automation system. The connections between the various modules are as follows: Figure 2 As shown, the production control real-time zone operation status monitoring submodule 4 and the production control real-time zone monitoring information transmission submodule 5 are deployed in the production control real-time zone 1, both of which are connected to the production control real-time zone local area network 13.

[0018] In the non-real-time production control zone 2, the non-real-time production control zone operation status monitoring submodule 6 and the non-real-time production control zone monitoring information transmission submodule 7 are deployed, both of which are connected to the non-real-time production control zone local area network 14.

[0019] In the management information zone 3, the following sub-modules are deployed: management information zone operation status monitoring sub-module 8, management information zone information transmission sub-module 9, operation information receiving module 10, status display module 11, comprehensive information query module 12, and anomaly early warning module 13. All of these are connected to the management information zone local area network 15.

[0020] Among them, the production control real-time zone mobile application server operation status monitoring submodule 4, the production control non-real-time zone operation status monitoring submodule 6, and the management information zone mobile application server operation status monitoring submodule 8 have the function of adding monitoring devices, which can add devices in the security zone to the monitoring according to needs.

[0021] The comprehensive information query module 13 can query the status information of mobile application servers based on different security partitions, different device names, and different limit methods. Step 2: Collect the operating status information of the monitoring devices through the mobile application server operating status monitoring submodule in different security partitions; Specifically, the operation status information of the monitoring device 18 is collected through the production control real-time regional mobile application server operation status monitoring submodule 4, the production control non-real-time regional operation status monitoring submodule 6, and the management information regional mobile application server operation status monitoring submodule 8. The operation status information includes CPU utilization, memory utilization, device response time, device unreachability ratio, device temperature, interface receiving rate, interface sending rate, interface input bandwidth utilization, and interface output bandwidth utilization.

[0022] The monitoring device 18 mainly refers to the mobile application server that runs on the power automation master station.

[0023] Step 3: Transmit the running status information of different security zones to the cross-security zone mobile application server running information receiving module located in the management information area through the monitoring information transmission submodule; Specifically, the production control real-time zone monitoring information transmission submodule 5 receives the operating status information of the monitoring device 18 in the security zone obtained by the production control real-time zone operation status monitoring submodule 4, generates the operating status information in CIM-E format, and then transmits the CIM-E file to the operation information receiving main module 10 through the security zone isolation device 16 between the production control real-time zone and the production control non-real-time zone and the management information zone.

[0024] The production control non-real-time zone monitoring information transmission submodule 7 receives the operating status information of the monitoring equipment 18 in the safety zone obtained by the production control non-real-time zone operation status monitoring submodule 6, converts the operating status information into CIM-E format, and then transmits the CIM-E file to the operation information receiving main module 10 through the safety zone isolation device 17 between the production control real-time zone and the production control non-real-time zone and the management information zone.

[0025] The information transmission submodule 9 of the management information area receives the operation status information of the monitoring device 17 of the management information area obtained by the operation status monitoring submodule 8 of the management information area, and then directly transmits the operation status information to the operation information receiving main module 10.

[0026] Step 4: Classify the operating status information according to the set thresholds for abnormal, limit-crossing, and normal states; First, the main module for receiving operational information receives and parses the operational status CIM-E files sent by the real-time production control zone 1 and the non-real-time production control zone 2, and at the same time parses the operational status information sent by the management information zone 3, thereby obtaining the operational status information of the monitoring devices 18 in all security zones.

[0027] Then, based on the operating status information of all collected monitoring devices 18, the status is classified according to the set thresholds for abnormal, out-of-limit, and normal states.

[0028] Step 5: Display the graded operation status information through the status display module, and then display alarms for operation status information in abnormal states through the anomaly warning module.

[0029] The mobile application server operating status information of the monitoring device 18 in each security zone is displayed in different colors on the status display module 11 according to the limits of abnormal, limit-crossing, and normal states. Normal operation is green, limit-crossing is yellow, and abnormal state is red. The mobile application server information in abnormal state is displayed as an alarm through the abnormal warning module 12.

[0030] The above description is not intended to limit the present invention in any way. Although the present invention has been disclosed through the above embodiments, it is not intended to limit the present invention. Any person skilled in the art can make some changes or modifications to the above-disclosed technical content to create equivalent embodiments without departing from the scope of the present invention. Any simple modifications, equivalent changes and modifications made to the above embodiments based on the technical essence of the present invention without departing from the scope of the present invention shall still fall within the scope of the present invention.

Claims

1. A method for monitoring and early warning of the operating status of a power mobile application server across security partitions, characterized in that, Includes the following steps: Step 1: Deploy mobile application server operation status monitoring submodules and monitoring information transmission submodules in different security zones; at the same time, deploy cross-security zone mobile application server operation information receiving module, status display module, comprehensive information query module, and anomaly warning module in the management information area. Step 2: Collect the operating status information of the monitoring devices through the mobile application server operating status monitoring submodule in different security partitions; Step 3: Transmit the running status information of different security zones to the cross-security zone mobile application server running information receiving module through the monitoring information transmission submodule; Step 4: Classify the operating status information according to the set thresholds for abnormal, limit-crossing, and normal states; Step 5: Display the graded operation status information through the status display module, and then display alarms for operation status information in abnormal states through the anomaly warning module.

2. The method for monitoring and early warning of the operating status of a cross-security zone power mobile application server according to claim 1, characterized in that, The different security zones include the production control real-time zone, the production control non-real-time zone, and the management information zone, which are divided according to the security level of the power automation system.

3. The method for monitoring and early warning of the operating status of a cross-security zone power mobile application server according to claim 1, characterized in that, The operating status information includes CPU utilization, memory utilization, device response time, device unreachability rate, device temperature, interface receive rate, interface send rate, interface input bandwidth utilization, and interface output bandwidth utilization.

4. The method for monitoring and early warning of the operating status of a cross-security zone power mobile application server according to claim 1, characterized in that, The monitoring information transmission submodule generates the running status information into a CIM-E file in CIM-E format, and then transmits the running status CIM-E file to the cross-security zone mobile application server running information receiving module.

5. The method for monitoring and early warning of the operating status of a cross-security zone power mobile application server according to claim 4, characterized in that, The cross-security zone mobile application server operation information receiving module receives and parses the operation status CIM-E file to obtain the operation status information of the monitoring devices in all security zones.

6. The method for monitoring and early warning of the operating status of a cross-security zone power mobile application server according to claim 1, characterized in that, The comprehensive information query module queries the running status information of the mobile application server based on different security partitions, different device names, and different limit methods.

7. The method for monitoring and early warning of the operating status of a cross-security zone power mobile application server according to claim 1, characterized in that, The mobile application server operation status monitoring submodule has a device addition function, which can add devices in the security partition to the monitoring according to needs.

8. The method for monitoring and early warning of the operating status of a cross-security zone power mobile application server according to claim 1, characterized in that, The mobile application server operation status monitoring submodule is deployed on the local area network of the security partition.

Images