Method and system for monitoring state of special operation qualified equipment of edge intelligent connected pumped storage power station

Abstract

This invention relates to the field of IoT data processing technology, specifically to a method and system for monitoring the status of special operation qualification equipment in edge-connected pumped storage power stations. The method includes the following steps: acquiring information on the special operation task, personnel qualifications, work permit, personnel location, and target equipment; generating an operation access binding unit; generating valid personnel access tags; constructing an equipment status event sequence and calculating edge hysteresis; performing a time-series comparison of the valid personnel access tags, equipment status event sequence, and edge hysteresis according to the target equipment identifier to identify edge access green light window trigger records; determining the re-anchoring action sequence through reinforcement learning, and performing re-anchoring verification on the current status of the target equipment, work permit, personnel location, and equipment safety isolation boundary to generate access re-judgment results and a time-series mismatch evidence chain. This invention can avoid continuing to use the access results before the change in equipment status after a sudden change, improving the real-time performance and traceability of special operation access monitoring.

Description

Technical Field

[0001] This invention relates to the field of Internet of Things (IoT) data processing technology, specifically to a method and system for monitoring the status of special operation qualification equipment in edge-connected pumped storage power stations. Background Technology

[0002] Pumped storage power stations typically include underground powerhouses, main transformer tunnels, switchyards, unit maintenance floors, tailrace systems, drainage corridors, and various special operation scenarios such as hoisting, confined space operations, and electrical maintenance. The sites feature diverse equipment types, complex spatial structures, and overlapping work areas. Furthermore, equipment operating conditions, isolation status, interlocking status, alarm status, and environmental safety conditions may change due to dispatching, maintenance switching, or on-site operations. During these operations, the validity of special operation personnel's qualifications, the scope of their work permits, their current location, and the real-time status of the target equipment all affect whether personnel can enter the work area or continue performing the work. Therefore, it is necessary to conduct coordinated monitoring of personnel qualifications, work permits, personnel location, and equipment status to ensure that the special operation access judgments of pumped storage power stations are consistent with the actual on-site safety conditions.

[0003] Existing safety management methods for pumped storage power station operations typically achieve personnel qualification verification, work permit management, personnel location monitoring, or equipment status collection. However, these data often originate from different systems, with inconsistent update frequencies, transmission links, and timestamp benchmarks. In actual operations, situations may arise where personnel qualifications are valid, work permits are valid, and personnel are located within the permitted area, resulting in permission for entry or continued operation at the edge. However, the target equipment may subsequently experience a sudden change in operating conditions, isolation status, interlocking status, alarm status, or environmental safety conditions. If the edge node fails to promptly re-anchor the equipment change event to the current personnel access result, the valid qualification label before the change may continue to cover the prohibited operation status or the need for reconfirmation of the equipment status after the change. This creates a short-term edge access green light window, leading to misjudgments of special operation access, delayed risk monitoring, and difficulties in post-event traceability. Summary of the Invention

[0004] The purpose of this invention is to address the problem in the background technology that the linkage between personnel qualifications, work permits, personnel positioning and real-time status of target equipment is insufficient, which leads to the edge side still using the access results before the change in equipment status after a sudden change, resulting in misjudgment of special operation access and lag in risk monitoring. The invention proposes a method and system for monitoring the status of special operation qualifications of pumped storage power stations at the edge.

[0005] The technical solution of this invention: a method for monitoring the status of special operation qualification equipment in edge-connected pumped storage power stations, comprising: S1. Obtain special operation task information, personnel qualification information, work ticket information, personnel positioning information and target equipment information from the edge nodes of the pumped storage power station site, and generate operation access binding units; S2. Generate valid personnel access tags based on the job access binding unit, collect equipment status events of the target equipment, construct the equipment status event sequence and calculate the edge hysteresis; S3. Compare the valid personnel access tag, equipment status event sequence and edge hysteresis quantity in time according to the target equipment identifier. When the valid personnel access tag is valid and the target equipment changes from the allowed operation state to the prohibited operation state or needs to be reconfirmed, generate an edge access green light window trigger record. S4. Based on the edge admission green light window trigger record, the re-anchoring action sequence is determined through reinforcement learning; S5. Perform re-anchoring verification on the current status of the target equipment, work order, personnel location and equipment safety isolation boundary according to the re-anchoring action sequence, and generate access re-judgment results and complete edge access green light window; S6. Based on the access re-judgment results and the complete edge access green light window, output the special operation qualification equipment status monitoring results and the time sequence mismatch evidence chain.

[0006] Preferably, the operation access binding unit includes personnel identification, qualification category, qualification validity status, work ticket number, permitted operation type, permitted operation area, permitted equipment identification, personnel current location area, target equipment identification, set of permitted operation statuses for the target equipment, set of prohibited operation conditions for the target equipment, set of statuses requiring reconfirmation for the target equipment, and equipment safety isolation boundary.

[0007] Preferably, the generation of the valid personnel access label includes: When the qualification status is valid, the permitted operation type corresponding to the work ticket number is consistent with the operation type determined by the special operation task information, the permitted equipment identifier is consistent with the target equipment identifier, and the personnel's current location area is within the permitted operation area, the generated personnel access validity label is valid. If any of the following conditions are not met: qualification validity status, permitted operation type, permitted equipment identification, or the personnel's current location area, the generated personnel access validity label will be invalid.

[0008] Preferably, the device status event sequence is composed of device status events of the target device. Each device status event includes a target device identifier, a status event type, a state before the change, a state after the change, an event occurrence time, and an edge reception time. The status event type includes one of the following: change in operating condition, change in isolation state, change in interlocking state, change in alarm state, and change in environmental safety conditions. The edge hysteresis is the time difference between the edge reception time and the event occurrence time.

[0009] Preferably, the generation of the edge admission green light window trigger record includes: Determine whether the personnel access permit label is valid; Determine whether the target device identifier in the device status event is consistent with the target device identifier in the job access binding unit; Determine whether the state of the device before the sudden change of the device state event belongs to the set of allowed operating states of the target device; Determine whether the state after a sudden change in the device status event does not belong to the set of allowed operating states of the target device, or whether it hits the set of prohibited operating conditions of the target device, or whether it belongs to the set of states that need to be reconfirmed for the target device; When all of the above judgment results are yes, and the edge node still uses the valid personnel access label before the mutation to output the results of allowing access, allowing continued operation, or low-risk monitoring after the device status event occurs, an edge access green light window trigger record is generated. The edge admission green light window trigger record includes the job admission binding unit, the device status event that triggered the record, the edge hysteresis, the initial mismatch interval, the status after the mutation, and the admission result that is still in use. The initial mismatch interval is defined as the period from the occurrence of the device state event to the edge reception time.

[0010] Preferably, the sequence of re-anchoring actions is determined through reinforcement learning, including: The status event type, post-mutation status, edge hysteresis, current personnel location area, permitted work area, target equipment identifier, and currently used admission results in the edge admission green light window trigger record are used as reinforcement learning status. The reinforcement learning actions include: retrieving the current status of the target equipment, re-verifying the consistency between the work order and the target equipment, re-verifying the consistency between the current location area of ​​the personnel and the permitted work area, re-verifying the consistency between the current location area of ​​the personnel and the safety isolation boundary of the equipment, triggering the work pause prompt, and requesting on-site review. The sequence of re-anchoring actions is determined based on the action value of each reinforcement learning action. After performing anchor verification in the order of anchor actions, reinforcement learning rewards are determined based on anchor feedback. The anchor feedback includes whether the prohibited operation state after equipment mutation is identified, whether the duration of the edge access green light window is reduced, and whether a blockage unrelated to equipment mutation is generated. The action value of the corresponding reinforcement learning action is updated based on the reinforcement learning reward.

[0011] Preferably, the anchor verification is performed according to the sequence of anchor actions, including: Reacquire the current status of the target device and determine whether the current status of the target device belongs to the set of allowed operating states of the target device; Re-verify whether the permitted equipment identification in the work order matches the target equipment identification; Re-verify whether the permitted operation type in the work order is consistent with the operation type determined in the special operation task information; Re-verify whether the personnel's current location is within the permitted work area; Re-verify whether the personnel's current location area meets the equipment safety isolation boundary after the equipment mutation; When the sequence of re-anchoring actions includes triggering a work pause prompt, output a work pause prompt; When the re-anchoring action sequence includes requesting on-site verification, an on-site verification request is generated.

[0012] Preferably, generating the admission re-evaluation result includes: When the current state of the target device matches the set of conditions that prohibit operation of the target device, a result of prohibiting access or prohibiting continued operation is generated; When the current status of the target device belongs to the set of target device statuses that need to be reconfirmed, or the current status of the target device cannot be confirmed by the edge node, or the current status of the target device does not belong to the set of target device allowed operation statuses and does not hit the set of target device prohibited operation conditions, a result pending on-site verification is generated. When the current state of the target equipment belongs to the set of permitted operating states for the target equipment, and the qualification is valid, the licensed equipment identifier is consistent with the target equipment identifier, the permitted operation type is consistent with the operation type determined by the special operation task information, and the personnel's current location area is within the permitted operation area and meets the equipment safety isolation boundary, an access permission or continued operation permission result is generated.

[0013] Preferably, the complete edge access green light window consists of the time from the occurrence of the device status event to the time when the edge node completes the re-anchor verification and outputs the access re-judgment result; the temporal mismatch evidence chain includes the time of generation of the valid personnel access tag, the time of occurrence of the device status event, the edge reception time of the device status event, the initial mismatch interval, the complete edge access green light window, the device status event that triggers the edge access green light window, the re-anchor action sequence, and the access re-judgment result.

[0014] Compared with the prior art, the above-mentioned technical solution of the present invention has the following beneficial technical effects: This invention establishes a work access binding unit in the edge nodes of pumped storage power stations, binding special operation tasks, personnel qualifications, work permits, personnel location, and target equipment information into the same access judgment object. It further generates valid personnel access tags, constructs equipment status event sequences and edge hysteresis, enabling time-series comparison between personnel access status and equipment real-time status under the same target equipment identifier. It can identify situations where personnel qualifications are valid, work permits are valid, and personnel are within the permitted area, but the target equipment has changed from a permitted operation state to a prohibited operation state or requires reconfirmation. This avoids the problem in existing methods where only personnel qualifications, work permits, or location results are used to output permitted access results while ignoring sudden changes in equipment status, thereby reducing misjudgments in special operation access and lag in risk monitoring at pumped storage power stations. This invention, after identifying the trigger record of the edge access green light window, uses reinforcement learning to determine the re-anchoring action sequence of target equipment status re-retrieval, work ticket consistency verification, personnel positioning consistency verification, equipment safety isolation boundary verification, work pause prompt, and on-site review request. After completing the re-anchoring verification, it generates access re-judgment results and a complete edge access green light window. It can re-anchor the prohibited operation status or the status requiring reconfirmation after a sudden change in equipment status to the current personnel access results, so that the edge node can output the results of prohibited access, prohibited continued operation, or pending on-site review in a timely manner. At the same time, it forms a temporal mismatch evidence chain including the time of generation of the valid personnel access tag, the time of occurrence of the equipment status event, the edge reception time, the re-anchoring action sequence, and the access re-judgment result, thereby improving the real-time performance, accuracy, and traceability of equipment status monitoring for special operations qualifications in pumped storage power stations. Attached Figure Description

[0015] Figure 1 This is a flowchart of the method for monitoring the status of special operation qualification equipment in edge-connected pumped storage power stations proposed in this invention; Figure 2 This is a schematic diagram of the timing mismatch of the edge access green light window proposed in this invention. Detailed Implementation

[0016] Example: This example provides a method and system for monitoring the status of special operation qualification equipment in an edge-connected pumped storage power station, which is applied to the special operation site of the pumped storage power station; the special operation site includes underground powerhouse, main transformer tunnel, switchyard, unit maintenance floor, tailrace system, sump, drainage corridor, hoisting area, confined space area, and areas where electrical maintenance, hoisting, welding and thermal cutting, high-altitude operations, confined space operations, or temporary power supply operations are required; In this embodiment, the pumped storage power station field edge node refers to the edge device deployed on the field side of the pumped storage power station and having the ability to receive local data, determine status, re-determine access, and output results. It can be an edge server, edge gateway, field safety management terminal, or work safety monitoring device with edge computing capabilities. The pumped storage power station field edge node is used to complete the determination on the data source side close to personnel, equipment, and work area, and does not require the cloud platform to complete the access determination as a necessary condition. The pumped storage power station's on-site edge nodes interact with personnel qualification systems, work permit systems, personnel positioning systems, access control systems, target equipment status acquisition units, equipment monitoring systems, or environmental safety detection units. The pumped storage power station's on-site edge nodes complete the following tasks on the field: work access binding, generation of valid personnel access tags, construction of equipment status event sequences, identification of edge access green light window trigger records, reinforcement learning re-anchoring, access re-judgment, and output of monitoring results. In this embodiment, the target equipment includes generators, main transformers, switchgear, disconnect switches, circuit breakers, excitation equipment, relay protection devices, technical water supply equipment, drainage pumps, gates, valves, cranes, lifting tools, pressure steel pipe accessories, ventilation equipment, environmental monitoring equipment, and equipment directly related to special operations in pumped storage power stations. This embodiment uses the target equipment as the access judgment object to avoid coarse-grained access judgment based solely on the area where personnel are located. In this embodiment, personnel qualification information is used to characterize whether personnel are qualified to perform corresponding special operations; work ticket information is used to characterize whether the personnel are permitted to perform operations in the corresponding work area, corresponding work type, and corresponding equipment object; personnel location information is used to characterize the area where the personnel are currently located; and target equipment information is used to characterize the permitted operation status, prohibited operation conditions, reconfirmation required status, and equipment safety isolation boundary of the equipment being operated on.

[0017] like Figure 1 As shown, the edge intelligent pumped storage power station special operation qualification equipment status monitoring method of this embodiment includes the following steps; S1. Obtain special operation task information, personnel qualification information, work ticket information, personnel positioning information and target equipment information from the edge nodes of the pumped storage power station site, and generate operation access binding units; In this embodiment, the operation access binding unit refers to the data unit that binds the personnel, work tickets, personnel's current location area and target equipment under the same special operation task. The operation access binding unit is used to limit the scope of objects for subsequent access judgment, so that the pumped storage power station's field edge node can judge whether a certain person can perform the current operation on a certain target equipment in a certain permitted operation area under the constraint of a certain work ticket. Specifically, the pumped storage power station's on-site edge nodes acquire special operation task information; the special operation task information includes task number, operation type, operation area, operation object, planned start time, planned end time, and operation supervisor; the operation type includes electrical work, welding and thermal cutting operations, high-altitude operations, lifting and hoisting operations, confined space operations, or temporary power supply operations; The pumped storage power station's on-site edge nodes acquire personnel qualification information; the personnel qualification information includes personnel identification, qualification category, and qualification validity status; the personnel identification is used to uniquely identify personnel participating in special operations; the qualification category is used to indicate the type of special operations the personnel possess; the qualification validity status is used to indicate whether the qualification is valid; the qualification validity status is jointly determined by the certificate validity period, review status, and the entry qualification of the personnel's affiliated unit; The pumped storage power station acquires work permit information at its on-site edge nodes. The work permit information includes the work permit number, permitted work type, permitted work area, and permitted equipment identifier. The permitted work type is used to limit the type of special operation that the work permit allows to be performed. The permitted work area is used to limit the spatial range that personnel are allowed to enter or work in. The permitted equipment identifier is used to limit the target equipment object that the work permit allows to be operated or repaired. The pumped storage power station's on-site edge nodes acquire personnel location information; this information includes personnel identification and the personnel's current location area; the current location area is determined by the personnel's location point and its location error range, access control areas, or electronic fence trigger areas; the current location area corresponds to the personnel identification to ensure that the location data can be accurately attributed to the personnel participating in special operations; when location tags, access control records, electronic fence trigger records, mobile operation terminal location records, or on-site location base stations simultaneously provide location sources, the pumped storage power station's on-site edge nodes use the latest valid location record; when location results from multiple location sources conflict, the pumped storage power station's on-site edge nodes use the area with the higher risk level as the personnel's current location area.

[0018] The pumped storage power station's on-site edge nodes acquire target equipment information; the target equipment information includes target equipment identifier, a set of allowed operating states for the target equipment, a set of prohibited operating conditions for the target equipment, a set of states requiring reconfirmation for the target equipment, and equipment safety isolation boundaries; the target equipment identifier is used to uniquely identify the equipment object related to the current operation task. In this embodiment, the target equipment permitted operation status set represents the status of the target equipment that allows personnel to perform the current special operation under the joint constraints of the target equipment identifier and the operation type; the target equipment prohibited operation condition set represents the conditions under the joint constraints of the target equipment identifier and the operation type that prohibit personnel from entering, continuing to work, or performing the current operation on the target equipment; the target equipment reconfirmation status set represents the status set where the target equipment does not directly meet the prohibited operation conditions, but cannot be directly confirmed as permitted operation, and needs to be re-verified by the edge node or reviewed by on-site personnel; the above sets are generated by the pumped storage power station on-site edge node based on the operation type determined by the target equipment identifier, special operation task information, equipment status dictionary, work ticket permission conditions, and equipment safety operation rules; The equipment status dictionary includes at least the following fields: operating condition, isolation status, interlock status, alarm status, and environmental safety conditions. The operating condition field records the target equipment's status as running, standby, shut down, under maintenance, pumping, generating, or phase-shifting. The isolation status field records whether the target equipment has achieved electrical, mechanical, or valve isolation. The interlock status field records whether the target equipment has been tagged, locked, interlocked, or access-locked. The alarm status field records whether the target equipment has fault alarms, protection action alarms, communication anomaly alarms, or status acquisition anomaly alarms. The environmental safety conditions field records the oxygen concentration, harmful gas concentration, water level, ventilation status, lighting status, temperature and humidity, or other environmental conditions related to special operation safety within the work area. The edge nodes of the pumped storage power station use the target equipment identifier and operation type as indexes to read the corresponding permitted status, prohibited conditions, and reconfirmation required status from the equipment status dictionary, work permit conditions, and equipment safety operation rules, and write them into the target equipment permitted operation status set, the target equipment prohibited operation condition set, and the target equipment reconfirmation required status set, respectively. For the same target equipment, the contents of the sets corresponding to different operation types are different. For example, the same disconnecting switch is required to be in the de-energized, isolated, and grounded state during electrical maintenance operations, and in the permitted inspection state and no prohibited entry alarm state during inspection operations. The status set in this embodiment is not a fixed general list, but is jointly determined by the target equipment identifier, operation type, and work permit conditions.

[0019] In this embodiment, hitting the target device prohibition operation condition set means that the device status event or the current state of the target device meets at least one condition in the target device prohibition operation condition set; belonging to the target device allowable operation state set or the target device needs to be reconfirmed state set means that the device status event or the current state of the target device matches the status field in the corresponding set. When a target equipment status event is matched with the above set, the pumped storage power station's field edge node reads the target equipment identifier, status event type, pre-change state, and post-change state from the equipment status event. Based on the target equipment identifier and operation type, it determines the corresponding set of allowed operation states, prohibited operation conditions, and required reconfirmation states for the target equipment. If the pre-change state belongs to the set of allowed operation states for the target equipment, and the post-change state does not belong to the set of allowed operation states for the target equipment, matches the set of prohibited operation conditions for the target equipment, or belongs to the set of required reconfirmation states for the target equipment, the target equipment is determined to have changed from an allowed operation state to a prohibited operation state or a required reconfirmation state. For example, in a high-voltage electrical maintenance scenario, the set of permissible working states for the target equipment includes states such as de-energized, isolated, grounded, valid maintenance permit, and no abnormal protection interlock; the set of prohibited working conditions for the target equipment includes conditions such as energized, not isolated, abnormal grounding status, protection device alarm not reset, and equipment transitioning from maintenance to operation; the set of states that need to be reconfirmed for the target equipment includes states such as isolation status cannot be confirmed, equipment status data is missing, equipment status event conflicts, and environmental safety status not updated; the above sets are obtained from the power plant safety management system, equipment operating procedures, work permit conditions, and equipment operating status dictionary configuration.

[0020] Equipment safety isolation boundaries are used to represent the safe distance, isolation area, prohibited entry boundary, or closed boundary that personnel at their current location must meet after the target equipment undergoes a change in state. The edge nodes of the pumped storage power station combine personnel identification, qualification category, qualification validity status, work order number, permitted work type, permitted work area, permitted equipment identification, personnel current location area, target equipment identification, set of permitted work statuses for the target equipment, set of prohibited work conditions for the target equipment, set of states requiring reconfirmation for the target equipment, and equipment safety isolation boundary to form a work access binding unit; The work access binding unit is used to bind a person, a work ticket, a work area, and a target equipment as the same access judgment object; thus, the pumped storage power station site edge node does not only judge whether the person has a certificate, nor does it only judge whether the person is in a certain area, but rather judges whether the person can perform the current special operation on the target equipment under the constraints of the work ticket. This step outputs a job access binding unit, which is used in subsequent steps to generate valid personnel access tags, match equipment status events, identify edge access green light window trigger records, and perform re-anchor verification.

[0021] S2. Generate valid personnel access tags based on the job access binding unit, collect equipment status events of the target equipment, construct the equipment status event sequence and calculate the edge hysteresis; In this embodiment, the valid personnel access label refers to the access status label generated by the edge node of the pumped storage power station based on the qualification validity status, permitted operation type, permitted equipment identifier, and the current location area of ​​the personnel in the operation access binding unit. The valid personnel access label only indicates that the personnel qualification, work ticket, and personnel location meet the access conditions of the current operation access binding unit, and does not indicate that the target equipment necessarily meets the operation safety conditions at the current moment. Therefore, the valid personnel access label needs to be compared with the equipment status event of the target equipment in a time sequence. Specifically, the edge node at the pumped storage power station reads the work access binding unit generated by S1, and generates a valid personnel access tag based on the personnel qualification information, work ticket information and personnel location information in the work access binding unit; When the qualification status is valid, the permitted operation type corresponding to the work ticket number is consistent with the operation type determined by the special operation task information, the permitted equipment identifier is consistent with the target equipment identifier, and the current location area of ​​the personnel is within the permitted operation area, the personnel access validity label generated by the pumped storage power station site edge node is valid. When any of the following conditions are not met: qualification validity status, permitted operation type, permitted equipment identification, and personnel's current location area, the personnel access validity label generated by the pumped storage power station's on-site edge node will be invalid. The valid personnel access label is used to indicate the access status at both the personnel and work ticket levels. A valid personnel access label indicates only that the personnel qualification, work ticket, and personnel location meet the basic requirements of the current work access binding unit, and does not directly indicate that the target equipment necessarily meets the work safety conditions at the current moment. In this embodiment, a device status event refers to a data record formed after the target device undergoes a change in status in terms of operating conditions, isolation status, lockout status, alarm status, or environmental safety conditions. Each device status event corresponds to a target device identifier and includes at least the status event type, the state before the change, the state after the change, the time of the event occurrence, and the time of edge reception. Device status events are used to represent the process of the target device transitioning from one state to another.

[0022] The pumped storage power station's field edge nodes collect equipment status events of target equipment; each equipment status event includes the target equipment identifier, status event type, state before the change, state after the change, event occurrence time, and edge reception time; the status event type includes one of the following: change in operating condition, change in isolation state, change in interlocking state, change in alarm state, and change in environmental safety conditions; Among them, changes in operating conditions are used to indicate that the target equipment switches from one of the following states: maintenance, shutdown, standby, operation, pumping, power generation, or phase adjustment; changes in isolation status are used to indicate that the electrical isolation, mechanical isolation, valve isolation, or tag-lock status of the target equipment changes; changes in interlock status are used to indicate that the safety interlock, operation interlock, or access control interlock status of the target equipment changes; changes in alarm status are used to indicate that the target equipment has experienced or deactivated fault alarms, protection action alarms, temperature alarms, vibration alarms, electrical quantity abnormality alarms, or communication abnormality alarms; and changes in environmental safety conditions are used to indicate that the oxygen concentration, harmful gas concentration, water level, ventilation status, lighting status, temperature and humidity, or other environmental safety conditions in the work area change. The event occurrence time indicates the actual time when the equipment status event occurs on-site; the edge reception time indicates the time when the edge node of the pumped storage power station receives the equipment status event and uses it as a basis for judgment; since the equipment status event undergoes acquisition, transmission, buffering, retransmission or protocol conversion from on-site occurrence to edge node reception, there may be inconsistencies between the event occurrence time and the edge reception time. The edge nodes of the pumped storage power station arrange multiple equipment status events according to the same target equipment identifier to construct an equipment status event sequence; the equipment status event sequence is used to represent the status change process of the target equipment during operation.

[0023] In this embodiment, edge hysteresis refers to the time difference between when a device status event actually occurs on-site and when it is received by the edge node of the pumped storage power station and can be used for access judgment; edge hysteresis is used to reflect the time lag before the device status change information forms an effective judgment basis on the edge side, and it comes from the event occurrence time of the device status event and the edge reception time. For any equipment status event, the edge hysteresis is calculated at the field edge node of the pumped storage power station: ; in, Indicates the time when a device status event occurs. Indicates the edge reception time of the device status event. This indicates the time lag between the occurrence of the equipment status event at the field and its reception by the pumped storage power station's field edge node; when When the value is greater than zero, it indicates that the equipment status event occurred on-site first and was then received by the pumped storage power station's on-site edge node; when... When the value is zero, it indicates that the event occurred at the same time as the edge reception time; when it is due to clock error... When the value is less than zero, the edge node of the pumped storage power station marks the equipment status event as a timestamp abnormal event, and treats the abrupt change in the status of the equipment status event as the target equipment that needs to be reconfirmed. During the re-anchor verification process, if the timestamp abnormal event cannot be corrected through time synchronization records, a result pending on-site verification is generated. In this embodiment, the time synchronization record includes clock synchronization logs between the pumped storage power station's field edge nodes and the target equipment status acquisition unit, communication message timestamps, and the synchronization time reported by the target equipment status acquisition unit or the local time record of the message received by the edge node. The time synchronization record is used to verify the occurrence time of equipment status events and the edge reception time, so as to avoid incorrect judgment of the order of equipment status events due to the clock anomaly of a single device. This step outputs valid personnel access labels, equipment status event sequences, and edge hysteresis. Valid personnel access labels are used to determine whether there are valid qualification labels. Equipment status event sequences are used to identify whether the target equipment has undergone a sudden change. Edge hysteresis is used to generate edge access green light window trigger records and serve as reinforcement learning states.

[0024] S3. Compare the valid personnel access tag, equipment status event sequence and edge hysteresis quantity in time according to the target equipment identifier. When the valid personnel access tag is valid and the target equipment changes from the allowed operation state to the prohibited operation state or needs to be reconfirmed, generate an edge access green light window trigger record. In this embodiment, the edge access green light window refers to the time interval during which the target equipment has changed from a permitted operation state to a prohibited operation state or a state that requires reconfirmation, but the edge node at the pumped storage power station site still uses the valid personnel access label before the change to output the permitted access, permitted continued operation, or low-risk monitoring results before completing the re-anchor verification; the edge access green light window is used to characterize the temporal mismatch between the personnel access status and the real-time safety status of the target equipment. In this embodiment, the edge admission green light window trigger record refers to the data record generated by the edge node after recognizing the edge admission green light window trigger situation. This record is used to carry the operation admission binding unit, the equipment status event that triggered the record, the edge hysteresis, the initial mismatch interval, the state after the mutation, and the admission result that is still in use. It also serves as the input for subsequent reinforcement learning to determine the re-anchoring action sequence and perform re-anchoring verification. Specifically, the field edge node of the pumped storage power station reads the operation access binding unit output by S1, and reads the personnel access validity tag, equipment status event sequence and edge hysteresis output by S2; The first step at the edge node of the pumped storage power station is to determine whether the personnel access valid tag is valid. If the personnel access valid tag is invalid, it means that the personnel qualification, work ticket or personnel location no longer meets the access requirements. It does not belong to the edge access green light window of the equipment change state due to the lag of the qualification valid tag. In this judgment, no edge access green light window trigger record is generated. When the personnel access valid tag is valid, the pumped storage power station field edge node reads the equipment status event from the equipment status event sequence and determines whether the target equipment identifier in the equipment status event is consistent with the target equipment identifier in the operation access binding unit; if the two are inconsistent, it means that the equipment status event does not correspond to the current operation access binding unit and will not participate in the edge access green light window judgment of the operation access binding unit. When the target equipment identifier in the equipment status event is consistent with the target equipment identifier in the operation access binding unit, the pumped storage power station field edge node determines whether the state before the change of the equipment status event belongs to the set of allowed operation states of the target equipment; if the state before the change does not belong to the set of allowed operation states of the target equipment, it means that the target equipment was not in the allowed operation state before the change, and does not belong to the green light window triggering situation of changing from the allowed operation state to the non-allowed operation state. When the state before the mutation belongs to the set of allowed operating states of the target equipment, the field edge node of the pumped storage power station determines whether the state after the mutation of the equipment state event does not belong to the set of allowed operating states of the target equipment, or whether it hits the set of prohibited operating conditions of the target equipment, or whether it belongs to the set of states that need to be reconfirmed of the target equipment. If the changed state belongs to the set of allowed operating states of the target device, does not hit the set of prohibited operating conditions of the target device, and does not belong to the set of states that need to be reconfirmed of the target device, it means that the device state event did not cause the target device to enter the prohibited operating state or the state that needs to be reconfirmed, and no edge access green light window trigger record is generated. If the changed state does not belong to the set of allowed operating states of the target equipment, or hits the set of prohibited operating conditions of the target equipment, or belongs to the set of states that need to be reconfirmed for the target equipment, it means that the target equipment has changed from an allowed operating state to a prohibited operating state or a state that needs to be reconfirmed. At this time, the edge node of the pumped storage power station further determines whether, after the equipment status event occurs, the edge node still uses the valid personnel access label before the change to output the results of allowed access, allowed continued operation, or low-risk monitoring. In this embodiment, using the valid personnel access label before the mutation means that: a new equipment status event has occurred on the target equipment, but the latest access result record of the pumped storage power station's edge node is still generated based on the equipment status event version that was earlier than the equipment status event, and the access result type in the latest access result record is still allowed access, allowed to continue operation, or low-risk monitoring result; therefore, whether to use the valid personnel access label before the mutation is determined by the chronological relationship between the access result record and the equipment status event version. In this embodiment, the low-risk monitoring result only represents the historical monitoring result formed by the edge node based on the valid personnel access label before the sudden change in equipment status. It serves as the basis for determining whether to continue using the access result before the sudden change, and is not used as the final monitoring result after re-anchoring verification.

[0025] To determine whether the valid personnel access tags from before the mutation are still in use, the pumped storage power station's on-site edge nodes store access result records. The access result records include the work access binding unit identifier, access result type, access result generation time, personnel access valid tag status, the equipment status event version on which the access result was based, and the target equipment identifier. Access result types include: access permitted, work continued permitted, access prohibited, work continued prohibited, pending on-site verification, and low-risk monitoring results. The device status event version is used to indicate the target device status basis used when generating the admission result. The device status event version is determined by the target device identifier, status event type, event occurrence time, edge reception time, and post-mutation status of the device status event. The order of device status event versions is determined by the event occurrence time. If the event occurrence times are the same, the order is determined by the edge reception time. If the order of the event occurrence time and the edge reception time cannot be determined, the pumped storage power station's field edge node will treat the corresponding device status event as a status that needs to be reconfirmed. For the same work access binding unit, the pumped storage power station field edge node compares the latest access result record with the equipment status event that triggered the green light window judgment. When the equipment status event of the target equipment occurs, if the target equipment identifier in the latest access result record is consistent with the target equipment identifier that triggered the green light window judgment, the equipment status event version in the latest access result record is earlier than the equipment status event version that triggered the green light window judgment, and the access result type in the latest access result record is still allowed access, allowed to continue work, or low-risk monitoring result, then it is determined that the pumped storage power station field edge node still uses the personnel access valid label before the change to output the access result. When the latest access result record contains the equipment status event version that triggers the green light window judgment, and the access result type has been updated to prohibited access, prohibited from continuing work, or pending on-site verification, it is determined that the edge node of the pumped storage power station does not use the valid personnel access label before the change, and no edge access green light window trigger record is generated. By comparing the above access result records and equipment status event versions, we can clearly identify the actual conditions under which the equipment's abnormal state occurs, thus avoiding the direct assumption of a borderline access green light window based solely on valid personnel qualifications or equipment alarms.

[0026] When the personnel access valid label is valid, the target equipment identifier corresponding to the equipment status event is consistent with the target equipment identifier in the operation access binding unit, the state before the change of the equipment status event belongs to the target equipment allowed operation state set, the state after the change of the equipment status event does not belong to the target equipment allowed operation state set or hits the target equipment prohibited operation condition set or belongs to the target equipment need to be reconfirmed state set, and the edge node still uses the personnel access valid label before the change to output allowed access, allowed to continue operation or low risk monitoring results after the equipment status event occurs, the pumped storage power station on-site edge node generates edge access green light window trigger record; The edge admission green light window trigger record includes the job admission binding unit, the device status event that triggered the record, the edge hysteresis, the initial mismatch interval, the status after the mutation, and the admission result that is still in use. The initial mismatch interval is defined by the time the device status event occurs, up to the time of edge reception, i.e.: ; in, Indicates the initial mismatch interval. Indicates the time when a device status event occurs. Indicates the edge reception time of the device status event; The initial mismatch interval represents the mismatch interval formed during the period when the target equipment has undergone a state change but the pumped storage power station's field edge nodes have not yet acquired or used the change event; this initial mismatch interval is reflected by the edge hysteresis. like Figure 2 As shown, the horizontal time axis represents the process of comparing the personnel access results and the target equipment status at the edge nodes of the pumped storage power station site in a time series. Indicates the time when the valid personnel access label was generated. Indicates the time when a device status event occurs. This indicates the moment when the edge node receives the device status event. This indicates the moment when the edge node completes the re-anchor verification and outputs the admission re-judgment result; in Subsequently, the personnel access results are either in a state of "allowed access" or "allowed to continue work"; Previously, the target device was in a state where operation was permitted. When the target device was... After a state change, the target device transitions from a state where operation is permitted to a state where operation is prohibited, or a state requiring reconfirmation, but the edge nodes are... Before completing the re-anchor verification, the pre-mutation admission results may still be used, thus creating a green light window for marginal admission. Furthermore, Figure 2 middle to The time interval between these intervals is the initial mismatch interval, which represents the period during which a device status event has occurred but the edge node has not yet received the device status event; to The time interval between these points represents the complete edge access green light window, indicating the temporal mismatch interval from the start of the equipment state change to the edge node completing the re-anchor verification and outputting the access re-judgment result. This diagram can intuitively illustrate that a temporal correspondence is established between the personnel access result and the target equipment change state, and re-anchor verification is triggered when the access result before the change is detected is still used, thereby avoiding the output of access permission or continued operation permission result after the equipment state change. This step outputs the edge admission green light window trigger record; the edge admission green light window trigger record is used in subsequent steps to construct the reinforcement learning state and to perform re-anchor verification.

[0027] S4. Based on the edge admission green light window trigger record, the re-anchoring action sequence is determined through reinforcement learning; In this embodiment, re-anchoring refers to, after the edge access green light window is detected and a record is triggered, re-binding the original access judgment based on personnel qualifications, work permits, and personnel location to the current state of the target equipment after its sudden change, the permitted scope of the work permit, the current location area of ​​the personnel, and the safety isolation boundary of the equipment for verification. The re-anchoring action sequence refers to the order in which the edge node of the pumped storage power station performs the following actions: re-retrieve the current state of the target equipment, verify the consistency of the work permit, verify the consistency of the personnel location, verify the safety isolation boundary of the equipment, issue a work pause prompt, and request on-site review. In this embodiment, reinforcement learning does not directly determine the access re-judgment result, but is used to determine the re-anchoring action sequence; the access re-judgment result is still generated by the deterministic verification results of the target equipment's current status, work order, personnel positioning, and equipment safety isolation boundary. Specifically, the edge nodes at the pumped storage power station read the edge access green light window trigger record output by S3, and use the status event type, post-mutation status, edge hysteresis, current personnel location area, permitted work area, target equipment identifier, and currently used access results in the edge access green light window trigger record as reinforcement learning status. Among them, the status event type indicates whether the green light window was triggered by a change in operating conditions, isolation status, interlocking status, alarm status, or environmental safety conditions; the post-abrupt status indicates the device status of the target device after the abrupt change; the edge hysteresis indicates the time lag between the occurrence of the device status abrupt change event on-site and its reception at the edge; the current personnel location area indicates the current spatial location of the personnel; the permitted work area indicates the area where the work ticket allows personnel to enter or work; the target device identifier indicates the device object that needs to be re-anchored; and the currently used access result indicates the permission, permission to continue work, or low-risk monitoring result still output by the edge node after the device abrupt change. The edge nodes at the pumped storage power station will re-retrieve the current status of the target equipment, re-verify the consistency between the work order and the target equipment, re-verify the consistency between the current location area of ​​the personnel and the permitted work area, re-verify the consistency between the current location area of ​​the personnel and the safety isolation boundary of the equipment, trigger work pause prompts, and request on-site verification as reinforcement learning actions. Retrieving the current status of the target equipment refers to the process where the edge node of the pumped storage power station re-reads the current status of the target equipment from the target equipment status acquisition unit, equipment monitoring system, or edge cache. Re-verifying the consistency between the work order and the target equipment refers to verifying whether the permitted equipment identifier in the work order matches the target equipment identifier. Re-verifying the consistency between the current location area of ​​the personnel and the permitted work area refers to verifying whether the current location area of ​​the personnel is within the permitted work area. Re-verifying the consistency between the current location area of ​​the personnel and the equipment safety isolation boundary refers to verifying whether the current location area of ​​the personnel meets the equipment safety isolation boundary after the equipment change. Triggering a work pause prompt refers to outputting a work pause prompt to the on-site work terminal, audible and visual prompt device, access control terminal, or safety management interface. Requesting on-site verification refers to generating an on-site verification request, requiring the on-site supervisor or on-duty personnel to confirm the target equipment status, isolation measures, work order boundaries, or personnel location.

[0028] The edge nodes of the pumped storage power station determine the re-anchoring action sequence based on the action value of each reinforcement learning action; the action value is used to indicate the priority of executing the corresponding reinforcement learning action in the current reinforcement learning state; reinforcement learning actions with higher action values ​​are ranked higher in the re-anchoring action sequence; In this embodiment, Q-learning is used to determine the action value; for reinforcement learning state s and reinforcement learning action a, the action value is denoted as... Edge nodes based on the current The executable reinforcement learning actions are sorted to obtain the re-anchoring action sequence; When performing reinforcement learning action value ranking for the first time, if there is no historical action value in the pumped storage power station's field edge node that is the same as the current reinforcement learning state, the action value of each reinforcement learning action is initialized according to the preset safety priority order. The safety priority order is determined by the special operation safety management rules of the pumped storage power station, and at least ensures that the initial action value of triggering the operation pause prompt, retrieving the current state of the target equipment, and requesting on-site verification is not lower than that of other reinforcement learning actions. For reinforcement learning states that already have historical action values, the pumped storage power station's field edge node directly reads the corresponding action value and determines the re-anchoring action order according to the action value from high to low. The re-anchoring action sequence of this edge access green light window trigger record is determined by the action value before re-anchoring; the action value update after the re-anchoring verification is completed does not change the access re-judgment result, and is used to determine the re-anchoring action sequence of subsequent similar edge access green light window trigger records; the similar edge access green light window trigger records refer to edge access green light window trigger records with the same target device identifier, the same status event type, or the same operation type.

[0029] The update of action value is executed after S5 completes the re-anchor verification and generates the access re-judgment result; the edge nodes of the pumped storage power station use the access re-judgment result, the duration of the complete edge access green light window, whether an on-site verification request is generated, and whether an operation blockage unrelated to equipment mutation occurs as the re-anchor feedback; if the access re-judgment result is prohibition of access, prohibition of continued operation, or pending on-site verification, and the result is caused by a sudden change in the target equipment status, a change in the equipment safety isolation boundary, or the inability to confirm the equipment status, then the corresponding reinforcement learning action is recorded as a valid re-anchor action; if the re-anchor action does not change the access judgment and does not provide new information on the target equipment status, work ticket consistency, personnel positioning consistency, or equipment safety isolation boundary consistency, then the corresponding reinforcement learning action is recorded as an inefficient re-anchor action; For effective re-anchoring actions, the pumped storage power station's edge nodes are given positive rewards; for inefficient re-anchoring actions or actions that cause blockages unrelated to equipment mutations, the pumped storage power station's edge nodes are given negative rewards; the pumped storage power station's edge nodes update the action value of the corresponding reinforcement learning actions according to the reinforcement learning rewards, and use the updated action value to determine the order of re-anchoring actions in subsequent similar edge access green light window trigger records. The action value is updated using the following formula: ; in, This indicates the reinforcement learning state corresponding to the current edge admission green light window trigger record. This indicates the selected reinforcement learning action. This represents the reinforcement learning reward obtained after performing the reinforcement learning action. This represents the new state after performing the reinforcement learning action. This indicates the reinforcement learning actions that can be selected in the new state. Indicates the learning rate. This represents a future reward discount factor; In this way, reinforcement learning does not replace access safety rules, but is used to determine the execution priority of re-anchoring actions under the constraints of safety rules, thereby ensuring that the final access re-judgment result is still deterministic and interpretable. This step outputs the sequence of re-anchoring actions; this sequence is used in subsequent steps to perform re-anchoring verification.

[0030] S5. Perform re-anchoring verification on the current status of the target equipment, work order, personnel location and equipment safety isolation boundary according to the re-anchoring action sequence, and generate access re-judgment results and complete edge access green light window; In this embodiment, the equipment safety isolation boundary refers to the spatial constraint boundary formed by the target equipment on the personnel residence area, entry area, and prohibited entry area in the current state; the equipment safety isolation boundary is jointly determined by the equipment location of the target equipment, the permitted work area, the safety measures recorded in the work order, the isolation measures status of the target equipment, the locked area of ​​the target equipment, and the electronic fence boundary; the equipment safety isolation boundary is not a single fixed distance, but a boundary that is updated as the target equipment state changes, the isolation measures change, the locked status changes, or the environmental safety conditions change; In this embodiment, the current location area of ​​the personnel meets the equipment safety isolation boundary, which means that the current location area of ​​the personnel is completely located within the permitted stay area and does not overlap with the prohibited entry area, the locked area, the isolation area after the change, the hoisting danger area, the confined space danger area, or the environmental abnormal area; the current location area of ​​the personnel does not meet the equipment safety isolation boundary, which means that the current location area of ​​the personnel does not belong to the permitted stay area, or overlaps with the prohibited entry area, or the current location area of ​​the personnel cannot be confirmed by the positioning system; Specifically, the edge node at the pumped storage power station reads the edge access green light window trigger record output by S3 and the re-anchoring action sequence output by S4, and performs re-anchoring verification item by item according to the re-anchoring action sequence; When the re-anchoring action sequence includes re-retrieving the current state of the target equipment, the pumped storage power station's field edge node re-acquires the current state of the target equipment and determines whether the current state of the target equipment belongs to the set of allowed operating states of the target equipment, whether it hits the set of prohibited operating conditions of the target equipment, or whether it belongs to the set of states that need to be reconfirmed of the target equipment. The following situations may occur where the current status of the target equipment cannot be confirmed through the edge node: the edge node at the pumped storage power station did not acquire the current status of the target equipment during the current re-anchor verification process; there are conflicting equipment status events for the same target equipment during the same re-anchor verification process; the target equipment identifier in the equipment status event cannot match the target equipment identifier in the work access binding unit; the equipment status event lacks the status after the mutation, the event occurrence time, or the edge reception time; the event occurrence time of the equipment status event is later than the edge reception time and cannot be corrected by time synchronization recording; the target equipment status acquisition unit is offline; or the status field returned by the target equipment status acquisition unit cannot match the equipment status dictionary. When any of the above situations occur, the pumped storage power station's field edge node will determine that the current status of the target equipment cannot be confirmed by the edge node, and will use this situation as the basis for generating a pending field verification result. The pending field verification result does not mean that the target equipment is safe, nor does it mean that the target equipment is prohibited from operation. Rather, it means that the pumped storage power station's field edge node cannot make a definitive judgment on the current status of the target equipment under the current data conditions, and the field manager, duty personnel, or operation manager need to confirm the status of the target equipment and safety measures.

[0031] When the re-anchoring action sequence includes re-verifying the consistency between the work order and the target equipment, the edge node of the pumped storage power station re-verifies whether the permitted equipment identifier in the work order is consistent with the target equipment identifier; if the permitted equipment identifier is inconsistent with the target equipment identifier, it means that the current work order does not permit the target equipment, and subsequent access re-judgment is not allowed to output the result of allowing access or allowing continued operation. When the re-anchoring action sequence includes re-verifying the permitted operation type in the work ticket, the pumped storage power station site edge node re-verifies whether the permitted operation type in the work ticket is consistent with the operation type determined by the special operation task information; if the permitted operation type is inconsistent with the operation type determined by the special operation task information, it means that the current work ticket does not cover the current special operation type, and subsequent access re-judgment is not allowed to output the result of allowing access or allowing continued operation. When the re-anchoring action sequence includes re-verifying the consistency between the personnel's current location area and the permitted work area, the pumped storage power station's on-site edge node re-verifies whether the personnel's current location area is within the permitted work area; if the personnel's current location area is not within the permitted work area, it means that the personnel have entered an unpermitted area, and subsequent access re-judgment is not allowed to output an access permission or allow continued work result; When the re-anchoring sequence includes re-verifying the consistency between the personnel's current location area and the equipment's safety isolation boundary, the pumped storage power station's on-site edge node re-verifies whether the personnel's current location area meets the equipment's safety isolation boundary after the equipment's sudden change.

[0032] The safety isolation boundary of the equipment is jointly determined by the location of the target equipment, the permitted work area, the safety measures recorded in the work permit, the status of the isolation measures of the target equipment, the locked area of ​​the target equipment, and the electronic fence boundary. The equipment location is used to determine the position of the target equipment in the spatial coordinates of the pumped storage power station site. The permitted work area is used to determine the area that personnel are allowed to enter under the work permit. The safety measures are used to determine the requirements of power outage, isolation, grounding, ventilation, drainage, tagging, or locking required by the work permit. The status of the isolation measures of the target equipment is used to indicate whether the corresponding isolation measures are still effective after a sudden change in the status of the target equipment. The locked area of ​​the target equipment is used to indicate the area where personnel are prohibited from entering the target equipment under the locked or interlocked state. The electronic fence boundary is used to indicate the accessible area, warning area, and prohibited area determined by the on-site positioning system. The edge node of the pumped storage power station represents the equipment safety isolation boundary as a combination of permitted stay areas and prohibited entry areas; the permitted stay area consists of the part of the permitted work area that meets the current safety measures requirements of the target equipment, and the prohibited entry area consists of the isolation area, locked area, live warning area, hoisting danger area, confined space danger area or abnormal environment area after the target equipment changes; When a person's current location is entirely within the permitted area and does not overlap with the prohibited area, the person's current location is deemed to meet the equipment safety isolation boundary after the equipment change. When a person's current location is not within the permitted area, overlaps with the prohibited area, or cannot be confirmed by the positioning system, the person's current location is deemed not to meet the equipment safety isolation boundary after the equipment change.

[0033] In high-voltage electrical maintenance scenarios, if the target equipment changes abruptly from an isolated state to an abnormal isolation state, the equipment safety isolation boundary is updated to the prohibited entry area corresponding to the abnormal isolation state. If the personnel's current location overlaps with this prohibited entry area, it is determined that the personnel's current location does not meet the equipment safety isolation boundary after the equipment change. In lifting and hoisting scenarios, if the hoisting equipment experiences limit switch anomalies, braking anomalies, or load anomalies, the equipment safety isolation boundary is updated to a hoisting hazard area. If the personnel's current location is within the hoisting hazard area, it is determined that the personnel's current location does not meet the equipment safety isolation boundary after the equipment change. In confined space operation scenarios, if environmental safety conditions experience abnormal oxygen concentration, abnormal water level, or abnormal ventilation, the equipment safety isolation boundary is updated to a confined space hazard area. If the personnel's current location is still within this confined space hazard area, it is determined that the personnel's current location does not meet the equipment safety isolation boundary after the equipment change. If the personnel's current location does not meet the safety isolation boundary of the equipment after the equipment change, it means that the personnel's location is inconsistent with the safety requirements after the equipment change, and subsequent access re-judgment is not allowed to output the result of allowing access or allowing continued operation. When the re-anchoring action sequence includes triggering a work pause prompt, the pumped storage power station's on-site edge node outputs a work pause prompt; the work pause prompt is output to the on-site work terminal, access control terminal, safety management interface, audible and visual prompt device, or power station duty monitoring interface; the work pause prompt is used to prompt on-site personnel to stop the current work or pause entry into the target equipment area; When the re-anchoring action sequence includes requesting on-site verification, the pumped storage power station's on-site edge node generates an on-site verification request. The on-site verification request includes the target equipment identifier, the equipment status event triggered by the edge access green light window, the status after the change, the personnel identifier, the work permit number, the personnel's current location area, and the items that need to be verified. The items that need to be verified include the target equipment's current status, isolation status, interlocking status, work permit permitted scope, personnel location, or equipment safety isolation boundary. In this embodiment, the access re-judgment result refers to the access judgment result regenerated by the edge node of the pumped storage power station after the re-anchor verification is completed, based on the current status of the target equipment, work order, personnel location, and equipment safety isolation boundary. The access re-judgment result includes allowed access, allowed to continue work, prohibited access, prohibited to continue work, and pending on-site verification. The access re-judgment result is used to replace the access result that was still used before the edge access green light window was triggered.

[0034] After completing the above-mentioned re-anchor verification, the access re-judgment results are generated at the edge nodes of the pumped storage power station. When the current state of the target equipment matches the set of conditions prohibiting operation, the pumped storage power station's on-site edge node generates a result prohibiting access or prohibiting continued operation; if personnel have not yet entered the target equipment area, an access prohibition result is generated; if personnel are already in the operation area or have started working, a continued operation prohibition result is generated. When the current status of the target equipment belongs to the set of target equipment statuses that need to be reconfirmed, or the current status of the target equipment cannot be confirmed by the edge node, or the current status of the target equipment does not belong to the set of target equipment permitted operation statuses and does not match the set of target equipment prohibited operation conditions, the pumped storage power station's on-site edge node generates a pending on-site verification result. The pending on-site verification result is used to require on-site personnel, duty personnel, or operation supervisors to confirm the target equipment status and safety measures before deciding whether to resume operation. Among these, the current status of the target equipment cannot be confirmed by the edge node, including missing target equipment status events, conflicting status events of the same target equipment, offline target equipment status acquisition unit, unmatched target equipment identifier, missing key fields of equipment status events, or abnormal and uncorrectable timestamps of equipment status events. When the current state of the target equipment belongs to the set of permitted operating states for the target equipment, and the qualification validity status is valid, the permitted equipment identifier is consistent with the target equipment identifier, the permitted operation type is consistent with the operation type determined by the special operation task information, and the personnel's current location area is within the permitted operation area and meets the equipment safety isolation boundary, the pumped storage power station's on-site edge node generates an access permission or permission to continue operation result; for cases where personnel have not yet entered the target equipment area, an access permission result is generated; for cases where personnel are already in the operation area and the operation can continue, a permission to continue operation result is generated. The pumped storage power station's on-site edge node records the moment when the re-anchoring verification is completed and the access re-judgment result is output; the occurrence time of equipment status events is recorded as... The moment when the edge node completes the re-anchor verification and outputs the admission re-judgment result is recorded as . Generate a complete edge access green light window: ; in, This represents the complete edge access green light window, which is the time interval from the moment the target equipment undergoes a sudden state change to the moment the pumped storage power station's on-site edge node completes the re-anchoring verification and outputs the access re-judgment result. The complete edge access green light window is used to characterize the continuous process by which the valid personnel access label is still used by the edge side after a sudden change in the device; the longer the duration of the complete edge access green light window, the longer the mismatch between the access status and the real-time security status of the device lasts. This step outputs the admission re-judgment result and the complete edge admission green light window; the admission re-judgment result and the complete edge admission green light window are used in subsequent steps to generate monitoring results and the time mismatch evidence chain.

[0035] S6. Based on the access re-judgment results and the complete edge access green light window, output the special operation qualification equipment status monitoring results and the time sequence mismatch evidence chain; In this embodiment, the temporal mismatch evidence chain refers to a data set used to record the sequential relationship between valid personnel access tags, equipment status events, edge reception, re-anchoring actions, and access re-judgment; the temporal mismatch evidence chain is used to prove when valid personnel access tags are formed, when the target equipment experiences a state change, when the edge node receives equipment status events, how long the edge access green light window lasts, the order in which the edge node completes re-anchoring verification, and what kind of access re-judgment result is ultimately formed; the temporal mismatch evidence chain is used to explain the reasons for access misjudgment or risk monitoring lag. Specifically, the pumped storage power station's on-site edge node reads the access re-judgment result and the complete edge access green light window output by S5, and outputs the special operation qualification equipment status monitoring result; The status monitoring results for special operation qualification equipment include: permitted access, permitted continued operation, prohibited access, prohibited continued operation, and pending on-site verification. Permitted access indicates that personnel can enter the permitted work area and perform the current operation on the target equipment. Permitted continued operation indicates that personnel are already in the work area and can continue to perform the current operation. Prohibited access indicates that personnel are not allowed to enter the work area corresponding to the target equipment. Prohibited continued operation indicates that personnel are already in the work area or in the process of operation but should stop the current operation. Pending on-site verification indicates that the current edge node cannot directly output a permitted or prohibited conclusion, and it is necessary to confirm the status of the target equipment, the scope of the work permit, the isolation status, the locking status, the personnel location, or the equipment safety isolation boundary on-site. At the same time, the edge nodes of the pumped storage power station generate a time mismatch evidence chain; the time mismatch evidence chain includes the generation time of the valid personnel access tag, the occurrence time of the equipment status event, the edge reception time of the equipment status event, the initial mismatch interval, the complete edge access green light window, the equipment status event that triggers the edge access green light window, the re-anchoring action sequence, and the access re-judgment result. The personnel access valid tag generation time is used to prove when personnel qualifications, work tickets, and positioning status form valid access tags; the equipment status event occurrence time is used to prove when the target equipment experiences a state change; the edge reception time of the equipment status event is used to prove when the pumped storage power station's edge node receives the equipment status change event; the initial mismatch interval is used to prove the time interval during which the equipment change has occurred but the edge side has not yet received the change event; the complete edge access green light window is used to prove the time interval from the equipment change to the completion of edge re-anchoring; the equipment status event that triggers the edge access green light window is used to prove what kind of equipment change caused the edge access green light window; the re-anchoring action sequence is used to prove how the pumped storage power station's edge node performs re-anchoring verification; the access re-judgment result is used to prove the final monitoring result formed after the edge node completes re-anchoring; By using the evidence chain of temporal mismatch, it can be clearly shown that the cause of the risk is not simply unqualified personnel, invalid work tickets, personnel crossing boundaries, or equipment alarms, but rather that the valid personnel access label is continued to be used by the edge side after the equipment changes, forming an edge access green light window where the valid qualification label lags behind the equipment change state.

[0036] In a specific application example, high-voltage electrical maintenance work is being carried out at a pumped-storage substation switchyard. Personnel qualification information shows that the maintenance personnel possess electrical work qualifications, work permit information shows that the personnel are authorized to perform maintenance tasks in a certain isolating switch area of ​​the switchyard, and personnel location information shows that the personnel are located within the authorized work area. The target equipment's current state initially belongs to the set of permitted work states for the target equipment. The pumped-storage substation's field edge node generates a valid personnel access tag and outputs permission for access. Subsequently, the isolation status event of the target equipment changes; before the change, the state is isolated, and after the change, the state is isolated anomaly. After receiving the equipment status event, the pumped-storage substation's field edge node... The system identifies that the pre-abrupt state of the equipment status event belongs to the set of allowed operating states of the target equipment, while the post-abrupt state matches the set of prohibited operating conditions of the target equipment. However, the valid personnel access label is still used as allowed access, so an edge access green light window trigger record is generated. The pumped storage power station's edge node determines through reinforcement learning to first re-retrieve the current state of the target equipment, then trigger the work pause prompt, and then verify the re-anchoring action sequence of the equipment safety isolation boundary. After the re-anchoring verification, the current state of the target equipment matches the set of prohibited operating conditions of the target equipment. The pumped storage power station's edge node generates a result prohibiting continued operation and generates a complete edge access green light window and a time sequence mismatch evidence chain. In another specific application example, during the overhaul of a pumped-storage power station unit, lifting and hoisting operations are carried out. Personnel qualification information shows that the crane operator and signalman are qualified, the work permit permits lifting and hoisting operations, the personnel's current location is within the permitted work area, and the crane's initial state belongs to the target equipment's allowed work state set. During the hoisting operation, if the crane's load status, brake status, or limit switch status triggers an alarm, and the abrupt change in the equipment's status event indicates that the target equipment's status needs to be reconfirmed, the pumped-storage power station's edge node recognizes that the personnel access valid label is still valid and the edge side still uses low-risk monitoring results, thus generating an edge access green light window trigger record. Based on reinforcement learning, the pumped-storage power station's edge node prioritizes requests for on-site verification and triggers for work pause prompts, and generates a pending on-site verification result after performing anchor verification. After on-site verification confirms that the equipment status has recovered and meets the allowed work state set, the pumped-storage power station's edge node generates a result allowing continued operation. If on-site verification confirms that the equipment hits the prohibited work condition set, a result prohibiting continued operation is generated. In another specific application example, confined space operations are carried out in the underground corridor of a pumped storage power station. The personnel are qualified, the work permit is valid, and the personnel are located within the permitted work area. The environmental safety conditions initially meet the set of permitted work states. During the operation, the environmental safety detection unit generates equipment status events with abnormal oxygen concentration or water level. After the sudden change, the status does not belong to the set of permitted work states of the target equipment. If the edge node of the pumped storage power station still outputs permission to continue the operation using the valid personnel access label before receiving the equipment status event, an edge access green light window trigger record is generated. The edge node of the pumped storage power station executes the target equipment current status re-retrieval, operation pause prompt, and on-site verification request according to the re-anchoring action sequence determined by reinforcement learning, and generates a result of prohibiting continued operation or pending on-site verification based on the re-anchoring verification result.

[0037] This embodiment also provides a special operation qualification equipment status monitoring system for edge-connected pumped storage power stations; the system includes a data acquisition and binding module, a dual timescale construction module, a green light window recognition module, a reinforcement learning re-anchoring module, a re-anchoring verification module, and a monitoring output module; In this embodiment, the names of each module are only used to distinguish different data processing functions, and there is no requirement that each module must exist in the form of independent hardware. The data acquisition and binding module, dual time-scale construction module, green light window recognition module, reinforcement learning re-anchoring module, re-anchoring verification module, and monitoring output module are deployed in the same pumped storage power station field edge node, or deployed in multiple edge devices that communicate with each other. Regardless of whether a single-node deployment or a multi-node deployment is adopted, the modules transmit data in the following order: operation access binding unit, personnel access valid tag, equipment status event sequence, edge hysteresis, edge access green light window trigger record, re-anchoring action sequence, access re-judgment result, and complete edge access green light window. The data acquisition and binding module collects special operation task information, personnel qualification information, work ticket information, personnel location information, and target equipment information, and generates operation access binding units. The operation access binding units generated by the data acquisition and binding module include personnel identifier, qualification category, qualification validity status, work ticket number, permitted operation type, permitted operation area, permitted equipment identifier, personnel current location area, target equipment identifier, set of permitted operation statuses for target equipment, set of prohibited operation conditions for target equipment, set of statuses requiring reconfirmation for target equipment, and equipment safety isolation boundary. The dual-timescale construction module generates valid personnel access tags based on the job access binding unit, collects equipment status events of the target equipment, constructs the equipment status event sequence, and calculates the edge hysteresis. The dual-timescale construction module outputs the valid personnel access tags, equipment status event sequence, and edge hysteresis to the green light window recognition module. The green light window recognition module performs a time-series comparison of the valid personnel access tag, the equipment status event sequence, and the edge hysteresis quantity according to the target equipment identifier. When the valid personnel access tag is valid and the target equipment changes from the allowed operation state to the prohibited operation state or the state needs to be reconfirmed, an edge access green light window trigger record is generated. The green light window recognition module outputs the edge access green light window trigger record to the reinforcement learning re-anchoring module and the re-anchoring verification module. The reinforcement learning re-anchoring module is based on the edge admission green light window trigger record and determines the re-anchoring action sequence through reinforcement learning; the reinforcement learning re-anchoring module outputs the re-anchoring action sequence to the re-anchoring verification module. The re-anchoring verification module performs re-anchoring verification on the current status of the target equipment, work order, personnel location, and equipment safety isolation boundary according to the re-anchoring action sequence, and generates access re-judgment results and a complete edge access green light window; the re-anchoring verification module outputs the access re-judgment results and the complete edge access green light window to the monitoring output module; The monitoring output module outputs the special operation qualification equipment status monitoring results and the time mismatch evidence chain based on the access re-judgment results and the complete edge access green light window; The system in this embodiment is deployed on the field edge server, edge gateway, field safety management terminal, or work terminal with edge computing capabilities in the pumped storage power station. Data interaction between the system and the personnel qualification system, work ticket system, personnel positioning system, access control system, target equipment status acquisition unit, equipment monitoring system, and environmental safety detection unit is completed using industrial Ethernet, fieldbus, wireless private network, local area network, or communication methods that meet the field safety requirements of the pumped storage power station.

[0038] This embodiment, through the aforementioned method and system, extends the access judgment for special operations at pumped-storage power stations from static personnel qualification verification to edge-sequence re-anchoring judgment between valid personnel access tags and the real-time safety status of the target equipment. Even if the personnel qualifications are valid, the work permit is valid, and the personnel's location area is correct, as long as the target equipment changes from a permitted operation state to a prohibited operation state or requires reconfirmation, the edge nodes at the pumped-storage power station can identify the edge access green light window trigger record and determine the re-anchoring action sequence through reinforcement learning, thereby generating access re-judgment results and a time-sequence mismatch evidence chain. This scheme can avoid the lag of valid qualification tags covering abrupt changes in equipment status, improving the real-time performance, accuracy, and traceability of on-site access monitoring for special operations at pumped-storage power stations.

[0039] The embodiments of the present invention have been described in detail above with reference to the accompanying drawings. However, the present invention is not limited thereto. Various changes can be made within the scope of knowledge possessed by those skilled in the art without departing from the spirit of the present invention.

Claims

1. A method for monitoring the status of special operation qualification equipment in edge-connected pumped storage power stations, characterized in that: Includes the following steps: S1. Obtain special operation task information, personnel qualification information, work ticket information, personnel positioning information and target equipment information from the edge nodes of the pumped storage power station site, and generate operation access binding units; S2. Generate valid personnel access tags based on the job access binding unit, collect equipment status events of the target equipment, construct the equipment status event sequence and calculate the edge hysteresis; S3. Compare the valid personnel access tag, equipment status event sequence and edge hysteresis quantity in time according to the target equipment identifier. When the valid personnel access tag is valid and the target equipment changes from the allowed operation state to the prohibited operation state or needs to be reconfirmed, generate an edge access green light window trigger record. S4. Based on the edge admission green light window trigger record, the re-anchoring action sequence is determined through reinforcement learning; S5. Perform re-anchoring verification on the current status of the target equipment, work order, personnel location and equipment safety isolation boundary according to the re-anchoring action sequence, and generate access re-judgment results and complete edge access green light window; S6. Based on the access re-judgment results and the complete edge access green light window, output the special operation qualification equipment status monitoring results and the time sequence mismatch evidence chain.

2. The method for monitoring the status of special operation qualification equipment in edge intelligent pumped storage power stations according to claim 1, characterized in that, The operation access binding unit includes personnel identification, qualification category, qualification validity status, work ticket number, permitted operation type, permitted operation area, permitted equipment identification, personnel current location area, target equipment identification, set of permitted operation statuses for the target equipment, set of prohibited operation conditions for the target equipment, set of statuses requiring reconfirmation for the target equipment, and equipment safety isolation boundary.

3. The method for monitoring the status of special operation qualification equipment in edge-connected pumped storage power stations according to claim 2, characterized in that, The generation of the valid personnel access label includes: When the qualification status is valid, the permitted operation type corresponding to the work ticket number is consistent with the operation type determined by the special operation task information, the permitted equipment identifier is consistent with the target equipment identifier, and the personnel's current location area is within the permitted operation area, the generated personnel access validity label is valid. If any of the following conditions are not met: qualification validity status, permitted operation type, permitted equipment identification, or the personnel's current location area, the generated personnel access validity label will be invalid.

4. The method for monitoring the status of special operation qualification equipment in edge intelligent pumped storage power stations according to claim 2, characterized in that, The device status event sequence consists of device status events of the target device. Each device status event includes the target device identifier, status event type, pre-mutation state, post-mutation state, event occurrence time, and edge reception time. The status event type includes one of the following: change in operating condition, change in isolation state, change in interlocking state, change in alarm state, and change in environmental safety conditions. The edge hysteresis is the time difference between the edge reception time and the event occurrence time.

5. The method for monitoring the status of special operation qualification equipment in edge intelligent pumped storage power stations according to claim 4, characterized in that, The generation of the edge access green light window trigger record includes: Determine whether the personnel access permit label is valid; Determine whether the target device identifier in the device status event is consistent with the target device identifier in the job access binding unit; Determine whether the state of the device before the sudden change of the device state event belongs to the set of allowed operating states of the target device; Determine whether the state after a sudden change in the device status event does not belong to the set of allowed operating states of the target device, or whether it hits the set of prohibited operating conditions of the target device, or whether it belongs to the set of states that need to be reconfirmed for the target device; When all of the above judgment results are yes, and the edge node still uses the valid personnel access label before the mutation to output the results of allowing access, allowing continued operation, or low-risk monitoring after the device status event occurs, an edge access green light window trigger record is generated. The edge admission green light window trigger record includes the job admission binding unit, the device status event that triggered the record, the edge hysteresis, the initial mismatch interval, the status after the mutation, and the admission result that is still in use. The initial mismatch interval is defined as the period from the occurrence of the device state event to the edge reception time.

6. The method for monitoring the status of special operation qualification equipment in edge intelligent pumped storage power stations according to claim 5, characterized in that, The sequence of re-anchoring actions is determined through reinforcement learning, including: The status event type, post-mutation status, edge hysteresis, current personnel location area, permitted work area, target equipment identifier, and currently used admission results in the edge admission green light window trigger record are used as reinforcement learning status. The reinforcement learning actions include: retrieving the current status of the target equipment, re-verifying the consistency between the work order and the target equipment, re-verifying the consistency between the current location area of ​​the personnel and the permitted work area, re-verifying the consistency between the current location area of ​​the personnel and the safety isolation boundary of the equipment, triggering the work pause prompt, and requesting on-site review. The sequence of re-anchoring actions is determined based on the action value of each reinforcement learning action. After performing anchor verification in the order of anchor actions, reinforcement learning rewards are determined based on anchor feedback. The anchor feedback includes whether the prohibited operation state after equipment mutation is identified, whether the duration of the edge access green light window is reduced, and whether a blockage unrelated to equipment mutation is generated. The action value of the corresponding reinforcement learning action is updated based on the reinforcement learning reward.

7. The method for monitoring the status of special operation qualification equipment in edge intelligent pumped storage power stations according to claim 6, characterized in that, Perform anchor verification according to the sequence of anchor actions, including: Reacquire the current status of the target device and determine whether the current status of the target device belongs to the set of allowed operating states of the target device; Re-verify whether the permitted equipment identification in the work order matches the target equipment identification; Re-verify whether the permitted operation type in the work order is consistent with the operation type determined in the special operation task information; Re-verify whether the personnel's current location is within the permitted work area; Re-verify whether the personnel's current location area meets the equipment safety isolation boundary after the equipment mutation; When the sequence of re-anchoring actions includes triggering a work pause prompt, output a work pause prompt; When the re-anchoring action sequence includes requesting on-site verification, an on-site verification request is generated.

8. The method for monitoring the status of special operation qualification equipment in edge intelligent pumped storage power stations according to claim 7, characterized in that, Generate admission re-evaluation results, including: When the current state of the target device matches the set of conditions that prohibit operation of the target device, a result of prohibiting access or prohibiting continued operation is generated; When the current status of the target device belongs to the set of target device statuses that need to be reconfirmed, or the current status of the target device cannot be confirmed by the edge node, or the current status of the target device does not belong to the set of target device allowed operation statuses and does not hit the set of target device prohibited operation conditions, a result pending on-site verification is generated. When the current state of the target equipment belongs to the set of permitted operating states for the target equipment, and the qualification is valid, the licensed equipment identifier is consistent with the target equipment identifier, the permitted operation type is consistent with the operation type determined by the special operation task information, and the personnel's current location area is within the permitted operation area and meets the equipment safety isolation boundary, an access permission or continued operation permission result is generated.

9. The method for monitoring the status of special operation qualification equipment in edge-connected pumped storage power stations according to claim 8, characterized in that, The complete edge access green light window consists of the time from the occurrence of the device status event to the time when the edge node completes the re-anchor verification and outputs the access re-judgment result; the temporal mismatch evidence chain includes the time of generation of the valid personnel access tag, the time of occurrence of the device status event, the edge reception time of the device status event, the initial mismatch interval, the complete edge access green light window, the device status event that triggers the edge access green light window, the re-anchor action sequence, and the access re-judgment result.

10. A status monitoring system for special operation qualification equipment in edge-connected pumped storage power stations, used to execute the status monitoring method for special operation qualification equipment in edge-connected pumped storage power stations as described in any one of claims 1-9, characterized in that, Specifically, it includes: The data acquisition and binding module is used to collect special operation task information, personnel qualification information, work ticket information, personnel location information and target equipment information, and generate operation access binding units; The dual-timescale construction module is used to generate valid personnel access tags based on the job access binding unit, collect equipment status events of target equipment, construct equipment status event sequences, and calculate edge hysteresis. The green light window recognition module is used to compare the valid personnel access tag, equipment status event sequence and edge hysteresis according to the target equipment identifier in a time sequence, and generate an edge access green light window trigger record when the valid personnel access tag is valid and the target equipment changes from the allowed operation state to the prohibited operation state or the state that needs to be reconfirmed. The reinforcement learning re-anchoring module is used to record the edge admission green light window trigger and determine the re-anchoring action sequence through reinforcement learning. The re-anchoring verification module is used to perform re-anchoring verification on the current status of the target equipment, work order, personnel location and equipment safety isolation boundary according to the re-anchoring action sequence, and generate access re-judgment results and complete edge access green light window; The monitoring output module is used to output the status monitoring results of special operation qualification equipment and the evidence chain of time mismatch based on the access re-judgment results and the complete edge access green light window.

Images