A substation secondary screen cabinet intelligent lock control system and method

Abstract

The application discloses a substation secondary screen cabinet intelligent lock control system and method, and belongs to the technical field of substation safety operation and maintenance, and aims to solve the problems of the absence of lock permission control of the existing secondary screen cabinet, the disconnection with the work ticket system, the absence of alarm for illegal operation, the difficulty in tracing and the security risks in the networking scheme. The system adopts an offline physical contact type architecture, a background control layer analyzes work ticket documents to generate an authorized list containing authorized lock codes and valid periods, and the authorized list is issued to an intelligent key through a physical contact type communication seat; each secondary screen cabinet is configured with a smart passive lock with a unique lock code, the intelligent key reversely supplies power to the lock and reads the lock code when the intelligent key is connected to the lock, local lock code matching and time validity double checking are performed, the lock is driven to be unlocked after the checking is passed, and an alarm is triggered when the checking fails, and permission recovery is completed through a double-channel mechanism. The application realizes precise locking control of the ticket-lock linkage, avoids network risks in the whole offline operation, and realizes operation traceability in the whole process, and significantly improves the intrinsic safety level of secondary operation.

Description

Technical Field

[0001] This invention relates to the field of substation safety operation and maintenance technology, specifically to an intelligent locking and control system and method for substation secondary cabinets. Background Technology

[0002] The safety management and control of secondary equipment cabinets in substations is a crucial link in ensuring the stable operation of the power system, directly affecting the reliable operation of core functions such as relay protection and measurement and control. With the continuous expansion of the power grid and the continuous improvement of its intelligence level, the number of secondary equipment cabinets such as protection panels and measurement and control panels in substations is increasing day by day. The high frequency of on-site maintenance operations and the large mobility of personnel have placed higher demands on the accuracy, safety and traceability of cabinet interlocking control.

[0003] Currently, most substation secondary switchgear still uses traditional mechanical locks. Existing computer-based anti-misoperation systems primarily manage primary equipment operations, and a comprehensive anti-misoperation interlocking technology system has not yet been established in the secondary equipment field. Secondary switchgear operation has long relied on manual experience and judgment. Traditional mechanical locks have inherent flaws such as widespread key compatibility, decentralized management, and the lack of identity verification and authorization control mechanisms. This makes it impossible to achieve precise control over lock-picking personnel, operation time, and switchgear opening. Furthermore, the operation process lacks data traceability, making it difficult to trace key operational information in the event of a safety incident, hindering accident analysis and liability determination. In actual operation and maintenance, there have been instances where workers mistakenly entered operating bays while moving to different work locations, accidentally opening and operating unauthorized protection switchgear, triggering relay protection and causing line switches to trip. This fully exposes the safety hazards of the current lack of technical anti-misoperation measures in the management of secondary switchgear.

[0004] Furthermore, the existing lock control system is disconnected from the work permit system, which is the core of power safety management. It cannot automatically bind unlocking permissions to work locations and validity periods based on work permits. The identification of work scope relies entirely on manual verification, which is prone to misjudgment due to differences in personnel skills and fatigue. Moreover, there is no active alarm mechanism for unauthorized unlocking behavior, so violations cannot be detected and stopped in time, and potential safety hazards are difficult to prevent in advance.

[0005] In recent years, the power industry has accelerated the standardization of secondary system error prevention. Relevant national standards and industry management specifications have put forward clear requirements on the functional architecture and safety performance of secondary equipment electrical operation error prevention. Developing an intelligent interlocking and control system that is adapted to substation secondary equipment scenarios and deeply integrated with the operation management system has become an urgent need to improve the inherent safety level of secondary operations. Summary of the Invention

[0006] The technical problem to be solved by the present invention is to provide an intelligent locking and control system and method for secondary cabinets in substations, so as to eliminate safety hazards such as unlicensed operation, operation beyond the scope, and accidental contact with operating equipment, and improve the inherent safety level of secondary operations.

[0007] To solve the above-mentioned technical problems, the present invention provides an intelligent interlocking control system for secondary cabinets in substations, comprising: a back-end control layer and a field equipment layer; The backend control layer is equipped with a work order parsing module and an authorization management module; the work order parsing module is used to extract work location information and authorization validity period information from imported work order documents; the authorization management module is used to match the unique lock code of the corresponding lock according to the work location information and generate an authorization list containing an authorization lock code list and authorization validity period information; the backend control layer is connected to a physical contact communication socket; The field device layer includes a smart key and a smart passive lock installed in the secondary cabinet; the smart key interacts with the back-end control layer offline by plugging into the physical contact communication socket, and is used to download and locally encrypt and store the authorization list; the smart passive lock has a unique lock code embedded in it and is equipped with power supply and communication contacts; The smart key is equipped with a contact interface adapted to the power supply and communication contacts, which is used to supply reverse power to the smart passive lock when the smart key is inserted into the smart passive lock, and to read the unique lock code of the smart passive lock; the smart key also has a built-in verification control module, which is used to perform lock code matching verification and time validity verification on the read lock code based on the local real-time clock. When both verifications pass, the smart passive lock is driven to unlock; when the verification fails, an alarm is triggered and unlocking is prohibited.

[0008] Preferably, the work order parsing module is used to parse PDF format work order documents, perform standardization processing on the extracted text, match it with the pre-stored cabinet location database, identify all work locations covered by the work order, and count the frequency of work overlap for each cabinet location. At the same time, it extracts the permit time and expiration time of the work order as authorization validity period information.

[0009] Preferably, the authorization management module is configured with a dual-channel permission revocation mechanism: the first channel is an automatic expiration channel, where the smart key determines whether the permission has expired based on the local real-time clock during the unlock verification, and if it has expired, unlocking is prohibited; the second channel is a work ticket termination active revocation channel, where when the corresponding work ticket is marked as terminated and the smart key is connected to the physical contact communication base, the background control layer automatically clears all authorization lists corresponding to the work ticket in the smart key.

[0010] Preferably, the background control layer is further provided with a GUI visualization display module. The GUI visualization display module displays the status of the entire station's screen cabinets in an array of light-up signs, and performs hierarchical coloring identification based on the frequency of work crossover at each screen position: crossover frequency greater than or equal to 3 times is marked in red, crossover frequency of 2 times is marked in yellow, crossover frequency of 1 time is marked in blue, and no work is marked in gray.

[0011] Preferably, the operating side of the intelligent passive lock is provided with an intelligent key insertion interface, and the power supply and communication contacts are exposed on the mating end face of the intelligent key insertion interface; the intelligent passive lock is provided with a lock cylinder, a microcontroller, a micro motor and a bolt, the micro motor is connected to the bolt and controlled by the microcontroller; when no valid unlocking command is received, the lock cylinder is in an idle state and cannot drive the bolt to move.

[0012] Preferably, the smart passive lock has a built-in encrypted storage module, and the unique lock code is solidified in the encrypted storage module using a national cryptographic algorithm; before the smart key performs dual verification, it also performs two-way identity authentication with the smart passive lock. The smart passive lock sends an encrypted challenge code, and the smart key decrypts and sends back the authentication value. After successful authentication, the dual verification is performed.

[0013] Preferably, when the smart key is connected to the physical contact communication base, the background control layer automatically reads the local real-time clock data of the smart key, compares it with the time of the background system, and automatically completes clock synchronization and stores calibration records when the deviation exceeds a preset threshold.

[0014] Preferably, the smart key has a built-in sound and light alarm module, which is used to trigger a local sound and light alarm and generate a local abnormal operation record when the verification fails; the background control layer is also equipped with a log management module, which is used to receive all operation records returned by the smart key and store them in categories.

[0015] This invention also provides a method for intelligent locking of a substation secondary switchgear, applied to the aforementioned intelligent locking system for the substation secondary switchgear, comprising: Step S1: The smart key interacts with the back-end control layer offline via a physical contact communication dock, downloads and locally encrypts and stores the authorization list, which includes a list of authorization lock codes and the authorization validity period; Step S2: When the smart key is connected to the smart passive lock, reverse power is supplied to the smart passive lock and the unique lock code embedded in the smart passive lock is read; Step S3: The smart key performs a lock code matching verification on the read lock code, and at the same time performs a time validity verification based on the local real-time clock; Step S4: If both verifications pass, the smart key drives the smart passive lock to unlock; otherwise, an alarm is triggered and unlocking is prohibited.

[0016] Preferably, the authorization list is generated by the back-end management layer in the following way: importing work order documents, parsing and extracting work location information and authorization validity period information from the documents, matching the unique lock code of the corresponding lock, and generating an encrypted authorization list.

[0017] Preferably, the method for generating the authorization list specifically includes: The back-end management layer performs standardized processing on the text extracted from the work order document, matches it with the pre-stored cabinet location database to identify the work location, counts the frequency of work overlap for each cabinet, and extracts the license time and termination time as the authorization validity period through regular expression matching.

[0018] Preferably, in step S3, the lock code matching verification specifically includes: comparing the read unique lock code with the locally stored list of authorized lock codes one by one to determine whether the lock code is within the authorized range; the time validity verification specifically includes: reading the current time of the real-time clock module and determining whether the current time is earlier than or equal to the expiration time of the authorized validity period.

[0019] Preferably, step S4 specifically includes: If the lock code matches and the time is valid, meaning both verifications pass, the smart key sends an encrypted unlocking command to the smart passive lock. After verifying the command's validity, the smart passive lock retracts the bolt to complete the unlocking. The smart key generates a local unlocking record, which includes the lock code, unlocking time, and operation result. If the lock code does not match, the time expires, or a lock-picking anomaly is detected, i.e., any one of the verifications fails, the smart key will prevent the output of the unlock command and output the corresponding audible and visual alarm prompts; at the same time, a local abnormal operation record will be generated, which includes the lock code, operation time, and anomaly type.

[0020] Preferably, the method further includes a dual-channel permission revoke mechanism that combines automatic expiration of validity period with proactive revokement of work order termination: The first channel is an automatic expiration channel. When the authorization expires, the smart key will directly determine that the corresponding permission is invalid when performing unlock verification locally, and will prohibit the output of unlock commands. The second channel is the active recycling channel for work tickets at the end of the process. When the smart key is inserted into the physical contact communication jack, it receives the permission recycling instruction issued by the back-end management layer, clears all authorized lock codes corresponding to the work tickets marked as terminated in the local storage, and generates a local permission recycling record.

[0021] Preferably, in step S1, after the smart key is connected to the physical contact communication base, it first completes identity authentication and then downloads the authorization list of corresponding permissions; the background control layer reads the local real-time clock data of the smart key and compares it with the system time. When the deviation exceeds the preset threshold, the smart key receives the clock synchronization command issued by the background control layer and completes the local real-time clock calibration.

[0022] Preferably, in step S2, after the smart key is connected to the smart passive lock and completes reverse power supply, it first performs two-way identity authentication with the smart passive lock: the smart passive lock sends an encrypted challenge code, the smart key decrypts it and sends back the authentication value, and after successful authentication, the unique lock code is read.

[0023] Preferably, after step S4, the method further includes: when the smart key reconnects to the backend management layer via the physical contact communication jack, it automatically transmits all locally stored operation records back to the backend management layer.

[0024] The beneficial effects of this invention are as follows: Through the linkage mechanism of automatic parsing of work order documents and dynamic generation of authorization lists, unlocking permissions are precisely bound to the scope and validity period of work orders, breaking down data barriers between the lock control system and the two-ticket management system, thus eliminating the safety hazards of unlicensed operations and operations beyond the scope at the source; The use of a smart passive lock with a unique code per cabinet, combined with a dual verification mechanism of local lock code matching and time validity of smart keys, along with on-site alarms when verification fails, achieves physical locking and proactive early warning of non-work cabinets, effectively preventing accidental entry into operating intervals and accidental contact with secondary equipment, improving the inherent safety level of secondary operations; A dual-channel permission control mechanism combining automatic expiration of validity period and proactive retrieval of work order termination is constructed, with each acting as a backup to ensure timely clearing of permissions and avoid the risk of permission residue; The entire process adopts a physical contact offline data interaction mode, eliminating the need for network communication, thus avoiding network attacks and data leakage risks at the physical level, and adapting to the security protection requirements of power monitoring systems; All operation records are automatically archived, supporting full-process traceability and auditing, reducing the cost of manual ledger management, and contributing to the standardization and intelligent upgrading of substation secondary operation control. Attached Figure Description

[0025] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0026] Figure 1 This is a schematic diagram of the architecture of an intelligent lock control system for a substation secondary cabinet according to Embodiment 1 of the present invention.

[0027] Figure 2 This is a system data flow architecture diagram in an embodiment of the present invention.

[0028] Figure 3 This is a flowchart illustrating a method for intelligent locking and control of secondary switchgear in a substation, according to Embodiment 2 of the present invention.

[0029] Figure 4 This is a schematic diagram of the system operation process in an embodiment of the present invention.

[0030] Figure 5 This is a schematic diagram of the address light sign in the GUI interface of this invention embodiment. Detailed Implementation

[0031] The following description of the embodiments is taken with reference to the accompanying drawings, which illustrate specific embodiments in which the invention can be implemented.

[0032] Please refer to Figure 1 As shown, Embodiment 1 of the present invention provides an intelligent lock control system for secondary cabinets in substations, comprising: a back-end control layer and a field equipment layer; The backend control layer is equipped with a work order parsing module and an authorization management module; the work order parsing module is used to extract work location information and authorization validity period information from imported work order documents; the authorization management module is used to match the unique lock code of the corresponding lock according to the work location information and generate an authorization list containing an authorization lock code list and authorization validity period information; the backend control layer is connected to a physical contact communication socket; The field device layer includes a smart key and a smart passive lock installed in the secondary cabinet; the smart key interacts with the back-end control layer offline by plugging into the physical contact communication socket, and is used to download and locally encrypt and store the authorization list; the smart passive lock has a unique lock code embedded in it and is equipped with power supply and communication contacts; The smart key is equipped with a contact interface adapted to the power supply and communication contacts, which is used to supply reverse power to the smart passive lock when the smart key is inserted into the smart passive lock, and to read the unique lock code of the smart passive lock; the smart key also has a built-in verification control module, which is used to perform lock code matching verification and time validity verification on the read lock code based on the local real-time clock. When both verifications pass, the smart passive lock is driven to unlock; when the verification fails, an alarm is triggered and unlocking is prohibited.

[0033] In this embodiment, the back-end control layer is deployed on dedicated equipment in the substation main control room for work order parsing, authorization generation, status visualization, and log management; the physical contact communication socket serves as the sole data interaction interface, enabling offline physical contact data exchange between the back-end control layer and the smart key; the smart key is a portable operating terminal that locally stores the authorization list and performs on-site unlocking verification; the passive smart lock is installed at the door of each secondary cabinet, operating passively with a unique code for each cabinet.

[0034] Specifically, the work order parsing module is used to read offline-imported work order documents and extract work location information and authorization validity information from them. In this embodiment, the work order document is a PDF format electronic work order, which is copied to a designated folder in the system via USB flash drive or imported offline via intranet terminal, without establishing any online data interface. Its specific execution logic is as follows: Location Database Construction: The system pre-stores a location database for all secondary control cabinets in the entire station, using structured table storage. It includes two fields: serial number and work location name. The serial number serves as a unique identifier for each secondary control cabinet, and the work location name corresponds one-to-one with the actual physical name of the cabinet in the field, such as "1P #1 Main Transformer Protection Panel," "2P #2 Main Transformer Protection Panel," and "9P Waveform Recorder Panel." This covers all secondary equipment cabinets, including protection panels, measurement and control panels, and waveform recorder panels, throughout the station. The system reads the location database upon startup and constructs the mapping relationship between serial numbers and location names. The protection panel location database is shown in the table below:

[0035] Text Extraction and Standardization: Traverse all PDF work order files in the specified folder and extract the full text of the document page by page using the text extraction component; perform standardization processing on the extracted text, including unifying character case, removing all whitespace characters, removing Chinese and English parentheses and their internal content, removing punctuation marks, and retaining only Chinese characters, letters and numbers to be compatible with the naming format differences of different work orders.

[0036] Location matching and frequency statistics: The standardized text is matched one by one with the location database to count the occurrence of each screen location in each work order; if a location appears once or more in each work order, it is counted as 1 time. The count results of all work orders are accumulated to obtain the work cross frequency of each screen position in the whole station.

[0037] Authorization validity period information extraction: Use regular expressions to locate the license time and end time fields in the work order, and extract the start time and end time of the authorization validity period.

[0038] Anomaly Handling: If the extracted PDF text is empty or is a scanned document, the system will prompt a parsing error and skip the file; if no timeliness information is extracted, a manual entry window will pop up for maintenance personnel to fill in the information; if the corresponding cabinet has been marked as out of service, it will be automatically marked as equipment abnormal and permissions will not be granted.

[0039] The authorization management module has a pre-stored mapping ledger of all secondary display cabinets and unique lock codes. It is used to match the unique lock code of the corresponding passive smart lock with the work location information output by the work ticket parsing module, generate an authorization list and store it in encryption.

[0040] The authorization list contains five core fields: work ticket number, authorization lock code list, operator information, authorization validity period start date, and authorization validity period end date. The authorization validity period end date is precisely aligned with the work ticket termination date. After generation, the authorization list is encrypted and stored using national cryptographic algorithms. Authorization is only granted to cabinets within the work location area; authorization is not granted outside the work location. Each authorization list is linked to a designated operator's real name and cannot be transferred.

[0041] The authorization management module also supports a dual-channel permission revocation mechanism: Channel 1: Automatic expiration upon expiration. The authorization list has a built-in expiration date. When unlocking on-site, the smart key locally determines whether the authorization has expired, requiring no manual operation. Unlocking is automatically prohibited after the expiration date.

[0042] Channel Two: Active Retrieval Upon Work Ticket Termination. After maintenance personnel mark the corresponding work ticket status as "Terminated" in the system, when the associated smart key is inserted into the physical contact communication jack again, the system automatically detects the work ticket status, clears all authorized lock codes corresponding to that work ticket from the key, and generates a permission retrieval record for retention. If the associated key is not returned when the work ticket is marked as terminated, the system will display a prompt, and the permission retrieval operation will be completed after manual confirmation.

[0043] The substation secondary cabinet intelligent lock control system in this embodiment also includes a graphical user interface (GUI) visualization display module, which is used to display the working status and work order information of the entire station cabinet in a graphical interface, including two parts: a light-up display area and a work order information panel.

[0044] The illuminated signage areas are arranged according to the actual layout of the cabinets, and are color-coded according to the frequency of occurrence at work locations: those appearing ≥3 times are marked in red with the number of occurrences indicated, representing multiple overlapping operations and requiring high attention; those appearing 2 times are marked in yellow with the number of occurrences indicated, representing overlapping work locations and requiring close attention; those appearing 1 time are marked in blue, representing a single work location and normal status; and those appearing 0 times are marked in gray, representing a non-work location and the highest risk level.

[0045] The work order information panel is located on the side of the interface, displaying real-time details of all ongoing work orders, including work order number, work location, permitted time, end time, execution status, remaining time, and associated key number. The system background periodically scans the status of all work orders, and when the current time exceeds the end time, it automatically marks the work order as expired, the corresponding indicator light turns orange and flashes, and an overdue reminder pop-up window appears on the interface, prompting maintenance personnel to complete the termination procedures in a timely manner.

[0046] The substation secondary switchboard intelligent lock control system in this embodiment also includes a log management module, which is used to receive all operation records returned by the smart key, including normal unlocking records, abnormal alarm records, permission revocation records and clock calibration records, and store them in categories. It supports multi-dimensional retrieval, filtering and export by time, personnel, cabinet number and ticket number, so as to realize the traceability of the entire operation process.

[0047] The physical contact communication jack connects to the backend management layer via a wired interface. In this embodiment, a USB interface communication jack is used as the sole data interaction channel between the backend management layer and the smart key. The physical contact communication jack is equipped with a plug slot adapted to the smart key, and data contacts and charging contacts are provided in the slot. The data link and power supply link are established only when the smart key is inserted and physical contact is formed, without relying on any wireless network or local area network throughout the process.

[0048] The physical contact communication dock has identity authentication and clock calibration functions: After the smart key is connected, the system first identifies the key ID. The operator completes real-name authentication by password or fingerprint before the authorization list can be downloaded. At the same time, it automatically reads the real-time clock data of the smart key and compares it with the time of the background system. If the time deviation exceeds the preset threshold, it automatically issues a calibration command to complete the clock synchronization and generates a calibration log.

[0049] It should be noted that the physical contact communication socket can also use a customized gold-plated probe array communication socket, which does not use the standard USB interface and the general USB protocol; the physical contact communication socket and the smart key achieve physical contact data transmission and power supply through multiple elastic probes, with a higher level of interface protection, and is suitable for outdoor substation scenarios with high humidity, high dust and strong electromagnetic interference.

[0050] The smart key is a handheld portable terminal device with a built-in processor, encrypted storage module, rechargeable battery, real-time clock module, verification control module, audible and visual alarm module, and contact interface.

[0051] The real-time clock module is independently powered by the smart key's built-in battery. It maintains continuous and accurate timekeeping even after the smart key is removed from the physical contact communication socket, providing an independent local time reference for on-site unlocking verification. The time accuracy (typically ±2 seconds / day) meets the substation's operational time management requirements. Each time the physical contact communication socket is inserted, the RTC time is automatically read and compared with the background system time for calibration. If the time deviation exceeds ±5 minutes, the system automatically completes time synchronization and displays the message "Key clock calibrated".

[0052] The encrypted storage module is used for local encrypted storage of authorization lists and operation records. It can store no less than 1,000 authorization lists and 10,000 operation records to meet the needs of multiple shifts working in parallel.

[0053] The contact interface is located at the insertion end of the smart key and includes power supply contacts and data contacts. On the one hand, it is used to complete data interaction and battery charging when the physical contact communication socket is inserted. On the other hand, it is used to provide reverse power to the lock and establish two-way encrypted data communication when the passive smart lock is inserted.

[0054] The verification control module is the control unit for the smart key, used to execute dual verification logic after the passive smart lock is inserted and the unique lock code is read: First, lock code matching and verification: determine whether the unique lock code read exists in the locally stored list of authorized lock codes; Second, time validity verification: Read the current time of the real-time clock module and determine whether the current time is within the validity period of the authorization list.

[0055] The verification control module sends an encrypted unlocking command to the passive smart lock only when both verifications pass; if either verification fails, the unlocking command is prohibited from being output, the light and sound alarm module is triggered to output an alarm signal, and a local abnormal operation record is generated at the same time.

[0056] The audible and visual alarm module is integrated into the smart key and consists of a buzzer and LED indicator lights, supporting tiered alarm prompts. If the lock code does not match, a voice prompt will be issued saying "Not a work location, no authorization to open the door", and the red LED will flash continuously. When permissions expire, a voice prompt saying "Permissions expired" will be issued, and a yellow LED will flash continuously. When forced entry or abnormal unlocking attempts are detected, a continuous beeping sound and a high-frequency red light flashing are triggered.

[0057] All alarm events generate local anomaly records simultaneously, which are then transmitted back to the backend management layer after the smart key is inserted back into the physical contact communication socket.

[0058] The passive smart lock is fixedly installed at the closing point of the cabinet door of the secondary control cabinet. It is an all-metal passive lock body with no built-in battery or external power supply line. It includes the lock body mechanism, lock tongue, microcontroller, encrypted storage module, power supply and communication contacts and anti-pry detection unit.

[0059] The encrypted storage module is a hardware encryption chip with a unique lock code embedded within it. The lock code is encrypted using national cryptographic algorithms, making it tamper-proof and uncopyable. The lock code encoding rule is "substation number - cabinet dual encoding". Each passive smart lock corresponds to a unique secondary cabinet, achieving one cabinet, one code, and lifelong binding. It stores a 12-digit or higher hexadecimal code to ensure that there are no duplicate numbers throughout the entire station.

[0060] The power supply and communication contacts are located on the operating side surface of the passive smart lock, adapted to the contact interface of the smart key, and serve dual functions of power transmission and data communication. The operating side of the passive smart lock has a plug-in interface for inserting the smart key. When the smart key is inserted into this interface and fully seated, the power supply and communication contacts make tight contact with the smart key's contact interface, allowing the smart key to supply power to the passive smart lock in reverse, waking up the microcontroller and establishing bidirectional encrypted data communication. Power supply and data interaction are completed in a short time. After the smart key is removed, the lock immediately returns to a passive, zero-power state, operating with zero power consumption when not in operation.

[0061] As a specific implementation method, the above-mentioned reverse power supply mechanism can be implemented by a probe sleeve and probe matching structure: the power supply communication contact is an elastic probe, the contact interface of the smart key is a probe sleeve, and after the smart key and the smart passive lock are inserted into place, the probe and the probe sleeve elastically abut against each other, the contact is reliable and the contact resistance is small, which can adapt to the complex environment of substation site vibration, dust and other conditions.

[0062] When unlocking, two-way authentication is performed first: the passive smart lock sends an encrypted challenge code to the smart key, the smart key uses its built-in private key to decrypt and send back the authentication value. Only after the passive smart lock verifies the authentication can it perform the unlocking action and return the information on whether the unlocking was successful to the smart key. There is no false unlocking rate and no re-unlocking rate, and it can defend against replay attacks and man-in-the-middle attacks.

[0063] Therefore, this invention abandons the conventional practice of retaining mechanical keyholes in traditional smart locks, adopting a hole-free design. The lock surface has no mechanical keyholes. Without a valid unlocking command, the lock cylinder is in a free-spinning locked state, and external twisting operations cannot drive the bolt. Upon receiving a valid unlocking command, the microcontroller drives a micro-motor transmission mechanism to retract the bolt, completing the unlocking action. This design structurally eliminates the risk of the lock being opened by technical means.

[0064] The anti-pry detection unit is built into the lock body mechanism and uses a combination of vibration and displacement sensors. When abnormal disassembly or forced prying is detected, it immediately sends an alarm signal to the smart key through the power supply and communication contacts, triggering the smart key's audible and visual alarm and generating a lock-picking anomaly record.

[0065] For example Figure 2 As shown, the system's entire data flow is divided into a downlink authorization link and an uplink archiving link, forming a complete data closed loop.

[0066] The downlink authorization process is executed in the following order: First, the offline exported work order PDF is imported into the backend management layer, and the work location information and authorization validity period information are extracted by the PDF parsing module; second, the authorization management module matches the unique lock code of the corresponding lock and generates an encrypted authorization list containing the list of authorized lock codes and the validity period; simultaneously, the operation status of all screen positions is displayed in the form of light-colored signs through the GUI visualization module; finally, the authorization list is sent to the smart key and local encrypted storage is completed through the USB communication dock data exchange node, while the local clock of the smart key is calibrated.

[0067] During the on-site operation phase, the smart key operates completely offline. After being inserted into the passive smart lock, it first reads the lock's unique lock code and performs offline dual unlocking verification: lock code matching verification and time validity verification. If the verification passes, normal unlocking is performed and a local unlocking record is generated; if the verification fails, unlocking is prohibited, a local audible and visual alarm is triggered, and a local violation record is generated.

[0068] The uplink archiving process is executed in the following order: After the job is completed, the smart key is inserted back into the physical contact communication jack, and data backhaul and permission revocation operations are performed. All unlocking records and alarm records stored locally are backhauled to the backend management layer. At the same time, the status of associated work tickets is checked, and the authorization permissions of terminated work tickets are automatically revoked. Finally, all data is classified and archived to the data archiving layer and stored in the unlocking log database, violation alarm database and operation traceability database respectively to support subsequent full-process audit and traceability.

[0069] Please refer to again Figure 3 As shown, Embodiment 2 of the present invention provides an intelligent lock control method for substation secondary switchgear, applied to the intelligent lock control system for substation secondary switchgear described in Embodiment 1 of the present invention, comprising: Step S1: The smart key interacts with the back-end control layer offline via a physical contact communication dock, downloads and locally encrypts and stores the authorization list, which includes a list of authorization lock codes and the authorization validity period; Step S2: When the smart key is connected to the smart passive lock, reverse power is supplied to the smart passive lock and the unique lock code embedded in the smart passive lock is read; Step S3: The smart key performs a lock code matching verification on the read lock code, and at the same time performs a time validity verification based on the local real-time clock; Step S4: If both verifications pass, the smart key drives the smart passive lock to unlock; otherwise, an alarm is triggered and unlocking is prohibited.

[0070] Specifically, please combine Figure 4As shown, this embodiment pre-establishes a substation protection panel location database. As mentioned earlier, the location database is stored in Excel file format and contains two columns of data: "Serial Number" and "Work Location Name". The serial number serves as a unique identifier for each secondary panel, and the work location name corresponds one-to-one with the actual physical name of the panel on site.

[0071] After obtaining the pre-configured location database of substation secondary cabinets, the program first loads the location database Excel file, reads all cabinet position data using the openpyxl library, and constructs a one-to-one mapping list of "serial number - cabinet position name" to complete the memory loading of basic data. As a preferred implementation, after completing the mapping list construction, the program initializes the graphical user interface and generates the corresponding indicator light display controls for each cabinet in a grid layout according to the serial number order in the location database; for example... Figure 5 As shown, during the initialization phase, all illuminated signs are displayed with a default background color and labeled with the corresponding screen position name, arranged according to a certain pattern (such as 3 rows and 3 columns).

[0072] Then, the operations and maintenance personnel export the work orders (PDF format) in progress from the production management system and copy them to the designated folder in the system via USB flash drive or intranet terminal. The pdfplumber library is used to iterate through all PDF files, extracting text content page by page. The extracted text and location names are then cleaned and standardized as follows: converted to lowercase; all whitespace characters (spaces, tabs, line breaks) are removed; Chinese and English parentheses and their contents are removed; punctuation marks are removed, retaining only Chinese characters, letters, and numbers.

[0073] Keyword matching is performed on the cleaned PDF text to count the total number of times each location appears. The counting rule is: if a location name appears once or more in each PDF, it is counted as one work order. The counts of all PDFs are then summed. At the same time, the permit time and expiration time of each work order are extracted from the PDF text using regular expressions or keyword positioning (e.g., "from 08:00 on July 1, 2026 to 17:00 on July 3, 2026").

[0074] The handling of PDF parsing boundary cases is shown in the table below:

[0075] Simultaneously, the indicator lights are colored according to the frequency of occurrence: ≥3 occurrences – red with the number marked (multiple overlapping locations, high attention required); 2 occurrences – yellow with the number marked (overlapping work locations, requiring close monitoring); 1 occurrence – blue with "occurred once" marked (single work location, normal status); 0 occurrences – gray with "occurred 0 times" marked (non-work location, highest risk level). Locations with ≥2 occurrences indicate overlapping work locations across multiple work orders, suggesting potential for maintenance personnel to work concurrently, requiring close monitoring during on-site operations.

[0076] The system extracts the end time of the work order during the PDF parsing stage and writes it into the authorization list as the expiration date of the authorization. The authorization list contains the following core fields:

[0077] Insert the smart key into the physical contact communication jack to establish an offline data link with the back-end management unit via physical contact connection; after real-name authentication, download the authorization list for the corresponding work scope and store it locally with encryption. The authorization list includes a list of authorization lock codes and the authorization validity period; at the same time, calibrate the time of the local real-time clock module. After calibration, remove the smart key and enter the on-site work state.

[0078] Maintenance personnel arrive at the target secondary cabinet site with a smart key, insert the smart key into the smart passive lock to be operated, and reverse power is supplied to the smart passive lock through the power supply and communication contacts to wake up the microcontroller of the smart passive lock and establish a two-way encrypted data communication link.

[0079] After the communication link is established, the smart key sends a lock code reading command to the smart passive lock to read the unique lock code stored in the encrypted storage module; at the same time, two-way identity authentication is performed to prevent unauthorized access.

[0080] The verification control module executes the dual verification logic independently on a local basis: (1) Lock code matching verification: The unique lock code read is compared with the list of authorized lock codes stored locally to determine whether the lock code is within the authorized range; (2) Time validity check: Read the current time of the real-time clock module and determine whether the current time is earlier than or equal to the expiration time of the authorized validity period.

[0081] If the lock code matches and the time is valid, meaning both verifications pass, the verification control module sends an encrypted unlocking command to the smart passive lock. After verifying the command's validity, the smart passive lock retracts the bolt to complete the unlocking. The smart key generates a local unlocking record, which includes the lock code, unlocking time, and operation result.

[0082] If the lock code does not match, the time expires, or a lock-picking anomaly is detected, i.e., any one of the verifications fails, the verification control module will prohibit the output of the unlock command and trigger the audible and visual alarm module to output the corresponding alarm prompt; at the same time, a local abnormal operation record will be generated, the record content of which includes the lock code, operation time, and abnormality type.

[0083] The above double check logic is shown in the table below:

[0084] It should be noted that the entire verification process is completed locally by the smart key without connecting to the backend system, realizing real-time permission verification in a physically isolated environment, which avoids network risks and ensures millisecond-level response speed.

[0085] After all on-site operations are completed, insert the smart key back into the physical contact communication jack. This will automatically send all unlocking and exception records stored locally back to the backend management layer, where they will be stored by the data archiving layer. If the backend detects that the associated work ticket has been terminated, it will automatically clear all authorized data corresponding to that work ticket from the smart key, thus revoking the permissions.

[0086] Furthermore, this embodiment of the invention adopts a dual-channel mechanism of "automatic expiration of validity period" and "active recycling of work ticket upon termination" to ensure that unlocking permissions are automatically cleared after the work is completed.

[0087] Channel 1: Validity period expires automatically (proactive, no manual operation required) When the work order expires, the key automatically determines that the access has expired during verification. This mechanism requires no manual intervention and prevents access from remaining due to human error.

[0088] Channel Two: Automatic Collection of Work Orders Upon Completion (Operational, Requires Manual Confirmation) (1) The operation is completed, and the maintenance personnel have checked and confirmed on-site that all work has been completed; (2) Maintenance personnel complete the work ticket termination procedure in the work ticket system; (3) In the smart lock control platform, the operation and maintenance personnel manually update the status of the corresponding work order from "in execution" to "completed"; (4) The platform updates the "Status" field of the work order to "Completed"; (5) When the smart key associated with the work order is inserted into the physical contact communication jack again, the system will automatically perform the following operations: Read the smart key ID and query the list of work tickets associated with that smart key; A work order status of "terminated" has been detected. Automatically clear all authorized lock codes corresponding to this work order from the smart key; Retain a "permission revocation record" (including revocation time, operator, and ticket number) in the smart key; System notification: "All unlock permissions for [ticket number] have been revoked"; (6) The system updates the GUI display and restores the light sign corresponding to the work order to gray (non-working state).

[0089] In addition, if the smart key is not returned to the physical contact communication base when the work order ends, the system will prompt "The relevant key has not been returned. Please confirm before canceling the work order." The system will wait for manual confirmation that the key has been returned before completing the permission revoke operation.

[0090] Compared with existing technologies, this invention has the following significant advantages: Through a linkage mechanism of automatic parsing of work order documents and dynamic generation of authorization lists, unlocking permissions are precisely bound to the scope and validity period of work orders, breaking down data barriers between the lock control system and the two-ticket management system, fundamentally eliminating the safety hazards of unlicensed operations and operations beyond the scope; The use of a unique code intelligent passive lock per cabinet, combined with a dual verification mechanism of local lock code matching and time validity for intelligent keys, along with on-site alarms when verification fails, achieves physical locking and proactive early warning for non-work cabinets, effectively preventing accidental entry into operating intervals and accidental contact with secondary equipment, improving the inherent safety level of secondary operations; A dual-channel permission control mechanism combining automatic expiration of validity period and proactive retrieval of work order termination is constructed, with each acting as a backup to ensure timely clearance of permissions and avoid the risk of permission residue; The entire process adopts a physical contact offline data interaction mode, eliminating the need for network communication, physically avoiding network attacks and data leakage risks, and adapting to the security protection requirements of power monitoring systems; Full operation records are automatically archived, supporting full-process traceability and auditing, reducing the cost of manual ledger management, and facilitating the standardization and intelligent upgrading of substation secondary operation control.

[0091] The above description is merely a preferred embodiment of the present invention and should not be construed as limiting the scope of the invention. Therefore, any equivalent variations made in accordance with the claims of the present invention are still within the scope of the present invention.

Claims

1. A smart interlocking control system for secondary switchboards in substations, characterized in that, include: Back-end control layer and field equipment layer; The back-end control layer is equipped with a work order parsing module and an authorization management module; The work order parsing module is used to extract work location information and authorization validity period information from the imported work order document; the authorization management module is used to match the unique lock code of the corresponding lock according to the work location information and generate an authorization list containing a list of authorized lock codes and authorization validity period information; the back-end control layer is connected to a physical contact communication base; The field equipment layer includes smart keys and smart passive locks installed in the secondary cabinet; The smart key interacts with the backend management layer offline via the physical contact communication socket, and is used to download and locally encrypt and store the authorization list; the smart passive lock has a unique lock code embedded inside and is equipped with power supply and communication contacts; The smart key is equipped with a contact interface adapted to the power supply and communication contacts, which is used to supply reverse power to the smart passive lock when the smart key is inserted into the smart passive lock, and to read the unique lock code of the smart passive lock; the smart key also has a built-in verification control module, which is used to perform lock code matching verification and time validity verification on the read lock code based on the local real-time clock. When both verifications pass, the smart passive lock is driven to unlock; when the verification fails, an alarm is triggered and unlocking is prohibited.

2. The system according to claim 1, characterized in that, The work order parsing module is used to parse PDF format work order documents, perform standardization processing on the extracted text, match it with the pre-stored cabinet location database, identify all work locations covered by the work order, and count the frequency of work overlap for each cabinet location. At the same time, it extracts the permit time and expiration time of the work order as authorization validity period information.

3. The system according to claim 1, characterized in that, The authorization management module is configured with a dual-channel permission revocation mechanism: the first channel is an automatic expiration channel, where the smart key determines whether the permission has expired based on the local real-time clock during the unlock verification, and if it has expired, unlocking is prohibited; the second channel is a work ticket termination active revocation channel, where when the corresponding work ticket is marked as terminated and the smart key is connected to the physical contact communication jack, the background management layer automatically clears the entire authorization list corresponding to the work ticket in the smart key.

4. The system according to claim 1, characterized in that, The back-end control layer is also equipped with a GUI visualization display module. The GUI visualization display module displays the status of all screen cabinets in an array of light-up signs and performs hierarchical coloring based on the frequency of work crossover at each screen position: crossover frequency greater than or equal to 3 times is marked in red, crossover frequency of 2 times is marked in yellow, crossover frequency of 1 time is marked in blue, and no work is marked in gray.

5. The system according to claim 1, characterized in that, The intelligent passive lock is equipped with an intelligent key insertion interface on its operating side, and the power supply and communication contacts are exposed on the mating end face of the intelligent key insertion interface; the intelligent passive lock is equipped with a lock cylinder, a microcontroller, a micro motor and a bolt, and the micro motor is connected to the bolt and controlled by the microcontroller; when no valid unlocking command is received, the lock cylinder is in an idle state and cannot drive the bolt to move.

6. The system according to claim 1, characterized in that, The intelligent passive lock has a built-in encrypted storage module, and the unique lock code is solidified in the encrypted storage module using the national cryptographic algorithm. Before the smart key performs dual verification, it also performs two-way identity authentication with the intelligent passive lock. The intelligent passive lock sends an encrypted challenge code, and the smart key decrypts and sends back the authentication value. After successful authentication, the dual verification is performed.

7. The system according to claim 1, characterized in that, When the smart key is connected to the physical contact communication base, the background control layer automatically reads the local real-time clock data of the smart key, compares it with the time of the background system, and automatically completes clock synchronization and stores calibration records when the deviation exceeds a preset threshold.

8. The system according to claim 1, characterized in that, The smart key has a built-in sound and light alarm module, which is used to trigger a local sound and light alarm and generate a local abnormal operation record when the verification fails; the background control layer is also equipped with a log management module, which is used to receive all operation records returned by the smart key and store them in categories.

9. A method for intelligent interlocking control of secondary switchgear in a substation, characterized in that, The method is applied to the intelligent interlocking system for substation secondary switchgear as described in any one of claims 1 to 8, comprising: Step S1: The smart key interacts with the back-end control layer offline via a physical contact communication dock, downloads and locally encrypts and stores the authorization list, which includes a list of authorization lock codes and the authorization validity period; Step S2: When the smart key is connected to the smart passive lock, reverse power is supplied to the smart passive lock and the unique lock code embedded in the smart passive lock is read; Step S3: The smart key performs a lock code matching verification on the read lock code, and at the same time performs a time validity verification based on the local real-time clock; Step S4: If both verifications pass, the smart key drives the smart passive lock to unlock; otherwise, an alarm is triggered and unlocking is prohibited.

10. The method according to claim 9, characterized in that, The authorization list is generated by the backend management layer in the following way: importing work order documents, parsing and extracting work location information and authorization validity period information from the documents, matching the unique lock code of the corresponding lock, and generating an encrypted authorization list.

11. The method according to claim 10, characterized in that, The specific methods for generating the authorization list include: The back-end management layer performs standardized processing on the text extracted from the work order document, matches it with the pre-stored cabinet location database to identify the work location, counts the frequency of work overlap for each cabinet, and extracts the license time and termination time as the authorization validity period through regular expression matching.

12. The method according to claim 9, characterized in that, In step S3, the lock code matching verification specifically includes: comparing the read unique lock code with the locally stored list of authorized lock codes one by one to determine whether the lock code is within the authorized range; the time validity verification specifically includes: reading the current time of the real-time clock module and determining whether the current time is earlier than or equal to the expiration time of the authorized validity period.

13. The method according to claim 12, characterized in that, Step S4 specifically includes: If the lock code matches and the time is valid, meaning both verifications pass, the smart key sends an encrypted unlocking command to the smart passive lock. After verifying the command's validity, the smart passive lock retracts the bolt to complete the unlocking. The smart key generates a local unlocking record, which includes the lock code, unlocking time, and operation result. If the lock code does not match, the time expires, or a lock-picking anomaly is detected, i.e., any one of the verifications fails, the smart key will prevent the output of the unlock command and output the corresponding audible and visual alarm prompts; at the same time, a local abnormal operation record will be generated, which includes the lock code, operation time, and anomaly type.

14. The method according to claim 9, characterized in that, It also includes a dual-channel permission revoke mechanism that combines automatic expiration of validity period with proactive revokement upon termination of work order: The first channel is an automatic expiration channel. When the authorization expires, the smart key will directly determine that the corresponding permission is invalid when performing unlock verification locally, and will prohibit the output of unlock commands. The second channel is the active recycling channel for work tickets at the end of the process. When the smart key is inserted into the physical contact communication jack, it receives the permission recycling instruction issued by the back-end management layer, clears all authorized lock codes corresponding to the work tickets marked as terminated in the local storage, and generates a local permission recycling record.

15. The method according to claim 9, characterized in that, In step S1, after the smart key is connected to the physical contact communication dock, it first completes identity authentication and then downloads the authorization list of corresponding permissions. The background control layer reads the local real-time clock data of the smart key and compares it with the system time. When the deviation exceeds the preset threshold, the smart key receives the clock synchronization command issued by the background control layer and completes the local real-time clock calibration.

16. The method according to claim 9, characterized in that, In step S2, after the smart key is connected to the smart passive lock and completes reverse power supply, it first performs two-way authentication with the smart passive lock: the smart passive lock sends an encrypted challenge code, the smart key decrypts it and sends back the authentication value, and after successful authentication, it reads the unique lock code.

17. The method according to claim 9, characterized in that, Step S4 is followed by: when the smart key reconnects to the backend management layer via the physical contact communication jack, it automatically sends all locally stored operation records back to the backend management layer.

Images