A primary and secondary fusion ring network box energy consumption monitoring and energy saving control method and system

Abstract

The application discloses a primary and secondary fusion ring network box energy consumption monitoring and energy saving control method and system, collects total auxiliary power and controllable auxiliary branch state at auxiliary power inlet, divides power segments before and after events according to load start-stop or state change events, determines load power change characteristics and sub-item electric energy according to power difference and branch state change. According to maximum allowed execution interval, dew point safety limit value, backup power reserved electric quantity and auxiliary power output capacity, unsafe actions are deleted and actions with lower predicted power consumption are selected. Independent supervisors powered by normal power branches monitor and protect start, operation request and environment emergency signals through hardwiring, restore required branches in sequence, and connect normally closed bypasses when restoration fails. The controller confirms execution results together with state readback and actual power change, and determines power saving amount after deducting delayed task supplementary execution electric quantity. The application can reduce auxiliary power consumption while maintaining protection, operation and five prevention functions.

Description

Technical Field

[0001] This invention relates to the field of auxiliary energy consumption monitoring and control technology for power distribution equipment, and in particular to a method and system for monitoring and controlling energy consumption of a primary and secondary integrated ring network box. Background Technology

[0002] Integrated primary and secondary ring main units typically integrate primary switchgear, protection and control units, communication units, backup power supplies, and auxiliary equipment such as heating, dehumidification, fans, and lighting. Existing monitoring methods mainly collect primary circuit electrical quantities, switch status, and internal temperature and humidity. Auxiliary power consumption is usually only metered in total at the power inlet, making it difficult to determine the actual energy consumption of different secondary equipment and environmental regulation loads during specific operational events.

[0003] Existing low-power control systems often switch preset operating modes based on line status or fixed thresholds, making it difficult to simultaneously address the continuous power supply requirements of protection and operation functions, the completion deadlines of communication and storage services, the development process of condensation risks, and the emergency backup power requirements. When various auxiliary loads operate separately, it may also lead to simultaneous peak startup, frequent actuator switching, or excessive delays in necessary services.

[0004] Furthermore, when some devices enter a low-power state, the wake-up process typically relies on the main processor and its communication programs, lacking an independent recovery path in case of main processor failure; the return of the target state from the control interface also fails to prove that the load power has changed accordingly. Existing energy-saving statistics, if they do not differentiate between operating scenarios, delayed service compensation, and action failures, easily mistake energy differences resulting from changes in operating conditions or temporary delays for energy-saving results. Therefore, coordinated processing is needed for auxiliary energy consumption breakdowns, constraint decisions, safety recovery, and result verification. Summary of the Invention

[0005] The technical problem this invention aims to solve is that existing ring main unit energy management methods struggle to determine the actual energy consumption of different loads within the auxiliary power supply boundary; there is a lack of stable correlation between equipment actions and total power changes; fixed thresholds or fixed operating modes cannot simultaneously address secondary service life, condensation protection, and backup power capacity; and when some equipment enters a low-power state, existing control methods lack wake-up and rollback paths independent of the main processor, and control readback cannot independently prove that the load has changed its power consumption according to instructions. Therefore, it is necessary to continuously process auxiliary energy consumption item monitoring, energy-saving decisions, safe execution, and energy-saving verification without altering primary switch protection, operation, and five-prevention logic.

[0006] To address the aforementioned technical problems, this invention provides a method for monitoring and controlling energy consumption in a primary and secondary integrated ring main unit. This method takes auxiliary power supply wiring, total auxiliary power, controllable auxiliary branch status, and load equipment events as inputs, and sequentially completes branch division and data synchronization, determination of individual power consumption items, determination of limiting conditions, selection of energy-saving actions, restoration of independent power supply, and execution and verification of energy savings, ensuring that energy-saving control does not alter the protection, operation, and five-prevention logic of the primary equipment. The method includes steps S1 to S6: S1, according to the auxiliary power supply wiring, divide the constant power supply branch into a controllable auxiliary branch with a controllable branch switch. The constant power supply branch continuously supplies power to the protection, operation and independent monitor; synchronously collect the total auxiliary power, the status of the controllable auxiliary branch and the load equipment events. S2, divide the power segments before and after the load start-up or state change event, and determine the load power change characteristics and sub-item power based on the total auxiliary power difference and the corresponding branch state change; S3, based on the status of primary equipment, secondary task status, temperature and humidity inside the cabinet, available backup power and auxiliary power output capacity, determine the maximum allowable execution interval of the task, dew point safety limit, backup power reserve and allowed actions. S4, delete actions that would cause power outage of the constant power supply branch, task overdue, critical surface temperature below the dew point safety limit, backup power available power below the reserved power, or auxiliary power over the limit, select actions with lower expected auxiliary power consumption and meet the shortest start-stop time of the actuator, and output control commands. S5 is monitored by an independent supervisor through hard-wired connection for protection start-up, operation request and environmental emergency signals; when one of the above three types of signals is valid, the basic acquisition branch, the main processor branch and the corresponding auxiliary load branch are restored in sequence; if the restoration fails, the normally closed power supply bypass is connected and the energy-saving control is canceled. S6, simultaneously verify the control readback and the actual power change. Success is confirmed when both meet the control command. Select the power consumption benchmark from the historical time window where the primary equipment status, power supply mode and maintenance status are the same and the ambient temperature and humidity fall within the same preset range. Determine the power saving after deducting the power consumption for delayed tasks.

[0007] Specifically, in step S1, the auxiliary energy metering range is determined according to the actual wiring relationship of the ring main unit's auxiliary power supply. For AC power supply structures, the AC auxiliary incoming line is the metering entry point; for DC power supply structures, the DC auxiliary bus is the metering entry point. When both AC and DC auxiliary power supplies are available, the input power on both sides is metered separately, and the power conversion status is recorded. Branches supplying power to protection calculations, protection inputs, trip output holding, necessary clocks, and independent monitors without passing through energy-saving control switches form a constant power supply branch group; branches supplying power to non-protection calculations, general data processing, communication transmission, extended storage, display, lighting, environmental control, and battery maintenance loads, and equipped with controllable switches or low-power interfaces, form a controllable auxiliary branch group.

[0008] A total metering point is set at the auxiliary power supply metering inlet, and branch metering points are set at the controllable secondary equipment branch and the environmental control branch. For loads without branch metering points, their individual energy consumption is estimated based on power change characteristics confirmed through single load start-stop events. Within each statistical time window, the total metered energy consumption is compared with the energy consumption of the constantly supplied branches, the directly metered controllable branches, the estimated energy consumption of the non-independently metered branches, and normal power conversion losses. If the difference between the comparisons continuously exceeds the allowable range, the time window is marked as a metering anomaly time window and is not used to update load power change characteristics or historical electricity consumption benchmarks. The allowable range is determined based on the metering unit accuracy, normal conversion losses, and no-load calibration results.

[0009] Furthermore, the total metering results, branch metering results, primary equipment events, secondary equipment events, and auxiliary load control status all use a unified clock marker. Equipment events are those that characterize the reasons for changes in auxiliary load status or switching of operating scenarios, including switch position changes, protection activation or resetting, operation requests, cabinet door or five-proof status changes, and auxiliary load start / stop. Events are sorted by timestamp before entering step S2; for multiple events with a time difference less than the event merging interval and corresponding to the same operation process, they are associated as a composite event, but the sequential relationship between the events is preserved to avoid misidentifying the preamble signal, actual action, and return signal in the same operation chain as unrelated power changes.

[0010] Specifically, in step S2, a pre-event stabilization window, a state transition window, and a post-event stabilization window are set around the device events that can change the load state. The pre-event stabilization window represents the base power before the action, the state transition window covers the startup impact, communication transmission pulse, or actuator switching process, and the post-event stabilization window represents the continuous power after the action. Load power change characteristics are formed based on the power difference between the two stabilization windows, the peak value of the state transition process, and its duration. These characteristics are represented using an allowable range and are stored along with the specific load, branch state, and operating conditions.

[0011] Preferably, the power change characteristics of the corresponding load are calibrated using an event where only one load state changes, the branch readback matches the control target, and there are no metering anomalies. When multiple loads overlap, the permissible load state combinations are first listed based on equipment events and state readbacks. Then, the calibrated power change ranges of each load in each combination are added together and compared with the measured total auxiliary power change. The combination with the smallest difference that falls within the permissible range is selected for sub-item energy calculation. If no combination meets the permissible range, the segment is marked as an unknown load or a metering anomaly segment, and the original normal parameters are retained.

[0012] Specifically, in step S3, the current operating status is determined based on the relationship between the primary equipment operating condition, secondary equipment service status, cabin environment status, backup power supply status, and auxiliary power limitations. Operating scenarios express the service priorities and safety boundaries that current energy-saving actions must follow, rather than simply classifying the collected data. Normal steady-state scenarios allow for time-limited scheduling of non-protection services; fault or operational scenarios require timely restoration of relevant acquisition, calculation, communication, and recording functions; line power failure scenarios increase backup power retention requirements; maintenance scenarios increase the response requirements of local displays, lighting, and human-machine interaction; and when the risk of condensation increases, the priority of environmental regulation tasks is increased. When multiple scenario conditions are met simultaneously, constraint conflicts are handled in the order of protection and fault handling, operational response, environmental safety, and general energy saving.

[0013] For deferred tasks such as communication transmission, log archiving, display refresh, and battery maintenance, the last successful execution time is recorded, and the maximum allowable execution interval is set according to the normal operation, operation preparation, fault handling, maintenance, or backup power supply status. When the elapsed time from the last successful execution time reaches the corresponding maximum allowable execution interval, the task is included as a mandatory task in the next control cycle; if the task fails, the last successful execution time is not updated. Protection calculations, protection inputs, and trip outputs do not have deferred conditions and are continuously powered by the constant power supply branch.

[0014] Regarding condensation protection, the dew point temperature is determined based on the cabin air temperature and relative humidity, and the minimum critical surface temperature for subsequent control periods is determined based on the measured values ​​of critical surface temperature sensors or the temperature change relationship calibrated by the chamber heat transfer test. The sum of the dew point temperature and the preset safe condensation temperature difference constitutes the dew point safety limit; candidate actions such as heating, dehumidification, internal circulation, or external circulation must ensure that the minimum critical surface temperature is not lower than this limit. External circulation must also meet the requirements that the absolute humidity outside the cabinet is lower than the absolute humidity inside the cabinet, and that the air intake duct is rainproof and dustproof. Regarding backup power supply, the estimated power consumption of the constant power supply branch during the emergency duration, the reserved operating power, and the necessary communication power are deducted from the current available power of the backup power supply. The remaining power is used to determine whether ordinary auxiliary tasks are allowed to be executed. The allowable output capacity of the auxiliary power supply, the current temperature rise, and the allowable discharge capacity of the backup power supply jointly limit the upper limit of the auxiliary power for each control cycle.

[0015] Specifically, in step S4, a limited number of candidate action combinations are generated based on the device's supported on / off, power adjustment, and task delay states. Candidate action combinations that would interrupt the power supply to the constant power supply branch, have expired mandatory tasks, have critical surfaces below the dew point safety limit, have insufficient backup power, exceed wake-up time limits, or have auxiliary power exceeding the allowable output power are first deleted. For the remaining candidate action combinations, the expected auxiliary power consumption is calculated item by item based on the confirmed power change characteristics and expected duration of each load, and sorted from low to high expected auxiliary power consumption; when the expected auxiliary power consumption is the same, the action combination with fewer actuator state switching times is selected. The controller only executes the actions in the current control cycle of the selected combination, and reselects in the next control cycle based on the new metering, status, and execution confirmation results.

[0016] To reduce frequent operation of environmental actuators, minimum continuous operating time, minimum stop time, and start / stop hysteresis intervals are set for heating, dehumidification, and fans. Communication and extended storage tasks are only processed together within their respective maximum allowable execution intervals; battery maintenance tasks are avoided during environmental conditioning loads or communication transmission processes to prevent multiple auxiliary loads from starting simultaneously and creating power peaks exceeding allowable values.

[0017] Specifically, in step S5, the independent monitor is powered by the constant power supply branch group and receives a wake-up signal through a signal channel that does not depend on the main processor's communication process. Wake-up signals can be generated by protection activation, operation requests, and environmental emergencies, with signals related to protection activation and tripping using hard-wired inputs. After receiving the wake-up signal, the independent monitor first restores the basic clock and basic acquisition branch according to the power supply dependency, then restores the main processor branch, and subsequently restores the communication, storage, display, or environmental execution branch corresponding to the wake-up reason. The restoration process only changes the power supply status of the auxiliary equipment and does not directly change the open / closed state of the primary switch; the primary switch operation is still completed by the original protection, remote control, and five-proof logic.

[0018] After each power supply branch is restored, the independent monitor detects the heartbeat signal, power good signal, and actual power change within the confirmation time limit. If the restored power domain fails to provide the required restoration evidence within the confirmation time limit, or if continuous resets or power changes do not match the corresponding load power change characteristics, the restoration confirmation is deemed abnormal. The independent monitor connects the normally closed power supply bypass or cancels the energy-saving control state of the controllable auxiliary branch group, restoring the relevant equipment to the preset safe power supply state, while retaining records of the cause of the abnormality and the restoration process. When the main processor loses response, the normally supplied power branch group still maintains the power required for protection calculations, protection inputs, and trip outputs.

[0019] Specifically, in step S6, after the energy-saving control command is issued, both the control readback and the actual power change after the action are simultaneously obtained. The control readback is used to indicate the operating status reported by the controllable branch switch or load control interface, and the actual power change is used to indicate whether the load produces a power response consistent with its load power change characteristics. Only when the control readback meets the target state and the actual power change falls within the expected power change range is an execution success flag generated. If the control readback meets the target state but the actual power does not change accordingly, an execution anomaly flag is generated, and the updating of normal load power change characteristics using the corresponding time window is stopped to identify control contact sticking, bypass power supply, abnormal equipment power consumption, or metering anomalies.

[0020] The electricity consumption benchmark is selected from historical time windows where the equipment status, power supply method, and maintenance status are the same, the ambient temperature and relative humidity fall within the same preset range, and there are no metering anomalies. The electricity savings of the verification time window are obtained by subtracting the actual auxiliary power and the power added by the delayed task during subsequent execution from the electricity consumption benchmark. When the delayed task has not been completed or has not yet entered the unified settlement cycle, the corresponding energy difference remains in a pending verification state and is not included in the electricity savings; time windows with faults, execution anomalies, sensor faults, or unknown loads are not used to update load power change characteristics and historical electricity consumption benchmarks.

[0021] Another aspect of the present invention provides an integrated primary and secondary ring network box energy consumption monitoring and energy-saving control system. The system includes an auxiliary energy consumption acquisition module, a sub-item energy determination module, a constraint condition determination module, an energy-saving action selection module, an independent monitoring and recovery module, and an execution verification module. Each module is connected for processing and feedback in the order of auxiliary energy consumption metering, sub-item energy determination, constraint construction, control execution, anomaly rollback, and result feedback.

[0022] The auxiliary energy consumption acquisition module is used to separate the constant power supply branch group and the controllable auxiliary branch group according to the auxiliary power supply topology of the ring network box, and to synchronize the auxiliary energy consumption metering results, branch status, and equipment events in time. This module includes a main metering unit installed on the AC auxiliary incoming line or DC auxiliary bus, branch metering units installed on the controllable auxiliary branch groups, and controllable branch switches connected between the auxiliary bus and the adjustable auxiliary load. The constant power supply branch group is connected to the protection calculation unit, protection input unit, and trip output holding unit through a power supply path not controlled by the controllable branch switches.

[0023] The sub-item power determination module is used to divide the power segments before and after an event based on the load equipment event, determine the load power change characteristics based on the total auxiliary power difference between adjacent segments and the branch state change, and calculate the sub-item power. The constraint condition determination module is used to obtain the maximum allowable execution interval of the task, the dew point safety limit, the backup power reserve capacity, and the auxiliary power limit. The energy-saving action selection module is used to delete candidate actions that do not meet the above constraints, and select actions with lower expected auxiliary power consumption and fewer switching times from the remaining actions to form control commands.

[0024] The independent monitoring and recovery module includes an independent monitor, a wake-up signal input circuit, a tiered power supply control circuit, and a normally closed power supply bypass. The independent monitor is powered by the normally closed power supply branch group. The wake-up signal input circuit receives the protection start signal and operation pre-signal via hardwiring. The tiered power supply control circuit is connected to the enable terminals of each controllable auxiliary branch group. The normally closed power supply bypass is connected across the two ends of the energy-saving control path. The independent monitor is used to monitor the wake-up conditions and the execution process of energy-saving control commands, and restores the preset safe power supply state through the normally closed power supply bypass or the tiered power supply control circuit when an anomaly is confirmed during recovery.

[0025] The execution verification module includes a readback verification unit, a power change verification unit, a baseline matching unit, and a data update unit. The readback verification unit obtains the switch status or equipment operating status corresponding to the control command; the power change verification unit verifies whether the actual power change after the action falls within the confirmed power change range of the corresponding load; the baseline matching unit selects the power consumption benchmark from historical time windows where the primary equipment status, power supply mode, and maintenance status are the same, and the ambient temperature and relative humidity fall within the same preset range, and determines the power saving after deducting the power consumption for delayed tasks; the data update unit updates the load power change characteristics only when the execution is successful and the metering is normal, and retains the original power change characteristics and outputs an anomaly flag when the execution fails or the metering is abnormal.

[0026] In summary, this invention first divides the auxiliary power supply into constant power supply branches and controllable auxiliary branches based on the auxiliary power supply wiring. Then, it determines the load power change characteristics and individual energy items based on equipment events, branch status, and total auxiliary power. Subsequently, it selects energy-saving actions based on the task deadline, dew point safety limits, backup power reserve capacity, and auxiliary power output capacity. When protection is activated, an operation request occurs, or an environmental emergency signal appears, the independent monitor initiates graded power supply restoration through hard wiring. If restoration fails, it connects to the normally closed bypass. After the action is executed, the control readback and actual power change are checked simultaneously, and the amount of energy saved is determined after deducting the energy required for delayed task execution.

[0027] Compared with existing technologies, this invention not only records the total power consumption at the auxiliary power inlet, but also uses load equipment events and branch states to determine the actual power changes before and after the events. For auxiliary loads without separate energy meters, the sub-item energy can be calculated based on the power change range confirmed by a single load event. When multiple loads operate in an overlapping manner, the time window where the state combination cannot be compared with the measured total power is marked as an unknown load or a metering anomaly time window, and is not used to update normal parameters or generate energy savings.

[0028] This invention further maintains protection and operation functions on a continuously powered branch that cannot be disconnected by energy-saving control, and only performs energy-saving actions on auxiliary loads with controllable switches or low-power interfaces and verified recovery times. The maximum permissible execution interval of the task, the temperature difference between the critical surface and the dew point safety limit, the reserved power of the backup power supply, the upper limit of auxiliary power, and the wake-up time limit jointly limit the action selection. An independent monitor receives protection start and operation request signals via hardwiring and connects the normally closed power supply bypass when the main processor fails to recover on time; it performs verification of reuse status readback and actual power changes to eliminate apparent energy-saving results caused by contact adhesion, bypass power supply, or load failure. Attached Figure Description

[0029] To more clearly illustrate the technical solution of this application, the accompanying drawings are briefly described below.

[0030] Figure 1 This is a flowchart of the energy consumption monitoring and energy-saving control method for primary and secondary integrated ring network boxes according to the present invention.

[0031] Figure 2 This is a schematic diagram of the system structure and auxiliary power supply branch relationships of the present invention.

[0032] Figure 3 This is a schematic diagram illustrating the generation of load device event segmentation and load power change characteristics according to the present invention.

[0033] Figure 4 This is a flowchart illustrating the determination of control constraints and selection of energy-saving actions in this invention.

[0034] Figure 5This is a flowchart of the independent wake-up and failure rollback process of this invention.

[0035] Figure 6 This is a schematic diagram showing the on-site deployment and connection relationship of the primary and secondary integrated ring network box of the present invention.

[0036] Figure 7 This is a schematic diagram illustrating the confirmation of energy-saving actions and the verification and feedback of energy savings in this invention. Detailed Implementation

[0037] The technical solution of the present invention will be further described below with reference to the accompanying drawings and specific embodiments. The specific embodiments described are used to illustrate the technical structure, processing relationships, and implementability of the present invention, and are not intended to limit the present invention to using only the exact same device form, interface type, sampling frequency, parameter value, or control cycle. Where there is no conflict, the technical features in the following specific embodiments can be combined with each other.

[0038] Unless otherwise stated, the auxiliary energy consumption referred to in this application refers to the energy consumption generated by protection and control, communication, storage, display, lighting, environmental regulation, battery maintenance, and related auxiliary power conversion within the ring main unit; the equipment event refers to a timestamped record that can indicate a change in the auxiliary load status or operating conditions; the constantly powered branch group refers to a branch that continuously supplies power to protection, operation, and independent monitoring components without passing through an energy-saving control switch; the controllable auxiliary branch group refers to a power supply branch equipped with a controllable branch switch or a low-power interface for the equipment; the load power change characteristic refers to a characteristic composed of the power difference before and after the measured event, the peak value at start or stop, the duration of state transition, and the continuous power; the maximum permissible execution interval refers to the maximum allowable time between two consecutive successful executions of the same deferred task; the dew point safety limit refers to the sum of the dew point temperature and the preset safe temperature difference; the backup power reserve capacity refers to the power reserved to complete protection, operation, and necessary communication. All the above data are obtained from metering units, branch status, time records, or equipment events.

[0039] Example 1

[0040] This embodiment provides a method for monitoring and controlling energy consumption of a primary and secondary integrated ring network box, for illustration. Figure 1 The method described herein is executed locally within the ring main unit. Energy-saving control is limited to the auxiliary power supply system and its secondary service loads, environmental regulation loads, and other auxiliary loads. It does not alter the protection settings, opening and closing logic, operation interlocking conditions, or five-prevention logic of the primary switchgear. The power, time, and threshold values ​​involved can be calibrated according to the auxiliary power supply capacity, secondary equipment configuration, cabin structure, and on-site climate conditions of the ring main unit. The following numerical ranges are used to illustrate the relationship between each processing step and do not constitute a limitation on equipment specifications.

[0041] This embodiment uses a primary and secondary integrated ring network box as an example, which includes an AC auxiliary power supply, a DC backup power supply, a protection and control unit, a communication unit, an extended storage unit, a display unit, a heating unit, a dehumidification unit, a fan, and a battery maintenance unit. A main metering unit is installed at the AC auxiliary incoming line, and branch metering units are installed on the controllable secondary equipment branch and the environmental control branch. A controllable branch switch is installed between the auxiliary bus and the adjustable load. Independent monitors are continuously powered through a power supply path that is not interrupted by the energy-saving control software, and are connected to the protection start signal, operation pre-signal, cabinet door status signal, environmental emergency comparison signal, and the enable terminal of each controllable auxiliary branch group. The energy consumption monitoring and energy-saving controller obtains metering results, equipment events, load status, and control readbacks through a fieldbus or discrete input / output interface.

[0042] Reference Figure 1 Example 1 is executed according to steps S1 to S6. S1 outputs the synchronized power, branch status, and equipment events; S2 outputs the load power change characteristics and sub-item energy; S3 outputs the task deadline, dew point limit, reserved power, and allowed actions; S4 outputs the energy-saving control command for the current control cycle; S5 outputs the power supply restoration or abnormal bypass result; S6 outputs the execution success or abnormal flag, power saving, and allowed updated power change characteristics.

[0043] Figure 1 The solid arrows in the diagram represent the sequential transmission of synchronization data, component energy determination results, energy-saving control constraints, energy-saving control commands, and execution results from steps S1 to S6. The dashed arrows pointing from step S6 to step S2 represent the update path for verified power change characteristic parameters, and the dashed arrows pointing from step S6 to step S4 represent the feedback path for action selection parameters. After execution confirmation or an anomaly flag is generated, the next control cycle begins, thereby... Figure 1 The process shown includes both the normal processing path and the data update path.

[0044] The inputs for step S1 are the auxiliary power supply wiring diagram, total metering results, controllable auxiliary branch status, and load device events. The controller first marks the constantly powered branch group and the controllable auxiliary branch group according to the wiring relationship. The constantly powered branch group does not pass through the energy-saving control switch and continuously supplies power to the protection, operation, necessary clock, and independent monitor. Then, the total auxiliary power, controllable auxiliary branch status, and load device events are converted to the same time base. Step S1 outputs a synchronized record with a unified timestamp and data quality status for use in step S2.

[0045] For AC auxiliary power supplies, the total metering unit obtains the voltage and current of each phase, as well as the phase difference between the corresponding voltage and current. The product of each phase voltage and current is multiplied by the cosine of the phase difference, and then summed over all power supply phases to obtain the total AC active power. For DC auxiliary buses, the bus voltage and bus current are multiplied to obtain the DC power. The total metering unit accumulates the total auxiliary power point-by-point according to the sampling interval to obtain the total auxiliary energy within the statistical time window. Within the same statistical time window, the energy of the normally supplied branch group, the energy of controllable secondary equipment, the energy of environmental regulation, the energy of other auxiliary loads, normal power conversion losses, and the metering allowable error are added together and compared with the total auxiliary energy. When the difference continuously exceeds the allowable range determined by metering accuracy, no-load calibration results, and normal conversion loss fluctuations, the time window is marked as a metering abnormality time window.

[0046] Under normal steady-state conditions, the total metering sampling interval can be set from 100 milliseconds to 1 second. When protection activation, operation prelude, or auxiliary load switching events occur, the sampling interval is shortened to 20 milliseconds to 100 milliseconds for a period before and after the event to record transient power changes. The normal sampling interval for environmental conditions can be set from 5 seconds to 30 seconds, and shortened to 1 second to 5 seconds when the condensation risk approaches the safety boundary. Data from different sampling rates are all marked with a unified clock and mapped to the same control cycle according to the timestamp.

[0047] Step S1 also establishes a device event queue. Protection activation and reset, switch position changes, remote operation prelude, local operation, cabinet door opening and closing, five-prevention status changes, and auxiliary load start / stop all form timestamped device events. If the time difference between multiple events is less than the event merging interval and they belong to the same operation process, they are associated as a composite event. For example, remote operation prelude, operation permission return, and switch position change can be associated as a single operation event, but the order of their occurrence is still preserved. This allows differentiation between the prelude, execution, and completion processes that cause power changes.

[0048] The input for step S2 is the synchronization record output from step S1. The controller uses load start / stop or state change events as anchor points, obtaining the pre-event stability window, state transition window, and post-event stability window from the auxiliary power sequence. Based on the total auxiliary power difference before and after the event, the corresponding branch state change, transition peak value, and duration, the load power change characteristics are determined. Step S2 outputs the power change characteristics and component energy of each controllable auxiliary load; segments that do not match the allowed state combinations are output as unknown load segments.

[0049] The power change characteristics of the corresponding load are calculated by separately calculating the average power of the stable window before the event, the average power of the stable window after the event, the difference between the two, the peak value of the state transition window, the duration of the state transition, and the continuous power after the event. Each characteristic is represented by an allowable range, which is determined based on the median value and the maximum allowable deviation of the characteristics obtained from multiple individual start-stop operations of the same load under the same operating conditions. The power segment is used to update the power change characteristics of the corresponding load only when the load state changes, the direction of the branch state change is consistent with the control target, and the metering verification difference is within the normal range.

[0050] When multiple loads change state in adjacent time periods, or when the target branch does not have an independent metering unit, first determine the set of loads that may change state based on the event queue and state readback, and then list a limited number of state combinations according to the allowed state transition relationships of each load. For each state combination, add up the calibrated power change ranges of each load within the combination and check it against the measured total auxiliary power change in the event window; delete combinations that would cause any load power to exceed its calibrated range, and select the combination with the smallest check difference that falls within the normal range as the basis for itemization. If no combination meets the normal range, mark the power segment as an unknown load segment and do not use this segment to modify the normal load power change characteristics.

[0051] The inputs for step S3 are the individual electrical energy, primary equipment status, secondary task status, cabinet temperature and humidity, available backup power, and auxiliary power output capacity. Based on this, the controller determines the maximum permissible execution interval for each deferred task, the dew point safety limit for critical surfaces, the reserved backup power, and the upper limit of auxiliary power, and lists the permissible on / off, power adjustment, or deferred actions for the next control cycle. Step S3 outputs the limiting conditions and the set of permissible actions without altering the original protection judgment.

[0052] For each deferred task, its last successful execution time is recorded, and the maximum allowable execution interval is obtained from the parameter table corresponding to the current operating state. The controller compares the elapsed time between the current time and the last successful execution time; when the elapsed time reaches the maximum allowable execution interval, the task is marked as a mandatory task for the current control cycle. When remote operation, local maintenance, or fault recording requirements occur, the relevant communication, display, or recording tasks adopt a shorter maximum allowable execution interval. The last successful execution time is only updated after the task receives completion feedback; protection calculation, protection input, and trip output tasks are not included in the deferred processing.

[0053] The controller determines the dew point temperature based on the cabin temperature and relative humidity using a dew point calculation program or a dew point lookup table. When temperature sensors are installed on critical surfaces, the surface temperature is directly obtained. If no surface temperature sensors are installed, the temperature change relationships of each critical surface are obtained based on natural temperature rise and fall tests of the enclosure, heater standalone operation tests, and fan standalone operation tests. The surface temperature for the next control cycle is predicted using the current estimated surface temperature, cabin temperature, heating input, and air circulation status. The lowest temperature among all critical surfaces must not be lower than the sum of the dew point temperature and the preset safe condensation temperature difference. External circulation ventilation only initiates candidate actions when the absolute moisture content outside the cabinet is lower than the absolute moisture content inside the cabinet and the air inlet duct meets rainproof and dustproof requirements.

[0054] Simultaneously, the current available power is determined based on the backup power supply's state of charge, allowable discharge current, and temperature corrections. The estimated power consumption of the normally supplied branch during the specified emergency duration, reserved operational power, and necessary communication power are deducted from this amount. When the remaining power approaches the safety lower limit, ordinary battery maintenance and non-protection tasks that can still be postponed are suspended. When environmental risks have not reached the emergency boundary, environmental regulation tasks must not consume reserved operational and necessary communication power. The upper limit of auxiliary power is determined based on the allowable output capacity of the auxiliary power supply, the current temperature rise, and the allowable discharge capacity of the backup power supply.

[0055] The input to step S4 is the constraint conditions and set of allowed actions output in step S3. The controller deletes actions that would cause a power outage in the constant power supply branch, task overdue, critical surface temperature below the dew point safety limit, backup power supply capacity below the reserved capacity, recovery time exceeding the wake-up time limit, or auxiliary power exceeding the limit. For the remaining actions, they are sorted from lowest to highest expected auxiliary power consumption; if the expected auxiliary power consumption is the same, the action with fewer actuator state transitions is selected. Step S4 only outputs the control instructions required for the current control cycle.

[0056] For environmental actuators, minimum continuous running time, minimum stop time, and hysteresis interval are also set. For communication and storage tasks, priority is given to merging and executing them within the allowable range of task expiration status; for display and lighting, low power consumption is maintained when the cabinet door is closed and there is no local operation, and it becomes a mandatory recovery task after the cabinet door is opened or a local button is pressed; for battery maintenance, it avoids the periods of environmental actuator startup and concentrated communication transmission to reduce the auxiliary power peaks caused by simultaneous startup.

[0057] The inputs for step S5 are energy-saving control commands, protection activation, operation requests, and environmental emergency hard-wired signals. The independent monitor continuously monitors these three types of signals and the execution status of energy-saving actions; when one of the aforementioned three types of signals is valid, power is restored in the order of the basic acquisition branch, the main processor branch, and the corresponding auxiliary load branch. Step S5 outputs the restoration confirmation results for each stage; if restoration fails, the normally closed power supply bypass is connected and the cause of the abnormality is output.

[0058] After receiving the wake-up signal, the independent supervisor proceeds according to... Figure 5 The recovery process is performed in the following order. First, the base clock and base acquisition branches are restored, and a good power signal or expected power change is checked within the first confirmation time limit. Then, the main processor branch is restored, and the main processor heartbeat is checked. Finally, the communication, storage, display, or environmental execution branches corresponding to the wake-up reason are restored, and control readback and power response are checked. The first confirmation time limit can be set to milliseconds based on the power stabilization time, and the main processor confirmation time limit can be set to no more than a few seconds based on the startup time; specific values ​​are determined during factory testing.

[0059] If any level fails to obtain the required recovery evidence within the confirmation time limit, or if there is a situation of continuous reset, inconsistency between control readback and actual power change, the independent monitor connects the normally closed power supply bypass or cancels the energy-saving state of the controllable auxiliary branch group, causing the corresponding equipment to return to the preset safe power supply state. The graded recovery only controls the auxiliary power supply branch and does not directly issue primary switch opening and closing commands. If the main processor fails to recover, the normally supplied power branch group still provides continuous power supply for protection calculation, protection input, and trip output.

[0060] The inputs for step S6 are the control command, control readback, actual power change after the action, and historical valid time windows. The controller first checks the control readback and actual power change; if both match the control command, it outputs a success flag; otherwise, it outputs an execution error flag. Then, it selects an electricity consumption benchmark from historical time windows where the primary equipment status, power supply mode, and maintenance status are the same, and the ambient temperature and humidity fall within the same preset range. After deducting the electricity consumption for delayed tasks, it outputs the saved electricity. Only time windows with successful execution and no metering abnormalities are used to update the power change characteristics.

[0061] The power saving verification process refers to Figure 7 Select effective time windows from historical time windows that have the same equipment status, power supply mode, maintenance status, and similar environmental range. Remove time windows with protection actions, execution anomalies, sensor failures, unknown loads, and metering discrepancies exceeding limits. Use the median auxiliary energy value of the remaining time windows as the power consumption benchmark. The energy saving for the verification time window is the power consumption benchmark minus the actual auxiliary energy and the additional energy added by the delayed task during subsequent execution. While the delayed task is not yet completed, the corresponding energy difference remains in a pending verification state.

[0062] For example, if ordinary data transmission is delayed within the verification time window but is executed in the next time window, the energy required for the concentrated transmission is included in the energy consumption for the delayed task. This temporarily unoccupied energy consumption cannot be directly considered as energy saving. Only when the action execution has been confirmed through control readback and actual power changes, the delayed service has been completed or entered a unified settlement cycle, and the energy balance residual is within the normal range, will the verified energy saving be output.

[0063] The time window for successful execution and met verification conditions is used to update the allowable range of power change characteristics of the corresponding load, the surface temperature change relationship obtained from the heat transfer test, and the historical power consumption benchmark. Execution anomalies, sensor failures, energy verification discrepancies exceeding limits, or unknown load segments do not participate in normal data updates. The updated load power change characteristics return to step S2, and the updated action duration and safety limits return to step S4, forming a processing and feedback process from auxiliary energy consumption monitoring, component energy determination, limit condition checking, safe execution to result verification.

[0064] Example 2

[0065] This embodiment is based on Embodiment 1, and... Figure 3 The process of device event anchoring segmentation, load power change characteristic calibration, and component energy determination is described in detail. This embodiment is applicable to the retrofitting of existing integrated primary and secondary ring network boxes. A total metering unit is set at the auxiliary power inlet, and branch metering units are set in the controllable secondary equipment branches and environmental control branches. It is not required to set up independent energy meters for communication, extended storage, display, lighting, battery maintenance, and each environmental actuator. The energy consumption of loads not independently metered is determined by device events, branch status, and total auxiliary power.

[0066] Reference Figure 3 The input information for the sub-item energy determination module includes equipment event streams, auxiliary power sequences, and branch status sequences. Equipment event streams record events that may cause changes in auxiliary load status and their occurrence times; auxiliary power sequences are continuously generated by the main metering unit; and branch status sequences are generated by controllable branch switches, equipment operating status returns, and branch metering units. These three types of information enter a unified clock alignment process, subsequently determining event anchor points and establishing a steady-state front window, transition window, and steady-state back window.

[0067] After a device event enters the event queue, timestamp correction is performed first. When the main metering unit, controller, and independent monitors use the same clock source, they are directly sorted according to their timestamps. When each device has an independent clock, the clock deviation is estimated using periodic synchronization messages or common state change events, and this deviation is subtracted from the original time of each device before being converted to the controller's time base. When the clock deviation exceeds the allowable value, the corresponding event is not used to update the high-time-resolution load power change characteristics, but it can still be used for energy verification over a longer time window.

[0068] For multiple events belonging to the same operational process, associations are established based on event source, object identifier, and order of occurrence. For example, remote operation prelude, operation permission return, switch position change, and operation completion return are associated as a composite event; heating control command, relay readback, and branch current occurrence are associated as an environmental execution event. The composite event uses the first moment indicating an impending load change as a pre-anchor point, the moment the actual power begins to change as a power anchor point, and retains the response time between the two. This response time can be used as part of the load power change characteristics to distinguish situations where the control interface has responded but the execution component has not yet acted.

[0069] When establishing event segments, the power stability interval is first searched forward from the event anchor point. When the adjacent power changes and power variance within the window do not exceed their respective steady-state thresholds for multiple consecutive sampling points, this is determined as the pre-event stability window. After the event anchor point, the interval where the power change exceeds the event detection threshold is determined as the state transition window. After the power change is completed, the interval where multiple consecutive sampling points again meet the steady-state threshold is determined as the post-event stability window. The thresholds are determined based on power fluctuations during no-load operation and stable operation of the constantly supplied branch, to avoid identifying power ripple or metering noise as load switching.

[0070] The following parameters are obtained from three time windows: the stable power difference before and after the event, the peak value of the state transition, the duration of the state transition, the continuous power after the event, the response time from the control command to the power change, and the power ripple of the periodic load. The above actual measurements collectively describe the power change process of the auxiliary load when it transitions from one state to another, and are saved separately according to the specific load and operating conditions, without using the equipment name or a single instantaneous power value as the basis for identification.

[0071] During factory calibration or on-site commissioning, the target load is individually changed in turn, while other controllable auxiliary loads remain stable. When the same target load is repeatedly operated, samples with abnormal control readbacks, excessive metering discrepancies, or other load events within the specified window are deleted. For the remaining samples, the median of each measured characteristic is used as the center, and the allowable deviation is determined according to the sample dispersion and metering accuracy. After acquiring new event characteristics during operation, each is checked to ensure it falls within the corresponding allowable range, while simultaneously checking the event queue for any record of the load's state change. When multiple loads meet the allowable range, inconsistent loads are first eliminated based on branch status and event sequence, then the load with the smallest overall deviation is selected; if a unique determination is still not possible, the multi-load overlapping energy determination process begins.

[0072] Figure 3The "single load change" determination is accomplished through event queues, control readback, and branch current. If only one load state changes before and after an event, and the direction of change in the corresponding branch current is consistent with the control target, the power change characteristics of that load are updated based on the difference in stable power before and after the event, and the integrated energy within the event window is attributed to that load. This single load measurement result also serves as the basis for verifying the subsequent determination of overlapping energy across multiple loads.

[0073] When multiple loads overlap in operation or some loads lack independent metering, candidate loads and their permissible state transitions are determined based on event queues and control readbacks, resulting in a finite number of load state combinations. For each combination, the permissible total power variation range for that combination is calculated according to the calibrated power ranges of each load within the combination, and this is checked point-by-point against the measured total auxiliary power variation within the time window. Combinations containing disallowed state transitions or those causing any load to exceed its calibrated power range are deleted, and the combination with the smallest cumulative check difference that remains within the metering permissible range is selected. For controllers with limited processing resources, the candidate load set can be narrowed down first by event object and branch location before performing the above finite combination check.

[0074] After determining the load state combination, the component energy of each load is calculated according to the calibrated power and actual on-time of each load in each sampling interval; for loads using power adjustment or intermittent operation mode, the actual on-time is also corrected according to the duty cycle in the corresponding control cycle.

[0075] The energy of each load component and the energy of the directly metered branch are combined and incorporated into the auxiliary energy balance relationship. In the case where there are both known loads and unknown minor loads in the same branch, the energy estimated by the known loads is first deducted, and then the remaining part that cannot be explained by normal conversion losses is included in the energy balance residual.

[0076] Figure 3 The power verification difference is used to isolate unknown loads and abnormal states. The verification difference is only recorded as a transient change that is not fully modeled when it briefly exceeds the limit during load switching and returns to normal after the state transition window ends. When the verification difference continuously exceeds the allowable power range or the cumulative energy difference within the statistical time window exceeds the allowable range, the corresponding segment is marked as an unknown load or metering anomaly segment. This segment is saved in the operation log, but it does not update the normal load power change characteristics, nor is it used as a historical electricity consumption benchmark.

[0077] Load power variation characteristics are updated in a controlled manner. Valid observations confirmed by a single load event, control readback, and branch current are merged with the original characteristic range according to a preset update ratio; a smaller update ratio is used during normal steady-state operation, while a larger update ratio can be used during the recalibration phase after equipment maintenance or replacement. The results of determining the power consumption of multiple overlapping loads are only allowed to be updated when the verification difference is lower than the update threshold and the results are consistent across multiple consecutive time windows.

[0078] Load power change characteristics are also used to confirm the execution of energy-saving actions. After the controller commands the target load to disconnect, the control readback should switch to the disconnected state, and the total auxiliary power or the corresponding branch power should show a decrease consistent with the power change characteristics of the stopped load. After commanding the target load to connect, the corresponding startup process and continuous power should be observed. If there is only a change in the control readback but the actual power does not enter the allowable range of the power change characteristics, no execution success flag is generated, and the time window is marked as inconsistent between the control state and physical power consumption. This allows for the differentiation of relay contact sticking, bypass connection, load not starting, and metering abnormalities, avoiding the need to determine individual energy consumption based solely on software status.

[0079] Through the above processing Figure 3 The device event stream, auxiliary power sequence, and branch state sequence are synchronized in time to form an event window. A single load event is used to calibrate the power change characteristics associated with operating conditions. Multiple overlapping load events are compared with the measured total auxiliary power through finite state combinations to calculate the sub-item energy. Segments with consecutively exceeding limits in the verification difference are isolated as unknown loads or metering anomaly segments. The calculated sub-item energy is sent to the control limit determination process, and the load power change characteristics are used simultaneously for verification and subsequent action selection.

[0080] Example 3

[0081] This embodiment is based on Embodiment 1 and Embodiment 2, and... Figure 4 The process of determining control constraints and selecting energy-saving actions is shown, and Figure 5 The independent monitoring and power restoration process is described in detail. Energy-saving action selection is executed by the energy consumption monitoring and energy-saving controller, while independent monitoring and power restoration are performed by the independent monitors within the normally powered branch group. The two are isolated from each other in terms of power supply and processing logic, and the independent monitors have power restoration authority superior to ordinary energy-saving commands.

[0082] The controller establishes the current operating state at the beginning of each control cycle. The operating scenario is not a single enumerated state, but is jointly determined by the line power supply status, switch and protection status, operation interaction status, maintenance status, environmental risk status, backup power status, and auxiliary power limitations. The controller first identifies conditions that may affect protection or operational responses, then identifies environmental and backup power conditions, and finally determines the adjustable range of general auxiliary services. Fault and protection handling has the highest priority, followed by operational preparation and local maintenance, then environmental safety, and general energy saving is only executed when all the aforementioned conditions are met.

[0083] For each deferred task, a task record is created, including the task identifier, corresponding load, estimated duration and power consumption, last successful execution time, maximum allowable execution interval under normal conditions, maximum allowable execution interval under current operating conditions, and completion feedback conditions. A basic interval is used during normal operation; when remote operation, local maintenance, or fault recording requirements arise, shorter intervals are used for related communication, display, or recording tasks. When the elapsed time since the last successful execution time reaches the maximum allowable execution interval, the task is added to the mandatory execution set; if a task fails, the last successful execution time is not updated; after a task succeeds, the completion time is updated.

[0084] Functions requiring protection calculations, protection inputs, trip outputs, and independent monitoring do not establish task expiration states; instead, they are directly written into critical constant power supply constraints. High-resolution sampling for trend analysis is processed separately from protection sampling; protection sampling remains operational, while trend sampling adjusts based on task expiration states. Communication link monitoring and general data transmission are processed separately; link monitoring that maintains necessary wake-up capabilities remains operational, while general data transmission can be merged within the specified timeframe. This avoids switching functions with different real-time requirements within the same device into a dormant state.

[0085] Environmental constraints are determined by the relationship between the current dew point temperature and the critical surface temperature. The controller calculates the minimum critical surface temperature and estimated auxiliary power consumption when no environmental actions are performed, and when heating, dehumidification, internal circulation, or external circulation actions are performed. Actions that would cause the minimum critical surface temperature to fall below the dew point safety limit are removed. For the remaining actions, actions with lower estimated auxiliary power consumption are prioritized; if the estimated auxiliary power consumption is the same, actions with fewer environmental actuator switching operations are selected. External circulation ventilation must also meet the requirement that the absolute humidity outside the cabinet is lower than the absolute humidity inside the cabinet and that the air intake duct is in an allowable condition.

[0086] The temperature variation relationships of each critical surface were determined through controlled experiments and normal operation segments. The hatch was kept closed, and the natural heating and cooling process was recorded to determine the response of critical surface temperatures to changes in cabin air temperature. When other conditions were stable, heater and fan operations were executed separately to determine the impact of heating input and air circulation on the temperatures of each critical surface. The temperature variation relationships were updated only using time windows where environmental sensors were functioning normally, readbacks were successful, and no door opening events occurred. If a critical surface temperature sensor failed, the replacement temperature was the cabin air temperature minus the conservative temperature difference determined by the cold bridge test for that critical surface, and the preset condensation safety temperature difference was increased to switch environmental control to a conservative state.

[0087] Backup power supply limitations are determined based on the current available power capacity after adjustments for state of charge, allowable discharge current, and temperature. The estimated power consumption of the normally supplied branch during the specified emergency duration, reserved power for circuit breaker operations, and necessary communication power are first deducted from the current available power capacity. If the remaining power capacity falls below the safety lower limit, normal service or non-emergency environmental adjustment actions are removed. Even when condensation risk reaches the emergency boundary, reserved operating power and necessary communication power must still be retained.

[0088] The current auxiliary power limit is determined based on the rated output of the auxiliary power supply, the current temperature rise, the allowable discharge power of the backup power supply, and the power of the critical loads already in operation. If a candidate action would cause heating, dehumidification, charging, and communication transmission processes to overlap and exceed the current auxiliary power limit, the controller will not reduce the power of the critical loads. Instead, it will adjust the start time of the deferred service to allow the corresponding loads to operate off-peak.

[0089] Reference Figure 4 The system first determines the control conditions based on the individual electrical energy items and the current operating status, sequentially obtaining the maximum permissible execution interval of the task, the dew point safety limit, the reserve power of the backup power supply, and the upper limit of the auxiliary power. The action library stores the operating states and permissible transfer relationships supported by non-protected sampling, computing resources, communication, extended storage, display, heating, dehumidification, fan, lighting, and battery maintenance. Starting from the current state, the controller generates a limited number of candidate action combinations, deleting combinations that do not meet the requirements of constant power supply, mandatory task duration, dew point safety limit, reserve power of the backup power supply, wake-up time limit, or upper limit of the auxiliary power. For the remaining combinations, the expected auxiliary power consumption is calculated item by item according to the power change characteristics and expected duration of each load. The combination with the lower expected auxiliary power consumption is selected first; if the expected auxiliary power consumption is the same, the combination with fewer actuator switching times is selected, and only the first action of that combination is output. After execution, new metering, status, and verification results are obtained before entering the next control cycle.

[0090] In a specific processing method applicable to embedded controllers, the action library stores basic action templates for different states: normal steady state, operation preparation, backup power supply, maintenance, and critical surfaces approaching dew point safety limits. The controller selects a template based on the current state, performing limited combinations only for tasks and environmental actions approaching the maximum permissible execution interval; for each combination, the estimated power consumption is accumulated hourly according to the load power change characteristics, and the constant power supply, task duration, dew point safety limits, backup power reserve, auxiliary power limit, and actuator minimum start / stop time are checked item by item.

[0091] The working process of the independent supervisor is as follows: Figure 5The independent supervisor is configured with monitoring state M0, basic recovery state M1, main processor recovery state M2, service load branch recovery state M3, and safety fallback state MF. Under normal circumstances, the independent supervisor is in state M0, monitoring protection startup, fault comparison, operation requests, cabinet door status, environmental emergency comparator, and periodic watchdog in a low-power mode. This monitoring continues even when the main processor enters low-power mode or communication processes stop.

[0092] Once the wake-up condition is met, the independent monitor does not wait for the periodic control cycle to end and immediately switches from M0 to M1, restoring the basic clock and basic acquisition branch. After the basic power supply branch is restored, it checks for a good power signal and power changes consistent with the basic acquisition load within the first confirmation time limit; upon successful confirmation, it proceeds to M2. M2 restores the main processor branch and checks the main processor heartbeat, startup completion status, and corresponding power changes within the second confirmation time limit; upon successful confirmation, it proceeds to M3. M3 restores the communication, storage, display, or environmental execution branch according to the wake-up reason and checks the control readback and corresponding load power change characteristics.

[0093] For each recovery stage, recovery evidence appropriate to the load at that stage is used. If the power domain only has a good power signal but no expected power change, it is determined that there may be an open circuit or the device has not started; if a power change occurs but there is no control readback, it is determined that there may be a status feedback fault; if the main processor has a power change but does not send a heartbeat within the acknowledgment time limit, it is determined that the startup has failed. If the acknowledgment conditions are not met, continuous resets occur, or acknowledgment signals are contradictory, the independent monitor switches to MF (Master Detection).

[0094] In MF (Multi-Functional Power Management), the independent monitor connects to the normally closed power supply bypass or removes the energy-saving enable signal of the adjustable power domain, restoring full-function power supply to the relevant secondary equipment. Simultaneously, it writes the wake-up source, failure level, acknowledgment signal, and rollback time to the available recording units. Safety rollback does not change the primary switch's open / closed state, nor does it bypass existing protection, remote control, and five-proof judgments. If the main processor still cannot start, the normally powered branch group continues to maintain protection calculations, critical inputs, and trip outputs. The independent monitor processes the main processor's recovery according to the periodic retry strategy but does not repeat the primary switch operation.

[0095] Once the relevant service load branch in M3 has recovered and received execution confirmation, the independent supervisor maintains the required functions. Only after the wake-up event ends, the service task completes, and the main processor re-establishes a valid energy-saving control state, does the independent supervisor allow the corresponding power supply branch to return to a low-power state according to the new energy-saving instructions. The independent supervisor does not directly use the old instructions generated by the main processor before wake-up, avoiding the restoration of the original energy-saving actions when the operating scenario has changed.

[0096] Through the processing in this embodiment, Figure 4The cycle control involves selecting energy-saving actions within the service life, condensation risk, backup power, and auxiliary power boundaries. Figure 5 The independent monitor asynchronously restores the required power supply branch when protection, operation, and environmental emergencies occur, and enters a determinable safe state when an anomaly occurs. Periodic control is responsible for energy distribution under normal conditions, while the independent monitor is responsible for wake-up time and anomaly backoff. Together, they ensure that energy-saving actions do not affect critical protection and operational functions.

[0097] Example 4

[0098] This embodiment provides a primary and secondary integrated ring network box energy consumption monitoring and energy-saving control system for illustration. Figure 2 The system shown illustrates the functions of each module, the connections between modules, and the specific implementation methods of each module. The system includes an auxiliary energy consumption acquisition module, a sub-item energy consumption determination module, a constraint condition determination module, an energy-saving action selection module, an independent monitoring and recovery module, and an execution verification module. Except for the independent monitoring and recovery module, which uses independent power supply and independent processing devices, the other modules can be implemented by different processing tasks within the same energy consumption monitoring and energy-saving controller, or they can be distributed across the metering board, control board, and station terminals.

[0099] Reference Figure 2 The AC auxiliary incoming line or DC auxiliary bus inlet is sequentially connected to the main metering unit and the auxiliary bus. The auxiliary bus connects to the constant power supply branch group via a power supply path not controlled by the controllable branch switch, and connects to the controllable secondary equipment branch group, environmental control branch group, and other auxiliary load branch group via branch metering and the controllable branch switch group. The constant power supply branch group continuously supplies power to the protection and operation functions and independent monitors. The total metering results, branch metering results, and branch status are entered into the energy consumption monitoring and energy-saving control section. The control commands generated by the energy-saving action selection module are returned to the controllable branch switch group, and the verification results generated by the execution verification module are fed back to the sub-item energy determination module and the energy-saving action selection module, respectively.

[0100] Figure 2 In the diagram, solid arrows indicate auxiliary power supply or control action paths, dashed arrows indicate data paths for metering results, branch status, control readback, power change characteristic updates, and confirmed data feedback, and bold solid lines indicate critical safety paths for continuous power supply from the auxiliary bus to the constantly supplied branch group via branches not controlled by energy-saving switches. Synchronous data output from the auxiliary energy consumption acquisition module sequentially enters the sub-item energy determination module, constraint condition determination module, energy-saving action selection module, and execution verification module along the module chain. The execution verification module feeds back the power change characteristic verification results to the sub-item energy determination module and the control parameter verification results to the energy-saving action selection module.

[0101] In terms of the functions of each module, the auxiliary energy acquisition module is used to establish the boundary relationship between the constant power supply branch group and the controllable auxiliary branch group according to the auxiliary power supply topology of the ring network box, obtain the total auxiliary power, branch auxiliary power, branch status and equipment events, and convert information from different sources to a unified time base. This module is also used to calculate the total auxiliary power and the metered branch power within the time window, forming the auxiliary power records required for subsequent determination of sub-item power.

[0102] The sub-item power consumption determination module receives synchronization information from the auxiliary power consumption acquisition module. It segments the auxiliary power sequence using the time of equipment event occurrence as an anchor point, establishing a steady-state front window, a transition window, and a steady-state back window. Load power change characteristics are formed from the power changes between these windows. For branches without independent metering or time windows with overlapping load operations, this module decomposes the total auxiliary power using load state and power change characteristic parameters, outputting the sub-item power consumption for each load or load category, and marking time windows where residuals continuously exceed limits as abnormal time windows.

[0103] The constraint determination module receives data on individual electrical energy items, primary equipment operating conditions, secondary service status, environmental conditions, and backup power supply status, and determines the applicable constraints for the current control cycle. These constraints include: deferred tasks must not exceed the maximum permissible execution interval; critical surface temperatures must not fall below the dew point safety limit; available backup power must not fall below reserved power; total auxiliary power must not exceed the permissible upper limit; and the normally powered branch group must maintain power supply during energy-saving control. When multiple constraints conflict, they are executed in the following order: protection and fault handling, operational response, environmental safety, and general energy saving.

[0104] The energy-saving action selection module generates a limited number of candidate action combinations based on the current load status and the action library. It then uses load power change characteristics to calculate the expected auxiliary power and expected auxiliary energy for each combination. Combinations that cannot maintain power supply to the constant power supply branch, will cause task delays, will cause critical surfaces to fall below the dew point safety limit, have insufficient backup power, exceed wake-up time limits, or have auxiliary power exceeding the allowable output power are deleted. The remaining combinations are sorted from low to high expected auxiliary power consumption. When expected auxiliary power consumption is the same, the combination with fewer actuator state transitions is selected, and the actions in the current control cycle of the selected combination are converted into control commands.

[0105] The independent monitoring and recovery module continuously monitors protection activation, operation requests, and environmental emergencies when the main processor or some service load branches are in a low-power state. When the wake-up condition is met, the module restores power in stages according to the order of basic acquisition branches, main processor branches, and relevant service load branches, and checks the power good signal, heartbeat signal, control readback, and power changes after each level of restoration. If an abnormality is confirmed during restoration, the module cancels energy-saving control or connects the bypass, restoring the relevant loads to a preset safe power supply state.

[0106] The execution verification module obtains the status readback corresponding to the control command and the actual power change after the action. It compares the actual power change with the expected range defined by the corresponding load power change characteristics, and generates an execution success flag when both results meet the control command. This module also selects the power consumption benchmark from historical time windows where the primary equipment status, power supply mode, and maintenance status are the same, and the ambient temperature and relative humidity fall within the same preset range. After deducting the actual auxiliary power and the power consumption for delayed task execution, it obtains the power saving. It then feeds back the allowable updated load power change characteristic parameters, historical power consumption benchmarks, and confirmed action selection data to the corresponding modules.

[0107] Based on the functions of the modules mentioned above, the specific implementation methods of each module are explained below.

[0108] The auxiliary energy acquisition module includes a main metering unit, branch metering units, isolated sampling circuits, status input circuits, a clock unit, and a data acquisition and processing unit. The AC auxiliary input line uses a voltage sampling circuit and an isolated current sensor to obtain voltage, current, and phase relationships. The DC auxiliary bus uses an isolated voltage sampling circuit and a Hall current sensor or shunt to obtain bus voltage and current. When the metering results are used for internal energy consumption monitoring, a metering chip or analog-to-digital converter that meets control accuracy requirements can be used; it is not required to handle trade settlement functions.

[0109] Branch metering units are preferentially installed in controllable secondary equipment branches and environmental control branches. For loads with low power and whose status can be determined by control feedback, separate metering sensors are not required; estimation can be performed based on total metering results and power change characteristics. The status input circuit receives feedback from controllable branch switches, equipment operating status, and primary equipment events via opto-isolation or digital isolation. The clock unit provides a unified time reference for metering sampling, event recording, and control output; when connected equipment uses an independent clock, the acquisition and processing unit corrects for time deviations based on synchronization messages.

[0110] The power supply path not controlled by the controllable branch switch consists of wires, protection devices, and a regulated power supply, connected to protection calculations, critical inputs, trip output holding, and an independent monitor. The controllable branch switch is installed between the auxiliary bus and the adjustable load, and can be a relay, solid-state switch, controlled DC power supply output, or an enable interface built into the load equipment. The controllable branch switch returns to a preset safe state when the energy-saving enable signal is lost and cannot be connected in series with the trip energy path of the primary switch.

[0111] The sub-item power determination module is implemented by an event buffer, a power sequence buffer, a window processing unit, a power change characteristic parameter storage area, and a sub-item calculation unit. The event buffer stores equipment events and control readbacks in chronological order. The power sequence buffer stores the total power and branch power before and after the event in a cyclic manner, and the buffer length covers the steady-state pre-window, transition window, and steady-state post-window. After an event occurs, the window processing unit reads the data before the event from the cyclic buffer and continues to receive the data after the event. After the steady-state post-window is formed, it outputs the complete event segment.

[0112] The power change characteristic parameter storage area uses non-volatile memory to store the power change characteristic center, allowable deviation, power parameters, and most recent calibration time corresponding to different loads and operating scenarios. The sub-item calculation unit first determines whether only one load state changes within an event segment; if the single load condition is met, the corresponding power change characteristic is updated; otherwise, the sub-item energy is determined according to the state combination verification method or a finite load combination search. The determination result, instantaneous residual, and time window cumulative residual are all written to the auxiliary energy record. After the system is powered on again, the confirmed power change characteristics are restored from the non-volatile memory, and temporary parameters that were not verified before power-on are not used.

[0113] The constraint determination module is implemented by a status condition table, a service task table, a dew point safety limit check unit, and a backup power supply capacity check unit. The status condition table stores the primary equipment status, operating status, maintenance status, environmental status, and backup power supply status, as well as the task priority and constraints corresponding to each status. The service task table stores the last successful execution time, maximum allowable execution interval, estimated execution time, estimated power consumption, and completion feedback conditions for each deferred task. When the operating status changes, the module re-determines whether a task must be executed based on the new maximum allowable execution interval, but does not clear unfinished tasks.

[0114] The environmental risk calculation unit connects to the internal temperature and humidity sensors, the external temperature and humidity sensors, and the critical surface temperature sensors. It calculates the dew point temperature and predicts the minimum temperature of critical surfaces based on surface temperature change relationships. In case of sensor disconnection, over-range operation, or abnormal rate of change, the environmental risk calculation unit outputs the sensor fault status and calculates the safe dew point temperature difference using conservative substitution values. The backup power reserve calculation unit obtains the state of charge, allowable discharge current, and temperature through the battery management interface, and calculates emergency power consumption and reserved power based on the measured power characteristics of the constant power supply branch group.

[0115] The energy-saving action selection module consists of an action library storage area, a candidate generation unit, a constraint condition checking unit, a power consumption comparison unit, and a control output unit. The action library storage area stores the permissible operating states, state transition conditions, minimum running time, and minimum stopping time for each auxiliary load. The candidate generation unit lists a limited number of executable action combinations based on the current equipment state. The constraint condition checking unit deletes action combinations that would cause power outages to the constant power supply branch, task delays, critical surface temperatures below the dew point safety limit, backup power availability below the reserved power, or total auxiliary power exceeding the upper limit. The power consumption comparison unit calculates the estimated auxiliary power consumption of the remaining action combinations based on the measured power change characteristics of each load and the action duration, prioritizing actions with lower estimated auxiliary power consumption; when estimated auxiliary power consumption is the same, actions with fewer branch switching operations are selected. The control output unit only outputs the actions required for the current control cycle.

[0116] The control output unit converts the selected action into a controllable branch switch signal or a low-power control command for the device. For relays or solid-state switches, the control output unit outputs on / off signals via an isolated drive circuit; for secondary devices that support operating mode settings, it sends mode setting commands via the fieldbus and waits for the device to return. The control output unit assigns a command identifier and confirmation time limit to each command, enabling the execution verification module to associate control readback, power changes, and corresponding commands.

[0117] The independent monitoring and recovery module includes an independent monitor, an independent regulated power supply, an isolated wake-up input circuit, a tiered power supply control circuit, a heartbeat detection circuit, a power comparison input, and a normally closed power supply bypass. The independent monitor can be a low-power microcontroller, a programmable logic device, or a state machine composed of logic gates. Its power supply comes from the normally powered branch group and is not controlled by the energy-saving action selection module. Protection start-up and operation pre-signals directly enter the independent monitor through the isolated wake-up input circuit, avoiding reliance on the already dormant main communication program.

[0118] The tiered power supply control circuit is connected to the enable terminals of the basic acquisition branch, the main processor branch, and the service load branch, respectively. The independent monitor operates according to... Figure 5The sequence of output recovery signals is shown, and the recovery at each stage is confirmed by a heartbeat detection circuit and a power comparison input. A normally closed power supply bypass is connected across the energy-saving control path; energy-saving actions are allowed when the bypass remains controlled open. The bypass is reopened when the independent monitor loses power, detects recovery failure, or receives a forced back-off condition. The output of the independent monitor cannot directly drive the primary switch operating mechanism; it can only restore power to auxiliary equipment.

[0119] The execution verification module is implemented by a readback verification unit, a power change verification unit, a baseline matching unit, a power saving calculation unit, and a data update unit. The readback verification unit obtains the actual status of the target device from the status input circuit or fieldbus; the power change verification unit obtains the data before and after the action from the power sequence buffer and compares it with the expected power change range in the load power change characteristics. If both meet the confirmation conditions, an execution success flag is generated; if they are inconsistent, an execution exception flag is generated, and an exception input is provided to the independent monitoring and recovery module.

[0120] The baseline matching unit filters matching windows based on primary equipment operating conditions, power supply methods, environmental ranges, and maintenance status within the verified historical time windows. The energy saving calculation unit deducts the actual energy of the verification window and the energy added for delayed tasks from the baseline energy to obtain the verified energy saving. The data update unit only updates parameters for time windows where execution was successful, delayed services have been settled, and the energy balance residual is within the normal range; its output is returned to the sub-item energy determination module and the energy-saving action selection module, respectively.

[0121] The data interface between modules uses internal records with timestamps and quality status. Quality status indicates normal, pending verification, sensor malfunction, execution malfunction, or unknown load. The constraint determination module and energy-saving action selection module only use normal records and sensor malfunction records processed according to preset conservative values; they do not use pending verification or execution malfunction records as the basis for normal data updates. Figure 2 The metering, determination of sub-items of electrical energy, determination of limiting conditions, control, verification and feedback in the system all have clear data entry points, processing conditions and output destinations.

[0122] The system can be integrated into a metering control board and an independent monitoring board within the station terminal, or it can be connected to an existing ring network box via an external energy efficiency control unit. In integrated setups, the main meter, branch switches, processor, and independent monitor can be installed in the low-pressure instrument compartment; in retrofit setups, the original protection, measurement, and control, and environmental control equipment are retained, and status is obtained and control outputs are generated via bus and discrete input / output interfaces. Regardless of the installation method, the critical constant power supply path, independent wake-up input, and normally closed power supply bypass maintain a safe relationship independent of ordinary energy-saving software.

[0123] Example 5

[0124] This embodiment combines Figure 6 and Figure 7 This paper describes the specific implementation process of the invention in field deployment, parameter calibration, control execution, and effect verification, using a primary and secondary integrated ring main unit connected to a 10 kV distribution line in a coastal high-humidity environment as the application object. The ring main unit includes a primary switch compartment, cable and critical surface areas, a low-voltage instrument and secondary equipment compartment, and an environmental regulation branch. The auxiliary power supply includes an AC 220V input and a DC backup power supply. The following equipment specifications and parameters constitute a configuration capable of implementing this invention, illustrating the coordination relationship between various processing stages. Adjustments can be made within the range of achieving the same function based on the ring main unit's volume, auxiliary power supply capacity, load configuration, and field climate conditions; these adjustments are not intended to limit the protection scope. Energy-saving effects are calculated based on field metering, execution readback, and historical electricity consumption benchmarks; a fixed energy-saving rate is not pre-set.

[0125] This application must first meet the following technical requirements. Protection calculations, protection inputs, switch position acquisition, trip output holding, necessary clocks, and independent monitors are continuously powered by the constant power supply branch group. Energy-saving control commands must not alter protection settings, trip criteria, remote control permission conditions, or the five-protection interlocking relationships, nor should they be inserted into the opening and closing energy path of the primary switch. Non-protection high-frequency data processing, general data transmission, extended storage, local display, lighting, heating, dehumidification, fan, and battery maintenance are classified into the controllable auxiliary branch group. When the controllable auxiliary branch group loses its energy-saving enable signal or the independent monitor determines an abnormal recovery, the relevant loads return to a predetermined safe power supply state. Protection start-up and operation pre-signals are hard-wired into the independent monitor, ensuring that power restoration can be triggered even when the main processor is in a low-power state or when communication tasks are not running.

[0126] Reference Figure 6 A total metering and branch metering boards are installed at the auxiliary power inlet. The AC side total metering channel includes an isolated voltage sampling circuit and a closed-loop current sensor, while the DC side includes an isolated voltage sampling circuit and a Hall current sensor. The measurement range is designed with a margin for the expected peak value when the auxiliary loads start simultaneously, and the overall measurement error is controlled within the allowable range of internal energy efficiency verification. Controllable secondary equipment branches and environmental control branches are each equipped with their own branch metering channels. Display or lighting loads with lower power and reliable status feedback are not equipped with separate metering channels; their individual energy consumption is determined by the characteristics of total power changes and load power changes. The metering board has a unified clock input and outputs voltage, current, active power, energy consumption, and data quality status to the energy consumption monitoring and energy-saving controller via an isolated communication interface.

[0127] The energy consumption monitoring and energy-saving controller employs an industrial control processor with a real-time clock, non-volatile memory, isolated fieldbus interface, and isolated digital input / output interface. The controller exchanges service status, equipment events, and control readbacks with the protection, measurement, and communication storage unit, but does not participate in protection calculations. The controller is connected to the main metering and branch metering boards, controllable branch switchboards, environmental branch switches, internal temperature and humidity sensors, external temperature and humidity sensors, critical surface temperature sensors, and a backup power management interface. Outputs for controlling relays or solid-state switches are isolated and have a manual forced-on terminal. The normally closed power supply bypass in the controllable branch switchboard conducts when the controller loses power, the independent monitor loses power, or energy-saving enable is deactivated.

[0128] The independent monitor employs a low-power processor and regulated power supply separate from the energy consumption monitoring and energy-saving controller. Its inputs are connected to protection activation, remote operation pre-operation, local operation, cabinet door opening, environmental emergency comparison, and the main processor's heartbeat signal. Its outputs are sequentially connected to the enable terminals of the basic data acquisition branch, the main processor branch, and the service load branch. The environmental emergency comparison signal is generated by an independent temperature / humidity or condensation comparison circuit, serving as a conservative wake-up condition in case of failure in the main environmental calculation process. The independent monitor also acquires the power supply good signal and total power comparison result of each power supply branch to determine whether the graded recovery generates an actual power supply response. The independent monitor only restores power to auxiliary equipment and does not generate primary switch opening / closing commands.

[0129] In a single-stage switch compartment, the switch body and operating mechanism output switch position, energy storage status, protection activation, and operation pre-signal. One of the protection activation and operation pre-signal signals is sent to the original protection monitoring and control link, while the other is isolated and sent to an independent monitor. Surface temperature sensors are installed on cables and critical surface areas where cold bridges or condensation are likely to form. Air temperature and humidity sensors are installed in the low-pressure instrument compartment, and external temperature and humidity sensors are installed at the air inlet. The environmental control branch connects the branch metering and switch unit to the heater, dehumidifier, and fan. The external circulation fan only enters the candidate action set when the absolute humidity outside the cabinet is lower than the absolute humidity inside the cabinet and the air inlet conditions meet the requirements for rain and dust protection; otherwise, only internal circulation, heating, or dehumidification is permitted.

[0130] Figure 6In this system, the power supply and main control paths originate from the auxiliary power input, pass through the main metering and branch metering boards to the critical constant power supply path and controllable branch switchboards, and then connect to the critical measurement and control and communication storage units, local displays and lighting, as well as heating, dehumidification, and fans. The hard-wired critical safety path directly sends protection start-up, operation pre-operation, and environmental emergency comparison signals to the independent monitor, which then outputs tiered wake-up and back-off signals to each power supply branch. The power distribution master station transmits remote interactive information with the critical measurement and control and communication storage units; the field maintenance components transmit maintenance and human-machine interaction status with the local display and energy-saving controller; and environmental sensors send the internal and external temperature and humidity, as well as the critical surface temperature, to the energy-saving controller. Thus, Figure 6 It also distinguishes between ordinary data and control paths and critical security paths that do not depend on the main processor's communication processes.

[0131] Before system commissioning, the controllable auxiliary branch groups are kept in a preset safe power supply state. Wiring checks, metering zero-point calibration, time synchronization checks, bypass power failure conduction tests, and independent wake-up tests are completed. During calibration, the states of the permissible auxiliary loads are changed one by one, and the steady-state power before action, the power during startup, the steady-state power after action, the duration of operation, and the power change after stopping are recorded. Protection calculations, protection inputs, and trip outputs are not included in the power outage test. For loads whose states cannot be changed independently, calibration is performed using events where only the state of that load changes during normal operation. If a single load segment cannot be formed, the factory power change characteristic parameters are retained and updated after an operating segment that meets the load state confirmation conditions is obtained.

[0132] In this application, the total auxiliary power is sampled at 200-millisecond intervals during normal steady-state operation. Upon detecting protection activation, operation prelude, or auxiliary load switching events, the power sequence is saved at 50-millisecond intervals before and after the event. A cyclic buffer continuously retains data prior to the event, enabling a 5-second pre-event stabilization window after the event and a 5-second post-event stabilization window after power re-stabilization. When the critical surface temperature is above the dew point safety limit and the temperature difference is sufficient, the environmental status is sampled every 10 seconds; when the temperature difference approaches the preset safe temperature difference, the environmental status is sampled every 2 seconds. The controller maps data at different rates to a unified time axis according to timestamps; data with time synchronization errors exceeding the event matching allowable error is not used to update normal load power change characteristics.

[0133] The event merging interval is set to 500 milliseconds. Operation preludes, allow return, auxiliary service wake-up, and switch position changes occurring consecutively within the same operation are associated as composite events, while preserving the order of these events. Steady-state power is calculated using a window only when the power variance and adjacent sampling point changes within the steady-state window are both below the corresponding steady-state threshold. The allowable range for load power variation characteristics is determined by the median and dispersion of valid samples in the same scenario. The energy balance residual threshold is the larger of the thresholds determined by the metering comprehensive error range, normal power conversion loss fluctuations, and no-load calibration residuals; when residuals continuously exceed limits, the corresponding window is marked as an unknown load or metering anomaly window.

[0134] Energy-saving actions are selected cyclically using a five-minute control step and a thirty-minute subsequent control period. Under normal steady-state conditions, the maximum service intervals for ordinary state data upload, trend calculation, log archiving, and display refresh during unattended operation can be set to fifteen minutes, ten minutes, thirty minutes, and five minutes, respectively. The controller merges or staggers these tasks before their expiration dates reach the mandatory execution boundary. The local display enters a low-power state when the cabinet door is closed and there is no local operation; it immediately resumes operation after the cabinet door is opened or a local button is pressed. Protection sampling, necessary link monitoring, and clock functions do not have task expiration dates and remain running continuously. When a remote operation precedes an operation, the maximum service interval for operation-related acquisition, calculation, communication, and recording tasks is shortened to the time limit required to meet the operation preparation response requirements, making the corresponding services mandatory tasks in the current control cycle.

[0135] The environmental conditioning control compares the predicted temperature of critical surfaces with the safe dew point limit. Under normal sensor conditions, the preset safe temperature difference can be calibrated to two degrees Celsius. When the surface temperature sensor fails, the cabin air temperature minus the cold bridge calibration temperature difference is used as a conservative critical surface temperature, and the preset safe temperature difference is increased. The heater and dehumidifier are set with the shortest continuous operating time, and the fan is set with the shortest start-up interval to avoid frequent actuator starts and stops. The controller calculates the predicted temperature and expected power consumption of critical surfaces for heating, dehumidification, internal circulation, and permissible external circulation actions during the subsequent control period, deletes actions that would cause the predicted temperature of critical surfaces to fall below the safe dew point limit, and then selects actions with lower expected auxiliary power consumption from the remaining actions.

[0136] The upper limit of auxiliary power is determined jointly based on the allowable continuous output of the auxiliary power supply, the current temperature rise, and the allowable discharge power of the backup power supply. This application initially sets the upper limit of auxiliary power used for normal control to 80% of the allowable continuous output capacity of the auxiliary power supply, using the remaining output capacity as a margin for load startup and operational response. If on-site temperature rise testing or power supply aging assessment indicates a need to reduce the load rate, this percentage is adjusted accordingly. In backup power supply scenarios, the estimated power consumption of the constant power supply branch group is calculated based on a four-hour emergency duration, with additional power reserved for two switching operations and one necessary communication process. When normal display, extended storage, battery maintenance, or non-emergency environmental actions cause the remaining available backup power to fall below the lower limit, the corresponding candidate action is directly deleted.

[0137] During normal steady-state operation, the controller first reads the total auxiliary power, branch auxiliary power, equipment events, task completion status, environmental status, and backup power status. It then checks whether communication transmission, log archiving, display refresh, and battery maintenance tasks are approaching their maximum permissible execution intervals, and obtains the dew point safety temperature difference, remaining backup power, and the upper limit of auxiliary power. The controller generates a limited number of candidate action combinations from the action library, deleting combinations that cannot keep the normally powered branch powered, will cause task delays, will cause critical surfaces to fall below the dew point safety limit, will overdraw emergency reserve power, or will cause auxiliary power to exceed limits. The remaining combinations are sorted from low to high based on expected auxiliary power consumption; when expected auxiliary power consumption is the same, the combination with fewer state transitions is selected, and only the action corresponding to the current control cycle is executed.

[0138] When the power distribution master station issues a remote operation preamble, the hard-wired signal first enters the independent monitor. The independent monitor restores the basic acquisition branch and checks the power supply signal, then restores the main processor branch and checks the heartbeat signal, and finally restores the communication, recording, and service load branches corresponding to the operation. Simultaneously, the energy consumption monitoring and energy-saving controller switches the operating scenario to operation preparation state, suspending routine environmental actions and battery maintenance tasks that compete for auxiliary power with the operation response. After the relevant power supply branches are successfully restored, remote control permission, five-proof verification, and primary switch operations are still completed by the original system. After the operation ends and location change, recording completion, and communication confirmation are obtained, the relevant task expiration status is settled; after the scenario returns to normal, the controller recalculates the next cycle action instead of continuing execution according to the energy-saving sequence before the operation.

[0139] When the outside temperature drops and the inside humidity rises, the controller determines that the critical surface temperature is approaching the dew point safety limit. If the absolute moisture content outside the cabinet is lower than that inside and the air intake conditions meet the requirements, the external circulation action can be selected in conjunction with the heating or dehumidification action; if the absolute moisture content outside the cabinet is not lower than that inside, the external circulation action is deleted. After the controller selects an environmental action, it obtains the environmental branch switch readback, branch power change, and critical surface temperature change. If the environmental branch switch is turned on but no corresponding power increase is observed, an execution anomaly is determined, and a safe power supply state is restored through an independent monitor; when the environmental action is executed normally, after meeting the minimum operating time, the controller decides whether to continue operation or stop based on the temperature difference between the critical surface temperature and the dew point safety limit.

[0140] When the AC auxiliary power supply fails and switches to DC backup power, the main power supply branch group remains operational, and the independent monitor and controller acquire backup power status. The controller enhances emergency reserve requirements, suspending general displays, lighting, extended storage organization, and non-essential battery maintenance, prioritizing necessary communication, fault logging, and potential switching operations. Environmental adjustments must not consume reserved operating power when environmental risks do not reach the emergency boundary; when environmental risks reach the emergency boundary, short-term environmental actions with high risk mitigation efficiency are executed only while maintaining operating and necessary communication power. After AC power is restored, extended services are supplemented according to the task expiration status, and their actual power consumption is included in the extended task supplementation power consumption, not directly counted as power savings during the backup power period.

[0141] Each energy-saving control command includes a command identifier, target load, target status, issuance time, confirmation time limit, and corresponding load power change characteristics. (Refer to...) Figure 7 The verification module first determines whether the readback status of the target switch or device interface has reached the target status, then obtains the change in total power or branch power before and after the action, and determines whether the actual power change falls within the expected range given by the power change characteristics. A successful execution flag is generated when both conditions are met. If the readback status is met but the actual power does not change accordingly, a pending investigation status is set for output contact adhesion, bypass power supply, load abnormality, or metering abnormality. If the actual power changes but the readback status does not match, an abnormal status is set for the output readback circuit. These abnormal windows are not used to update normal power change characteristics, nor are they included in the post-verification power saving.

[0142] Figure 7In this process, energy-saving control commands are associated with the expected power change range defined by the confirmed power change characteristics, the control readback, and the actual power change after the action. These three pieces of information are used together for execution confirmation. If confirmation is successful, a historical power consumption benchmark is selected based on the primary equipment status, power supply method, maintenance status, ambient temperature range, and relative humidity range within the verification time window. This benchmark is then used to deduct the actual auxiliary power and the delayed task supplementary power consumption to obtain the verified power saving. If confirmation fails, an anomaly flag is output, a normally closed power supply bypass is connected, or energy-saving control is revoked, while retaining the original power change characteristics. Only time windows with successful confirmation and no metering anomalies are used to update the power change characteristics.

[0143] The energy saving verification uses historically valid windows with similar primary equipment status, power supply mode, and maintenance status, and similar environmental ranges as baseline candidates. The baseline matching unit removes windows with protection actions, execution anomalies, unknown loads, sensor failures, and metering discrepancies exceeding limits, and then uses the median auxiliary energy value of the remaining windows as the energy consumption benchmark. The energy saving of the verification window is obtained by subtracting the actual auxiliary energy and the energy added by the delayed task during subsequent supplementary execution from the energy consumption benchmark; if the delayed task has not yet been completed, the current energy difference remains in a pending verification state.

[0144] In the application's operation logs, processing effectiveness is judged using five categories of indicators: safety, service, environment, power, and energy. Safety indicators record the number of interruptions in the constantly powered branch group, the recovery time of each level of independent wake-up, and the results of abnormal rollbacks. Service indicators record whether deferred services are completed before the task's expiration state reaches the mandatory execution boundary. Environment indicators record the cumulative time the dew point safety temperature difference is below the safety boundary and the number of environmental actuator switches. Power indicators record the number of times the auxiliary power upper limit is exceeded and the peak value formed by multiple loads starting simultaneously. Energy indicators record historical electricity consumption benchmarks, actual auxiliary power, electricity consumption for deferred task completion, energy balance residuals, and verified energy savings. Therefore, the effectiveness of energy-saving control is not judged by the number of control commands or the temporary cessation of load operation, but rather by the common conditions of continuous power supply to key functions, no service overdue, environmental and power margin meeting constraints, actions undergoing double confirmation, and the completion of deferred energy consumption settlement.

[0145] In normal operation, communication transmission and log archiving are processed concurrently within their respective maximum permissible execution intervals. Local displays and lighting maintain low power consumption when unattended. Environmental actuators operate based on the temperature difference between critical surfaces and dew point safety limits. Battery maintenance and environmental actuator startup are staggered. Corresponding power changes are confirmed through load power change characteristics. In the event of remote operation, cabinet door opening, protection activation, or environmental emergency, the independent monitor restores the required power supply branches according to power supply dependency sequence, and the normally powered branch group maintains power supply during energy-saving state switching. If there is a discrepancy between the status readback and the actual power change, no heartbeat from the main processor, or a timeout in the graded recovery record, the system connects the normally closed power supply bypass or cancels energy-saving control, while retaining the original power change characteristic parameters. Energy savings are only realized after both safety and task deadline conditions are met, thus distinguishing them from apparent energy differences caused by no actual load action, task delays, and changes in operating conditions.

[0146] Through the above on-site configuration and execution process. Figure 6 The primary switch compartment, critical surface area, low-pressure instrument compartment, and environmental control branch form a unified auxiliary energy monitoring and control boundary. Figure 7 The expected power change, control readback, and actual power change shown are used to confirm whether the energy-saving action has actually been completed. Historical power consumption benchmarks with the same primary equipment status, power supply mode, and maintenance status, and ambient temperature and humidity falling within the same preset range, are used together with actual auxiliary power and delayed task supplementary power to determine the amount of energy saved. The above processing does not change the primary equipment protection and operation logic, and retains traceable metering and status records for each energy-saving action and each settlement cycle.

[0147] The specific embodiments of the present invention have been described above, but these specific embodiments are not intended to limit the scope of protection of the present invention. Those skilled in the art can make adaptive adjustments to the metering points, power segments before and after events, load power change characteristics, maximum permissible execution intervals of tasks, dew point safety limits, candidate action combinations, graded recovery order, and verification cycles based on the ring main unit's auxiliary power supply structure, secondary equipment configuration, environmental conditioning components, backup power supply type, and communication interface. The corresponding adjustments should maintain continuous power supply to the constant power supply branch group and retain the technical relationship of determining sub-items of electrical energy based on equipment events, selecting energy-saving actions according to physical safety conditions, and verifying execution results through status readback and actual power changes.

Claims

1. A method for monitoring and controlling energy consumption of a primary and secondary integrated ring network box, characterized in that, include: S1, according to the auxiliary power supply wiring, the constant power supply branch and the controllable auxiliary branch with controllable branch switch are divided. The constant power supply branch continuously supplies power to the protection, operation and independent monitoring device. Synchronously collect total auxiliary power, controllable auxiliary branch status, and load device events; S2, divide the power segments before and after the load start-up or state change event, and determine the load power change characteristics and sub-item power based on the total auxiliary power difference and the corresponding branch state change; S3, based on the status of primary equipment, secondary task status, temperature and humidity inside the cabinet, available backup power and auxiliary power output capacity, determine the maximum allowable execution interval of the task, dew point safety limit, backup power reserve and allowed actions. S4, delete actions that would cause power outage of the constant power supply branch, task overdue, critical surface temperature below the dew point safety limit, backup power available power below the reserved power, or auxiliary power over the limit, select actions with lower expected auxiliary power consumption and meet the shortest start-stop time of the actuator, and output control commands. S5 is monitored by an independent supervisor through hard-wired connection for protection start-up, operation request and environmental emergency signals; when one of the above three types of signals is valid, the basic acquisition branch, the main processor branch and the corresponding auxiliary load branch are restored in sequence; if the restoration fails, the normally closed power supply bypass is connected and the energy-saving control is canceled. S6, simultaneously verify the control readback and the actual power change. Success is confirmed when both meet the control command. Select the power consumption benchmark from the historical time window where the primary equipment status, power supply mode and maintenance status are the same and the ambient temperature and humidity fall within the same preset range. Determine the power saving after deducting the power consumption for delayed tasks.

2. The method for monitoring and controlling energy consumption of a primary and secondary integrated ring network box according to claim 1, characterized in that, In step S1, a total metering unit is set up on the AC auxiliary incoming line or DC auxiliary bus, and a branch metering unit or branch status acquisition interface is set up on the controllable auxiliary branch. Within a statistical time window, the total metered energy is checked against the energy of the normally supplied branch, the metered energy of the controllable auxiliary branch, the energy of the non-independently metered branch estimated based on the confirmed load power change characteristics, and the normal power conversion loss. When the difference exceeds the allowable range determined by the metering accuracy, normal conversion loss, and no-load calibration results, the statistical time window is marked as a metering abnormal time window, and the statistical time window is not used to update the load power change characteristics or historical electricity consumption benchmark.

3. The method for monitoring and controlling energy consumption of a primary and secondary integrated ring network box according to claim 2, characterized in that, In step S2, a pre-event stabilization window, a state transition window, and a post-event stabilization window are set sequentially around the load device event. The stable power difference, the peak value of the start-up or stop process, the state transition duration, and the post-event continuous power are extracted from the three windows to form the power change characteristics of the corresponding load. The power change characteristics are calibrated using an event where only one load state changes and the metering is normal. When multiple loads change states simultaneously, allowable load state combinations are listed based on equipment events and state readbacks. The calibrated power change range corresponding to each combination is compared with the measured total auxiliary power change. The combination with the smallest comparison difference that falls within the allowable range is selected for sub-item power calculation. When no combination meets the allowable range, the corresponding power segment is marked as an unknown load segment.

4. The method for monitoring and controlling energy consumption of a primary and secondary integrated ring network box according to claim 1, characterized in that, In step S3, the last successful execution time and the maximum allowable execution interval under the current operating state are recorded for each deferred task; when the elapsed time since the last successful execution time reaches the maximum allowable execution interval, the task is determined as a mandatory task for the next control cycle; when protection activation, operation request, or local maintenance occurs, the maximum allowable execution interval of communication, recording, display, or lighting tasks related to the current event is shortened; protection calculation, protection input, and trip output tasks are kept without delay conditions and are continuously powered by the constant power supply branch.

5. The method for monitoring and controlling energy consumption of a primary and secondary integrated ring network box according to claim 1, characterized in that, In step S3, the dew point temperature is determined based on the cabin air temperature and relative humidity. The minimum temperature of the critical surface in the next control cycle is determined based on the measured value of the critical surface temperature sensor or the temperature change relationship calibrated by the chamber heat transfer test. The sum of the dew point temperature and the preset safe condensation temperature difference is used as the dew point safety limit. Only heating, dehumidification, internal circulation, or external circulation actions that can ensure that the minimum temperature of the critical surface is not lower than the dew point safety limit are retained. The external circulation action must also meet the requirement that the absolute humidity outside the cabinet is lower than the absolute humidity inside the cabinet and that the air intake channel is in an allowable state. The remaining available power of the backup power supply is obtained by deducting the expected power consumption of the normal power supply branch during the emergency duration, the reserved operating power, and the necessary communication power from the current available power of the backup power supply.

6. The method for monitoring and controlling energy consumption of a primary and secondary integrated ring network box according to claim 1, characterized in that, In step S4, a limited number of candidate action combinations are generated based on the on, off, power adjustment, and task delay states supported by the equipment. For each candidate action combination, the expected auxiliary power consumption is calculated based on the power change characteristics of the corresponding load and the expected duration. Action combinations that would interrupt the power supply of the constant power supply branch, cause the task to exceed the maximum allowable execution interval, cause the minimum temperature of the critical surface to fall below the dew point safety limit, cause the available backup power to fall below the reserved power, cause the recovery time to exceed the wake-up time limit, cause the auxiliary power to exceed the allowable output power of the auxiliary power supply, or fail to meet the minimum continuous running time or minimum stopping time of the actuator are first deleted. Then, the action combinations are sorted from low to high according to the expected auxiliary power consumption. When the expected auxiliary power consumption is the same, the action combination with fewer actuator state switching times is selected, and only the action corresponding to the current control cycle in the action combination is executed.

7. The method for monitoring and controlling energy consumption of a primary and secondary integrated ring network box according to claim 1, characterized in that, In step S5, the independent monitor is powered by the constant power supply branch. Its wake-up signal input terminal is connected to the protection start output terminal, operation request output terminal and environmental emergency comparison output terminal through hard wiring. Its power supply recovery output terminal is connected to the enable terminal of the basic acquisition branch, the main processor branch and the auxiliary load branch. The normally closed power supply bypass is connected across both ends of the energy-saving control path. In step S6, the historical power consumption benchmark is selected from the historical time window where the primary equipment status, power supply mode and maintenance status are the same, the ambient temperature and relative humidity fall within the same preset range and there are no metering abnormalities. The amount of energy saved is the difference between the historical power consumption benchmark and the actual auxiliary power in the verification time window, minus the amount of energy to be supplemented by the delayed task. The corresponding amount of energy saved is not output when the delayed task has not been completed.

8. A primary and secondary integrated ring network box energy consumption monitoring and energy-saving control system, characterized in that, It includes an auxiliary energy consumption data acquisition module, a component energy consumption determination module, a constraint condition determination module, an energy-saving action selection module, an independent monitoring and recovery module, and an execution verification module; The auxiliary energy acquisition module is used to identify the constant power supply branch and the controllable auxiliary branch according to the wiring relationship of the auxiliary power supply of the ring network box, acquire the total auxiliary power at the auxiliary power supply inlet, the switching status of the controllable auxiliary branch and the load equipment events, and perform time synchronization. The sub-item power determination module is used to divide the power segments before and after the event based on the load equipment event, determine the power change characteristics of the load based on the total auxiliary power difference and the corresponding branch state change, and calculate the sub-item power of each controllable auxiliary load based on the power change characteristics. The constraint determination module is used to obtain the maximum allowable execution interval of the deferred task, the temperature difference between the critical surface temperature and the dew point safety limit, and the remaining available power of the backup power supply after deducting the power reserved for protection and operation, based on the primary equipment status, secondary task status, cabinet temperature and humidity, available power of the backup power supply, and the allowable output power of the auxiliary power supply. The energy-saving action selection module is used to delete actions that would cause deferred tasks to exceed their expiration date, critical surfaces to fall below the dew point safety limit, backup power reserves to be insufficient, auxiliary power to exceed the allowable output power, or power outage of the constant power supply branch, and select actions from the remaining actions that have lower expected auxiliary power consumption and meet the shortest start-stop time of the actuator to form control commands. The independent monitoring and recovery module is powered by a constant power supply branch and is used to monitor protection start signal, operation request signal and environmental emergency signal through hard wiring. When one of the protection start signal, operation request signal or environmental emergency signal is valid, the power supply is restored in the order of basic acquisition branch, main processor branch and corresponding auxiliary load branch. When any level of recovery fails, the normally closed power supply bypass is connected and the energy-saving control is canceled. The execution verification module is used to simultaneously verify the status readback of the controllable branch switch or load control interface and the actual power change after the action. Only when both meet the control command is the control confirmed to be successful. The execution verification module is also used to select the power consumption benchmark from the historical time window where the primary equipment status, power supply mode and maintenance status are the same and the ambient temperature and relative humidity fall within the same preset range, and determine the power saving after deducting the power consumption of the delayed task. The output of the auxiliary energy consumption acquisition module is connected to the sub-item power consumption determination module, the output of the sub-item power consumption determination module is connected to the constraint condition determination module, the output of the constraint condition determination module is connected to the energy saving action selection module, the energy saving action selection module outputs control command to the controllable branch switch or load control interface, and the execution verification module feeds back the time window of successful confirmation and no metering abnormality to the sub-item power consumption determination module and the energy saving action selection module.

9. The primary and secondary integrated ring network box energy consumption monitoring and energy-saving control system according to claim 8, characterized in that, The auxiliary energy acquisition module includes a total metering unit installed on the AC auxiliary incoming line or DC auxiliary bus, a branch metering unit or branch status acquisition interface installed on the controllable auxiliary branch, and a controllable branch switch connected between the auxiliary bus and the controllable auxiliary load; the normally powered branch bypasses the controllable branch switch and is connected to the protection calculation unit, the protection input unit, and the trip output holding unit; the independent monitoring and recovery module includes an independent monitor, a wake-up signal input circuit, a graded power supply control circuit, and a normally closed power supply bypass. The wake-up signal input circuit receives protection start signals, operation request signals, and environmental emergency comparison signals through hard wiring. The graded power supply control circuit is connected to the enable terminal of each controllable auxiliary branch, and the normally closed power supply bypass is connected across both ends of the energy-saving control path.

10. The primary and secondary integrated ring network box energy consumption monitoring and energy-saving control system according to claim 8, characterized in that, The execution verification module includes a readback verification unit, a power change verification unit, a baseline matching unit, and a data update unit. The readback verification unit is used to obtain the switch status or equipment working status corresponding to the control command. The power change verification unit is used to verify the actual power change after the action with the power change characteristics of the corresponding load, and generate an execution success mark when both the readback status and the actual power change meet the control command. The baseline matching unit is used to select the power consumption benchmark from historical time windows where the primary equipment status, power supply mode, and maintenance status are the same and the ambient temperature and relative humidity fall within the same preset range, and determine the power saving based on the power consumption benchmark, the actual auxiliary power energy of the verification time window, and the delayed task supplementary execution power. The data update unit is used to update the power change characteristics of the load when the execution is successful and the metering is normal, and retain the original power change characteristics and output an execution anomaly mark when the execution fails or the metering is abnormal.

Images