A model interaction-based main station information transmission method

Abstract

The application provides a model interaction-based main station information transmission method, which is applied to a main station and a substation of a power system, and the method comprises the following steps: a sender encapsulates data exchanged between the main station and the substation by using a unified communication message model, generates a model message, and serializes the model message into an original message for network transmission; a receiver receives the original message, performs a deserialization operation, restores the original message into the model message, and performs analysis and processing; when a control command is exchanged between the main station and the substation, an anti-misoperation check is performed on the received control command message, including main substation address checking, control time checking and point number name double checking; and the application further comprises a control command tracing method. The application improves the efficiency and safety of the transmission of the substation and the grid control information, and realizes accurate anti-misoperation and effective tracing of the control command.

Description

Technical Field

[0001] This invention belongs to the field of power automation substation systems, and specifically relates to a main substation information transmission method based on model interaction. Background Technology

[0002] With the rapid development of my country's new power system, profound changes have occurred in power source composition, grid configuration, load characteristics, technological foundation, and operational characteristics, placing higher demands on grid dispatch and control technology. The accuracy of substation control commands has always directly affected the level of grid dispatch and control, while error prevention technology is the cornerstone of ensuring the safe and stable operation of the power grid. Traditionally, information transmission methods based on the IEC104 protocol are widely used between main power plants and substations to achieve remote monitoring and control between power system equipment. However, this protocol is limited by message length and format, resulting in limited effective information transmission and poor readability, making traceability of control results extremely difficult. This has severely hampered the rapid development of the new power system, and various power grids are facing unprecedented challenges in ensuring the completeness and accuracy of control commands such as AGC / AVC / one-click sequential control.

[0003] (1) Limited information transmission methods. In traditional application scenarios, data exchange between main power plants is often achieved using traditional power protocols such as IEC104. The data information transmitted in the data messages of these protocols is limited and not easily expanded; at the same time, the message content is relatively complex, difficult to understand and maintain, has poor readability, and requires a high level of professional knowledge from operation and maintenance personnel.

[0004] (2) Limitations of error prevention technology. Currently, error prevention technologies based on IEC104 are limited to verifying the content of the master station or the substation itself. This error prevention scheme can only make a reasonable judgment on the location and control status in the remote control command issued by the master station based on the current acquisition status. If this control command message is issued to the wrong substation, or if the master and substation signals are inconsistent, it will still lead to miscontrol.

[0005] (3) Difficulty in tracing control results. Due to the limited content transmitted by IEC104, it is impossible to form effective, intuitive and accurate tracing results for multiple control command interactions in a short period of time, such as AGC / AVC / one-click sequential control. Once a problem occurs in a certain link, it is impossible to quickly and accurately troubleshoot.

[0006] To address this, an invention proposes a model-interactive method for main substation information transmission. This method breaks through the constraints of traditional transmission protocols and adopts a new protocol for command interaction, improving the efficiency and security of information transmission between substations and the power grid. It enables accurate prevention of errors and effective traceability of control commands, ensuring the reliable operation of the power grid dispatch and control support technology system and promoting the safe operation and efficient development of the new power system. This method can also be extended to other industrial application areas that require safety control. Summary of the Invention

[0007] The purpose of this invention is to propose a master station information transmission method based on model interaction. Using this method for master station information interaction within a substation system can effectively overcome the constraints of traditional protocols, ensure secure interaction of master station control commands, prevent erroneous control, and provide an effective method for tracing the source of control commands.

[0008] (1) Power system message email is used to transmit data. A unified and standardized data interaction format is established for the main power plants and substations. Data encapsulation is optimized to ensure the integrity of data interaction while improving the comprehensibility of messages. During data transmission, the modeled message content is serialized into raw messages (such as strings or byte streams) before being transmitted over the network. At the receiving end, the raw messages are deserialized to convert them back into intuitive modeled message data. This message effectively and easily extends control commands and has high readability.

[0009] (2) Formulate a fault-prevention judgment mechanism based on transmission protocol to achieve the coordinated work of multiple mechanisms such as "point number + naming", "control time" and "master and sub-station address" to achieve security and fault prevention.

[0010] (3) Record, analyze, and diagnose control commands and processes in a timely manner, and generate easy-to-read control reports. Support the main station to use protocols to summon result reports, enabling control result judgment and rapid anomaly location.

[0011] To achieve the above objectives, the technical solution of the present invention is: a master station information transmission method based on model interaction, applied to master stations and substations in a power system, the method comprising:

[0012] The sender uses a unified communication message model to encapsulate the data exchanged between the main plant and the station, generates modeled messages, and serializes the modeled messages into original messages for network transmission.

[0013] The communication message model defines the message frame structure and the main structure of the message model; the main structure of the message model includes a header file and an attachment file; the header file includes email attributes, data attributes, and data content; the email attributes include a sending timestamp, sending address, receiving address, and transmission type; the data attributes include the data type; and the data content includes a period number, name, and control time; the attachment file is only valid when the transmission type is file.

[0014] After receiving the original message, the receiver performs a deserialization operation to restore it to a model message, which is then analyzed and processed.

[0015] Preferably, the data types include remote control, point setting, planned curves, telemetry, remote signaling, SOE, RCD, SCD, and briefings.

[0016] Preferably, when control commands are exchanged between the master and slave stations, the received control command messages are checked for error prevention, including master and slave station address verification, control time verification, and point number and name dual verification.

[0017] Preferably, the main / subsite address verification is as follows:

[0018] Retrieve the sender and receiver addresses from the message's email properties;

[0019] Determine whether the sending address is equal to the pre-configured peer device name and whether the receiving address is equal to the pre-configured local device name.

[0020] If both are equal, the address verification passes; otherwise, the address verification fails, and the control command is refused to be executed.

[0021] Preferably, the control time verification is specifically as follows:

[0022] Retrieve the sending timestamp from the message email attributes and the control time from the message data content;

[0023] Calculate the first time difference between the sending timestamp and the local current time. If the first time difference is greater than the first preset threshold, the time verification fails and the control command is not executed.

[0024] Calculate the second time difference between the control time and the sending timestamp. If the second time difference is greater than the second preset threshold, the time verification fails and the control command is not executed.

[0025] The time check passes only if the first time difference is not greater than the first preset threshold and the second time difference is not greater than the second preset threshold.

[0026] Preferably, the double verification of the point number name is as follows:

[0027] Retrieve the point number and name from the message data content;

[0028] Verify that the point number is within the preset point range on this end; if the point number is outside the preset point range on this end, the double verification of the point number name will fail, and the control command will be refused to be executed.

[0029] Verify whether the correspondence between the point number and the name is consistent with the point number-name mapping table stored on this end; if they are inconsistent, the double verification of the point number and name will fail, and the control command will be refused to be executed.

[0030] The point number and name double verification will pass only if the point number is within the preset point range on this end, and the correspondence between the point number and name is consistent with the point number-name mapping table stored on this end.

[0031] Preferably, the master / substation address verification, control time verification, and point number / name dual verification are executed sequentially in a serial pipeline manner; wherein, the master / substation address verification is executed first, the control time verification is executed after the master / substation address verification is completed, and the point number / name dual verification is executed after the control time verification is completed; the three layers of verification generate corresponding verification results, and the comprehensive result of the three layers of verification determines whether to execute the control command.

[0032] Preferably, the key parameters in the master / slave station address verification, control time verification, and point number name dual verification are centrally managed using a configuration file and support online dynamic updates; the key parameters include at least: peer device name, local device name, first preset threshold, and second preset threshold.

[0033] Preferably, it also includes a control command tracing method:

[0034] The substation has a built-in control command diagnostic engine. After each control command process is completed, it extracts a multi-dimensional feature vector from the messages exchanged between the master station and the substation. The feature vector includes the execution result of each step, error code, time consumption, data flow direction and device node.

[0035] A forward reasoning strategy is adopted to match the feature vector with the antecedents of each rule in the known fault modes; when a match is successful, the consequent of the corresponding rule is triggered and a diagnostic conclusion is output.

[0036] Based on the diagnostic conclusions, a control briefing is generated for the entire process of control commands. The control briefing covers the steps of setting, executing, canceling, requesting, responding, reporting, and signal changing of control commands, and includes the final failure reason and fault location information.

[0037] Preferably, the control briefing includes the controlled object, control source, control result, control steps, failure reason, and time of each step; the control command tracing method further includes:

[0038] The master station issues a call request through a command with the data type "briefing". The call request includes the point number, control point name and start and end time information. The substation filters control briefing files that meet the conditions according to the call request, compresses them and sends them to the master station for the master station to trace control commands and investigate accidents.

[0039] Compared with the prior art, the present invention has the following beneficial effects:

[0040] (1) The data content that can be transmitted is richer, the message is more readable and easier to understand, and the data display dimensions are more diverse.

[0041] (2) It realizes the anti-misoperation technology based on transmission protocol. The triple anti-misoperation mechanism works together to enhance the effect, with a wider range of anti-misoperation dimensions, safer control, and reduced risk of control accidents.

[0042] (3) It effectively achieves traceability of control commands, enabling faster location and investigation of accident causes and control processes. Furthermore, the results can be viewed by the main station, no longer limited to manual log checks. Attached Figure Description

[0043] Figure 1 This is a data transmission flowchart of the present invention. Detailed Implementation

[0044] The following is in conjunction with the appendix Figure 1 The technical solution of the present invention will be described in detail below.

[0045] This invention proposes a master plant information transmission method based on model interaction, comprising:

[0046] 1. Design efficient transmission protocols and data models

[0047] (1) Establish a unified communication message model standard, specifying the message model format, function type, and meaning of each parameter. The main plant base station transmits information based on the format and content of this message model. The message frame format is shown in Table 1:

[0048] Table 1 Application Protocol Message Frame Structure

[0049]

[0050] The main content of the message model includes the message email's "header" and "attachment file," and the message model structure is shown in Table 2. The header consists of three parts: email attributes, data attributes, and data content. The attachment file is only valid when the transmission type is file.

[0051] Table 2 Main Structure of Message Model

[0052]

[0053] The "Data Type" definition in the data attributes is shown in Table 3:

[0054] Table 3 Data Type Definitions

[0055]

[0056] (2) Develop a unified data model for the main plant, specifying the amount of data to be transmitted, the relationship between data points, signal names, type formats and other data processing parameters required for the data channel.

[0057] As shown in Table 4 below:

[0058] Table 4

[0059]

[0060] (3) During the data exchange process between the main plant and the main plant, the data sender first encapsulates the data to be sent using the above message model, and then serializes the encapsulated string data into a binary byte stream for network transmission, which is then sent to the receiver via the network. After receiving the data from the network, the receiver first deserializes the binary byte stream back into the message model format, and then performs corresponding analysis and processing based on its content. The specific process is as follows: Figure 1 .

[0061] 2. Design a secure and efficient error prevention mechanism based on the transmission protocol.

[0062] (1) Design the control command message format, where the remote control and setting command message frame formats are shown in Table 5 and Table 6.

[0063] Table 5. Main Structure of Remote Control Message Model

[0064]

[0065] Table 6 Main Structure of the Point-Based Message Model

[0066]

[0067] (2) Master-substation address verification logic: The sending and receiving addresses in the message are verified. When the master station sends a control command to the substation, the sending address is the master station name (e.g., Dispatch Plane 1), and the receiving address is the substation name (e.g., Unit A of XXX Substation). If any address does not match the actual address, it means that the message is not a control command message for that channel, and control is not executed. That is, it is necessary to verify whether the sending address is the peer address and also to verify whether the destination address is the self, to avoid message tampering and incorrect forwarding.

[0068] (3) Control Time Verification Logic: The `time` field (message sending timestamp) in the message email attributes and the `control time` field (expected command execution time) in the data content are retrieved. Δt1 = |time - local current time| is calculated. If Δt1 > T1 (T1 is a preset threshold, such as 60 seconds), the message transmission delay is considered too large or the timestamp has been tampered with, and execution is refused. Δt2 = |control time - time| is calculated. If Δt2 > T2 (T2 is a preset threshold, such as 15 seconds), the command is considered a retransmission of a historical command or the time parameter has been maliciously modified, and execution is refused. The combination of these two time verification layers can effectively defend against replay attacks and time parameter tampering attacks.

[0069] (4) Point Number + Name Dual Verification Logic: The point number and name fields are retrieved from the data content. The point number identifies the order of this batch of control points, and the name is the actual command for that control point. Under normal circumstances, the point order and signal name of both sides should be consistent. First, the point number issued by the master station cannot exceed the limit. If it exceeds the point range of the substation, the control will not be executed. Second, the point number and name issued by the master station must be consistent with those of the substation to pass the verification, so as to avoid miscontrol due to inconsistencies caused by point order adjustment, control point replacement, etc. The joint verification of point number and name solves the fundamental defect of the traditional IEC104 protocol that only relies on the single identifier of point number. Even if the point number is addressable on the substation side, if the equipment name corresponding to the point number is inconsistent with the equipment name that the master station expects to control, the control command will still be rejected, thereby effectively preventing miscontrol due to inconsistencies in the position order of the master and substations, control point replacement, etc.

[0070] (5) The above three-layer verification is performed in a serial pipeline manner, first verifying the address, then the time, and finally verifying the point number and name. The three layers are designed for different types of false control risks, do not overlap with each other, and complement each other, forming a complete defense chain from "communication path" to "time validity" to "semantic correctness".

[0071] (6) The key parameters in the above-mentioned layer verification (master and sub-station address, maximum allowable transmission delay threshold T1, maximum allowable control advance threshold T2, etc.) are all centrally managed by configuration files, which support online dynamic updates without restarting the system and can be adaptively adjusted according to the actual situation.

[0072] 3. Design a control command tracing method based on transmission protocol

[0073] (1) Design a briefing format for control command results. The content mainly displays effective information such as the control object, control source, control result, control steps, failure reasons and time of each step, as shown in Table 7 and Table 8.

[0074] Table 7

[0075]

[0076] Table 8

[0077]

[0078] (2) The built-in control command diagnostic engine enables automatic diagnosis and root cause localization of control failures, unlike the simple recording of traditional logs. Traditional logs involve multiple stages such as sending data to the upper level and collecting data from the lower level. For multi-step control commands such as remote control, the log records are very scattered, and there is no effective means to merge, process, and diagnose them. This control command diagnostic engine performs context-based diagnosis based on the commands and data exchanged between the master and substations, covering the complete control process and accurately locating the fault steps and causes of failure.

[0079] (3) Diagnostic rule design. ① Extract feature vectors from the interaction messages, including but not limited to the execution results (success / failure / timeout), error codes, time consumption (interval between steps), data flow, and involved device nodes. ② Match the extracted feature vectors with each rule in the known fault modes in sequence. The matching adopts a forward reasoning strategy: starting from the known facts, match the antecedent (IF part) of each rule one by one. If the match is successful, the consequent (THEN part) of the rule is triggered, the diagnostic conclusion is output, and a control summary of the entire control command process is generated, covering detailed steps such as setting, execution, cancellation, request, response, report submission, and signal change of the control command. The summary gives a clear final failure reason and location.

[0080] (4) A briefing file is generated after each control command process ends. The master station can use the transmission protocol in technical point (1) to use the "briefing" command to summon the control result briefing file for a certain control point within a certain time period to the master station, assisting the master station in troubleshooting the cause of control failure. The master station sends the point number, control point name and start and end time to the sub-station. The sub-station filters the briefing files that meet the conditions, compresses them and sends them to the master station. For the control results, the steps of the briefing can be analyzed to trace the source of the control command and clarify the cause and object of the abnormal problem.

[0081] In summary:

[0082] (1) The present invention designs a triple anti-misoperation mechanism of “location + name”, “master and substation address” and “control time”. The three-layer verification is executed in a pipeline manner according to the preset logic. Each layer is designed for different types of miscontrol risk, and they work together to achieve safe and effective control and misoperation prevention.

[0083] (2) The control time verification of the present invention adopts a dual timestamp collaborative judgment method: take the sending timestamp in the message attribute and the expected execution time in the control command, calculate the deviation between them and the local current time and the deviation between them and the message sending time respectively. When both deviations exceed their respective preset thresholds, the command is determined to be invalid, thereby effectively defending against replay attacks and time parameter tampering attacks.

[0084] (3) This invention employs a forward inference strategy to match feature vectors with rules in a preset fault mode library one by one. After triggering a matching rule, a diagnostic conclusion is output, enabling traceability of control commands. A built-in control command diagnostic engine extracts multi-dimensional feature vectors such as execution results, error codes, time consumption, data flow direction, and device nodes from interactive messages, and generates control briefings covering the entire process of preset, execution, cancellation, request, response, report submission, and signal changes, clearly identifying the final failure cause and fault location. A briefing recall mechanism is adopted to enable the main station to remotely obtain control briefings for a specified time period, assisting in accident investigation and command tracing.

[0085] The above are preferred embodiments of the present invention. Any changes made to the technical solution of the present invention that do not exceed the scope of the technical solution of the present invention shall fall within the protection scope of the present invention.

Claims

1. A master station information transmission method based on model interaction, applied to master stations and substations in a power system, characterized in that, The method includes: The sender uses a unified communication message model to encapsulate the data exchanged between the main plant and the station, generates modeled messages, and serializes the modeled messages into original messages for network transmission. The communication message model defines the message frame structure and the main structure of the message model; the main structure of the message model includes a header file and an attachment file; the header file includes email attributes, data attributes, and data content; the email attributes include a sending timestamp, sending address, receiving address, and transmission type; the data attributes include the data type; and the data content includes a period number, name, and control time; the attachment file is only valid when the transmission type is file. After receiving the original message, the receiver performs a deserialization operation to restore it to a model message, which is then analyzed and processed.

2. The main plant information transmission method according to claim 1, characterized in that, The data types include remote control, point setting, planned curves, telemetry, remote signaling, SOE, RCD, SCD, and briefings.

3. The main plant information transmission method according to claim 1, characterized in that, When control commands are exchanged between the master and slave stations, error prevention checks are performed on the received control command messages, including master-slave station address verification, control time verification, and point number and name double verification.

4. The main plant information transmission method according to claim 3, characterized in that, The specific verification of the main and sub-site addresses is as follows: Retrieve the sender and receiver addresses from the message's email properties; Determine whether the sending address is equal to the pre-configured peer device name and whether the receiving address is equal to the pre-configured local device name. If both are equal, the address verification passes; otherwise, the address verification fails, and the control command is refused to be executed.

5. The main plant information transmission method according to claim 3, characterized in that, The control time verification is as follows: Retrieve the sending timestamp from the message email attributes and the control time from the message data content; Calculate the first time difference between the sending timestamp and the local current time. If the first time difference is greater than the first preset threshold, the time verification fails and the control command is not executed. Calculate the second time difference between the control time and the sending timestamp. If the second time difference is greater than the second preset threshold, the time verification fails and the control command is not executed. The time check passes only if the first time difference is not greater than the first preset threshold and the second time difference is not greater than the second preset threshold.

6. The main plant information transmission method according to claim 3, characterized in that, The specific details of the point number name double verification are as follows: Retrieve the point number and name from the message data content; Verify that the point number is within the preset point range on this end; if the point number is outside the preset point range on this end, the double verification of the point number name will fail, and the control command will be refused to be executed. Verify whether the correspondence between point number and name is consistent with the point number-name mapping table stored on this end; If they are inconsistent, the double check of the point number and name will fail, and the control command will be refused to be executed. The point number and name double verification will pass only if the point number is within the preset point range on this end, and the correspondence between the point number and name is consistent with the point number-name mapping table stored on this end.

7. The main plant information transmission method according to claim 3, characterized in that, The master / substation address verification, control time verification, and point number / name dual verification are executed sequentially in a serial pipeline manner. Among them, the master / substation address verification is executed first, the control time verification is executed after the master / substation address verification is completed, and the point number / name dual verification is executed after the control time verification is completed. The three layers of verification generate corresponding verification results, and the comprehensive result of the three layers of verification determines whether to execute the control command.

8. The main plant information transmission method according to any one of claims 3-7, characterized in that, The key parameters in the main and sub-station address verification, control time verification, and point number name dual verification are centrally managed using configuration files and support online dynamic updates. The key parameters include at least: peer device name, local device name, first preset threshold and second preset threshold.

9. The main plant information transmission method according to claim 1, characterized in that, It also includes control command tracing methods: The substation has a built-in control command diagnostic engine. After each control command process is completed, it extracts a multi-dimensional feature vector from the messages exchanged between the master station and the substation. The feature vector includes the execution result of each step, error code, time consumption, data flow direction and device node. A forward reasoning strategy is adopted to match the feature vector with the antecedents of each rule in the known fault modes; when a match is successful, the consequent of the corresponding rule is triggered and a diagnostic conclusion is output. Based on the diagnostic conclusions, a control briefing is generated for the entire process of control commands. The control briefing covers the steps of setting, executing, canceling, requesting, responding, reporting, and signal changing of control commands, and includes the final failure reason and fault location information.

10. The main plant information transmission method according to claim 9, characterized in that, The control briefing includes the controlled object, control source, control result, control steps, failure reasons, and the time for each step; the control command tracing method also includes: The master station issues a call request through a command with the data type "briefing". The call request includes the point number, control point name and start and end time information. The substation filters control briefing files that meet the conditions according to the call request, compresses them and sends them to the master station for the master station to trace control commands and investigate accidents.

Images