Power wireless communication system and smart grid

Abstract

This invention addresses the problem in existing technologies where WiFi signals are easily interfered with. In complex electromagnetic environments such as substations, electromagnetic interference generated by other electronic devices and power equipment can affect the stable transmission of WiFi signals, leading to data loss or transmission delays. The invention provides a power wireless communication system and a smart grid. It relates to the field of power wireless communication systems. The system includes a sensing layer, a network layer, and an application layer. The sensing layer includes at least one power monitoring terminal for collecting power equipment operation data. The network layer includes a secure access module, a WAPI authentication server, and a communication network architecture. The secure access module connects to both the power monitoring terminal and the WAPI authentication server via a WAPI encrypted channel. The communication network architecture includes a core routing unit and a wireless access unit. The application layer includes a power control center and a security audit module. This invention constructs a secure protection system for data acquisition, transmission, processing, and control.

Description

Technical Field

[0001] This utility model relates to the field of power wireless communication systems, and in particular to a power wireless communication system and a smart grid. Background Technology

[0002] With the rapid development of the power industry, the demand for real-time monitoring and intelligent management of power equipment is increasing.

[0003] Existing communication methods for real-time monitoring and intelligent management of power equipment include WiFi communication. However, WiFi signals are susceptible to interference. In complex electromagnetic environments such as substations, electromagnetic interference generated by other electronic devices and the power equipment itself can affect the stable transmission of WiFi signals, leading to data loss or transmission delays. Utility Model Content

[0004] This invention addresses the problem that WiFi signals are easily interfered with in the prior art, and that electromagnetic interference generated by other electronic devices and power equipment in complex electromagnetic environments such as substations can affect the stable transmission of WiFi signals, leading to data loss or transmission delays. It provides a power wireless communication system and a smart grid.

[0005] The technical solution adopted in this utility model is:

[0006] A power wireless communication system, comprising:

[0007] The perception layer includes at least one power monitoring terminal, which is used to collect power equipment operation data.

[0008] The network layer includes a secure access module, a WAPI authentication server, and a communication network architecture. The secure access module connects to the power monitoring terminal and the WAPI authentication server respectively through a WAPI encrypted channel. The communication network architecture includes a core routing unit and a wireless access unit. The core routing unit is connected to the wireless access unit through a dedicated power fiber optic cable. The secure access module is wirelessly connected to the wireless access unit.

[0009] The application layer includes a power control center and a security audit module. The power control center communicates with the core routing unit through a security gateway, and the security audit module connects to the WAPI authentication server for real-time interaction.

[0010] Furthermore, the power monitoring terminal includes:

[0011] Multi-mode sensor array for synchronous acquisition of three-phase voltage, current and infrared temperature data;

[0012] The edge processing unit is used to process the data collected by the multi-mode sensor group; the edge processing unit is connected to the multi-mode sensor group via the SPI bus; the edge processing unit is wirelessly connected to the secure access module.

[0013] Furthermore, the secure access module includes a data encryption submodule; the data encryption submodule connects to the WAPI authentication server via a WAPI encryption channel.

[0014] Furthermore, the secure access module also includes an identity authentication submodule; the identity authentication submodule connects to the WAPI authentication server via a WAPI encrypted channel.

[0015] Furthermore, the secure access module also includes a signal management submodule, which is connected to the wireless access unit.

[0016] Based on the same inventive concept, the present invention also provides a smart grid, which includes the aforementioned power wireless communication system.

[0017] The beneficial effects of this utility model are:

[0018] The power monitoring terminal in the sensing layer of the power wireless communication system disclosed in this utility model transmits data through a built-in WAPI module and encrypted channel. Utilizing WAPI's high-security encryption mechanism, the integrity and tamper-resistance of data acquisition are guaranteed from the source. In the network layer, the secure access module verifies data legitimacy and adds security tags. A hybrid transmission architecture composed of wireless access units and core routing units achieves low-latency, high-reliability data routing. WAPI's stable anti-interference performance ensures that abnormal data can quickly reach the application layer. The power control center in the application layer deeply detects data compliance, triggers alarms, and generates control commands, which are then sent back to the sensing layer devices for execution via the WAPI encrypted channel. Simultaneously, the WAPI authentication server and security audit module work closely together to synchronize access logs in real time and immediately alarm for unauthorized connections, constructing a security protection system covering the entire "acquisition-transmission-processing-control" chain. Attached Figure Description

[0019] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0020] Figure 1 This is a schematic diagram of the power wireless communication system in Example 1;

[0021] Figure 2 This is a schematic diagram of the power monitoring terminal in Example 2;

[0022] Figure 3 This is a schematic diagram of the security access module in Example 3. Detailed Implementation

[0023] In the description of this utility model, it should be understood that the terms "center", "longitudinal", "transverse", "length", "width", "thickness", "upper", "lower", "front", "rear", "left", "right", "vertical", "horizontal", "top", "bottom", "inner", "outer", "clockwise", "counterclockwise", "axial", "radial", "circumferential", etc., indicating the orientation or positional relationship are based on the orientation or positional relationship shown in the accompanying drawings, and are only for the convenience of describing this utility model and simplifying the description, and are not intended to indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation, and therefore should not be construed as a limitation of this utility model.

[0024] The following disclosure provides many different embodiments or examples for implementing various structures of this invention. To simplify the disclosure, specific examples of components and arrangements are described below. Of course, these are merely examples and are not intended to limit the scope of this invention.

[0025] The embodiments of the utility model will now be described in detail with reference to the accompanying drawings.

[0026] Example 1

[0027] The power wireless communication system disclosed in this embodiment adopts a three-layer architecture design, specifically including a sensing layer 1, a network layer 2, and an application layer 3. Based on the complete structure of the power wireless communication system, this embodiment also provides a substation, which contains a transformer 4, and the transformer 4 is equipped with a cooling fan 5. (See attached...) Figure 1 As shown.

[0028] The sensing layer 1 includes at least one power monitoring terminal 11, which is connected to the transformer 4 and the cooling fan 5, and is used to collect the temperature of the transformer 4 and control the cooling fan 5.

[0029] Network layer 2 includes a secure access module 21, a WAPI authentication server 22, and a communication network architecture 23. The secure access module 21 is connected to the power monitoring terminal 11 and the WAPI authentication server 22 respectively through the WAPI encrypted channel 24. The communication network architecture 23 includes a core routing unit 231 and a wireless access unit 232. The core routing unit 231 is connected to the wireless access unit 232 through a dedicated power fiber optic cable, and the secure access module 21 is wirelessly connected to the wireless access unit 232.

[0030] Application layer 3 includes a power control center 31 and a security audit module 32. The power control center 31 is connected to the core routing unit 231 through a security gateway 33, and the security audit module 32 is connected to the WAPI authentication server 22 for real-time interaction.

[0031] The following section introduces this power wireless communication system in the context of an application scenario.

[0032] This power wireless communication system is applied to a substation group monitoring scenario in a large urban power grid. In this scenario, 10 substations distributed in different areas of the city need to transmit equipment operation data to the power control center in real time, while the control center can remotely adjust substation parameters based on the data. Power monitoring terminals are deployed on key equipment (such as transformers and circuit breakers) in each substation. The system needs to ensure the security and real-time performance of data transmission, and prevent unauthorized intrusion and data tampering.

[0033] Detailed Explanation of Signal Flow

[0034] 1. Data Acquisition Phase (Perception Layer 1 → Network Layer 2)

[0035] Starting point: The temperature of transformer 4 in the substation rose abnormally. Its power monitoring terminal 11 collected real-time temperature data of 75℃, exceeding the threshold of 65℃.

[0036] Signal flow direction:

[0037] The power monitoring terminal 11 encapsulates the data into standard power protocol data packets (such as IEC61850 format) and transmits the data to the secure access module 21 via the built-in WAPI wireless module and WAPI encrypted channel 24.

[0038] The secure access module 21 verifies the legitimacy of the data packet source and adds a security tag.

[0039] 2. Network transmission phase (within network layer 2)

[0040] Signal flow direction:

[0041] The secure access module 21 forwards encrypted data packets to the wireless access unit 232.

[0042] The wireless access unit 232 receives encrypted data packets and transmits the data to the core routing unit 231 via a dedicated power fiber optic cable.

[0043] The core routing unit 231 selects a route based on the destination address, the IP address of the power control center, and forwards the data packet to the security gateway 33.

[0044] 3. Data Processing Stage (Network Layer 2 → Application Layer 3)

[0045] Signal flow direction:

[0046] Security gateway 33 performs deep inspection of data packets (such as virus scanning and protocol compliance checks) and transmits the data to power control center 31.

[0047] The data analysis system of the power control center 31 received data and triggered an abnormal temperature alarm.

[0048] 4. Control command issuance phase (Application Layer 3 → Network Layer 2 → Perception Layer 1)

[0049] Starting point: Power control center 31 generates cooling instructions based on abnormal data (such as turning on cooling fan 5).

[0050] Signal flow direction:

[0051] The instruction is encrypted by security gateway 33 and then sent to core routing unit 231.

[0052] Transmitted to the secure access module 21 via dedicated power fiber optic cable and wireless access unit 232.

[0053] The secure access module 21 sends instructions to the corresponding power monitoring terminal 11 through the WAPI encrypted channel 24.

[0054] The power monitoring terminal 11 executes the command to control the cooling fan 5 of the substation to start.

[0055] 5. Security Audit Synchronous Phase (Full Process)

[0056] Signal flow direction:

[0057] WAPI authentication server 22 records all device access authentication information.

[0058] The security audit module 32 obtains access logs from the WAPI authentication server 22 in real time.

[0059] Upon detecting an abnormal access attempt (such as an unauthorized device connection request), the security audit module 32 immediately issues an alarm and generates a security event report.

[0060] The following section provides recommended product selections for each of the above components:

[0061] Perception Layer 1: The power monitoring terminal 11 uses the Wasion DTSD342-9 three-phase intelligent power monitoring terminal. Its built-in WAPI wireless communication module conforms to the GM / T0005-2012 standard and supports 256-bit national cryptographic encryption.

[0062] Network Layer 2: The secure access module 21 uses Guotai Wangxin's power IoT secure access gateway. The WAPI authentication server 22 uses Huawei's WAPI authentication server. The core routing unit 231 uses Huawei's NE5000E router. The wireless access unit 232 uses ZTE's ZXR10 series wireless access point. The WAPI encryption channel 24 is a radio frequency signal transmission channel, and the communication medium is air (not physical cable). In the substation scenario, Wasion terminals send WAPI encrypted signals through wireless network cards, and Guotai gateways receive and decrypt them through antennas, without requiring a physical bus connection throughout the process.

[0063] Application Layer 3: The power control center 31 uses the NARI Group OPEN3200 power grid dispatch automation system. The security audit module 32 uses the Venustech Tianjing network security audit system. The security gateway 33 uses the Sangfor AC-1000-B1800.

[0064] The power wireless communication system disclosed in this embodiment is based on a three-layer architecture: perception layer 1, network layer 2, and application layer 3, and a collaborative design of all components to achieve secure real-time data transfer and intelligent equipment management. The power monitoring terminal 11 in perception layer 1 collects equipment operation data in real time and transmits it to the secure access module 21 in network layer 2 via an encrypted channel 24 through a built-in WAPI module. The 256-bit national cryptographic encryption of the GM / T0005-2012 standard ensures the integrity and tamper resistance of the collected data from the source. In network layer 2, the secure access module 21 verifies the legality of the data and adds a security tag. Through a hybrid transmission architecture composed of a wireless access unit 232 and a core routing unit 231, low-latency and highly reliable data routing is achieved via dedicated power fiber optic cables. The wireless access unit 232 flexibly accesses devices in perception layer 1, and the core routing unit 231 intelligently forwards data based on the destination address, ensuring that abnormal data (such as transformer 4 exceeding the temperature by 75°C) quickly reaches application layer 3. The power control center 31 in application layer 3 deeply inspects data compliance through the security gateway 33. Abnormal data triggers alarms and generates control commands, which are then sent to the perception layer 1 devices for execution (such as starting the cooling fan 5) via a reverse encrypted channel. The WAPI authentication server 22 and the security audit module 32 synchronize access logs in real time, providing immediate alarms for unauthorized connections, thus constructing a security protection system covering the entire "acquisition-transmission-processing-control" chain. Through component-based numbered collaboration, the system achieves high real-time monitoring and high-security management of power equipment status, meeting the intelligent operation and maintenance needs of complex substation cluster scenarios.

[0065] Based on the same inventive concept, this embodiment also provides a smart grid, which includes the aforementioned power wireless communication system.

[0066] Example 2

[0067] In this embodiment, the power monitoring terminal 11 includes a multi-mode sensor group 111 and an edge processing unit 112. (See attached diagram) Figure 2 As shown. Other components and connection methods are the same as in Embodiment 1.

[0068] The multi-mode sensor group 111 is used to synchronously collect three-phase voltage, current and infrared temperature data of transformer 4; the edge processing unit 112 is used to process the data collected by the multi-mode sensor group 111; the edge processing unit 112 is connected to the multi-mode sensor group 111 via SPI bus; the edge processing unit 112 is wirelessly connected to the security access module 21.

[0069] The multi-mode sensor group 111 uses the ADuCM355 precision analog microcontroller from Analog Devices, and the edge processing unit 112 uses the Huawei Atlas200DK acceleration module.

[0070] This embodiment significantly enhances the multi-dimensional sensing and data processing capabilities of power monitoring through the integrated design of a multi-mode sensor group 111 and an edge processing unit 112. The multi-mode sensor group 111 simultaneously collects three-phase voltage, current, and infrared temperature data, enabling multi-dimensional monitoring of the operating status of power equipment. The edge processing unit 112 acquires data at high speed via the SPI bus, performing data cleaning, feature extraction, and anomaly prediction locally, significantly reducing the amount of data uploaded and lowering transmission latency. The wireless connection between the edge processing unit 112 and the secure access module 21 maintains architectural flexibility while ensuring data transmission security through WAPI encryption. This design achieves distributed intelligent data processing at the sensing layer 1, reducing the processing burden on the network layer 2 and application layer 3, accelerating anomaly response speed, and improving the overall system reliability and energy efficiency ratio, making it suitable for efficient monitoring of large-scale substation groups.

[0071] Example 3

[0072] In this embodiment, the secure access module 21 includes a data encryption submodule 211, an identity authentication submodule 212, and a signal management submodule 213. (See attached diagram) Figure 3 As shown. Other components and connection methods are the same as in Embodiment 1.

[0073] The data encryption submodule 211 is connected to the WAPI authentication server 22 via the WAPI encryption channel 24. The identity authentication submodule 212 is connected to the WAPI authentication server 22 via the WAPI encryption channel 24. The signal management submodule 213 is connected to the wireless access unit 232. The data encryption submodule 211 is connected to the power monitoring terminal 11 via the WAPI encryption channel 24. The data encryption submodule 211 is connected to the WAPI authentication server 22 via the WAPI encryption channel 24. The identity authentication submodule 212 is connected to the signal management submodule 213 via the WAPI encryption channel 24. The identity authentication submodule 212 and the signal management submodule 213 are wirelessly connected. The signal management submodule 213 is connected to the data encryption submodule 211.

[0074] Signal flow between components

[0075] Data acquisition phase (Perception layer 1 → Network layer 2):

[0076] The power monitoring terminal 11 sends the collected data to the data encryption submodule 211 of the security access module 21. The data encryption submodule 211 initiates an encryption authentication request to the WAPI authentication server 22 through the WAPI encryption channel 24. After verification, the WAPI authentication server 22 returns the authentication response to the identity authentication submodule 212 to confirm the legality of the device.

[0077] Network transmission phase (within network layer 2):

[0078] The identity authentication submodule 212 transmits the authenticated data to the signal management submodule 213. After the signal management submodule 213 performs format adaptation and traffic scheduling on the data, it wirelessly transmits it to the wireless access unit 232 and enters the core network for transmission.

[0079] Control command phase (Application layer 3 → Perception layer 1):

[0080] The wireless access unit 232 receives control commands from the application layer and transmits them to the signal management submodule 213. After the signal management submodule 213 parses the commands, they are decrypted by the data encryption submodule 211 and finally sent to the corresponding power monitoring terminal 11 for execution through the WAPI encryption channel 24.

[0081] Working principle of secure access module 21

[0082] The secure access module 21 achieves end-to-end security control of "authentication-encryption-transmission" through the collaborative efforts of three sub-modules:

[0083] Identity authentication submodule 212: performs two-way authentication on the access request initiated by the power monitoring terminal 11, extracts the digital certificate stored in the device's built-in security chip, interacts with the WAPI authentication server 22 through the WAPI encrypted channel 24, verifies the validity of the certificate and generates a short-term dynamic token, ensuring that only authorized devices can access the network and preventing man-in-the-middle attacks.

[0084] Data encryption submodule 211: It uses the national cryptographic SM1 / SM4 algorithm to encrypt the transmitted data end-to-end, supports the GM / T0005-2012 standard, generates a dynamic key for each session (updated every 15 minutes), and synchronizes the key status with the WAPI authentication server 22 to ensure the confidentiality and integrity of the data in wireless transmission and resist tampering and eavesdropping.

[0085] Signal Management Submodule 213: As a network access hub, it performs protocol conversion (supports power-specific protocols such as IEC61850) and traffic scheduling on the access encrypted data packets, and prioritizes forwarding real-time monitoring data according to QoS policies; on the other hand, it adapts to the wireless transmission environment, dynamically adjusts the signal strength to compensate for electromagnetic interference in substations, and integrates traffic cleaning functions to filter abnormal data packets, ensuring the stability and efficiency of network transmission.

[0086] The data encryption submodule 211 uses the AHC001 cryptographic chip from Guoxin Technology, the identity authentication submodule 212 uses Ping32 enterprise encryption software, and the signal management submodule 213 uses the MoxaEDS-4000 series industrial Ethernet switch from Moxa Technology.

[0087] The data encryption submodule 211, the identity authentication submodule 212, and the signal management submodule 213, through a collaborative mechanism of "authentication beforehand, encrypted transmission, and intelligent scheduling," construct a multi-layered security protection system covering device access, data transmission, and command issuance, meeting the power system's requirements for high security and high reliability access.

Claims

1. A power wireless communication system, characterized in that, include: The sensing layer (1) includes at least one power monitoring terminal (11), which is used to collect power equipment operation data. The network layer (2) includes a secure access module (21), a WAPI authentication server (22), and a communication network architecture (23). The secure access module (21) is connected to the power monitoring terminal (11) and the WAPI authentication server (22) respectively through a WAPI encrypted channel (24). The communication network architecture (23) includes a core routing unit (231) and a wireless access unit (232). The core routing unit (231) is connected to the wireless access unit (232) through a dedicated power fiber optic cable. The secure access module (21) is wirelessly connected to the wireless access unit (232). Application layer (3), which includes power control center (31) and security audit module (32); the power control center (31) is connected to the core routing unit (231) through security gateway (33), and the security audit module (32) is connected to the WAPI authentication server (22) for real-time interaction.

2. The power wireless communication system according to claim 1, characterized in that, The power monitoring terminal (11) includes: A multi-mode sensor array (111) is used to simultaneously acquire three-phase voltage, current and infrared temperature data; An edge processing unit (112) is used to process the data collected by the multi-mode sensor group (111); the edge processing unit (112) is connected to the multi-mode sensor group (111) via an SPI bus; the edge processing unit (112) is wirelessly connected to the secure access module (21).

3. The power wireless communication system according to claim 1 or 2, characterized in that, The secure access module (21) includes a data encryption submodule (211); the data encryption submodule (211) is connected to the WAPI authentication server (22) through the WAPI encryption channel (24).

4. The power wireless communication system according to claim 3, characterized in that, The secure access module (21) further includes an identity authentication submodule (212); the identity authentication submodule (212) is connected to the WAPI authentication server (22) through the WAPI encryption channel (24).

5. The power wireless communication system according to claim 4, characterized in that, The secure access module (21) further includes a signal management submodule (213), which is connected to the wireless access unit (232).

6. A smart grid, characterized in that, It includes the power wireless communication system as described in any one of claims 1-5.

Images