CN104979908B - Substation network online failure analysis method - Google Patents

Abstract

An online fault analysis method for a substation network, including two parts: module setting and implementation process. The module is set with four modules, which are respectively connected in sequence: a fault message acquisition module, a fault message analysis module, an analysis and diagnosis module and a result Display module; the implementation process is through online, real-time or substation message information, and then through a series of parsing and analysis of the message, finally determine whether there is a fault in the substation network system, and inform the operator of the result. The invention can automatically and quickly find out the cause of the substation network fault, makes up for the defect of manual troubleshooting in the prior art, shortens the time for determining the network fault, and improves the processing efficiency of the substation network fault.

Description

An Online Fault Analysis Method for Substation Network

technical field

The invention belongs to the technical field of a substation, especially an online analysis method for a smart grid of a smart substation.

Background technique

Smart substation is an important part of smart grid construction. One of its important features is the secondary information network transmission, which replaces the traditional secondary wiring method. Compared with the traditional mode, the networked transmission mode of the secondary information of the substation greatly improves and improves the information sharing level and interoperability level among various devices in the substation, and presents a good development prospect for the development of the smart grid. However, in this way, the performance and reliability of protection sampling, tripping and closing, starting, and blocking of the secondary system of the substation depend on the transmission of network information to a certain extent. At present, relevant research is being carried out on substation communication networks at home and abroad, but there is a lack of relevant mature technologies. Especially in the case of abnormalities and faults in substation communication networks, how the secondary equipment can distinguish whether the received messages are correct or not is the key to ensure that the secondary equipment The key to correct and reliable operation. However, at present, the failure models of various communication messages in the station are not clear enough, which brings great risks to the operation of the secondary system. Therefore, in order to make the secondary system run safely and reliably, it is very necessary and urgent to study the online fault analysis of substation network.

In order to realize the on-line monitoring of the substation, one of the main technologies adopted at present is to evaluate the online status of the secondary system of the substation. This technology collects the online status of the secondary equipment (including protection, measurement and control, merging unit, intelligent operation box, clock, fault recorder, communication equipment, etc.) and the online status of the secondary network to the object database. Monitor the data to be analyzed and historical data of secondary equipment. Then, by using the online evaluation information sub-station of the secondary system, the information in the object database is matched and screened with the conditions in the expert knowledge base, and finally the expert knowledge base gives the evaluation conclusion according to the matching results. Although this technology can distinguish secondary system faults, it does not automatically analyze the cause of the fault. It must rely on experienced operators to analyze the fault to find out the cause of the fault, which brings a lot of inconvenience to the operation of the substation and the restoration of the fault. And because the number of messages in the station is huge, if each message is analyzed in detail, it will take a lot of time, which is not conducive to the recovery work and analysis of the fault in the event of a fault.

Contents of the invention

The purpose of the present invention is to overcome the above-mentioned defects in the prior art. According to the characteristics of the current intelligent substation network monitoring system, an online fault analysis method for the substation network is proposed to automatically and quickly find out the cause of the fault in the substation network and make up for the needs of the prior art. Manually check the defects of faults, shorten the time for network fault determination, and improve the efficiency of substation network fault handling.

The purpose of the present invention is achieved through the following technical solutions:

An online fault analysis method for a substation network, including two parts: module setting and implementation process. The module is set with four modules, which are respectively connected in sequence: a fault message acquisition module, a fault message analysis module, an analysis and diagnosis module and a result Display module; among them, the setting function of each module is:

Fault message acquisition module: use the network message record analyzer of the substation to obtain various message data in the station from various secondary equipment in the station and the network; the network message recorder records the detailed information of all messages in the substation , the fault message acquisition module uses it to obtain online and real-time secondary system messages of substations. The secondary system messages include slave merge units, measurement and control devices, protection devices, intelligent operation boxes, fault recorders, clocks, switches and other equipment Send out the message; at the same time, use the interface between this module and the fault message analysis module to send the real-time message of the substation to the latter;

Fault message analysis module: including SV analysis sub-module, GOOSE analysis sub-module, and MMS analysis sub-module. When the fault message analysis module receives a message, it first analyzes the packet header of the message, and then uses the header information to determine which analysis sub-module it belongs to. module, and then sent to the corresponding parsing sub-module, which is analyzed by the parsing sub-module according to the message fault model in the module; the fault message parsing module preprocesses each received message, and obtains Its packet header is used to judge the message type, and the main message types of the substation include SV message, GOOSE message, and MMS message. When the specific type of the received message is judged, it is sent to the corresponding message analysis sub-module. Analyze the message according to the fault model of each message;

Analysis and diagnosis module: there are respectively SV analysis sub-module, GOOSE analysis sub-module and MMS analysis sub-module. These three sub-modules correspond to the sub-modules in the fault message analysis module. The data sent by the module, the GOOSE analysis sub-module receives and analyzes the data sent by the GOOSE analysis sub-module, the MMS analysis sub-module receives and analyzes the data sent by the MMS analysis sub-module; in the analysis and diagnosis module, each analysis sub-module processes data from The information process of the fault message analysis module is the same;

Result display module: first, automatically save the secondary network fault analysis results sent from the analysis and diagnosis module in various formats to form a fault analysis history database for operators to check the cause of the fault; second, according to the fault type, the fault The analysis results are displayed in the form of text, tables or graphics, and the fault display results include the cause, time, faulty equipment or location of the fault.

Implementation process: Through online, real-time or substation message information, and then through a series of analysis and analysis of the message, it is finally determined whether there is a fault in the substation network system, and the result is notified to the operator. The implementation process is as follows:

(1) Obtain various messages in the substation online and in real time from the secondary system of the substation through the network message recorder, and send the messages to the message analysis module;

(2) The message analysis module preprocesses the received message, judges the received message type, and then sends it to the corresponding message analysis sub-module;

(3) By comparing the fault models of each message in each message analysis sub-module, then analyze the information needed to judge whether there is a fault in the network system, and then send it to the analysis and diagnosis module;

(4) Each sub-module in the analysis diagnosis module judges whether there is abnormality in this value one by one to the analytical information that receives, if this value belongs to abnormality, then further search for the fault corresponding to this abnormal information, analyze the cause of this fault, and Save the analysis result of the sub-module for the fault; if the information is ok, judge the next analysis information until all analysis information is analyzed;

(5) After each sub-module analyzes the received analysis information, it sends the analysis result to the result display module;

(6) The result display module saves the fault analysis results of the network system to the fault analysis history database, and displays the results in different forms according to the fault conditions.

The present invention acquires the messages of the substation online by using the network message recorder, analyzes the messages in real time and online, and then analyzes the parsed messages to distinguish whether there is a problem with the equipment or operation corresponding to the message. Then automatically and quickly find out the cause of the substation network fault, quickly find out the fault of the substation network system, shorten the troubleshooting time of the network system, and automatically analyze the cause of the fault, determine the source of the fault, and make up for the manual work required by the existing technology Troubleshooting defects shortens the time for determining network faults, saves the time for analyzing messages, improves the efficiency of substation network system fault handling, and provides an effective processing method for intelligent substations to deal with network system faults.

Description of drawings

Fig. 1 is a structural representation of the present invention;

Fig. 2 is a schematic diagram of a message parsing module;

Fig. 3 is a schematic diagram of the analysis and processing process of the analysis and diagnosis sub-module;

Figure 4 is a flow chart of online fault analysis of the network system.

detailed description

The definitions of main abbreviations and key terms involved in the present invention are as follows:

SV: Sampled Values, sampling value;

GOOSE: Generic Object Oriented Substation Event, for general object substation events;

MMS: Manufacturing Message Specification, manufacturing message specification;

SCD: Substation Configuration Description, substation configuration description file.

See Fig. 1, Fig. 2, Fig. 3, Fig. 4, an online fault analysis method of a substation network, including two parts of module setting and implementation process, said module is set with four modules, respectively connected in sequence as: fault message acquisition module, fault message parsing module, analysis and diagnosis module and result display module. A schematic diagram of the connection relationship between modules is shown in Figure 1. The components and functions of each module are as follows:

Fault message acquisition module: use the network message record analyzer of the substation to obtain various message data in the station from various secondary equipment in the station and the network; the network message recorder records the detailed information of all messages in the substation , the fault message acquisition module uses it to obtain online and real-time secondary system messages of substations. The secondary system messages include slave merge units, measurement and control devices, protection devices, intelligent operation boxes, fault recorders, clocks, switches and other equipment Send out the message; at the same time, use the interface between this module and the fault message analysis module to send the real-time message of the substation to the latter.

Fault message analysis module: including SV analysis sub-module, GOOSE analysis sub-module, and MMS analysis sub-module. When the fault message analysis module receives a message, it first analyzes the packet header of the message, and then uses the header information to determine which analysis sub-module it belongs to. module, and then sent to the corresponding parsing sub-module, which is analyzed by the parsing sub-module according to the message fault model in the module; the fault message parsing module preprocesses each received message, and obtains Its packet header is used to judge the message type, and the main message types of the substation include SV message, GOOSE message, and MMS message. When the specific type of the received message is judged, it is sent to the corresponding message analysis sub-module. The packets are parsed according to the fault model of each packet. Due to the huge number of messages in the station, if each message is analyzed in detail, it will take a lot of time, which is not conducive to the recovery work and analysis of the fault in the event of a fault. In order to save time for parsing messages and improve efficiency, the present invention proposes A method for parsing messages according to the fault model of each message is proposed. The schematic diagram of the message parsing module is shown in FIG. 2 .

1) SV analysis sub-module

Currently, SV messages in substations can be divided into two formats according to the IEC61850 communication protocol, namely the IEC61850-9-1 format and the IEC61850-9-2 format, so the SV fault model is also divided into two types accordingly. For the SV message in the IEC61850-9-1 format, the fault model content mainly includes the multicast address, APPDI, logical device name, sampling frequency, sampling value, status word in the message, sampling counter value, etc. Therefore, if The message determined by the sub-module belongs to the IEC61850-9-1 format, and the message is further analyzed to obtain the above content. For the SV message in the IEC61850-9-2 format, the fault model content mainly includes the multicast address, packet header information, sampling value, counter value in the message, message sending delay, etc. Therefore, the above-mentioned content to parse the SV message in this format, and then obtain the corresponding information.

2) GOOSE parsing sub-module

Each IED in the substation relies on the GOOSE message to realize various automation functions, such as protection information exchange, blocking function, etc. In the normal operation of the substation, the data volume of the GOOSE message is not large, and once a fault occurs, the The amount of data increases rapidly, so it is not necessary to analyze each message thoroughly, but only needs to analyze according to the fault model that can distinguish whether there is a fault in the network, which can meet the needs of analyzing and finding the cause of the fault. The GOOSE message fault model mainly includes the following four aspects:

a. GOOSE communication interruption: the minimum transmission time configured in the SCD file is minTime, and the stable transmission time is maxTime. When the transmission time interval between two GOOSE messages is greater than (maxTime×4+minTime), it can be considered that the GOOSE communication is interrupted.

b. Number of messages: Judging from the heartbeat pattern of GOOSE messages, when the number of GOOSE messages in the substation increases sharply, reaching or greater than 3 times the value set in the SCD file, it can be considered that there is a network failure in the substation.

c. Compliance of GOOSE messages: In the IEC61850 protocol, the rules of the state number StNum and serial number SqNum of GOOSE messages are as follows: when the device is restarted, the values of StNum and SqNum are both 1; when there is no new event, the value of StNum remains unchanged. The SqNum value increases by 1; when the StNum value reaches the maximum, the SqNum value becomes 1. Through this rule, it can be judged whether each GOOSE message meets the requirements.

d. Consistency with the SCD file: In the SCD file, the application flag APPID of the GOOSE message, the control block reference Control Block Reference, the data set application DataSetReference, the configuration version ConfigRevision, etc., if the information of the GOOSE message When it is inconsistent with the SCD file, it can be considered that the GOOSE message is faulty.

Therefore, in the GOOSE message analysis sub-module, when a message is received, it only needs to analyze the information required to judge the above GOOSE message failure model, namely APPID, Control Block Reference, DataSetReference, Config Revision, StNum, SqNum, the sending time of the message, the sending frequency of the heartbeat message, etc.

3) MMS parsing sub-module

The MMS message failure model consists of five aspects: MMS initialization, incomplete application layer communication process, MMS communication interruption, message not conforming to the communication protocol, and MMS network abnormality. The initialization is mainly reflected in the service type used by the MMS message. The incomplete communication process and communication interruption need to be judged from the data attributes and data sets of the MMS message. Whether the message conforms to the communication protocol needs to analyze the overall structure of the message, and then Compared with the message model of the SCD file, the abnormality of the MMS network is determined by the message transmission time interval, link establishment and interruption timeout, network traffic, etc. Therefore, the message content to be parsed in this sub-module includes: message header, message time stamp, message size, service type, data attribute, data set and overall message structure.

After each message analysis sub-module analyzes the received message, it sends the analysis result to the analysis and diagnosis module, and then the analysis and diagnosis module further analyzes and processes the message.

Analysis and diagnosis module: there are respectively SV analysis sub-module, GOOSE analysis sub-module and MMS analysis sub-module. These three sub-modules correspond to the sub-modules in the fault message analysis module. The data sent by the module, the GOOSE analysis sub-module receives and analyzes the data sent by the GOOSE analysis sub-module, the MMS analysis sub-module receives and analyzes the data sent by the MMS analysis sub-module; in the analysis and diagnosis module, each analysis sub-module processes data from The information process of the fault message analysis module is the same, as shown in Figure 3, which can be described as: ① Number the information sent by the analysis module after analysis, and divide it into N parts in total, N is a variable, and N in different sub-modules The values can be different; ②Judging the N pieces of information one by one to determine whether the value of the information is abnormal; ③For information with abnormal values, further search for the fault corresponding to the abnormal information, and analyze the cause of the fault, such as In the SV analysis sub-module, if the current sampling value is found to be larger than normal, the source MAC address can be found according to the packet header, and then it can be determined that the device connected to the merging unit that sent the SV message is faulty; ④Find out the system After the failure, save the analysis results of the sub-analysis module. The failure analysis results include the description of the failure, the cause of the failure, the time, the equipment or location where the failure occurred; , that is, after the analysis of all the N pieces of information is completed, all fault analysis results are sent to the result display module.

Result display module: it has two functions, one is to automatically save the secondary network fault analysis results sent from the analysis and diagnosis module in various formats to form a fault analysis history database for operators to check the cause of the fault; Fault type, display the fault analysis results in the form of text, table or graph, etc. The fault display results include the cause, time, faulty equipment or location, etc. of the fault.

The realization process of the inventive method is as follows:

According to the description of the principle of the above method, the implementation process of an online fault analysis method for a substation network is mainly through online, real-time or substation message information, and then through a series of parsing and analysis of the message, and finally determine whether the substation network system is There is a fault, and the result is notified to the operator. The flow chart is shown in Figure 4. The specific implementation process is as follows:

(1) Obtain various messages in the substation online and in real time from the secondary system of the substation through the network message recorder, and send the messages to the message analysis module;

(2) The message analysis module preprocesses the received message, judges the received message type, and then sends it to the corresponding message analysis sub-module;

(3) By comparing the fault models of each message in each message analysis sub-module, then analyze the information needed to judge whether there is a fault in the network system, and then send it to the analysis and diagnosis module;

(4) Each sub-module in the analysis diagnosis module judges whether there is abnormality in this value one by one to the analytical information that receives, if this value belongs to abnormality, then further search for the fault corresponding to this abnormal information, analyze the cause of this fault, and Save the analysis result of the sub-module for the fault; if the information is ok, judge the next analysis information until all analysis information is analyzed;

(5) After each sub-module analyzes the received analysis information, it sends the analysis result to the result display module;

(6) The result display module saves the fault analysis results of the network system to the fault analysis history database, and displays the results in different forms according to the fault conditions.

Claims (1)

1. a kind of online failure analysis methods of substation network, is characterized in that, including module arranges and realize flow process two parts, institute State module and be provided with four modules, be sequentially connected as respectively：Failure Receive message module, failure packet parsing module, analysis are examined Disconnected module and result display module；Wherein, each module arranges function is：

Failure Receive message module：Using various secondary devices and network in the network message recorder analyser slave station of transformer station Various message datas in upper acquisition station；Network message monitor recites the details of all messages of transformer station, failure Using its online, real-time acquisition transformer station secondary system message, electrical secondary system message includes single from merging Receive message module The message that unit, measure and control device, protection device, intelligent operation box, fault oscillograph, clock, switch device send；Utilize simultaneously The failure Receive message module is sent to the latter with the interface of failure packet parsing module the real-time packet of transformer station；

Failure packet parsing module：Including SV analyzing sub-modules, GOOSE analyzing sub-modules, MMS analyzing sub-modules, when failure report Literary parsing module is received after message, first analytic message packet header, recycles header packet information to judge which analyzing sub-module it belongs to, so Corresponding analyzing sub-module is sent to again afterwards, by analyzing sub-module according to the message fault model in the failure packet parsing module Parsed；Failure packet parsing module carries out pretreatment to each message for receiving, and by analytic message its packet header is obtained To judge type of message, wherein the main type of message of transformer station includes SV messages, GOOSE message, MMS messages, when judging to connect During the message particular type for receiving, then corresponding packet parsing submodule is sent to, is parsed according to the fault model of each message Message；

Analyzing and diagnosing module：It is respectively equipped with SV analysis submodules, GOOSE analysis submodules, MMS analysis submodules, these three sons Module is corresponding with the submodule in failure packet parsing module, and wherein SV analysis submodules receive and analyze SV analyzing sub-modules The data for sending over, GOOSE analysis submodules receive and analyze the data that GOOSE analyzing sub-modules are sended over, MMS analyses Submodule receives and analyzes the data that MMS analyzing sub-modules are sended over；In analyzing and diagnosing module, each analysis submodule is processed Information process from failure packet parsing module is the same；

Result display module：One is automatically with many by the secondary network failure analysis result sended over from analyzing and diagnosing module Plant form to preserve, form accident analysis history library, so that operations staff consults failure cause；Two is by failure analysis result Shown with text, form or graphic form, the reason for malfunction coefficient result occurs comprising failure, the time, broken down Equipment or position；

Realize flow process：By it is online, in real time or transformer station message information, then through solving to message in a series Analysis, analysis, it is final to determine that substation network system whether there is failure, and result is informed operations staff, it realizes flow process such as Under：

(1) the various messages by network message monitor from the electrical secondary system of transformer station is online, in real-time acquisition station, and report Text is sent toward packet parsing module；

(2) packet parsing module carries out pretreatment to the message for receiving, and judges received type of message, is sent to corresponding Packet parsing submodule；

(3) then parse and judge whether network system deposits by each message fault model of contrast in each packet parsing submodule In the information needed for failure, then it is sent to analyzing and diagnosing module；

(4) each submodule in analyzing and diagnosing module judges one by one GOOSE data, SV data and MMS to the parsing information for receiving Data, if GOOSE data, SV data and MMS data belong to abnormal, further search for the abnormal information institute with the presence or absence of abnormal Corresponding failure, analyzes the reason for failure occur, and preserves analysis result of the submodule to failure；If the information is not asked Topic, then judge next parsing information, finishes until all parsing information are analyzed；

(5) after each submodule is finished to the parsing information analysiss for receiving, analysis result is sent to result display module；

(6) result display module preserves network system failures analysis result to accident analysis history library, while according to failure feelings Condition in different forms shows result.