CN105071959A - Plug-and-play management method and system based on unified registration of power network devices - Google Patents

Abstract

The present invention provides a plug-and-play management method and system based on unified registration of grid equipment, the method includes the following steps: (1) generating a digital certificate for each grid equipment, and issuing the digital certificate to the grid equipment offline ; (2) Perform identity authentication on the connected grid equipment according to its digital certificate, and register the legal equipment after passing; (3) Real-time dynamic monitoring of the registered grid equipment; (4) Set up the registered grid equipment Discovery and control authority; (5) The registered grid equipment A discovers and controls other registered grid equipment B with required functions within the scope of the discovery and control authority. The invention realizes the zero-configuration networking of the automatic identification and automatic connection of the grid equipment and the system for the registration, discovery, description, control, event and display of all grid equipment.

Description

A plug-and-play management method and system based on unified registration of grid equipment

technical field

The invention designs a management method and system for power grid equipment, specifically a plug-and-play management method and system based on unified registration of power grid equipment.

Background technique

The grid energy management system (EMS) is a computer system that manages all equipment in the grid through the monitoring and information collection units distributed in the power system to ensure the normal production and consumption of electric energy. In order to achieve this goal, the grid energy management system must clearly know which equipment is included in the power system, that is, it is necessary to establish a model of all grid equipment in the computer system and know the connection relationship of all equipment.

As the management system of the power grid, the dispatch control system needs to establish a detailed model of the power grid. The traditional method is that when adding a device to the power grid, it needs to be reported layer by layer, and the dispatcher manually builds the model of the corresponding device in the system and connects it to the existing system, which requires a lot of manpower and time. When adding substation equipment, since the substation modeling adopts the 61850 standard and the control master station adopts the 61970 standard, it is necessary to establish the same equipment model at the substation end and the control master station according to the adopted standards, and there is a lot of repetitive work. And it will cause the inconsistency of the built model. These problems limit the rapid development of the grid and do not meet the requirements of the smart grid. With the development of smart grid in the future, it is necessary to achieve rapid modeling, that is, when a grid device (or device group, such as a power plant, substation or user) is connected to the grid, it can be controlled by the grid without any human intervention. It is recognized by other parts of the system and the control center, and performs good coordinated operation to realize the plug and play of all energy and information equipment in the grid.

The dispatching of the existing power system generally takes the plant or interval as the management granularity, and the power grid management has not been further refined to the power grid equipment, lacking a unified equipment management specification and management center, and the plug and play of equipment is still in the theoretical research stage.

Contents of the invention

In order to overcome the shortcomings of the above-mentioned prior art, the present invention provides a plug-and-play management method and system based on the unified registration of grid equipment. Zero-configuration networking for automatic identification and automatic connection of power grid equipment and systems.

In order to realize the above-mentioned purpose of the invention, the present invention takes the following technical solutions:

A plug-and-play management method based on unified registration of grid equipment, the method includes the following steps:

(1) Generate a digital certificate for each grid device, and issue the digital certificate offline to the grid device;

(2) Conduct identity authentication on the connected grid equipment according to its digital certificate, and register the legal equipment after passing;

(3) Real-time dynamic monitoring of registered grid equipment;

(4) Set the discovery and control authority between registered grid devices;

(5) The registered grid device A discovers and controls other registered grid devices B with required functions within the scope of discovery and control authority.

Preferably, in the step (1), the digital certificate includes the name, type, area, IP, port, digital certificate address and authority of the grid equipment.

Preferably, in the step (3), the dynamic monitoring utilizes a plug-and-play management mechanism, including the following steps:

Step 3-1. Subscribe to all event topics that will occur;

Step 3-2. When the registered grid equipment changes, store the change information in the database, display real-time messages and change the status information of the grid equipment;

Step 3-3, sort out the messages in the database, and learn the life trajectory of the grid equipment.

Preferably, in the step (4), setting the discovery and control authority is by querying the device authority table, deciding whether to have the access authority of the power grid equipment according to the query result, and then allowing or denying the access request. The device authority table records Each power grid device has access to other power grid devices.

Preferably, in the step (5), the grid equipment A is used as the control equipment, and the grid equipment B is used as the controlled equipment, and the control equipment queries or controls the controlled equipment, including the following steps:

Step 5-1. After the control device obtains the detailed information of the controlled device, it starts to control and query the controlled device. The specific control function depends on the service announced by each grid device;

Step 5-2. The control device calls the control and query instructions of the controlled device remotely, and the specific actions are completed by the controlled device;

Step 5-3, control and query results are returned to the control device.

Preferably, after the step (2), the operation control of the power grid equipment within the scope of authority is also included, including the following steps:

a. Obtain a list of all grid equipment within the jurisdiction, and subscribe to all possible events through the plug-and-play mechanism;

b. When the grid equipment changes, control the grid equipment by "allowing registration", "refusal to register", "refusal to update" and "forced offline";

c. Write the authority of the grid equipment in the system into the database for other system calls.

Preferably, after the step (2), it also includes receiving or subscribing events from the grid equipment, and forwarding the event to the subscribed grid equipment when the event occurs.

Preferably, a plug-and-play management system based on unified registration of grid equipment, the system includes:

The digital certificate management module is used to generate the digital certificate of each grid equipment, issue the digital certificate to the grid equipment offline, and revoke, modify and export the digital certificate;

The equipment access management module is used to authenticate the connected power grid equipment according to its digital certificate, and register the legal equipment after passing;

The equipment dynamic monitoring module is used for real-time dynamic monitoring of registered grid equipment;

The device access control module is used to set the discovery and control authority between registered grid devices;

The device query service module is used for the registered grid device A to discover and control other registered grid devices B with required functions within the scope of the discovery and control authority.

Preferably, the system also includes:

Equipment operation control module, used to control the operation of power grid equipment within the scope of authority;

The event service module is used for receiving or subscribing events from the grid equipment, and forwarding the event to the subscribed grid equipment when the event occurs.

Compared with prior art, the beneficial effect of the present invention is:

In the present invention, as the most basic management object of the power grid, the grid equipment is combined into a device group according to the actual physical attributes, and a unified registration management center is established, and the plug-and-play technology is used for reference to realize the registration, discovery, description, control, event and registration of all grid equipment. It demonstrates that the zero-configuration networking of grid equipment and system automatic identification and automatic connection is realized, which effectively solves the problem of time-consuming, laborious and error-prone debugging work when grid equipment is connected to the system. The unified registration management method provided by this patent can be popularized and applied in all fields of smart grid transmission, transmission, distribution, transformation, and use, and can improve the intelligence level of these links. It has broad application prospects in smart grids and has extremely high potential economic and social benefits.

Description of drawings

Figure 1 is a flow chart of the plug-and-play management method based on the unified registration of grid equipment provided by the present invention

Figure 2 is a structural diagram of the plug-and-play management system based on the unified registration of grid equipment provided by the present invention

Detailed ways

The present invention will be described in further detail below in conjunction with the accompanying drawings.

A plug-and-play management method based on unified registration of grid equipment, the method is as follows:

(1) Generate a digital certificate for each grid device, and issue the digital certificate offline to the grid device;

(2) Conduct identity authentication on the connected grid equipment according to its digital certificate, and register the legal equipment after passing;

(3) Real-time dynamic monitoring of registered grid equipment;

(4) Set the discovery and control authority between registered grid devices;

(5) The registered grid device A discovers and controls other registered grid devices B with required functions within the scope of discovery and control authority.

The digital certificate includes the name, type, area, IP, port, digital certificate address and authority of the grid equipment.

The dynamic monitoring utilizes a plug-and-play management mechanism, comprising the steps of:

Step 3-1. Subscribe to all event topics that will occur;

Step 3-2. When the registered grid equipment changes, store the change information in the database, display real-time messages and change the status information of the grid equipment;

Step 3-3, sort out the messages in the database, and learn the life trajectory of the grid equipment.

The discovery and control permission is set by querying the device permission table, and deciding whether to have the access permission of the grid equipment according to the query result, and then allowing or denying the access request. The device permission table records the access permission of each grid equipment to other grid equipment.

The grid equipment A is used as the control equipment, and the grid equipment B is used as the controlled equipment, and the control equipment queries or controls the controlled equipment, including the following steps:

Step 5-1. After the control device obtains the detailed information of the controlled device, it starts to control and query the controlled device. The specific control function depends on the service announced by each grid device;

Step 5-2. The control device calls the control and query instructions of the controlled device remotely, and the specific actions are completed by the controlled device;

Step 5-3, control and query results are returned to the control device.

The registration management system controls the operation of power grid equipment within the scope of authority, including the following steps:

Step 6-1. Obtain a list of all grid equipment within the jurisdiction, and subscribe to all possible events through the plug-and-play mechanism;

Step 6-2. When the grid equipment changes, control the grid equipment to "allow registration", "deny registration", "refuse update" and "forced offline";

Step 6-3. Write the authority of the grid equipment in the system into the database for other system calls.

Preferably, after the step (2), it also includes receiving or subscribing events from the grid equipment, and forwarding the event to the subscribed grid equipment when the event occurs.

The registration management system includes the following functional modules:

1) Digital certificate management module

The digital certificate management module is the first gate of security protection in the registration management system, which realizes the authorization management of power grid equipment. The digital certificate management function is designed to be compatible with the scheduling digital certificate, and the certificate information is encrypted and stored. The dispatching digital certificate can be uniformly issued by the National Power Dispatching Control Center to achieve unified security protection.

Digital certificate management realizes digital certificate manipulation functions such as "generate digital certificate", "revoke digital certificate", "modify digital certificate" and "export digital certificate", and can browse and display digital certificates of all power grid equipment objects, through message bus and The service bus exchanges information with the entire power grid system.

Digital Certificate Management

The registration management center issues offline digital certificates to newly registered grid equipment. Digital certificate management includes functions such as "generate digital certificate", "revoke digital certificate", "modify digital certificate" and "export digital certificate". The digital certificate records the basic properties of plug-and-play power grid equipment objects such as name, type, area, IP, port, digital certificate address, availability, etc., and stores them in the digital certificate file after being encrypted according to the encryption standard of the control system, and at the same time stores the relevant properties into the digital certificate database. When needed, digital certificates can be exported offline to grid equipment for plug-and-play identification and configuration. When the grid equipment information changes, the digital certificate can be modified and the digital certificate database can be updated at the same time. When grid equipment is no longer in use, its digital certificate can be revoked.

2) Device access management module

The registration management center controls the access of devices through the issuance of digital certificates and the registration process. The registration service authenticates the identity information of the device applying for registration according to the issued certificate, judges whether it is a legal device, and registers the legal device. When the device is deregistered, the registration management center will make corresponding changes to the device status. The specific interaction design of the registration service: the server side of the registration service runs in the registration management center. When the power grid equipment is ready to connect to the registration management system, it calls the API interface of the registration service to initiate a connection request to the registration management center, and the registration service server receives the After the request, it will initiate a request to the permission service to obtain the access permission of the grid device, and then allow or deny the access request of the device.

3) Device query service module

The registration management center maintains the registered device list service, so that the devices connected to the system can discover all grid devices through it.

During the discovery process, the device can announce its existence and services to the registration management center through the discovery service, and can also query the interested device in the registration management center through the discovery service. According to the device authority attribute in the digital certificate, manage the range of devices that can be discovered and discovered, the range of services that can be used, the range of devices that can be controlled and controlled, the range of events that can be sent and subscribed, etc.

4) Device access control module

The access management and control module is used to set the discovery and control authority between grid devices, allowing or denying the discovery and control behavior of grid devices. The registration management center maintains a device permission table, and the device permission table stores discovery and control permissions between devices. When a power grid device initiates a discovery request, it needs to call the discovery service of the registration management center. At this time, the registration management center will query the device permission table, determine whether it has access rights according to the query results, and then allow or deny the access request.

5) Equipment dynamic monitoring module

The power grid equipment dynamic monitoring module is mainly composed of three parts: real-time message monitoring, object status information, and object life trajectory. When the status of the registered grid equipment in the system changes, the real-time message monitoring will obtain the change information in real time, store it in the database, and display it in real time through the interface; change the status information of the grid equipment according to the real-time message, such as operating status, registration status, Discover status, update status, etc.; by sorting and categorizing real-time messages, you can also view the life trajectory of power grid equipment objects.

object dynamic monitoring

Dynamic monitoring mainly utilizes the plug-and-play management mechanism, and first subscribes to all possible event topics such as new creation, update, and completion; when the registered device in the system changes, the message bus will notify the dynamic monitoring module; the dynamic monitoring module Get and parse the message, store the message content in the database, display real-time messages and change the device status information at the same time. Finally, sort out the messages in the database to know the life trajectory of the equipment.

6) Equipment operation control module

Through equipment operation control, the control of grid equipment can be realized, and all grid equipment within the scope of authority can be implemented to "allow registration", "deny registration", "force update", "rediscover", "refuse update", "force Offline" and other functional actions.

First, obtain a list of all grid equipment within the jurisdiction from the registration management center, and subscribe to all possible events through the plug-and-play mechanism; then, when the description of the current grid equipment changes, the message bus will notify the operation control unit; Then, the power grid equipment can be controlled according to the actual situation, such as "allow registration", "deny registration", "refuse update", "forced offline", and write the authority of the power grid equipment in the system to the database for other systems transfer.

7) Event service module

The event service provides a good message notification mechanism for the whole system, so that the equipment in the system can sense the changes in the power grid in time and respond in time. The event process is divided into two parts: the device sends an event to the registration management center through the event service; the device subscribes the event to the registration management center, and when the event occurs, the registration management center forwards the event to the subscriber.

The implementation basis of the event service is the message bus and the service bus. The grid equipment publishes/subscribes events to the management registration management center through the interface of the message bus. The registration management center maintains the publication/subscription information, receives messages from the grid equipment that publishes the event, and forwards them to the corresponding subscribers. The event service provides a good message notification service for the whole system, so that the equipment in the system can sense the changes in the power grid in time and respond in time.

The present invention complies with the requirements of "security partition, dedicated network, horizontal isolation, and vertical authentication" in the "Overall Plan for Safety Protection of Electric Power Secondary System", and adopts corresponding security assurance measures for the application of new functions and new architectures of the system.

1) Identity authentication

According to the plug-and-play management mechanism, digital certificates are managed for the grid equipment in the system and issued to all equipment groups. When the grid equipment is registered, identity authentication is performed based on its digital certificate. The user password, digital certificate generation and authentication process for the user to log in to the registration management system are all based on a special encryption algorithm for information encryption.

2) Access Authorization

In the registration management system, different levels or types of power grid equipment have different access rights, and the rights are written into the digital certificate during the generation of the digital certificate. When the grid equipment performs access operations, the access authority is controlled according to its level type. In the registration management center, you can view the authority scope of the grid equipment, and manage the registration and update permissions of the grid equipment at the same time.

3) Security Audit

In the registration management system, log records for the whole life cycle of grid equipment registration, update, cancellation and other activity messages form a life track. Store and record different versions of the grid model to form a grid model version library.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit them. Although the present invention has been described in detail with reference to the above embodiments, those of ordinary skill in the art should understand that: the present invention can still be Any modification or equivalent replacement that does not depart from the spirit and scope of the present invention shall be covered by the scope of the claims of the present invention.

Claims (9)

1. A plug-and-play management method based on grid equipment unified registration, characterized in that, the method comprises the steps: (1) Generate a digital certificate for each grid device, and issue the digital certificate to the grid device offline; (2) Conduct identity authentication on the connected grid equipment according to its digital certificate, and register legal equipment after passing; (3) Real-time dynamic monitoring of registered grid equipment; (4) Set up discovery and control permissions between registered grid devices; (5) The registered grid device A discovers and controls other registered grid devices B with required functions within the scope of the discovery and control authority. 2. The management method according to claim 1, wherein in the step (1), the digital certificate includes the name, type, area, IP, port, digital certificate address and authority of the grid equipment. 3. The management method according to claim 1, wherein in the step (3), the dynamic monitoring utilizes a plug-and-play management mechanism, comprising the following steps: Step 3-1. Subscribe to all event topics that will occur; Step 3-2. When the registered grid equipment changes, store the change information in the database, display real-time messages and change the status information of the grid equipment; Step 3-3, sort out the messages in the database, and learn the life trajectory of the grid equipment. 4. The management method according to claim 1, characterized in that, in the step (4), setting the discovery and control authority is by querying the device authority table, and deciding whether to have the access authority of the grid equipment according to the query result, and then To allow or deny the access request, the device permission table records the permission of each grid device to access other grid devices. 5. The management method according to claim 1, characterized in that in the step (5), the grid equipment A is used as the control equipment, the grid equipment B is used as the controlled equipment, and the control equipment queries or controls the controlled equipment , including the following steps: Step 5-1. After the control device obtains the detailed information of the controlled device, it starts to control and query the controlled device. The specific control function depends on the service announced by each grid device; Step 5-2. The control device calls the control and query instructions of the controlled device remotely, and the specific actions are completed by the controlled device; Step 5-3, control and query results are returned to the control device. 6. The management method according to claim 1, characterized in that after the step (2), it also includes the operation control of the power grid equipment within the scope of authority, including the following steps: a. Obtain a list of all grid equipment within the jurisdiction, and subscribe to all possible events through the plug-and-play mechanism; b. When the grid equipment changes, control the grid equipment by "allowing registration", "refusal to register", "refusal to update" and "forced offline"; c. Write the authority of the grid equipment in the system into the database for other system calls. 7. The management method according to claim 1, further comprising receiving or subscribing events from the grid equipment after the step (2), and forwarding the event to the subscribed grid equipment when the event occurs. 8. A plug-and-play management system based on unified registration of grid equipment, characterized in that the system includes: The digital certificate management module is used to generate the digital certificate of each grid equipment, issue the digital certificate to the grid equipment offline, and revoke, modify and export the digital certificate; The equipment access management module is used to authenticate the connected power grid equipment according to its digital certificate, and register the legal equipment after passing; The equipment dynamic monitoring module is used for real-time dynamic monitoring of registered grid equipment; The device access control module is used to set the discovery and control authority between registered grid devices; The device query service module is used for the registered grid device A to discover and control other registered grid devices B with required functions within the scope of the discovery and control authority. 9. The management system according to claim 8, wherein the system further comprises: Equipment operation control module, used to control the operation of power grid equipment within the scope of authority; The event service module is used for receiving or subscribing events from the grid equipment, and forwarding the event to the subscribed grid equipment when the event occurs.