CN117595503A - A microgrid controller using WAPI network - Google Patents

Abstract

The application discloses a micro-grid controller adopting a WAPI network, which comprises a terminal layer, an access layer, a backbone layer and a platform layer, wherein the terminal layer comprises a plurality of data acquisition terminals and a plurality of scattered demand side resource control terminals, and the data acquisition terminals acquire service data information; the access layer comprises a convergence terminal, a firewall, a comprehensive data network, centralized control equipment and an access terminal; the access terminal establishes communication with the terminal layer through a wireless local area network adopting WAPI protocol, and uploads service data information to the convergence terminal through the access terminal; the convergence terminal converges all the service data information and transmits the converged service data information to the comprehensive data network through the fireproof wall; the comprehensive data network cleans the received data and then uploads the cleaned data to the centralized control equipment, and the centralized control equipment is used for uploading and forwarding the service data information to the platform layer through the backbone layer. The micro-grid controller adopting the WAPI network can carry out broadband service transmission, has high safety, is convenient to manage and flexibly access, and has strong expandability and low cost.

Description

Micro-grid controller adopting WAPI network

Technical Field

The application relates to the technical field of power system dispatching, in particular to a micro-grid controller adopting a WAPI network.

Background

The Virtual Power Plant (VPP) is a power coordination management system for realizing the aggregation and coordination optimization of demand side resources such as an energy storage system, controllable loads, electric vehicles and the like, so as to be used as a special power plant to participate in the power market and the power grid operation, and the management and control of the demand side resources by the virtual power plant are mainly embodied in aspects of peak shaving, frequency modulation, demand response, new energy consumption and the like, and can aggregate the demand side resources to participate in the power market and the auxiliary service market operation, thereby providing management and auxiliary services for a power distribution network and a power transmission network.

The communication network is one of key elements of the virtual power plant, the communication system is relied on to regulate and control various resources, advanced and perfect information communication technology and standardized protocol are adopted by the virtual power plant to realize monitoring of resources at a demand side, rapid aggregation and transmission of data, interconnection and data management of a large number of intelligent terminals, and technical support is provided for improving interaction level and data exchange.

In the prior art, the communication network architecture inside the virtual power plant has a layered architecture, i.e. a terminal layer, an access layer, a backbone layer and a platform layer. Meanwhile, the VPP communication network architecture is generally divided into two levels of architecture, namely, a local communication layer and a remote communication layer.

The local communication layer is mainly composed of a demand side resource, terminal equipment (such as a collector, a smart meter, an inverter and the like) and centralized control equipment (such as a telemechanical device, a concentrator, a distribution automation terminal, a station area fusion terminal and the like), information of the terminal equipment of the local communication layer is collected to one or more centralized control equipment and uploaded to a remote transmission device, and the communication device is mostly embedded into the terminal equipment and the centralized control equipment in a module mode. The existing local communication mostly adopts the modes of HPLC, RS-485, RS-232, micropower wireless and the like.

The remote communication layer mainly comprises switches at all levels, a convergence router, an encryption device, a security access gateway and the like, is used for information interaction between the virtual power plant terminal and the management side platform, and is provided with a single-channel or independent double-channel uplink channel, and each channel supports power private network communication and operator public network communication and is in mixed networking in multiple communication modes. The existing remote communication method mainly comprises the following steps: XPON, industrial Ethernet, 4G/5G communication, electric LTE wireless private network, electric optical fiber private network, and the like.

However, the existing local communication method still has the following drawbacks: (1) bandwidth limited: aiming at the application scene of data transmission collected by terminal equipment, the existing communication technology is only applicable to narrowband service and cannot carry out broadband service transmission; (2) the safety is to be improved, and the public frequency band is easy to be interfered; the ability to manage and control the identity, network and security of the access terminal device is not provided; the VPP local side access loads are various, and meanwhile, real-time information interaction when the VPP local side access loads interact with a large power grid brings a series of problems of mass terminal access and the like; (3) The additional wiring is needed, the construction cost is high, the existing wiring mode is complicated, the later construction maintenance is not facilitated, and the operation and maintenance cost is high.

Disclosure of Invention

An object of the present application is to provide a micro grid controller that can perform broadband service transmission, has high security, is convenient to manage and flexibly access, has strong expandability, does not need additional wiring, and has low cost by adopting a WAPI network.

In order to achieve the above purpose, the technical scheme adopted in the application is as follows: a micro-grid controller adopting a WAPI network comprises a terminal layer, an access layer, a backbone layer and a platform layer; the terminal layer comprises a plurality of data acquisition terminals and a plurality of scattered demand side resource control terminals, and each data acquisition terminal is used for acquiring service data information of each demand side resource control terminal. The access layer comprises a convergence terminal, a firewall, a comprehensive data network, centralized control equipment and at least one access terminal; the access terminal establishes communication with the terminal layer through a wireless local area network adopting WAPI protocol, so that the service data information acquired by each data acquisition terminal is uploaded to the convergence terminal through the access terminal; the convergence terminal is used for converging all the service data information and transmitting the converged service data information to the comprehensive data network through the firewall; the comprehensive data network is used for cleaning the received data and uploading the cleaned data to the centralized control equipment, and the centralized control equipment is used for uploading and forwarding the service data information to the platform layer through the backbone layer.

Preferably, the access terminal comprises a power cabinet, at least one POE switch and at least one wireless access point for wirelessly connecting the data acquisition terminal; the power cabinet supplies power to each POE exchanger through a power line; each POE switch is connected with at least one wireless access point through a network cable, and each POE switch is connected with the convergence terminal through an optical cable.

Preferably, the access layer further comprises a WAPI authentication server, a wireless controller and a network manager; the WAPI authentication server is used for being in charge of matching WAPI authentication encryption, the wireless controller is used for being in charge of managing the wireless access point, and the network manager is used for monitoring the aggregation switch, the POE switch and the wireless access point.

Preferably, the number of the WAPI authentication servers and/or the wireless controllers is two.

Preferably, each of the demand-side resource control terminals in the same region is configured to form a virtual power plant; and the demand side resource control terminals are interconnected with the corresponding wireless access points in the same virtual power plant.

Preferably, the wireless local area network is internally adapted to employ an internet security protocol IPSec gateway.

Preferably, the demand side resource control terminal comprises power generation equipment, energy storage equipment and electric equipment.

Preferably, the backbone layer adopts an operator backbone network and/or a power optical fiber private network to realize real-time interaction of various service data information and control operation information of the resource at the demand side.

Preferably, the platform layer performs load prediction and dynamic aggregation management on the scattered demand side resources, and utilizes cloud edge cooperation to realize efficient utilization of the resources and coordinated scheduling among a plurality of demand side resource systems and guide the demand side resources to participate in power market quotation and transaction.

Preferably, the communication between the access terminal and the terminal layer is established by adopting a broadband power line carrier and micro-power wireless dual-mode communication technology.

Compared with the prior art, the beneficial effect of this application lies in: (1) Traditional WIFI network adopts one-way encryption, and identity authentication is simple, and the key is easy to crack. The WAPI protocol adopts elliptic curve algorithm, the key cannot be cracked so far, the identity cannot be forged, and through bidirectional identity authentication, information leakage caused by legal terminal equipment accessing an illegal wireless access point is prevented, the illegal terminal equipment accessing the wireless access point accessing network is also prevented, and the fact that only the terminal equipment with legal identity can access the wireless access point accessing network with legal certificate is ensured, so that the WAPI network is adopted to establish communication connection between the terminal equipment at the demand side and the centralized control equipment, and compared with the traditional WIFI network, the security is stronger, the security protection performance is superior, and the security requirement of a virtual power plant on a local communication network can be met. In addition, the communication mode established by adopting the WAPI network is suitable for broadband service transmission. In addition, firewall isolation is used before the service data information of the demand side resource is accessed into the comprehensive data network, and the safety protection deployment principle of longitudinal encryption and transverse isolation is followed so as to improve the safety and reliability of the service data information transmission.

(2) The traditional WiFi network can prevent the system members from accessing the network only by modifying the password, but if other system members want to access the network, the password can be changed accordingly, the operation is complex, the WIFI network cannot perform unified and concentrated refined management on the system members, and the network is difficult to expand. The WAPI wireless network is adopted, and the operations that the system members exit the system or the new members join the system can be completed only by canceling the certificate or issuing the new certificate, so that the network is conveniently expanded, and unified management is facilitated. The terminal service of the virtual power plant has a great demand and strong mobility, and a WAPI wireless network communication mode is adopted, so that unified management and flexible access to multiple services are conveniently realized.

(3) Because the existing wired communication mode needs to consume a large amount of manpower and material resources to carry out line laying, the construction economic cost is high, the later-stage cables are messy and many, the fault investigation is difficult to complete, and the operation maintenance cost is greatly increased. Therefore, compared with the existing wired communication mode, the communication mode established by adopting the WAPI wireless network does not need to carry out extra wiring, has lower construction cost, is convenient for fault detection in the later stage, and greatly reduces the maintenance cost.

Drawings

Fig. 1 is a schematic diagram of a local communication layer of a micro grid controller using a WAPI network provided in the present application.

Fig. 2 is a schematic diagram of a telecommunication layer of a micro grid controller employing a WAPI network provided herein.

Detailed Description

The present application will be further described with reference to the specific embodiments, and it should be noted that, on the premise of no conflict, new embodiments may be formed by any combination of the embodiments or technical features described below.

In the description of the present application, it should be noted that, for the azimuth terms such as terms "center", "lateral", "longitudinal", "length", "width", "thickness", "upper", "lower", "front", "rear", "left", "right", "vertical", "horizontal", "top", "bottom", "inner", "outer", "clockwise", "counterclockwise", etc., the azimuth and positional relationships are based on the azimuth or positional relationships shown in the drawings, it is merely for convenience of describing the present application and simplifying the description, and it is not to be construed as limiting the specific protection scope of the present application that the device or element referred to must have a specific azimuth configuration and operation, as indicated or implied. The terms first, second and the like in the description and in the claims, are used for distinguishing between similar objects and not necessarily for describing a particular sequential or chronological order. The terms "comprises" and "comprising," along with any variations thereof, in the description and claims of the present application are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements that are expressly listed or inherent to such process, method, article, or apparatus.

Referring to fig. 1 and 2, one embodiment of the present application provides a micro-grid controller employing a WAPI network, including a terminal layer, an access layer, a backbone layer, and a platform layer; the terminal layer comprises a plurality of data acquisition terminals and a plurality of scattered demand side resource control terminals, and each data acquisition terminal is used for acquiring service data information of each demand side resource control terminal. The access layer comprises a convergence terminal, a firewall, a comprehensive data network, centralized control equipment and at least one access terminal; the access terminal establishes communication with the terminal layer through a wireless local area network adopting WAPI protocol, so that service data information acquired by each data acquisition terminal is uploaded to the convergence terminal through the access terminal; the convergence terminal is used for converging all the service data information and transmitting the converged service data information to the comprehensive data network through the fireproof wall; the comprehensive data network is used for cleaning the received data and then uploading the cleaned data to the centralized control equipment, and the centralized control equipment is used for uploading and forwarding the service data information to the platform layer through the backbone layer. The centralized control equipment is connected with the comprehensive data network, so that service data information can be conveniently uploaded and forwarded to the cloud platform upwards, and meanwhile, a control instruction can be issued downwards to wireless terminal equipment (for example, a demand side resource control terminal). In addition, demand side resource control terminals are typically power generation devices (e.g., distributed photovoltaics, backup diesel generators, natural gas generators, etc.), energy storage devices (e.g., distributed power sources, batteries, supercapacitors, flywheels, etc.), and powered devices (e.g., household loads, electric vehicles, charging piles, adjustable loads, etc.).

It should be understood that the specific structure and the working principle of the data acquisition terminal are all the prior art, and are not described in detail herein.

From the aspect of safety performance: traditional WIFI network adopts one-way encryption, and identity authentication is simple, and the key is easy to crack. The WAPI protocol adopts elliptic curve algorithm, the key cannot be cracked so far, the identity cannot be forged, and through bidirectional identity authentication, information leakage caused by legal terminal equipment accessing an illegal wireless access point is prevented, the illegal terminal equipment accessing the wireless access point accessing network is also prevented, and the fact that only the terminal equipment with legal identity can access the wireless access point accessing network with legal certificate is ensured, so that the WAPI network is adopted to establish communication connection between the terminal equipment at the demand side and the centralized control equipment, and compared with the traditional WIFI network, the security is stronger, the security protection performance is superior, and the security requirement of a virtual power plant on a local communication network can be met. In addition, firewall isolation is used before the service data information of the demand side resource is accessed into the comprehensive data network, and the safety protection deployment principle of longitudinal encryption and transverse isolation is followed so as to improve the safety and reliability of the service data information transmission.

From the aspect of managing system members: the traditional WiFi network can prevent the system members from accessing the network only by modifying the password, but if other system members want to access the network, the password can be changed accordingly, the operation is complex, the WIFI network cannot perform unified and concentrated refined management on the system members, and the network is difficult to expand. The WAPI wireless network is adopted, and the operations that the system members exit the system or the new members join the system can be completed only by canceling the certificate or issuing the new certificate, so that the network is conveniently expanded, and unified management is facilitated. The terminal service of the virtual power plant has a great demand and strong mobility, and a WAPI wireless network communication mode is adopted, so that unified management and flexible access to multiple services are conveniently realized. The access terminal service data is provided with centralized, unified and refined management, and the expandability is improved.

From the aspect of cost: because the existing wired communication mode needs to consume a large amount of manpower and material resources to carry out line laying, the construction economic cost is high, the later-stage cables are messy and many, the fault investigation is difficult to complete, and the operation maintenance cost is greatly increased. Therefore, compared with the existing wired communication mode, the communication mode established by adopting the WAPI wireless network does not need to carry out extra wiring, has lower construction cost, is convenient for fault detection in the later stage, and greatly reduces the maintenance cost.

From the aspect of transmission bandwidth: the traditional communication mode is only suitable for narrowband service and can not transmit broadband service; and the communication mode established by adopting the WAPI network is suitable for broadband service transmission.

Referring to fig. 1, in some embodiments of the present application, the convergence terminal is typically a convergence switch.

Referring to fig. 1, in some embodiments of the present application, an access terminal includes a power cabinet, at least one POE switch, and at least one wireless access point for wirelessly connecting a data acquisition terminal; the power cabinet supplies power to each POE exchanger through a power line; each POE switch is connected with at least one wireless access point through a network cable, and each POE switch is connected with a convergence terminal through an optical cable. It can be understood that, the specific number of POE switches and wireless access points is not limited in this application, and their specific number may be determined according to the specific number of resource control terminals on the demand side. And a power cabinet is deployed in the same virtual power plant area, and power is supplied to the POE switch through a power line. The wireless access point is connected to the POE switch through a network cable, one end of the network cable is connected with the powered equipment, and the other end of the network cable is connected with an RJ45 port of the POE switch. By adopting the POE power supply mode, the powered equipment can supply power and transmit data simultaneously, and the power can be supplied by connecting a network cable without additional arrangement of a power line. A plurality of POE switch optical ports in a virtual power plant establish communication connection through optical cables, so that data exchange among wireless terminal devices in the virtual power plant is realized. And the POE switches of the plurality of virtual power plants are connected to the convergence switch through optical cables, and terminal equipment (namely a demand side resource control terminal) in different virtual power plants establish communication connection with the convergence switch through the POE switches in the respective power plants to finish convergence of the demand side resource service data. And a POE power supply mode is adopted, so that the distribution of power lines is reduced, and the construction cost and the later operation and maintenance cost are saved.

Referring to fig. 1, in some embodiments of the present application, the access layer further includes a WAPI Authentication Server (AS), a wireless controller (AC), and a network manager; the WAPI Authentication Server (AS) is used for being in charge of matching WAPI authentication encryption, the wireless controller (AC) is used for being in charge of managing the wireless access point, and the network manager is used for monitoring the aggregation switch, the POE switch and the wireless access point. The wireless controller, the WAPI authentication server and the network management system are accessed into the comprehensive data network, so that the data of all virtual power plants are uniformly managed, and uniform access to heterogeneous terminals is completed. In addition, by adopting the ternary peer-to-peer security architecture, a wireless Access Point (AP) has independent identities, and a user side and the AP are directly authenticated in two directions, so that an unauthorized terminal is refused to access, and a legal terminal is prevented from accessing an illegal network; providing security protection key dynamic negotiation of a wireless local area network data link layer; and communicating by using the session key and the negotiated session encryption algorithm. Confidentiality, integrity and repudiation resistance of wireless local area network link layer data communication are effectively guaranteed.

In some embodiments of the present application, the number of WAPI authentication servers and/or wireless controllers is two (i.e., one master and one slave), which greatly reduces the possibility of unstable traffic caused by server failure.

In some embodiments of the present application, each demand-side resource control terminal in the same area is used to form one virtual power plant; and the demand side resource control terminals are interconnected with the corresponding wireless access points in the same virtual power plant.

In some embodiments of the present application, the wireless local area network is internally adapted to employ an internet security protocol IPSec gateway. When transmitting data, the IPSec gateway encrypts the data service, thereby ensuring the safety of wireless data transmission; and the demand side resource business data information is isolated by using a firewall before being accessed into the comprehensive data network, so that the safety is further improved.

Referring to fig. 2, in some embodiments of the present application, a backbone layer employs an operator backbone network and/or a power fiber private network to implement real-time interaction of various service data information and control operation information of a demand side resource.

Referring to fig. 2, in some embodiments of the present application, a platform layer performs load prediction and dynamic aggregation management on dispersed demand side resources, and utilizes cloud edge coordination to achieve efficient utilization of resources and coordinated scheduling among multiple demand side resource systems, and to guide the demand side resources to participate in power market quotations and transactions. For example, the platform layer comprises a virtual power plant management and control cloud platform (i.e., a VPP management and control cloud platform), a dispatch cloud platform and an electric power market cloud platform; the VPP control cloud platform sends corresponding response information to the scheduling cloud platform according to the service data information received in real time, and the scheduling cloud platform sends corresponding calling information to the VPP control cloud platform in real time according to the dynamic response information so that the VPP control cloud platform can send corresponding instruction control; meanwhile, the VPP management and control cloud platform can also perform identification with the electric power market cloud platform according to the business data information received in real time, and clear the result, so that the purpose of participating in quotation and transaction of the electric power market is achieved.

The method and the system realize unified access and overall management of the demand side resource wireless terminals (namely the data acquisition terminals and the demand side resource control terminals) of the virtual power plant through construction of the WAPI wireless local area network, and realize communication among service data and aggregation coordination control of the virtual power plant on each demand side resource. The WAPI network protocol adopts a ternary physical entity bidirectional certificate authentication mechanism, so that a legal terminal is ensured to access a legal network, and the communication network safety protection effect between the resource on the demand side and the centralized control equipment is superior. The WAPI network is used as a communication network of a local communication layer of the virtual power plant, so that the services of collecting data by the terminal equipment, transmitting the data to the centralized control equipment, transmitting a control instruction to the terminal equipment by the centralized control equipment and the like are safer, and confidentiality and integrity protection of communication messages are realized.

It should be noted that, in addition to the above-mentioned technique of WAPI wireless network protocol communication, the communication between the access terminal and the terminal layer may also be established by using a broadband power line carrier and a micro-power wireless dual-mode communication technique. But the communication method is not as safe and interference-resistant as the communication technology adopting WAPI wireless network protocol.

The foregoing has outlined the basic principles, main features and advantages of the present application. It will be appreciated by persons skilled in the art that the present application is not limited to the embodiments described above, and that the embodiments and descriptions described herein are merely illustrative of the principles of the present application, and that various changes and modifications may be made therein without departing from the spirit and scope of the application, which is defined by the appended claims. The scope of protection of the present application is defined by the appended claims and equivalents thereof.

Claims (10)

1. A micro-grid controller adopting WAPI network comprises a terminal layer, an access layer, a backbone layer and a platform layer, and is characterized in that: the terminal layer comprises a plurality of data acquisition terminals and a plurality of scattered demand side resource control terminals, and each data acquisition terminal is used for acquiring service data information of each demand side resource control terminal;

the access layer comprises a convergence terminal, a firewall, a comprehensive data network, centralized control equipment and at least one access terminal; the access terminal establishes communication with the terminal layer through a wireless local area network adopting WAPI protocol, so that the service data information acquired by each data acquisition terminal is uploaded to the convergence terminal through the access terminal; the convergence terminal is used for converging all the service data information and transmitting the converged service data information to the comprehensive data network through the firewall; the comprehensive data network is used for cleaning the received data and uploading the cleaned data to the centralized control equipment, and the centralized control equipment is used for uploading and forwarding the service data information to the platform layer through the backbone layer.

2. The micro-grid controller employing a WAPI network according to claim 1, wherein the access terminal comprises a power cabinet, at least one POE switch, and at least one wireless access point for wirelessly connecting the data acquisition terminal; the power cabinet supplies power to each POE exchanger through a power line; each POE switch is connected with at least one wireless access point through a network cable, and each POE switch is connected with the convergence terminal through an optical cable.

3. The micro-grid controller employing a WAPI network according to claim 2, wherein the access layer further comprises a WAPI authentication server, a wireless controller, and a network manager; the WAPI authentication server is used for being in charge of matching WAPI authentication encryption, the wireless controller is used for being in charge of managing the wireless access point, and the network manager is used for monitoring the aggregation switch, the POE switch and the wireless access point.

4. A micro grid controller employing a WAPI network according to claim 3, wherein the number of WAPI authentication servers and/or the wireless controllers is two.

5. The WAPI network-based microgrid controller according to claim 2, wherein each of said demand side resource control terminals in the same area is configured to form a virtual power plant; and the demand side resource control terminals are interconnected with the corresponding wireless access points in the same virtual power plant.

6. A micro-grid controller employing a WAPI network according to claim 2, wherein the wireless local area network is internally adapted to employ an internet security protocol IPSec gateway.

7. The micro grid controller employing a WAPI network according to claim 1, wherein the demand side resource control terminal includes a power generation device, an energy storage device, and a powered device.

8. The micro grid controller using WAPI network according to claim 1, wherein the backbone layer uses an operator backbone network and/or a power optical fiber private network to implement real-time interaction of various service data information and control operation information of the demand side resource.

9. The micro grid controller using WAPI network according to claim 1, wherein the platform layer performs load prediction and dynamic aggregation management on the dispersed demand side resources, and utilizes cloud edge cooperation to achieve efficient utilization of resources and coordinated scheduling among a plurality of demand side resource systems, and guides the demand side resources to participate in power market quotation and transaction.

10. A micro grid controller employing a WAPI network according to any one of claims 1 to 9, wherein communication is established between the access terminal and the terminal layer using a broadband power line carrier and micro power wireless dual mode communication technology.