CN117595503B - Micro-grid controller adopting WAPI network - Google Patents

Abstract

The application discloses a micro-grid controller adopting a WAPI network, which comprises a terminal layer, an access layer, a backbone layer and a platform layer, wherein the terminal layer comprises a plurality of data acquisition terminals and a plurality of scattered demand side resource control terminals, and the data acquisition terminals acquire service data information; the access layer comprises a convergence terminal, a firewall, a comprehensive data network, centralized control equipment and an access terminal; the access terminal establishes communication with the terminal layer through a wireless local area network adopting WAPI protocol, and uploads service data information to the convergence terminal through the access terminal; the convergence terminal converges all the service data information and transmits the converged service data information to the comprehensive data network through the fireproof wall; the comprehensive data network cleans the received data and then uploads the cleaned data to the centralized control equipment, and the centralized control equipment is used for uploading and forwarding the service data information to the platform layer through the backbone layer. The micro-grid controller adopting the WAPI network can carry out broadband service transmission, has high safety, is convenient to manage and flexibly access, and has strong expandability and low cost.

Description

A microgrid controller using WAPI network

Technical Field

The present application relates to the technical field of power system dispatching, and specifically to a microgrid controller using a WAPI network.

Background Art

A virtual power plant (VPP) is a power coordination management system that aggregates and coordinates demand-side resources such as energy storage systems, controllable loads, and electric vehicles to participate in the operation of the electricity market and power grid as a special power plant. The control of demand-side resources by virtual power plants is mainly reflected in peak load regulation, frequency regulation, demand response, and new energy consumption. It can aggregate demand-side resources to participate in the operation of the electricity market and ancillary service market, and provide management and ancillary services for distribution networks and transmission networks.

The communication network is one of the key elements of the virtual power plant, which relies on the communication system to regulate various resources. Advanced and complete information communication technology and standardized protocols enable the virtual power plant to monitor demand-side resources, quickly aggregate and transmit data, interconnect and manage massive smart terminals, and provide technical support for improving the level of interaction and data exchange.

In the prior art, the communication network architecture within the virtual power plant has a layered architecture, namely the terminal layer, access layer, backbone layer and platform layer. At the same time, the VPP communication network architecture is usually divided into two levels, namely the local communication layer and the remote communication layer.

Among them, the local communication layer is mainly composed of demand-side resources, terminal equipment (such as collectors, smart meters, inverters, etc.) and centralized control equipment (such as telecontrol devices, concentrators, distribution automation terminals, substation fusion terminals, etc.). The information of the local communication layer terminal equipment is collected to one or more centralized control devices and uploaded to the remote transmission equipment. Communication equipment is mostly embedded in the terminal equipment and centralized control equipment in the form of modules. Existing local communications mostly use HPLC, RS-485, RS-232, micro-power wireless and other methods.

The remote communication layer mainly includes switches at all levels, aggregation routers, encryption devices, secure access gateways, etc., which are used for information exchange between virtual power plant terminals and management platforms. It has single-channel or independent dual-channel uplink channels. Each channel supports power private network communication and operator public network communication, and multiple communication methods are mixed and networked. Existing remote communication methods mainly include: XPON, industrial Ethernet, 4G/5G communication, power LTE wireless private network, power fiber private network, etc.

However, the existing local communication methods still have the following defects: (1) Limited bandwidth: For application scenarios where terminal devices collect data for transmission, existing communication technologies are only suitable for narrowband services and cannot transmit broadband services; (2) Security needs to be improved, and public frequency bands are susceptible to interference; there is no ability to manage and control the identity, network and security of access terminal devices; the VPP local side access loads are of various types, and the real-time information interaction when interacting with the large power grid brings a series of problems such as massive terminal access; (3) Additional wiring is required, and the construction cost is high. The existing wiring method is complicated, which is not conducive to later construction and maintenance, and the operation and maintenance cost is high.

Summary of the invention

One purpose of the present application is to provide a microgrid controller using a WAPI network that is capable of broadband service transmission, has high security, is easy to manage and has flexible access, has strong scalability, does not require additional wiring, and is low in cost.

In order to achieve the above objectives, the technical solution adopted in this application is: a microgrid controller using a WAPI network, including a terminal layer, an access layer, a backbone layer and a platform layer; the terminal layer includes multiple data acquisition terminals and multiple dispersed demand-side resource control terminals, and each of the data acquisition terminals is used to collect the business data information of each demand-side resource control terminal. The access layer includes a convergence terminal, a firewall, an integrated data network, a centralized control device and at least one access terminal; the access terminal establishes communication with the terminal layer through a wireless local area network using the WAPI protocol, so that the business data information collected by each of the data acquisition terminals is uploaded to the convergence terminal through the access terminal; the convergence terminal is used to aggregate all the business data information, and to upload the aggregated business data information to the integrated data network through the firewall; the integrated data network is used to clean the received data before uploading it to the centralized control device, and the centralized control device is used to upload and forward the business data information to the platform layer through the backbone layer.

Preferably, the access terminal includes a power cabinet, at least one POE switch and at least one wireless access point for wirelessly connecting the data acquisition terminal; the power cabinet supplies power to each of the POE switches through a power cord; each of the POE switches is connected to at least one of the wireless access points via a network cable, and each of the POE switches is connected to the aggregation terminal via an optical cable.

Preferably, the access layer also includes a WAPI authentication server, a wireless controller and a network manager; the WAPI authentication server is responsible for cooperating with WAPI authentication and encryption, the wireless controller is responsible for managing the wireless access point, and the network manager is used to monitor the aggregation switch, the POE switch and the wireless access point.

Preferably, the number of the WAPI authentication servers and/or the wireless controllers is two.

Preferably, each of the demand-side resource control terminals in the same area is used to form a virtual power plant; within the same virtual power plant, the demand-side resource control terminal and the corresponding wireless access point are interconnected.

Preferably, the wireless local area network is suitable for using an Internet security protocol IPSec gateway.

Preferably, the demand-side resource control terminal includes power generation equipment, energy storage equipment and power consumption equipment.

Preferably, the backbone layer adopts the operator backbone network and/or the power fiber optic private network to achieve real-time interaction of various business data information and control operation information of demand-side resources.

Preferably, the platform layer performs load forecasting and dynamic aggregation management on decentralized demand-side resources, utilizes cloud-edge collaboration to achieve efficient resource utilization and coordinated scheduling among multiple demand-side resource systems, and guides demand-side resources to participate in electricity market quotation and transactions.

Preferably, broadband power line carrier and micro-power wireless dual-mode communication technology are used to establish communication between the access terminal and the terminal layer.

Compared with the prior art, the beneficial effects of the present application are as follows: (1) The traditional WIFI network adopts one-way encryption, identity authentication is simple, and the key is easy to crack. The WAPI protocol adopts the elliptic curve algorithm, the key has not been cracked so far, and the identity cannot be forged. Through two-way identity authentication, it prevents the information leakage caused by the access of legal terminal devices to illegal wireless access points, and also prevents illegal terminal devices from accessing the wireless access point to access the network, ensuring that only terminal devices with legal identities can access the wireless access point with legal certificates to access the network. Therefore, the WAPI network is used to establish the communication connection between the demand-side terminal devices and the centralized control equipment. Compared with the traditional WIFI network, it has stronger security and outstanding security protection performance, and can meet the security requirements of the virtual power plant for the local communication network. In addition, the communication method established by the WAPI network is suitable for broadband service transmission. In addition, the service data information of the demand-side resources is isolated by a firewall before accessing the integrated data network, following the security protection deployment principle of "vertical encryption, horizontal isolation" to improve the security and reliability of service data information transmission.

(2) Traditional WiFi networks can only prevent system members from accessing the network by changing the password. However, if other system members want to access the network at this time, they must change their passwords accordingly, which is complicated to operate. In addition, the WiFi network cannot perform unified, centralized and refined management of system members, making it difficult to expand the network. With the WAPI wireless network, system members can exit the system or new members can join the system by simply revoking the certificate or issuing a new certificate. It is very convenient to expand the network and facilitate unified management. The terminal business requirements of virtual power plants are numerous and highly mobile, and the use of WAPI wireless network communication methods facilitates unified management and flexible access to multiple businesses.

(3) The existing wired communication method requires a lot of manpower and material resources to lay lines, the construction cost is high, and the cables are messy and numerous in the later stage, making it difficult to complete fault troubleshooting, resulting in a significant increase in operation and maintenance costs. Therefore, compared with the existing wired communication method, the communication method established by using the WAPI wireless network does not require additional wiring, has a lower construction cost, is easy to troubleshoot in the later stage, and greatly reduces maintenance costs.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG1 is a schematic diagram of the local communication layer of a microgrid controller using a WAPI network provided in the present application.

FIG2 is a schematic diagram of the remote communication layer of a microgrid controller using a WAPI network provided in the present application.

DETAILED DESCRIPTION

Below, the present application is further described in conjunction with specific implementation methods. It should be noted that, under the premise of no conflict, the various embodiments or technical features described below can be arbitrarily combined to form new embodiments.

In the description of the present application, it should be noted that for directional words, such as the terms "center", "lateral", "longitudinal", "length", "width", "thickness", "up", "down", "front", "back", "left", "right", "vertical", "horizontal", "top", "bottom", "inside", "outside", "clockwise", "counterclockwise" and the like indicating directions and positional relationships are based on the directions or positional relationships shown in the drawings, which are only for the convenience of describing the present application and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific direction, be constructed and operated in a specific direction, and cannot be understood as limiting the specific protection scope of the present application. The terms "first", "second" and the like in the specification and claims of the present application are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. The terms "including" and "having" in the specification and claims of the present application and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

With reference to Fig. 1 and Fig. 2, an embodiment of the present application provides a microgrid controller using a WAPI network, including a terminal layer, an access layer, a backbone layer and a platform layer; the terminal layer includes a plurality of data acquisition terminals and a plurality of dispersed demand-side resource control terminals, and each data acquisition terminal is used to collect the business data information of each demand-side resource control terminal. The access layer includes a convergence terminal, a firewall, an integrated data network, a centralized control device and at least one access terminal; the access terminal establishes communication with the terminal layer through a wireless local area network using the WAPI protocol, so as to upload the business data information collected by each data acquisition terminal to the convergence terminal through the access terminal; the convergence terminal is used to aggregate all business data information, and to upload the aggregated business data information to the integrated data network through the firewall; the integrated data network is used to clean the received data before uploading it to the centralized control device, and the centralized control device is used to upload and forward the business data information to the platform layer through the backbone layer. Among them, the centralized control device is connected to the integrated data network, which is convenient for uploading and forwarding business data information to the cloud platform, and can send control instructions to the wireless terminal device (such as the demand-side resource control terminal) at the same time. In addition, the demand-side resource control terminals are usually power generation equipment (such as distributed photovoltaics, backup diesel generators, natural gas generators, etc.), energy storage equipment (such as distributed power sources, batteries, supercapacitors, flywheels, etc.) and power-consuming equipment (such as household loads, electric vehicles, charging piles, adjustable loads, etc.).

It should be understood that the specific structure and working principle of the data acquisition terminal are prior art and will not be described in detail here.

In terms of security performance: Traditional WIFI networks use one-way encryption, identity authentication is simple, and keys are easy to crack. The WAPI protocol uses an elliptic curve algorithm, and the key cannot be cracked so far, and the identity cannot be forged. Through two-way identity authentication, it prevents information leakage caused by legal terminal devices accessing illegal wireless access points, and also prevents illegal terminal devices from accessing wireless access points to access the network, ensuring that only terminal devices with legal identities can access wireless access points with legal certificates to access the network. Therefore, the use of the WAPI network to establish communication connections between demand-side terminal devices and centralized control devices is more secure than traditional WIFI networks, with outstanding security protection performance, and can meet the security requirements of virtual power plants for local communication networks. In addition, the business data information of demand-side resources is isolated by firewalls before accessing the integrated data network, following the security protection deployment principle of "vertical encryption, horizontal isolation" to improve the security and reliability of business data information transmission.

From the perspective of managing system members: Traditional WiFi networks can only prevent system members from accessing the network by changing the password. However, if other system members want to access the network at this time, they must change their passwords accordingly, which is complicated to operate. In addition, the WiFi network cannot perform unified, centralized and refined management of system members, making it difficult to expand the network. With the WAPI wireless network, system members can exit the system or new members can join the system by simply revoking the certificate or issuing a new certificate. It is very convenient to expand the network and facilitate unified management. The terminal business requirements of virtual power plants are numerous and highly mobile, and the use of WAPI wireless network communication methods facilitates unified management and flexible access to multiple businesses. It provides centralized, unified and refined management of access terminal business data and improves scalability.

From the cost aspect: the existing wired communication method requires a lot of manpower and material resources to lay the line, the construction cost is high, and the cables are messy and numerous in the later stage, which makes it difficult to complete the troubleshooting, resulting in a significant increase in operation and maintenance costs. Therefore, compared with the existing wired communication method, the communication method established by the WAPI wireless network does not require additional wiring, has a lower construction cost, is easy to troubleshoot in the later stage, and greatly reduces the maintenance cost.

In terms of transmission bandwidth: traditional communication methods are only applicable to narrowband services and cannot transmit broadband services; while the communication method established using the WAPI network is suitable for broadband service transmission.

1 , in some embodiments of the present application, the aggregation terminal is generally an aggregation switch.

Referring to FIG. 1 , in some embodiments of the present application, the access terminal includes a power cabinet, at least one POE switch, and at least one wireless access point for wirelessly connecting a data acquisition terminal; the power cabinet supplies power to each POE switch through a power line; each POE switch is connected to at least one wireless access point through a network cable, and each POE switch is connected to a convergence terminal through an optical cable. It can be understood that the present application does not limit the specific number of POE switches and wireless access points, and their specific number can be determined according to the specific number of demand-side resource control terminals. In the same virtual power plant area, a power cabinet is deployed to power the POE switch through a power line. The wireless access point is connected to the POE switch through a network cable, one end of the network cable is connected to the powered device, and the other end is connected to the RJ45 port of the POE switch. The POE power supply method can enable the powered device to supply power and transmit data at the same time, and the power can be supplied by connecting the network cable without the need to deploy an additional power line. Multiple POE switch optical ports in a virtual power plant establish communication connections through optical cables, thereby realizing data exchange between wireless terminal devices within a virtual power plant. The POE switches of multiple virtual power plants are connected to the aggregation switch via optical cables. The terminal devices (i.e., demand-side resource control terminals) in different virtual power plants establish communication connections through the POE switches and aggregation switches in their own plants to complete the aggregation of demand-side resource business data. The POE power supply method is used to reduce the laying of power lines, saving construction costs and later operation and maintenance costs.

Referring to Figure 1, in some embodiments of the present application, the access layer also includes a WAPI authentication server (AS), a wireless controller (AC) and a network management system; the WAPI authentication server (AS) is responsible for cooperating with WAPI authentication and encryption, the wireless controller (AC) is responsible for managing wireless access points, and the network management system is used to monitor aggregation switches, POE switches and wireless access points. The wireless controller, WAPI authentication server and network management system are connected to the integrated data network to uniformly manage the data of all virtual power plants and complete the unified access to heterogeneous terminals. In addition, with this ternary peer-to-peer security architecture, the wireless access point (AP) has an independent identity, the user terminal and the AP directly authenticate each other in both directions, and unauthorized terminal access is denied to prevent legal terminals from accessing illegal networks; dynamic negotiation of security protection keys for the wireless LAN data link layer is provided; and communication is carried out using session keys and negotiated session encryption algorithms. Effectively ensure the confidentiality, integrity and non-repudiation of data communications at the wireless LAN link layer.

In some embodiments of the present application, the number of WAPI authentication servers and/or wireless controllers is two (ie, one active and one standby), which greatly reduces the possibility of service instability caused by server failure.

In some embodiments of the present application, each demand-side resource control terminal in the same area is used to form a virtual power plant; within the same virtual power plant, the demand-side resource control terminal and the corresponding wireless access point are interconnected.

In some embodiments of the present application, the wireless local area network is suitable for using an Internet security protocol IPSec gateway. When transmitting data, the data service is encrypted through the IPSec gateway to ensure the security of wireless data transmission; the demand-side resource service data information is isolated by a firewall before accessing the integrated data network, further improving security.

2 , in some embodiments of the present application, the backbone layer uses an operator backbone network and/or a power fiber optic private network to achieve real-time interaction of various business data information and control operation information of demand-side resources.

Referring to Figure 2, in some embodiments of the present application, the platform layer performs load forecasting and dynamic aggregation management on the dispersed demand-side resources, utilizes cloud-edge collaboration to achieve efficient resource utilization and coordinated scheduling between multiple demand-side resource systems, and guides demand-side resources to participate in power market quotation and transactions. For example, the platform layer includes a virtual power plant control cloud platform (i.e., a VPP control cloud platform), a scheduling cloud platform, and a power market cloud platform; the VPP control cloud platform sends corresponding response information to the scheduling cloud platform based on the business data information received in real time, and the scheduling cloud platform sends corresponding call information to the VPP control cloud platform in real time based on the dynamic response information, so that the VPP control cloud platform can issue corresponding command control; at the same time, the VPP control cloud platform will also perform execution identification with the power market cloud platform based on the business data information received in real time, and clear the results, so as to achieve the purpose of participating in power market quotation and transactions.

This application uses the construction of the WAPI wireless local area network to uniformly access and coordinate the wireless terminals of the demand-side resources of the virtual power plant (i.e., data collection terminals and demand-side resource control terminals), thereby realizing the communication between business data and the aggregated and coordinated control of various demand-side resources by the virtual power plant. Since the WAPI network protocol adopts a ternary physical entity two-way certificate authentication mechanism, it ensures that legal terminals access legal networks, making the communication network security protection between demand-side resources and centralized control equipment outstanding. Using the WAPI network as the communication network of the local communication layer of the virtual power plant makes it more secure for the terminal equipment to collect data and transmit it to the centralized control equipment, and for the centralized control equipment to issue control instructions to the terminal equipment, and realizes the confidentiality and integrity protection of communication messages.

It should be noted that in addition to the WAPI wireless network protocol communication technology, broadband power line carrier and micro-power wireless dual-mode communication technology can also be used to establish communication between the access terminal and the terminal layer. However, the security and anti-interference of this communication method are not as good as the WAPI wireless network protocol communication technology.

The above describes the basic principles, main features and advantages of the present application. Those skilled in the art should understand that the present application is not limited by the above embodiments. The above embodiments and the specification only describe the principles of the present application. The present application may have various changes and improvements without departing from the spirit and scope of the present application. These changes and improvements fall within the scope of the present application for which protection is sought. The scope of protection claimed by the present application is defined by the attached claims and their equivalents.

Claims (8)

1. A microgrid controller using a WAPI network, comprising a terminal layer, an access layer, a backbone layer and a platform layer, characterized in that: the terminal layer comprises a plurality of data acquisition terminals and a plurality of dispersed demand-side resource control terminals, each of the data acquisition terminals being used to collect service data information of each of the demand-side resource control terminals; The access layer includes a convergence terminal, a firewall, an integrated data network, a centralized control device and at least one access terminal; the access terminal establishes communication with the terminal layer through a wireless local area network using the WAPI protocol, so that the service data information collected by each of the data collection terminals is uploaded to the convergence terminal through the access terminal; the convergence terminal is used to aggregate all the service data information, and to upload the aggregated service data information to the integrated data network through the firewall; the integrated data network is used to clean the received data before uploading it to the centralized control device, and the centralized control device is used to upload and forward the service data information to the platform layer through the backbone layer; The access terminal includes a power cabinet, at least one POE switch and at least one wireless access point for wirelessly connecting the data acquisition terminal; the power cabinet supplies power to each POE switch through a power line; each POE switch is connected to at least one wireless access point through a network cable, and each POE switch is connected to the aggregation terminal through an optical cable; The aggregation terminal is an aggregation switch; the access layer also includes a WAPI authentication server, a wireless controller and a network manager; the WAPI authentication server is responsible for cooperating with WAPI authentication and encryption, the wireless controller is responsible for managing the wireless access point, and the network manager is used to monitor the aggregation switch, the POE switch and the wireless access point. 2. The microgrid controller using the WAPI network as described in claim 1, characterized in that the number of the WAPI authentication servers and/or the wireless controllers is two. 3. The microgrid controller using the WAPI network as described in claim 1 is characterized in that each of the demand-side resource control terminals in the same area is used to form a virtual power plant; within the same virtual power plant, the demand-side resource control terminal and the corresponding wireless access point are interconnected. 4. The microgrid controller using the WAPI network as described in claim 1 is characterized in that the wireless local area network is suitable for using an Internet security protocol IPSec gateway. 5. The microgrid controller using the WAPI network as described in claim 1 is characterized in that the demand-side resource control terminal includes power generation equipment, energy storage equipment and power consumption equipment. 6. The microgrid controller using the WAPI network as described in claim 1 is characterized in that the backbone layer uses an operator backbone network and/or a power fiber optic private network to achieve real-time interaction of various business data information and control operation information of demand-side resources. 7. The microgrid controller using the WAPI network as described in claim 1 is characterized in that the platform layer performs load forecasting and dynamic aggregation management on decentralized demand-side resources, utilizes cloud-edge collaboration to achieve efficient resource utilization and coordinated scheduling between multiple demand-side resource systems, and guides demand-side resources to participate in electricity market quotation and transactions. 8. The microgrid controller using the WAPI network as described in any one of claims 1 to 7, characterized in that the access terminal and the terminal layer establish communication using broadband power line carrier and micro-power wireless dual-mode communication technology.