IEEE Power & Energy Magazine - March/April 2018 - 41

Currently, China's power grid has the largest installed
capacity, the highest voltage level, and the largest annual
power generation in the world.
control centers at different levels can coordinate with each
other in analysis and decision making.
horizontal integration means that the multiple internal application subsystems in a control center are integrated. based on their natural attributes, these subsystems
are classified into three categories. The first is the real-time
control and early warning, including the conventional realtime monitoring and control functions like sCada, automatic generation control (agC) and automatic voltage control (avC), and other real-time applications such as waMs,
online network analysis, dynamic security analysis, and realtime electricity markets. The second is scheduling and security checking, which is integrated from the original applications like day-ahead scheduling, monthly scheduling and
security checking, energy metering, hydropower automation,
and day-ahead electricity market. The third is dispatch operation management, which deals with the basic data, basic
workflow, daily reports, and external interfaces for operation
management purposes.
For cybersecurity, eMs software is deployed in three zones.
Currently, the real-time control and early warning applications
are deployed in control security zone 1, scheduling and security checking applications are deployed in operation security
zone 2, and the dispatch operation management applications
are deployed in information security zone 3. networked by a
virtual private network (vpn) subnet of the control dedicated
data network, zones 1 and 2 are protected as a cybersecurity
priority and physically separated from zone 3, which is networked by a vpn subnet of the enterprise integrated data network. a logical separation is done between zones 1 and zone 2.
The vertical penetration allows interactions among control centers at different levels. To ensure the security of power
system control, a dedicated data network has been established based on a hierarchical vpn. The backbone network
adopts an independent double-plane network, while the multilayer accessing network adopts a double access mode to the
backbone network. This control dedicated data network has
now covered all levels of control centers as well as almost
all substations and power plants. real-time data and control
commands can be vertically transmitted safely among different levels. due to the separation and isolation between different security zones, the transmission safety of real-time data
and control commands are ensured.
The other target of this sgos unifies the support platform for all control centers in China, which makes it open
to all eMs vendors. This target is ensured by standardization technologies.
march/april 2018

Newly Developed Functions
Integrated Support Platform
The design of the integrated support platform of the sgos
follows general standards-based and open-system principles and adopts a flexible, simple, efficient, safe, and reliable implementation mechanism. it provides four kinds of
communication buses, four types of databases, four types
of graphical interfaces, as well as system management,
cybersecurity management, and application programming
interfaces. The four communication buses refer to security
service, multicast message, high-speed real-time data, and
cross-domain message mail. They work as the central nervous system of the integrated support platform, meeting
the demands of integration and cooperation efficiently. The
four databases are real-time steady state, real-time dynamic
time series, dynamic time-series history, and steady-state
relational history. They adopt the common model driver
with distributed deployment, which extracts the common
network models from the network one provided by services
in the control centers and builds a unified relationship with
the application models, forming the integrated infrastructure of CiMs and application models. by distributed deployment, maintenance by responsibility, and on-demand sharing,
they realize unified modeling, data source maintenance, and
whole-network sharing for the real-time model data of the
sgCC main grid. The four types of graphic interfaces are
CiM/g graphics, geographic information system graphics,
web graphics, and third-party graphic plug-ins, which support the automatic generation of displays, offline exchange
of graphic displays, online remote browsing, and unified
human-machine graphic interfaces.
as shown in Figure 5, the integrated support platform
unifies the application programming interfaces and the technical standards of cybersecurity protection, system management,
service interfaces, database access, and graphic interfaces. it
supports internal functions within control centers and enhances
the interaction among multilevel control centers as well as with
substations and power plants. based on this platform, any eMs
vendor can embed its special application software into the system, opening the platform to eMs vendors.

Real-Time Control and Early Warning
The traditional sCada functions are transplanted to the integrated support platform. due to the implementation of the
vertical penetration in the same cybersecurity zone, the sgos
achieves remote browsing among various multilevel control
ieee power & energy magazine

Table of Contents for the Digital Edition of IEEE Power & Energy Magazine - March/April 2018