CN116226125A - A method and system for expressing industrial alarm information based on state association rules - Google Patents

Abstract

The method and system for expressing industrial alarm information based on state association rules of the present invention, the system includes original alarm information, rule analysis engine, rule database, rule configuration, and alarm panel; the present invention redefines and transcribes original event information, Efficiently integrate many discrete events into an organic and unified overall event information; improve the learning cost for the operation and maintenance personnel to effectively grasp the effective alarm information in the production process, and reduce the information identification workload and work intensity of the operation and maintenance personnel; And it can abstract and analyze the internal background equipment status operation alarm information from independent alarms, and the high-level alarm information with deep traceability information can provide more accurate and fast positioning information for operation and maintenance personnel; and realize a large number of equivalent point actions Information elimination and information compression reduce the number of alarms and improve alarm efficiency.

Description

A method and system for expressing industrial alarm information based on state association rules

technical field

The invention relates to the technical field of industrial alarms, in particular to a method and system for expressing industrial alarm information based on state association rules.

Background technique

As the external manifestation of production information, alarm information is one-to-one corresponding to specific production behaviors, and does not exist in isolation; therefore, each mode of equipment operation will generate a fixed mode of alarm event sequence ; It is the law of inherent internal correlation that strings together a lot of seemingly complicated and scattered information, and then produces a meaningful information expression; and excavates the internal law of alarm information, and analyzes the discrete events, that is, A lot of additional useful information can be obtained;

At present, the mainstream existing technology alarm information system often adopts the principle of "loyalty to field data", and the alarm system only reports truthfully according to the order of chronological occurrence; the alarm system is not 'smart' enough to analyze and 'understand' the internal correlation and meaning;

The SCADA alarm system in the prior art processes the measurement points independently and sequentially, that is, all event information only expresses information such as the sequence and status of the event, and does not adopt the internal relationship and logic of the alarm. any analytical processing measures;

This processing method of the existing technology can meet the needs of the time when the computer computing level is not developed in the past, but with the continuous improvement of the computer performance level and performance, the amount of measuring point data of the computer and the production real-time system is constantly increasing. increase, the connection between the computer and the alarm system continues to deepen; in the actual application of the prior art, a large number of discrete events occupy a lot of precious storage and display resources, which greatly increases the management workload of the operation and maintenance personnel of the prior art alarm system ;

Secondly, in the face of many scattered and seemingly complicated independent events, the existing technology cannot find and gain insight into the internal correlation of each event. In the existing technology, each event is isolated, so that each alarm will be presented to the operation and maintenance personnel. At present, the number of alarms and alarm efficiency are greatly reduced;

Moreover, the existing technology cannot abstract and analyze the internal background device status operation warning information from each independent alarm, so that the alarm efficiency of the existing technology is still extremely dependent on the operation and maintenance personnel in front of the alarm system, and in the production process, a large number of disturbances and complex The information on the operation and maintenance personnel's work intensity and the amount of information identification are also extremely large; a large amount of information is floating on the surface, and it is impossible to quickly and accurately locate the information.

Therefore, those skilled in the art are devoting themselves to developing a method and system for expressing industrial alarm information based on state association rules, aiming at solving the defects existing in the prior art.

Contents of the invention

In view of the above-mentioned defects of the prior art, the technical problem to be solved by the present invention is that in the prior art, a large number of discrete events in the alarm system occupy a lot of valuable storage and display resources, so that the operation and maintenance personnel of the alarm system in the prior art The management workload is greatly increased; and it is impossible to abstract and analyze the internal background device status operation warning information from each independent alarm, so that the alarm efficiency of the existing technology is still extremely dependent on the operation and maintenance personnel in front of the alarm system, which greatly reduces the cost of reducing alarms. Quantity and alert efficiency.

In order to achieve the above object, the present invention provides a method and system for expressing industrial alarm information based on state association rules, including the following steps:

Step 1. Complete the definition and transcription of the original event information;

Step 2, storing the transcribed data in the rule database;

Step 3. When the rule query keywords need to be searched, enumerate and search for each condition, and push the specific rules that meet the conditions into the rule stack;

Step 4. After receiving the original event information again, use the rule stack to analyze and process the original event;

The step 1, completing the definition and transcription of the original event information;

The definition of the original event information is that each sequence of original event alarms corresponds to a predefined string, and each predefined string represents an event chain that occurs in a certain order;

Further, the step 1 defines and transcribes the original event information using regular expressions to complete the definition and transcribe of the original event information;

The step 2, storing the transcribed data in the rule database;

The transcribed data is stored in the rule database in the form of a hash table <Key, Item>;

Key in the hash table is the query keyword of each rule, and Item is a rule definition item;

Each of the rule Items can be organized into a form of a rule tree, and the item stores a multi-branch tree defined by various conditions and rules;

Further, the leaf node of each Item item stores the specific definition and description of the rule; the alphabet in it represents a simplified character describing a certain event;

Step 3. When the rule query keyword needs to be searched, enumerate and search for each condition, and push the specific rules that meet the conditions into the rule stack;

When the query keyword of the rule needs to be searched, first search for a specific corresponding item in the hash table established in step 2;

The corresponding item is the set of many conditions in step 2, enumerates and searches each condition, and judges according to the conditions, if satisfied after the judgment, the specific rules represented by the rule name can be extracted and then pushed into the rule stack;

Step 4. After receiving the original event information again, use the rule stack to analyze and process the original event;

After the rules in step 3 are pushed into the rule stack, the original event information will be analyzed and processed for the first time after each original event information arrives;

After the original event information arrives, it will pass the review of each rule. If the rule is applicable to the original event information, it will be analyzed and processed. There are three types of results after processing;

One of the results of the analysis and processing is that if the rule is applicable and the preset sub-mode that meets the timing rule, the original event information is cached and "swallowed" during the processing; the original event until the end of the last mode Message arrival rules issue conclusions;

The second analysis and processing result is that when the rule is applicable and the preset sub-mode of the timing rule is not satisfied, the original event information swallowed by the previous buffer is released and "spit out" together, and the rule is given. the specific reason for the satisfaction;

The third result of the analysis and processing is that if the rule is not applicable, it will enter the next rule processing in the rule chain in sequence until the timing rule used is found and processed, or if there is no applicable rule in the rule stack, the Raw event information will remain in its original state;

Further, the rules are stored in a chained manner in the rule stack;

Further, the rules can be preset and written into the rule stack to check whether the industrial production process is going on normally;

The second aspect of the present invention provides a system for expressing industrial alarm information based on state association rules, which is used to implement the method described in the first aspect. The system includes original alarm information, a rule analysis engine, a rule database, rule configuration, and an alarm panel. ;

Include rule analysis NFA and rule stack again in described rule analysis engine;

The working core of the rule stack is an NFA (non-deterministic automatic state machine). NFA is a combination of states driven by a series of states. It can be used for pattern checking of strings. After each event set is mapped to a string set, The pattern of character strings can be analyzed and processed through the NFA constructed by the rules. A timing rule can correspond to an NFA state transition diagram. The system has built-in regular expression NFA generation and working modules;

After the original alarm information arrives, it first enters into the rule analysis engine;

The rule engine first proposes the query keyword information of the rules in the alarm information, and then uses the obtained query keyword information to search the existing rule information in the rule database. When it is found, it needs to push the found rule into the rule stack middle;

After the original alarm arrives at the rule analysis engine, it is processed by a cluster of rule sequences to obtain a conclusion that the alarm information is sent to the alarm panel or when there is no relevant processing rule, the alarm information is sent to the alarm panel as it is;

When each original alarm reaches the alarm protocol stack, it must be processed by all the rules in the protocol stack to determine its next processing method, so that the raw data information of the processed original alarm becomes easier to identify after processing. cooked data;

The rule configuration module is an artificial configuration information input window, and the preset rule information will be automatically loaded after the system starts;

Using the above scheme, the method and system for expressing industrial alarm information based on state association rules disclosed in the present invention have the following advantages:

(1) The method for expressing industrial alarm information based on state association rules of the present invention liberates complicated storage and display resources by redefining and transcribing the original event information, and separates many discrete events through preset rules , the efficient synthesis is an organic and unified overall event information; a large amount of event information display layout space is saved, and it also improves the learning cost for the operation and maintenance personnel to effectively grasp the effective alarm information in the production process, and reduces the operation and maintenance personnel's workload. Information identification workload and work intensity;

(2) The method and system for expressing industrial alarm information based on state association rules of the present invention can abstract and analyze internal background equipment state operation alarm information from independent alarms based on rule stacks, and can realize a large number of equivalent point actions The information elimination and information compression greatly reduce the number of alarms in the present invention, but greatly improve the alarm efficiency;

(3) The alarm adopts high-level alarm information with in-depth traceability information, which can provide more accurate and fast positioning information for operation and maintenance personnel.

In summary, the method and system for expressing industrial alarm information based on state association rules disclosed in the present invention, through redefining and transcribing the original event information, efficiently synthesize many discrete events into an organic and unified Overall event information; improve the learning cost for operation and maintenance personnel to effectively grasp effective alarm information in the production process, reduce the workload and work intensity of information identification for operation and maintenance personnel; and can abstract and analyze the internal background device status from independent alarms Operational alarm information, high-level alarm information with in-depth traceability information, can provide more accurate and fast positioning information for operation and maintenance personnel; and realize the elimination and information compression of a large number of equivalent point action information, reduce the number of alarms, and improve the number of alarms. efficiency.

The idea, specific technical solutions and technical effects of the present invention will be further described below in conjunction with specific embodiments, so as to fully understand the purpose, features and effects of the present invention.

Description of drawings

Fig. 1 is a schematic flow chart of the method for expressing industrial alarm information based on state association rules of the present invention;

2 is a schematic diagram of the general structure of the system for expressing industrial alarm information based on state association rules in Embodiment 1 of the present invention;

Fig. 3 is a rule state transition diagram of industrial alarm information expression based on state association rules in Embodiment 1 of the present invention;

4 is a schematic diagram of a rule tree model for expressing industrial alarm information based on state association rules in Embodiment 1 of the present invention;

Fig. 5 is a schematic diagram of the working principle of the rule stack of industrial alarm information expression based on state association rules in Embodiment 1 of the present invention;

Fig. 6 is a six-step block diagram of the start-up process of the hydropower station in the specific implementation of Embodiment 1 of the present invention;

Fig. 7 is a schematic diagram showing a scene after state association rules are processed in the specific implementation of Embodiment 1 of the present invention;

Fig. 8 is a schematic diagram showing the scene of 'locking ingot exit state return' after processing state association rules in the specific implementation of embodiment 1 of the present invention;

Fig. 9 is a schematic diagram showing a scene after processing without state association rules in the specific implementation of Comparative Example 1 of the present invention;

Fig. 10 is a schematic diagram showing the scene of 'returning to the exit state of the lock' after the state association rule is not used in the specific implementation of Comparative Example 1 of the present invention.

Detailed ways

A number of preferred embodiments of the present invention are introduced below to make the technical content clearer and easier to understand. The present invention can be embodied in many different forms of embodiments, and these embodiments are described as examples, and the protection scope of the present invention is not limited to the embodiments mentioned herein.

Embodiment 1. An alarm information expression system for the start-up process of a hydropower station unit based on state association rules

The schematic diagram of the general structure of the system of the present embodiment 1 is shown in Figure 2, and the schematic diagram of the method flow executed by the system of the present embodiment 1 is shown in Figure 1;

Firstly carry out step 1 of embodiment 1, complete the definition and transcription of the original event information;

The definition of the original event information is that each sequence of original event alarms corresponds to a predefined string, and each predefined string represents an event chain that occurs in a certain order;

The step 1 completes the definition and transliteration of the original event information using regular expressions to complete the definition and transliteration of the original event information;

The regular expression can describe the information of various events in sequence or even cycle; this method can express information such as the repetition of a sub-pattern in a branch (or) cycle; the specific syntax description is shown in Table 1 below:

Table 1 Description of regular expression rules

When the regular expression is expressed in the specific event information, the "command issued" followed by the "command received" is followed by several "magnetization" or "magnetization demagnetization" actions, and finally the sequence event process is ended with the command in place. ; If the sequence of events satisfies this rule, a comprehensive message 'command execution is successful' will be reported. If this rule is not satisfied, the specific reason for not satisfying the rule will be given; for details, please refer to the rule state transition diagram shown in Figure 3;

The six-step block diagram of the start-up process of the hydropower station in Embodiment 1 is shown in Figure 6; the letter mapping table of the time sequence rules for the start-up process of the hydropower unit in Embodiment 1 is shown in Table 2 below;

Table 2 Alphabetical mapping table of timing rules for startup process

After the regular expression in step 1 is used to define and transcribe the original event information of the boot process, the defined boot mode string is expressed as follows:

The character string represents the execution of 't' after the execution of 's' and so on, and finally the end of '$'; in the specific implementation, the embodiment 1 of the present invention, after adopting the present invention, processes the state association rules after processing A schematic diagram of the final scene display, as shown in Figure 7;

From the information name in the alarm window of the system, we can see that this is a comprehensive alarm in the state association rule mode, and its information name shows that it is a sequenceRule and the rule is "stfdw$";

Step 2, storing the transcribed data in the rule database;

The transcribed data is stored in the rule database in the form of a hash table <Key, Item>;

Key in the hash table is the query keyword of each rule, and Item is a rule definition item;

Each of the rule items can be organized into a form of a rule tree, and the multi-branch tree defined by various conditions and rules is stored in the Item item, and the schematic diagram of the model of the rule tree is shown in Figure 4;

The leaf node of each Item item stores the specific definition and description of the rule; the alphabet in it represents a simplified character describing a certain event;

Step 3. When the rule query keyword needs to be searched, enumerate and search for each condition, and push the specific rules that meet the conditions into the rule stack;

When the query keyword of the rule needs to be searched, first search for a specific corresponding item in the hash table established in step 2;

The corresponding item is the set of many conditions in step 2, enumerates and searches each condition, and judges according to the conditions, if satisfied after the judgment, the specific rules represented by the rule name can be extracted and then pushed into the rule stack;

Step 4. After receiving the original event information again, use the rule stack to analyze and process the original event;

After the rules in step 3 are pushed into the rule stack, the original event information will be analyzed and processed for the second time after each original event information arrives; the rules are stored in a chained manner in the rule stack of;

After the original event information arrives, it will pass the review of each rule. If the rule is applicable to the original event information, it will be analyzed and processed. There are three types of results after processing; the working principle of rule stack processing is as follows: As shown in Figure 5;

One of the analysis and processing results is that if the rule is applicable and the preset top sub-mode that satisfies the timing rule, the original event information is cached and "swallowed" during the processing; the original event information until the end of the last mode Event message arrival rules issue conclusions;

The second analysis and processing result is that when the rule is applicable and the preset sub-mode of the timing rule is not satisfied, the original event information swallowed by the previous buffer is released and "spit out" together, and the rule is given. the specific reason for the satisfaction;

The third result of the analysis and processing is that if the rule is not applicable, it will enter the next rule processing in the rule chain in sequence until the timing rule used is found and processed, or if there is no applicable rule in the rule stack, the Raw event information will remain in its original state;

The rules can be preset and written into the rule stack to check whether the industrial production process is going on normally;

During specific implementation, Embodiment 1 of the present invention can also check whether the production flow information satisfies the rules through preset rules in step 4, that is, whether the production process is carried out on a normal preset track. When the sequence of events is not in accordance with the predetermined When a deviation occurs in the requirement or sequence, this embodiment 1 can compare the actual situation of the occurrence of the event information with the rule baseline; thereby discovering and giving the information of the deviation or the cause of the error;

Specifically in this embodiment 1, in the abnormal event shown in Figure 8, in the same boot process, compared with the normal baseline event sequence, it can be seen that the fourth step of the event is "return to the lock exit state" This event in this state did not occur as expected, that is, an abnormal event occurred;

However, when the "locking ingot exit status return" does not appear as scheduled, step 4 of this embodiment 1, the above-mentioned original event information to be received, is analyzed and processed using the rule stack; the lack of d in this sequential sequence event means the lack of "locking ingot The alarm information when "Exit Status Returns" is abnormal is shown in Figure 8 below. Similarly, analysts can see from the event information roll call that this is a comprehensive alarm information based on timing rules. The rule is not satisfied and the reason for the dissatisfaction is that the event "locking ingot exit status return" expected by the rule does not arrive as expected;

Timely analysis and discovery of timing event issues should be more important information than normal compliance events; this comprehensive information can facilitate and timely convey important and essential information to operating personnel; it is convenient for personnel to give sufficient feedback on abnormalities in the production process. Pay attention to and promptly correct and solve problems.

Comparative example 1. An alarm information expression system based on the stateless association rules of the prior art for the start-up process of hydropower station units

The alarm information expression of the comparative example 1 using the prior art to carry out the boot process is as follows:

01.EB001.SEQ__START_DI62 1F: Boot process starts

. . . . . . . . . . . . . . . . . . . . . . The boot process starts from here. . . . . . . . . . . . . . . . . . . . . . . . .

1.01.EB001.STRT_STEP6_DI62 1F: Step 6 of boot process starts (action)

2.10.AE001.PG02_LM____DO12 1F: Lock out (action)

3.10.AE001.PG02_SDTR__DI28 1F: Lock input state (reset)

4.10.AE001.PG02_SDTC__DI12 1F: lock spindle exit state (action)

5.20.AU001.P104_KAUX02DI37 1F: Brake air brake down (action)

6.01.EB001.STRT_STEP6_DI62 1F: Step 6 of boot process starts (reset)

. . . . . . . . . . . . . . . . . . . . . The sixth step of the boot process ends here. . . . . . . . . . . . . . . . . . . .

01.EB001.STRT_STEP7_DI62 1F: Step 7 of the boot process starts (action)

The situation displayed in the stateless association rule mode of this comparative example 1 is shown in Figure 9; the six alarm sequences in the figure are pointed out by arrows in sequence, and are marked according to the definition method described in the previous embodiment 1;

In the specific implementation, in comparative example 1, the scene of "locking ingot exit state return" after processing without state association rules as shown in Figure 10 can be seen from Figure 10, the arrow points to the command line missing d ; That is, in the same boot process, compared with the normal baseline event timing, it can be seen that the event of the fourth step of the event, which is the state of "locking the exit state and returning", did not occur as scheduled.

Embodiment 2. An alarm information expression system for the grounding switch on the main transformer side of the GCB generator switch of a hydropower station based on state association rules

The background of this embodiment 2 is that two nodes are set in the grounding switch on the main transformer side of the GCB generator switch of the hydropower station, the closing node and the opening node; in normal events, each action of the switch will make the closing node At the same time, the action also corresponds to a pair of dual event pairs such as the return of the opening node; these two events actually indicate the same thing, so the event of the dual point actually becomes a redundant event of the switch blade action or return. Such an event information point is found and used to "synthesize" the information that can be alarmed by 50%. Although the information that may be eliminated for a single point is not objective, if there are a large number of equivalent point action information within a certain event range This work of elimination and information compression is meaningful;

In the definition of equivalence point rules, we define action meanings and representative symbols for each participating node to facilitate our definition and description of the rules. The specific symbol meanings are defined as follows:

According to the same processing method of timing rules, when an exception occurs and is recognized by the rule, the relevant analysis program will be started to give an alarm to the cause of dissatisfaction with the rule. For example, if the information of the dual point is missing, the message "the information of the dual point does not exist" will be reported.

Comparative example 2. An alarm information expression system based on the stateless association rules of the prior art for the grounding switch knife on the main transformer side of the GCB generator switch of the hydropower station

Except that the alarm signal expression system adopted in the comparative example 2 is inconsistent with the embodiment 2, all the other relevant settings are completely consistent;

The comprehensive pre-event of comparative example 2 is:

. . . . . . . . . . . . . . . .

20.GS003.P401_QC92__DI03'GCB generator switch main transformer side grounding knife opening action 20.GS003.P401_QC92__DI04'GCB generator switch main transformer side grounding knife closing reset

. . . . . . . . . . . . . . .

20.GS003.P401_QC92__DI03'GCB Generator Switch Main Transformer Side Grounding Knife Opening Reset 20.GS003.P401_QC92__DI04'GCB Generator Switch Main Transformer Side Grounding Knife Closing Action

. . . . . . . . . . . . . . .

If each information point in the equivalence point works according to the expected working method of the rule, multiple normal alarms in the rule will be synthesized into two events, which correspond to the following events:

Equiv_key'x','y' GCB generator switch main transformer side grounding knife open Equiv_key'a','b' GCB generator switch main transformer side grounding knife close

The above is the information displayed on the alarm panel in the alarm statement of Comparative Example 2.

Contrastive analysis: in the analysis of embodiment 1 and comparative example 1, it can be processed from Fig. 7 and Fig. 8 which adopt state association rules of embodiment 1 and comparative examples Fig. 9 and Fig. 10 which are not processed by state association rules;

In Embodiment 1, the interface for expressing industrial alarm information based on state association rules has significantly higher information density, which saves a lot of display space for event information and improves the learning of effective alarm information in the production process for operation and maintenance personnel. Cost, reducing the information identification workload and work intensity of operation and maintenance personnel;

In Example 1 and Comparative Example 1, when the same "locking ingot exit status reset" exception occurs, this implementation 1 can abstract and analyze the internal background device status from independent alarms based on the rule stack mechanism because of the rule stack mechanism. Run the alarm information, compare the actual situation with the rule baseline, and this embodiment 1 clearly finds and gives the information of the deviation and the cause of the error;

However, in comparative example 1 using the prior art, the event of the fourth step, namely the state of "returning of the lock ingot exit state", did not occur as expected, as shown in Figure 10, and the arrow part of Figure 10 points out that in the prior art The missing part; comparative analysis shows that the alarm system of the present invention has high-level alarm information with deep traceability information, which can provide more accurate and fast positioning information for operation and maintenance personnel;

Comparing and analyzing Example 2 and Comparative Example 2, it can be seen that Example 2 of the present invention is based on the rule stack, which can realize the elimination and information compression of a large number of equivalent point action information, and can eliminate 50% of the alarm information of the same nature, realizing The elimination and compression of a large number of equivalent point action information greatly improves the alarm efficiency.

To sum up, this patent technical solution, through redefining and transcribing the original event information, efficiently synthesizes many discrete events into an organic and unified overall event information; improves the operation and maintenance personnel to effectively grasp the production process The learning cost of effective alarm information reduces the information identification workload and work intensity of operation and maintenance personnel; and it can abstract and analyze internal background equipment status operation alarm information from independent alarms, and high-level alarm information with deep traceability information , can provide operation and maintenance personnel with more accurate and fast positioning information; and realize the elimination and information compression of a large number of equivalent point action information, reduce the number of alarms, and improve the alarm efficiency.

The preferred specific embodiments of the present invention have been described in detail above. It should be understood that those skilled in the art can make many modifications and changes according to the concept of the present invention without creative work. Therefore, all technical solutions that can be obtained by those skilled in the art based on the concept of the present invention through logical analysis, reasoning or limited experiments on the basis of the prior art shall be within the scope of protection defined by the claims.

Claims (9)

1. A method for expressing industrial alarm information based on state association rules, characterized in that, comprising the steps: Step 1. Complete the definition and transcription of the original event information; Step 2, storing the transcribed data in the rule database; Step 3. When the rule query keywords need to be searched, enumerate and search for each condition, and push the specific rules that meet the conditions into the rule stack; Step 4. After receiving the original event information again, use the rule stack to analyze and process the original event. 2. The method for industrial warning message expression as claimed in claim 1, is characterized in that, The step 1, completing the definition and transcription of the original event information; The definition of the original event information is that each sequence of original event alarms corresponds to a predefined string, and each predefined string represents a sequence of event chains. 3. The method for industrial warning message expression as claimed in claim 1, is characterized in that, The step 2, storing the transcribed data in the rule database; The transcribed data is stored in the rule database in the form of a hash table <Key, Item>; Key in the hash table is the query keyword of each rule, and Item is a rule definition item; Each of the rule Items can be organized into a form of a rule tree, and the item stores a multi-branch tree defined by various conditions and rules; The leaf node of each item stores the specific definition and description of the rule; the alphabet in it represents the simplified characters describing a certain event. 4. The method for industrial warning message expression as claimed in claim 1, is characterized in that, Step 3. When the rule query keyword needs to be searched, enumerate and search for each condition, and push the specific rules that meet the conditions into the rule stack; When the query keyword of the rule needs to be searched, first search for a specific corresponding item in the hash table established in step 2; The corresponding item is the collection of many conditions in step 2. Enumerate and search for each condition, and judge according to the conditions. After the judgment, if the specific rule represented by the rule name can be extracted, it will be pushed into the rule stack. 5. The method for industrial warning message expression as claimed in claim 1, is characterized in that, Step 4. After receiving the original event information again, use the rule stack to analyze and process the original event; After the rule is pushed into the rule stack, the original event information will be analyzed and processed for the first time after each original event information arrives; After the original event information arrives, it will pass the review of each rule. If the rule is applicable to the original event information, it will be analyzed and processed. There are three types of results after processing; One of the results of the analysis and processing is that if the rule is applicable and the preset sub-mode that meets the timing rule, the original event information is cached and "swallowed" during the processing; the original event until the end of the last mode Message arrival rules issue conclusions; The second analysis and processing result is that when the rule is applicable and the preset sub-pattern of the timing rule is not satisfied, the original event information swallowed by the previous buffer is released and "spit out" together, and the rule is given. the specific reason for the satisfaction; The third result of the analysis and processing is that if the rule is not applicable, it will enter the next rule processing in the rule chain in sequence until the timing rule used is found and processed, or if there is no applicable rule in the rule stack, the Raw event information remains pristine. 6. The method for industrial warning message expression as claimed in claim 1, is characterized in that, The rules are stored in a chained manner in the rule stack; The rules can be preset and written into the rule stack to check whether the industrial production process is going on normally. 7. The method for industrial warning message expression as claimed in claim 1, is characterized in that, The step 1 defines and transcribes the original event information using regular expressions to complete the definition and transcribe of the original event information. 8. A system for expressing industrial alarm information based on state association rules, characterized in that the system includes original alarm information, a rule analysis engine, a rule database, rule configuration, and an alarm panel; Include rule analysis NFA and rule stack again in described rule analysis engine; After the original alarm information arrives, it first enters into the rule analysis engine; The rule engine first proposes the query keyword information of the rules in the alarm information, and then uses the obtained query keyword information to search the existing rule information in the rule database. When it is found, it needs to push the found rule into the rule stack middle; After the original alarm arrives at the rule analysis engine, it is processed by a cluster of rule sequences to obtain a conclusion that the alarm information is sent to the alarm panel or when there is no relevant processing rule, the alarm information is sent to the alarm panel as it is; When each original alarm reaches the alarm protocol stack, it must be processed by all the rules in the protocol stack to determine its next processing method, so that the raw data information of the processed original alarm becomes easier to identify after processing. cooked data; The rule configuration module is an artificially configured information input window, and the preset rule information will be automatically loaded after the system is started. 9. The system of industrial warning message expression as claimed in claim 8, is characterized in that, The working core of the rule stack is an NFA (non-deterministic automatic state machine). NFA is a combination of states driven by a series of states. It can be used for pattern checking of strings. After each event set is mapped to a string set, The pattern of character strings can be analyzed and processed through the NFA constructed by the rules. A timing rule can correspond to an NFA state transition diagram. The system has built-in regular expression NFA generation and working modules.

Images