System, method and program for detecting anomalous events in a utility network

摘要

A communication device detects whether anomalous events occur with respect to at least one node in a utility network. The communication device has recorded therein threshold operating information and situational operating information. The threshold operating information includes data indicative of configured acceptable operating parameters of nodes in the network based on respective locational information of the nodes. The situational information includes data indicative of configured operation data expected to be received from nodes in the network during a predetermined time period, based on a condition and/or event occurring during the time period. The communication device receives operation data from nodes in the network, and determines whether the operation data from a node constitutes an anomalous event based on a comparison of the received operation data with (i) the threshold operating information defined for the node and (ii) the situational information. The communication device outputs notification of any determined anomalous event.

主权项

1. A network communication device configured to monitor operating events occurring in connection with at least one node in a network, the communication device comprising:
a memory unit having historical operating information and situational information defined and recorded therein, the historical operating information including data indicative of historical operating parameters of nodes in the network based on respective locational information of each of the nodes in the network, the locational information of each one of the nodes respectively including unique information about that node, relative to each other one of the nodes in the network, such that unique historical operating information is respectively defined for each node in the network based on the unique locational information respectively defined for that node, and the situational information including data indicative of configured operation data expected to be received from nodes in the network during a predetermined time period based on at least one of a condition and an event that is occurring during the predetermined time period; a communication unit configured to receive operation data from nodes in the network, the operation data being measured at corresponding locations of the nodes, respectively; a control unit configured to compare the operation data received from a node in the network with (i) the historical operating information defined for the node from which the operation data was received and (ii) the situational information, and to record the received operation data in association with the historical operating information and the situational information in the memory unit based on the comparison of the received operation data with (i) the historical operating information defined for the node and (ii) the situational information.