Infrastructure equipment, network and service active comprehensive monitoring system of GSM-R (Global System for Mobile Communications-Railway) network

Abstract

The invention discloses an infrastructure, network and service comprehensive active monitoring system of a GSM-R (Global System for Mobile Communications-Railway) network, which is used for monitoring core equipment in the GSM-R network and comprises an active basic monitoring system, an active network monitoring system and an active service monitoring system, the active basic monitoring system is used for monitoring basic equipment in the GSM-R network and applications carried on the equipment; the active network monitoring system is used for monitoring a communication network of the GSM-R network; and the active service monitoring system is used for monitoring the service state of the GSM-R network. According to the basic equipment, network and service comprehensive active monitoring system of the GSM-R network, which adopts the structure, the hardware support, communication network and service operation states related to the GSM-R can be comprehensively monitored, and possible system faults can be prevented in advance, so that a solid guarantee is provided for stable operation of the GSM-R.

Description

Technical Field

[0001] The present invention relates to the field of GSM-R monitoring technology, and in particular to a basic equipment, network and service active integrated monitoring system of a GSM-R network. Background Art

[0002] The GSM-R system is the "nervous system" of the high-speed rail communication network and is an important communication device to ensure the safety of railway transportation. In particular, when hidden faults occur in GSM-R shared equipment, they are often not discovered and located in time, causing global or even large-scale business impacts on the entire railway, seriously affecting the order of high-speed rail transportation.

[0003] The core equipment in the GSM-R network includes intelligent network SCP, home location register HLR, security authentication server RADIUS, domain name resolution server DNS, home server GROS, GPRS interface server GRIS, mobile switching center MSC, GPRS support node SGSN, GPRS gateway node GGSN, BSC network management, etc. The above equipment forms the basic layer as hardware support, the network layer as connection support and the service layer as service support. The current technology has the following problems in monitoring activities of the basic layer, network layer and service layer: In the monitoring of basic equipment level, the professional equipment network management has no automatic analysis and automatic alarm reporting functions for the basic underlying hardware and underlying logs of the equipment. After a device failure occurs, it is often necessary to extract the underlying logs to locate the cause of the failure. Before the failure occurs, the abnormal information of the equipment is often reflected in the underlying logs.

[0004] In network layer monitoring, existing network interface monitoring systems are all single-interface tracking systems that do not have cross-interface intelligent and correlation analysis capabilities. In the process of troubleshooting, faults are located by manual testing and manual judgment, resulting in inaccurate fault location. GSM-R system equipment uses a large number of load sharing and active-standby redundancy methods. The business flow is quite random, making it difficult to find and locate faults. Existing monitoring methods cannot intuitively display the access success rate of network elements and the usage of links.

[0005] During the service layer monitoring process, firstly, when there is no alarm from the network management, the maintenance personnel need to judge the faulty network element according to the application of the service. When receiving the user service report, the time is often delayed, and the user service report information is not clearly described, which brings certain difficulties and delays to the fault handling. Secondly, during the equipment construction process, a large number of manual dial tests are required to verify the operation of the equipment after construction, and there is a lack of an automatic GSM-R full-service dial test platform. Summary of the invention

[0006] The purpose of the present invention is to provide a comprehensive active monitoring system for the basic equipment, network and services of the GSM-R network, which can comprehensively monitor the hardware support, communication network and service operation status involved in GSM-R, prevent possible system failures in advance, and thus provide a solid guarantee for the stable operation of GSM-R.

[0007] To achieve the above-mentioned purpose, the present invention provides a GSM-R network infrastructure, network, and service integrated active monitoring system, which is used to monitor the core equipment in the GSM-R network, including an active infrastructure monitoring system, an active network monitoring system, and an active service monitoring system. The active basic monitoring system includes a data collector, a collection layer, a processing layer, and a display layer, and is used to monitor the basic equipment in the GSM-R network and the applications installed on the equipment; The active network monitoring system includes the acquisition layer, the encoding and decoding layer, the data sharing layer, and the application layer, and is used to monitor the communication network of the GSM-R network; The active service monitoring system includes a shared equipment active monitoring subsystem, a service simulation subsystem, a control analysis subsystem, and a log and alarm analysis subsystem for monitoring the service status of the GSM-R network.

[0008] Preferably, the network architecture of the active basic monitoring system includes three cluster-mode big data component servers and two application servers, the two application servers deploy monitoring services and log management services respectively, the big data component servers and the application servers are both connected to the internal switch, and the internal switch is connected to the integrated network management switch; the integrated network management switch is directly connected to the host machine of the cloud resource pool, and each host machine is connected to a number of virtual machines; The integrated network management switch is directly connected to several network management servers, which are directly connected to the business servers of several core devices. Both the network management server and the business server are equipped with data collectors, which use the Agent collection program, which is used to collect and monitor server data. A front-end agent component is arranged in the network management server, which aggregates the data collected from each business server and then forwards it to the active basic detection system; The active basic monitoring system is connected to the industrial computer through an extender, and the industrial computer is deployed in the G network workshop or network management workshop.

[0009] Preferably, the monitoring process of the active basic monitoring system includes: collecting data of the active monitoring objects through the data collector, the active monitoring objects include business applications, middleware, databases, operating systems and basic equipment in the core equipment and BSC network management server, and realizing object management, collection strategy management, indicator management and Agent management through the collection layer. The data collected by the data collector is transmitted to the processing layer for data analysis, cleaning calculation, data conversion and data storage, and availability management and monitoring management are performed. Finally, indicator query, log query, availability query, alarm query and instrument display are realized through the display layer.

[0010] Preferably, the network architecture of the active network monitoring system includes a decoding and warehousing server, a storage cluster, an application / interface server group, a monitoring and maintenance terminal, a switch group, and a signaling collection device. The signaling collection device is connected to the interfaces of the HLR, SCP, and STPS devices in the circuit domain through a high-impedance jumper, and the switch group obtains the interface mirroring of the CIR, DNS, GROS, and RADIUS in the packet domain.

[0011] Preferably, the monitoring process of the active network monitoring system includes: First, the interactive traffic of the services carried by the circuit domain equipment and the packet domain equipment is captured at line speed through the collection layer. The traffic data of the circuit domain equipment is collected by the signaling collection equipment, and the interactive traffic of the packet domain equipment is obtained by automatic control dialing test. Then, the signaling original data is processed by the circuit domain codec system and the packet domain codec system in the codec layer, and the processed data is input into the data sharing layer; Secondly, the data sharing layer processes the data, stores the processed data in the database, and imports the data into the application layer through the data provision interface and application service interface respectively; Finally, the application layer includes an intelligent analysis module and a call model module. The intelligent analysis module is used to analyze the health status of data, and the call model module is used to perform active dialing tests, and finally present the analyzed and processed data. The process of active dialing testing includes: for specific services related to core equipment, determining the bearer network elements according to the characteristics of different calls, defining call models, generating possible business flow distributions, collecting interface data, and combining multiple interfaces based on the call model to form procedural and topological judgments, and determining in detail the network elements, units, and links under the fault scenario.

[0012] Preferably, the system architecture of the active business monitoring system includes: an internal interconnection switch and an active monitoring server, a database server, a simulation business server, a network management server, a rack-mounted network management industrial computer, and a network management complex-viewing terminal respectively connected to the internal interconnection switch. The active monitoring server and data service are connected to the GPRS system through an access switch. A firewall is arranged between the access switch and the GPRS system. The internal interconnection interactive machine is connected to several simulation monitoring terminals, and the rack-mounted network management industrial computer is also connected to the network management complex-viewing terminal.

[0013] Preferably, in the active service monitoring system, the shared equipment active monitoring subsystem actively monitors the services of the GROS, DNS, and RADUIS service systems through an active monitoring server, and the monitoring process is as follows: (1) Network connectivity test: Test the network connectivity of key network element devices of the GPRS network at the system default cycle or user-specified cycle to confirm that the network connectivity is normal; (2) Service monitoring: Through predefined service types and service instructions constructed according to the promulgated standards, the actual interaction information of the existing network is simulated, and the key network elements are simulated and detected. The returned results are analyzed to determine whether the basic service functions of the relevant key network element nodes are running normally; The service simulation subsystem actively monitors the services of the SCP and HLR service systems. A simulation monitoring terminal is installed in the SCP and HLR service systems. The simulation service server sends a scheduled monitoring task or a temporary test instruction to the simulation monitoring terminal through the internal interconnection switch. The simulation monitoring terminal actively performs circuit domain service, packet domain service and intelligent network service tests according to the command, and the test results are returned to the simulation service server. Control and analyze subsystem, providing database services, application services and Web services through database servers and gateway servers; The log and alarm analysis subsystem is used to post-process the monitoring data and provide visual feedback of the alarm information.

[0014] Preferably, in the shared equipment active monitoring subsystem, the process of performing service monitoring on the DNS, GROS / GRIS, and RADUIS service systems is as follows: (1) For DNS business system By sending standard locomotive number domain name resolution request information that complies with the protocol specification to the DNS server, the operating status and response results of the DNS service running on the DNS server are monitored; (2) For RADIUS service system Monitor the running status and response results of the RADIUS service running on the RADIUS server by sending standard RADIUS protocol messages that comply with RFC / 3GPP specifications; (3) GROS / GRIS business system By sending GRIS address query, cross-border indication, activity detection and other services to GRIS server and GROS server equipment for simulation test and response analysis, the running status of application services running on GROS and GRIS servers and whether the response results meet expectations are monitored; Policy setting: Actively monitor the server at a regular interval of 60S, send a monitoring instruction to the monitored business system server, and stop sending after receiving the server's reply for the first time. Wait for the next 60S interval timer to trigger the next round of requests. If the monitoring server does not receive the request for the first time or receives an abnormal message, it will send the request again after 30S. If the second request still does not receive the correct reply result, the log and alarm analysis subsystem triggers a business alarm. When the activity check fails, it prompts that the activity check failed, the business network element icon turns red, and the network element connectivity check is triggered at the same time. If the route is reachable, the link is displayed normally. If it is unreachable, the link turns red and the connectivity check failure alarm is triggered.

[0015] Preferably, the post-processing process of the log and alarm analysis subsystem includes: Analyze the monitoring data collected by the active monitoring server and the simulation service server, compare it with the predefined test results of the functional service, and conduct real-time analysis of the connectivity and service status of the key network; The results of the server analysis are generated into log records and written into the log file. If the service or function is judged to be in an abnormal state after analysis, an alarm message is generated and added to the database server; the monitoring target, test data, return data, test time and test results are displayed on the network element monitoring interface of the network management complex viewing terminal; For the collected data that is abnormal after server analysis, the system generates a corresponding alarm record, and automatically fills in the alarm ID, alarm time and fault phenomenon, and saves it to the alarm record table. The information in the alarm record includes the monitored object, alarm ID or name, alarm time, alarm information source, alarm record status, alarm event, and alarm processing.

[0016] According to the specific embodiments provided by the present invention, the present invention discloses the following technical effects: (1) The active basic monitoring system can realize all-round, automated and active monitoring of basic equipment monitoring indicators and logs, reduce manual intervention, and improve monitoring efficiency and accuracy. At the same time, centralized management can avoid information islands and duplication of work caused by decentralized management, thereby improving the effectiveness of operation and maintenance service guarantee; integrating multiple IT operation and maintenance or monitoring links onto one platform reduces the waste of manpower, material resources and time, and reduces the overall operation and maintenance service costs. At the same time, due to the improvement of the automation level of the monitoring system, it can also reduce the failure rate and downtime, further reducing the operation and maintenance service costs.

[0017] (2) Through the active network monitoring system, it is possible to quickly capture the business interaction traffic carried by the GRM-R shared equipment and conduct data analysis. For railway-specific services related to shared equipment, the bearer network elements are determined according to the characteristics of different calls, the call model is defined, and possible business flow distribution is generated. Customized automated dialing system, customized periodic and real-time test plans. Through different GSM-R service dialing tests, the working status of the corresponding network elements and units of the shared equipment is detected. Based on the signaling collection of each interface, the business process is tracked across interfaces, the business flow is displayed graphically and topologically, and potential fault units are discovered.

[0018] (3) Through the active service monitoring system, with the help of advanced big data processing technology and machine learning algorithms, a real-time monitoring mechanism of "active detection" mode is established. Various GSM-R services are simulated and tested regularly, and the test results are sent to the core network technical support center in a timely manner. The operation status of each line service can be intuitively understood through data. Not only can potential equipment failures be quickly identified, but also possible system failures can be prevented in advance through predictive analysis, thus providing a solid guarantee for the continuity and stability of GSM-R services.

[0019] The technical solution of the present invention is further described in detail below through the accompanying drawings and embodiments. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0021] Figure 1 A schematic diagram of the system structure of an embodiment of a GSM-R network infrastructure, network, and service integrated active monitoring system according to the present invention; Figure 2 A schematic diagram of the logical architecture of an active infrastructure monitoring system according to an embodiment of the present invention; Figure 3 A schematic diagram of a network architecture of an active infrastructure monitoring system according to an embodiment of the present invention; Figure 4 This is a diagram of a distributed collection deployment architecture of an active basic monitoring system according to an embodiment of the present invention; Figure 5 It is an operation diagram of the autonomous quota mechanism of the collection program of the active basic monitoring system of the embodiment of the present invention; Figure 6 A schematic diagram of the logical architecture of an active network monitoring system according to an embodiment of the present invention; Figure 7 A schematic diagram of a network architecture of an active network monitoring system according to an embodiment of the present invention; Figure 8 This is a circuit domain monitoring overview interface diagram of the active network monitoring system according to an embodiment of the present invention; Fig. 9 This is a diagram of an overview interface of packet domain monitoring of an active network monitoring system according to an embodiment of the present invention; Fig.10 A schematic diagram of the logical architecture of an active service monitoring system according to an embodiment of the present invention; Fig.11 Schematic diagram of the network architecture of the active service monitoring system according to an embodiment of the present invention. DETAILED DESCRIPTION

[0022] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0023] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0024] Example like Figure 1 As shown, a GSM-R network basic equipment, network, and service integrated active monitoring system is used to monitor the core equipment in the GSM-R network, including an active basic monitoring system, an active network monitoring system, and an active service monitoring system.

[0025] 1. Active basic monitoring system The active basic monitoring system includes data collector, collection layer, processing layer and display layer, such as Figure 2 As shown, it is used to monitor the basic equipment in the GSM-R network and the applications installed on the equipment.

[0026] (1) Network architecture like Figure 3 As shown in the figure, the network architecture of the active basic monitoring system includes three cluster-mode big data component servers and two application servers. The two application servers deploy monitoring services and log management services respectively. The big data component server deploys storage databases CK and ES, as well as big data cluster hadoop, message middleware kafka and other components. The big data component server and the application server are both connected to the internal switch, and the internal switch is connected to the integrated network management switch. The internal switch functions like a HUB, which can avoid occupying too many network ports of the integrated network management switch. The integrated network management switch is directly connected to the host of the cloud resource pool, and each host is connected to several virtual machines. The active basic monitoring system is connected to the industrial computer through an extender, and the industrial computer is deployed in the G network workshop or network management workshop.

[0027] like Figure 4 As shown, the integrated network management switch is directly connected to several network management servers, and the network management servers are directly connected to the business servers of several core devices. Both the network management servers and the business servers are deployed with data collectors, and the data collectors use the Agent collection program, which is used to collect and monitor server data. The Agent collection program is managed using the following mechanism: Standard limit mechanism for collection programs: Since the Agent collection program needs to occupy the CPU and memory resources of the managed server, in order to minimize the occupation of the collection program on the managed server performance, the relevant collection components are developed in C language and GO language, which consumes less system resources than the collection programs implemented in other development languages.

[0028] Collection program autonomous quota mechanism: Figure 5 As shown in the figure, the active basic monitoring system implements the resource occupation quota mechanism for the Agent based on the collection gateway (Cell), which specifically includes: the collection gateway (Cell) first implements the default collection and extraction of the CPU and memory related indicator data of the Agent process occupying the managed server. Thresholds are configured for the CPU and memory indicators occupied by the Agent process, and a threshold configuration interface is provided. If the CPU and memory indicators occupied by the Agent process do not exceed the threshold, the Agent will not be intervened to maintain the normal operation and data collection of the Agent. If the CPU and memory indicators occupied by the Agent process exceed the threshold, the Cell will force the Agent process to be restarted, thereby releasing resources and ensuring the monitoring recovery mechanism of the Agent.

[0029] Data transmission security mechanism: Since the collection agent needs to transmit the collected monitoring and log data to the system server through the network, although the calculated network bandwidth usage meets the current bandwidth requirements, the possibility of a sudden increase in the log data volume itself cannot be ruled out. In view of this risk, the system provides a network bandwidth usage upper limit control mechanism. Once the data transmission volume exceeds the configured upper limit, the collection data flow thread will automatically disconnect, thereby releasing bandwidth usage. If the collected log data is too large and the relevant logs must be included in the monitoring and management scope, the stable transmission of data can be guaranteed by adding a dedicated line for monitoring data transmission or increasing the existing bandwidth.

[0030] Data transmission compression mechanism: In order to minimize the network bandwidth occupation caused by data transmission, the system supports the transmission compression mechanism of monitoring data and log data. The specific measures are as follows: According to the format and characteristics of monitoring data, the system provides a compression mechanism for monitoring standardized data, which is lz4, with an average compression ratio of 3:1, which can compress the data at least 3 times; according to the format and characteristics of log data, the system provides a compression mechanism for unstructured or semi-structured log data, which is lz4, with an average compression ratio of 3:1, which can compress the data at least 3 times.

[0031] The front-end agent component is arranged in the network management server, which summarizes the data collected from each business server and then forwards it to the active basic detection system. Due to the current data transmission security management specifications, important core network business systems (such as DNS, GROS, GRIS, etc.) do not allow third-party monitoring systems to directly connect to the network with business servers. Therefore, a distributed collection deployment architecture based on the front-end agent component is adopted to achieve that the active basic monitoring system is not directly connected to the business server, but only interacts with the network and data of each system network management server.

[0032] (2) Monitoring implementation The monitoring process of the active basic monitoring system includes: collecting data of active monitoring objects through data collectors. Active monitoring objects include business applications, middleware, databases, operating systems and basic equipment in core equipment and BSC network management servers. Object management, collection strategy management, indicator management and Agent management are realized through the collection layer. The data collected by the data collector is transmitted to the processing layer for data analysis, cleaning calculation, data conversion and data storage, and availability management and monitoring management are performed. Finally, indicator query, log query, availability query, alarm query and instrument display are realized through the display layer.

[0033] (3) Monitoring indicators In order to ensure the continuity of railway transportation business services and the robustness of the system, we will focus on researching and implementing equipment monitoring, database monitoring, middleware monitoring, process monitoring, log monitoring and analysis, etc. The key monitoring indicators of various monitoring objects are as follows: Server monitoring: The server is the core carrier for the operation of all businesses, applications, software, services, and databases. Its operating status and performance health directly affect the operating status of upper-level businesses and applications, so all-round monitoring of servers is the top priority of basic monitoring. The system provides details of key monitoring indicators for each server, including performance indicators such as CPU, memory, file system, disk, SWAP, network card, process, and listening port (Linux / Unix / Windows). It helps operation and maintenance personnel to have a more comprehensive understanding of the trends and status of important indicators such as the current server's performance consumption, disk usage, network card status, and the top 10 processes that occupy system resources. All indicators can be configured with threshold management, alarm suppression, and other alarm strategies for real-time alarms.

[0034] Database monitoring: The database is the core carrier of application and business data. Its operation status and key performance directly affect the call of business applications to data. Once problems and failures occur, they will directly affect the business, so monitoring the database is very important and necessary. The system provides the current database connection status, database type, database IP, data basic status and other content through the database monitoring view. At the same time, it can provide more detailed key indicator monitoring data, including: data operation status, number of connections, number of sessions, table space, query performance and other indicators (mysql, oracle, etc.), which can help operation and maintenance personnel quickly query and grasp the overall operation status of the current database. All indicators can be configured with alarm strategies such as threshold management and alarm suppression for real-time alarms.

[0035] Middleware monitoring: Middleware is an important application service for data interaction, data caching, WEB calls, and proxy forwarding between business applications and system software. Its operational health directly affects the healthy operation and processing performance of the business, so middleware monitoring is also an essential part of basic monitoring. The middleware monitoring view can provide the current middleware connection status, application IP, system attribute tags, middleware type, etc., and can also provide more detailed key indicator monitoring data, including: middleware operation status, queue status, instance status, heap memory, JVM consumption and other indicators, which can help operation and maintenance personnel quickly query and grasp the overall operation status of the current middleware. All indicators can be configured with threshold management, alarm suppression and other alarm strategies for real-time alarms.

[0036] Application process monitoring: Whether the system or application process is running normally directly represents whether the corresponding system service or application service is running normally or alive, so monitoring the process status and performance is also one of the important auxiliary means to monitor the operation of business and applications. The process monitoring view can provide the current process status, server IP, process name, CPU usage, memory usage, etc., and can also provide more detailed key indicator monitoring data, including: memory page usage, running time, number of processes and other indicators, which can help operation and maintenance personnel quickly query and grasp the overall operation status of the current process. All indicators can be configured with threshold management, alarm suppression and other alarm strategies for real-time alarms.

[0037] Log monitoring: Since application and system logs record the most detailed and authentic application and system operation records, abnormal monitoring and unified query of logs can help operation and maintenance personnel quickly locate the root cause of the fault, and can also greatly improve troubleshooting efficiency. Operation and maintenance personnel do not need to log in to each server to download logs and then perform log query and analysis. They can directly log in to this system to centrally query all managed logs, and quickly analyze faults and locate problems through precise query, fuzzy query, context-related query, high-level language query, etc. Relevant monitoring indicators include keyword monitoring, keyword query statistics, analysis view and other functions (system log / database log / middleware log, etc.).

[0038] 2. Active Network Monitoring System The active network monitoring system includes the acquisition layer, the encoding and decoding layer, the data sharing layer, and the application layer, and is used to monitor the communication network of the GSM-R network, such as Figure 6 shown.

[0039] (1) Network architecture: like Figure 7 As shown, the network architecture of the active network monitoring system includes a decoding and warehousing server, a storage cluster, an application / interface server group, a monitoring and maintenance terminal, a switch group, and a signaling collection device. The signaling collection device is connected to the interfaces of the HLR, SCP, and STPS devices in the circuit domain through a high-impedance jumper, and the switch group obtains the interface mirroring of the CIR, DNS, GROS, and RADIUS in the packet domain. Figure 8 The monitoring overview interface of the circuit domain in the system is shown in Fig. 9 The monitoring overview interface of the group domain in the system is shown in FIG.

[0040] (2) Monitoring implementation The monitoring process of the active network monitoring system includes: First, the interactive traffic of the services carried by the circuit domain equipment and the packet domain equipment is captured at line speed through the collection layer. The traffic data of the circuit domain equipment is collected by the signaling collection equipment, and the interactive traffic of the packet domain equipment is obtained by automatic control dialing test. Then, the signaling original data is processed by the circuit domain codec system and the packet domain codec system in the codec layer, and the processed data is input into the data sharing layer; Secondly, the data sharing layer processes the data, stores the processed data in the database, and imports the data into the application layer through the data provision interface and application service interface respectively; Finally, the application layer includes an intelligent analysis module and a call model module. The intelligent analysis module is used to analyze the health status of data, and the call model module is used to perform active dialing tests, and finally present the analyzed and processed data. The process of active dialing testing includes: for specific services related to core equipment, determining the bearer network elements according to the characteristics of different calls, defining call models, generating possible business flow distributions, collecting interface data, and combining multiple interfaces based on the call model to form procedural and topological judgments, and determining in detail the network elements, units, and links under the fault scenario.

[0041] 3. Active Business Monitoring System The active business monitoring system includes a shared equipment active monitoring subsystem, a business simulation subsystem, a control analysis subsystem, and a log and alarm analysis subsystem. Fig.10 As shown, it is used to monitor the service status of the GSM-R network.

[0042] (1) Network architecture like Fig.11 As shown, the system architecture of the active business monitoring system includes: an internal interconnection switch and an active monitoring server, a database server, a simulation business server, a network management server, a rack-mounted network management industrial computer, and a network management complex viewing terminal respectively connected to the internal interconnection switch. The active monitoring server and data service are connected to the GPRS system through an access switch, and a firewall is set between the access switch and the GPRS system. The internal interconnection interactive machine is connected to several simulation monitoring terminals, and the rack-mounted network management industrial computer is also connected to the network management complex viewing terminal.

[0043] By setting up a border security firewall device between the access switch and the GPRS system, network border security protection is achieved, IP, protocol and port filtering policies are configured, intrusion prevention and anti-virus authorization are enabled, the feature library is upgraded, the border security protection extension function is enabled, and the border port bandwidth is set to 2M.

[0044] Active monitoring servers, database servers, simulation service servers, and network management servers are used as internal servers of the system. They use internal private addresses and are not connected to the outside world. Simulation terminals and clients are configured with internal private addresses. Set up IP / MAC binding on the switch side.

[0045] (2) Monitoring implementation In the active service monitoring system, the shared equipment active monitoring subsystem actively monitors the services of the GROS, DNS, and RADUIS service systems through the active monitoring server. The monitoring process is as follows: A. Network connectivity test: Test the network connectivity of key network element devices of the GPRS network at the system default cycle or user-specified cycle to confirm that the network connectivity is normal; B. Business monitoring: Through predefined business types and business instructions constructed according to the promulgated standards, the actual interaction information of the existing network is simulated, and the key network elements are simulated and detected. According to the returned results, it is analyzed to determine whether the basic business functions of the relevant key network element nodes are running normally. In the actual monitoring process, business monitoring is given priority. When the business monitoring is abnormal, the network connectivity check will be triggered to troubleshoot the network link failure.

[0046] The process of business monitoring for DNS, GROS / GRIS, and RADUIS business systems is as follows: (1) For DNS business system By sending standard locomotive number domain name resolution request information that complies with the protocol specification to the DNS server, the operating status and response results of the DNS service running on the DNS server are monitored; (2) For RADIUS service system Monitor the running status and response results of the RADIUS service running on the RADIUS server by sending standard RADIUS protocol messages that comply with RFC / 3GPP specifications; (3) GROS / GRIS business system By sending GRIS address query, cross-border indication, activity detection and other services to GRIS server and GROS server equipment for simulation test and response analysis, the running status of application services running on GROS and GRIS servers and whether the response results meet expectations are monitored; Policy setting: Actively monitor the server at a regular interval of 60S, send a monitoring instruction to the monitored business system server, and stop sending after receiving the server's reply for the first time. Wait for the next 60S interval timer to trigger the next round of requests. If the monitoring server does not receive the request for the first time or receives an abnormal message, it will send the request again after 30S. If the second request still does not receive the correct reply result, the log and alarm analysis subsystem triggers a business alarm. When the activity check fails, it prompts that the activity check failed, the business network element icon turns red, and the network element connectivity check is triggered at the same time. If the route is reachable, the link is displayed normally. If it is unreachable, the link turns red and the connectivity check failure alarm is triggered.

[0047] The service simulation subsystem actively monitors the services of the SCP and HLR service systems. A simulation monitoring terminal is installed in the SCP and HLR service systems. The simulation service server sends scheduled monitoring tasks or temporary test instructions to the simulation monitoring terminal through the internal interconnection switch. The simulation monitoring terminal actively performs circuit domain service, packet domain service and intelligent network service tests according to the commands, and the test results are returned to the simulation service server.

[0048] The simulation monitoring terminal is configured in the core network, the base station side of the line, and the electric service confirmation vehicle (or a train in normal operation) or carried by the on-board test personnel to test the wireless network services of the GSM-R line. The simulation monitoring terminal can be executed manually or work according to the test instructions issued by the central platform, and supports unattended operation. The simulation monitoring terminal can simulate all services of the terminal in the GSM-R network, such as registration, deregistration, PDP activation, GPRS attachment, locomotive function number, train function number, short number call service, receiving and sending packet domain data packets, sending wireless train number, sending activity detection messages, etc.

[0049] The current core network simulation monitoring terminal configuration model is: Single call 1: Caller 1 dials called party 1 (matching Beijing HLR1), called party 2 (matching Beijing HLR2). The test interval is 1 minute; Beijing HR1 / Beijing HR2 monitoring is realized; Single call 2: Caller 2 dials called party 1 (matching Wuhan HLR1), called party 2 (matching Wuhan HLR2). The test interval is 1 minute; Wuhan HR1 / Wuhan HR2 monitoring is realized; Function number service: simulate the registration, query and cancellation of locomotive function number and train function number. Test interval: 5 minutes; realize intelligent network SCP monitoring; Packet domain services: Use the test locomotive number to perform GPRS attachment and PDP activation tests; the test interval is 5 minutes; and monitor the SGSN and GGSN services; Short number call: Register the train function number, role 10; dial the short number 1300 (core network test station) to implement location-based call scenario testing; the test interval is 5 minutes; Alarm logic: After the first service failure, the terminal checks whether its own monitoring module is normal. If the self-check device finds a problem, the device can perform self-healing and immediately perform a second service simulation after the status is normal. If the second service is restored, only record it without an alarm. If it still fails the second time, perform a third service simulation after an interval of 15S. If it still fails the third time, an alarm will be issued immediately.

[0050] Control and analyze the subsystem, and provide database services, application services, and Web services through database servers and gateway servers.

[0051] The log and alarm analysis subsystem is used to post-process the monitoring data and provide visual feedback of the alarm information. The post-processing process of the log and alarm analysis subsystem includes: Analyze the monitoring data collected by the active monitoring server and the simulation service server, compare it with the predefined test results of the functional service, and conduct real-time analysis of the connectivity and service status of the key network; The results of the server analysis are generated into log records and written into the log file. If the service or function is judged to be in an abnormal state after analysis, an alarm message is generated and added to the database server; the monitoring target, test data, return data, test time and test results are displayed on the network element monitoring interface of the network management complex viewing terminal; For the collected data that is abnormal after server analysis, the system generates a corresponding alarm record, and automatically fills in the alarm ID, alarm time and fault phenomenon, and saves it to the alarm record table. The information in the alarm record includes the monitored object, alarm ID or name, alarm time, alarm information source, alarm record status, alarm event, and alarm processing.

[0052] In summary, through the above-mentioned GSM-R network infrastructure, network, and service active integrated monitoring system, At the basic software and hardware level, GSM-R system server performance, database performance, middleware performance, process, communication port (TCP), and log monitoring and early warning are realized; At the network level, it realizes full flow visualization analysis at the GSM-R network signaling level, network layer data flow analysis, and early warning; At the business level, it realizes full-process, full-element, and all-weather simulation and testing of various GSM-R railway traffic communication services of trains.

[0053] The remaining technical features in the above embodiments can be flexibly selected by those skilled in the art according to actual conditions to meet different specific practical needs. However, it is obvious to those skilled in the art that it is not necessary to adopt these specific details to implement the present invention. In other examples, in order to avoid confusing the present invention, the well-known components, structures or parts are not specifically described, which are all within the technical protection scope defined by the technical solution claimed for protection in the claims of the present invention.

[0054] Modifications and changes made by those skilled in the art that do not depart from the spirit and scope of the present invention should be within the scope of protection of the claims attached to the present invention. In the above description, a large number of specific details are set forth in order to provide a thorough understanding of the present invention. However, it is obvious to those of ordinary skill in the art that these specific details are not necessary to practice the present invention. In other examples, in order to avoid confusing the present invention, well-known technologies, such as specific construction details, operating conditions and other technical conditions, are not specifically described.

[0055] The principles and implementation methods of the present invention are described in this article using specific examples. The description of the above embodiments is only used to help understand the method and core idea of ​​the present invention. At the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as limiting the present invention.

Claims

1. A comprehensive active monitoring system for basic equipment, network and services of a GSM-R network, used for monitoring core equipment in a GSM-R network, characterized by: Including active basic monitoring system, active network monitoring system, active business monitoring system, The active basic monitoring system includes a data collector, a collection layer, a processing layer, and a display layer, and is used to monitor the basic equipment in the GSM-R network and the applications installed on the equipment; The active network monitoring system includes the acquisition layer, the encoding and decoding layer, the data sharing layer, and the application layer, and is used to monitor the communication network of the GSM-R network; The active service monitoring system includes a shared equipment active monitoring subsystem, a service simulation subsystem, a control analysis subsystem, and a log and alarm analysis subsystem for monitoring the service status of the GSM-R network.

2. The GSM-R network infrastructure, network, and service active integrated monitoring system according to claim 1, characterized in that: The network architecture of the active basic monitoring system includes three cluster-mode big data component servers and two application servers. The two application servers deploy monitoring services and log management services respectively. The big data component servers and application servers are connected to the internal switch, and the internal switch is connected to the integrated network management switch. The integrated network management switch is directly connected to the host machine of the cloud resource pool, and each host machine is connected to several virtual machines. The integrated network management switch is directly connected to several network management servers, which are directly connected to the business servers of several core devices. Both the network management server and the business server are equipped with data collectors, which use the Agent collection program, which is used to collect and monitor server data. A front-end agent component is arranged in the network management server, which aggregates the data collected from each business server and then forwards it to the active basic detection system; The active basic monitoring system is connected to the industrial computer through an extender, and the industrial computer is deployed in the G network workshop or network management workshop.

3. The GSM-R network infrastructure, network, and service active integrated monitoring system according to claim 2, characterized in that: The monitoring process of the active basic monitoring system includes: collecting data of active monitoring objects through data collectors. Active monitoring objects include business applications, middleware, databases, operating systems and basic equipment in core equipment and BSC network management servers. Object management, collection strategy management, indicator management and Agent management are realized through the collection layer. The data collected by the data collector is transmitted to the processing layer for data analysis, cleaning calculation, data conversion and data storage, and availability management and monitoring management are performed. Finally, indicator query, log query, availability query, alarm query and instrument display are realized through the display layer.

4. The GSM-R network infrastructure, network, and service active integrated monitoring system according to claim 1, characterized in that: The network architecture of the active network monitoring system includes decoding and warehousing servers, storage clusters, application / interface server groups, monitoring and maintenance terminals, switch groups, and signaling collection equipment. The signaling collection equipment is connected to the interfaces of the HLR, SCP, and STPS devices in the circuit domain through high-impedance jumpers, and the switch group obtains the interface mirroring of the CIR, DNS, GROS, and RADIUS in the packet domain.

5. The GSM-R network infrastructure, network, and service active integrated monitoring system according to claim 4, characterized in that: The monitoring process of the active network monitoring system includes: First, the interactive traffic of the services carried by the circuit domain equipment and the packet domain equipment is captured at line speed through the collection layer. The traffic data of the circuit domain equipment is collected by the signaling collection equipment, and the interactive traffic of the packet domain equipment is obtained by automatic control dialing test. Then, the signaling original data is processed by the circuit domain codec system and the packet domain codec system in the codec layer, and the processed data is input into the data sharing layer; Secondly, the data sharing layer processes the data, stores the processed data in the database, and imports the data into the application layer through the data provision interface and application service interface respectively; Finally, the application layer includes an intelligent analysis module and a call model module. The intelligent analysis module is used to analyze the health status of data, and the call model module is used to perform active dialing tests, and finally present the analyzed and processed data. The process of active dialing testing includes: for specific services related to core equipment, determining the bearer network elements according to the characteristics of different calls, defining call models, generating possible business flow distributions, collecting interface data, and combining multiple interfaces based on the call model to form procedural and topological judgments, and determining in detail the network elements, units, and links under the fault scenario.

6. The GSM-R network infrastructure, network, and service active integrated monitoring system according to claim 1, characterized in that: The system architecture of the active business monitoring system includes: an internal interconnection switch and an active monitoring server, a database server, a simulation business server, a network management server, a rack-mounted network management industrial computer, and a network management complex viewing terminal respectively connected to the internal interconnection switch. The active monitoring server and data service are connected to the GPRS system through an access switch. A firewall is set between the access switch and the GPRS system. The internal interconnection interactive machine is connected to several simulation monitoring terminals, and the rack-mounted network management industrial computer is also connected to the network management complex viewing terminal.

7. The GSM-R infrastructure, network, and service active integrated monitoring system according to claim 6, characterized in that: In the active service monitoring system, the shared equipment active monitoring subsystem actively monitors the services of the GROS, DNS, and RADUIS service systems through the active monitoring server and database server. The monitoring process is as follows: (1) Network connectivity test: Test the network connectivity of key network element devices of the GPRS network at the system default cycle or user-specified cycle to confirm that the network connectivity is normal; (2) Service monitoring: Through predefined service types and service instructions constructed according to the promulgated standards, the actual interaction information of the existing network is simulated, and the key network elements are simulated and detected. The returned results are analyzed to determine whether the basic service functions of the relevant key network element nodes are running normally; The service simulation subsystem actively monitors the services of the SCP and HLR service systems. A simulation monitoring terminal is installed in the SCP and HLR service systems. The simulation service server sends a scheduled monitoring task or a temporary test instruction to the simulation monitoring terminal through the internal interconnection switch. The simulation monitoring terminal actively performs circuit domain service, packet domain service and intelligent network service tests according to the command, and the test results are returned to the simulation service server. Control and analyze subsystem, providing database services, application services and Web services through database servers and gateway servers; The log and alarm analysis subsystem is used to post-process the monitoring data and provide visual feedback of the alarm information.

8. The GSM-R infrastructure, network, and service active integrated monitoring system according to claim 7, characterized in that: In the shared equipment active monitoring subsystem, the process of monitoring the DNS, GROS / GRIS, and RADUIS service systems is as follows: (1) For DNS business system By sending standard locomotive number domain name resolution request information that complies with the protocol specification to the DNS server, the operating status and response results of the DNS service running on the DNS server are monitored; (2) For RADIUS service system Monitor the running status and response results of the RADIUS service running on the RADIUS server by sending standard RADIUS protocol messages that comply with RFC / 3GPP specifications; (3) GROS / GRIS business system By sending GRIS address query, cross-border indication, activity detection and other services to GRIS server and GROS server equipment for simulation test and response analysis, the running status of application services running on GROS and GRIS servers and whether the response results meet expectations are monitored; Policy setting: Actively monitor the server at a regular interval of 60S, send a monitoring instruction to the monitored business system server, and stop sending after receiving the server's reply for the first time. Wait for the next 60S interval timer to trigger the next round of requests. If the monitoring server does not receive the request for the first time or receives an abnormal message, it will send the request again after 30S. If the second request still does not receive the correct reply result, the log and alarm analysis subsystem triggers a business alarm. When the activity check fails, it prompts that the activity check failed, the business network element icon turns red, and the network element connectivity check is triggered at the same time. If the route is reachable, the link is displayed normally. If it is unreachable, the link turns red and the connectivity check failure alarm is triggered.

9. The GSM-R infrastructure, network, and service active integrated monitoring system according to claim 8, characterized in that: The post-processing process of the log and alarm analysis subsystem includes: Analyze the monitoring data collected by the active monitoring server and the simulation service server, compare it with the predefined test results of the functional service, and conduct real-time analysis of the connectivity and service status of the key network; The results of the server analysis are generated into log records and written into the log file. If the service or function is judged to be in an abnormal state after analysis, an alarm message is generated and added to the database server; the monitoring target, test data, return data, test time and test results are displayed on the network element monitoring interface of the network management complex viewing terminal; For the collected data that is abnormal after server analysis, the system generates a corresponding alarm record, and automatically fills in the alarm ID, alarm time and fault phenomenon, and saves it to the alarm record table. The information in the alarm record includes the monitored object, alarm ID or name, alarm time, alarm information source, alarm record status, alarm event, and alarm processing.

Images