Trackside equipment system upgrade method, device, electronic device and readable storage medium

Abstract

The present invention provides a method, device, electronic device and readable storage medium for upgrading a trackside equipment system, wherein the method comprises: obtaining the real state data of the operation process obtained by the existing program of the safety control system in the trackside equipment, and using the existing program to calculate the real state data to obtain a reference result; using the shadow mode to run the OTA upgrade package obtained for the above-mentioned safety control system, and using the running program of the OTA upgrade package to calculate the real state data to obtain the result to be verified; using the reference result to verify the result to be verified, and when the verified result meets the preset standard, using the OTA upgrade package to replace the existing file of the above-mentioned safety control system to realize the OTA upgrade of the safety control system in the trackside equipment. The present invention does not perform the upgrade immediately after downloading the application software, but performs the upgrade only after passing the verification, which can ensure that the upgrade software is safe and reliable, thereby ensuring the continuous safe operation of the trackside equipment.

Description

Technical Field

[0001] The present invention relates to the field of rail transit technology, and in particular to a method, device, electronic device and readable storage medium for upgrading a trackside equipment system. Background Art

[0002] With the development of rail transit technology, Over-the-Air (OTA) remote upgrade technology has been increasingly widely used in rail transit systems. Existing OTA upgrade solutions mainly solve the problem of handling failed upgrades and information security. The security of information during the upgrade process can be guaranteed through traditional technologies such as encryption, identity authentication or whitelisting.

[0003] However, for scenarios such as trackside equipment, especially trackside equipment that uses wireless communication, the above method cannot completely solve the problem due to the lack of physical network isolation. It is extremely vulnerable to network attacks on information security, causing remote upgrades to download erroneous or false upgrade files, and may ultimately lead to safety accidents. Summary of the invention

[0004] The present invention provides a method, device, electronic device and readable storage medium for upgrading a trackside equipment system, so as to solve the defects of the prior art that the information security of equipment without physical isolation during upgrading cannot be guaranteed, and achieve the goal of effectively ensuring the continuous and safe operation of the equipment.

[0005] The present invention provides a method for upgrading a trackside equipment system, comprising:

[0006] Acquire the real state data of the operation process acquired by the existing program of the safety control system in the trackside equipment, and calculate the real state data by using the existing program to obtain a reference result;

[0007] Using the shadow mode, running the OTA upgrade package obtained for the safety control system in the trackside equipment, and using the running program of the OTA upgrade package to calculate the real state data to obtain the result to be verified;

[0008] The reference result is used to verify the result to be verified, and when the verified result meets the preset standard, the OTA upgrade package is used to replace the existing files of the safety control system in the trackside equipment to achieve OTA upgrade of the safety control system in the trackside equipment.

[0009] According to a method for upgrading a trackside equipment system provided by the present invention, the shadow mode is adopted to run an OTA upgrade package obtained for a safety control system in the trackside equipment, comprising:

[0010] The OTA upgrade package obtained from the server is cached in the sandbox or sandbox calculated by the train control system device, and the shadow mode is used for isolated execution.

[0011] According to a method for upgrading a trackside equipment system provided by the present invention, there are multiple groups of real status data, and using the reference result to verify the result to be verified includes:

[0012] For any set of real state data, the result of this verification is determined by comparing the result to be verified obtained based on the real state data with the reference result, and after obtaining the result of this verification, the next set of real state data is transferred to execute the comparison process until the number of verifications reaches the preset number;

[0013] The preset standard includes: the proportion of verification passing results in the results of multiple verifications is not less than a preset threshold.

[0014] According to a method for upgrading a trackside equipment system provided by the present invention, caching the OTA upgrade package into a sandbox or sandbox calculated by a train control system device includes:

[0015] Perform MD5 and / or CRC verification on the OTA upgrade package obtained from the server, and after the verification result is passed, cache the OTA upgrade package that passes the verification into the sandbox or sandbox calculated by the train control system device.

[0016] According to a method for upgrading a trackside equipment system provided by the present invention, before adopting the shadow mode to run the OTA upgrade package obtained for the safety control system in the trackside equipment, the method further includes:

[0017] Obtaining an upgrade instruction sent by a server, and sending identity authentication information to the server based on the upgrade instruction;

[0018] Obtaining server identity information sent by the server after passing authentication based on the identity authentication information, and performing server identity authentication based on the server identity information;

[0019] After the server identity authentication is passed, the server obtains the name and version number of the OTA upgrade package, and after confirming the upgrade based on the name and version number and the version information of the existing file, downloads the OTA upgrade package through the download link established by the server.

[0020] According to a method for upgrading a trackside equipment system provided by the present invention, in the step of running an OTA upgrade package obtained for a safety control system in the trackside equipment, the method further includes:

[0021] Synchronously monitor the running process information of the OTA upgrade package, where the running process information includes one or more of the computing resources occupied during the running process, the execution time, the running process, and the running thread.

[0022] A method for upgrading a trackside equipment system according to the present invention further includes:

[0023] If the verification result does not meet the preset standard, the reference result and the result to be verified are sent to the server control center to obtain the result abnormality information confirmed by the staff based on the reference result and the result to be verified, and confirm whether the OTA upgrade package is abnormal based on the result abnormality information;

[0024] and / or,

[0025] The monitored operation process information is sent to the server control center to obtain operation abnormality information identified by the staff based on the operation process information, and based on the operation abnormality information, confirm whether there is an abnormality in the operation process of the OTA upgrade package.

[0026] The present invention also provides a trackside equipment system upgrade device, comprising:

[0027] A first calculation module is used to obtain the real state data of the operation process obtained by the existing program of the safety control system in the trackside equipment, and calculate the real state data using the existing program to obtain a reference result;

[0028] A second calculation module is used to run the OTA upgrade package obtained for the safety control system in the trackside equipment in a shadow mode, and use the running program of the OTA upgrade package to calculate the real state data to obtain a result to be verified;

[0029] A verification and upgrade module is used to use the reference result to verify the result to be verified, and when the verification result meets the preset standard, use the OTA upgrade package to replace the existing file of the safety control system in the trackside equipment to realize the OTA upgrade of the safety control system in the trackside equipment.

[0030] The present invention also provides an electronic device, comprising a memory, a processor, and a program or instruction stored in the memory and executable on the processor. When the processor executes the program or instruction, the steps of the trackside equipment system upgrade method as described in any one of the above are implemented.

[0031] The present invention also provides a non-transitory computer-readable storage medium having a program or instruction stored thereon. When the program or instruction is executed by a computer, the steps of the method for upgrading the trackside equipment system as described in any one of the above are implemented.

[0032] The trackside equipment system upgrade method, device, electronic device and readable storage medium provided by the present invention do not immediately execute the upgrade process after downloading the application software, but use existing applications and real data to monitor the downloaded application software for multiple input data and output results, and only after confirming that the downloaded application software can be correctly executed, perform the system software upgrade, which can ensure that the software to be upgraded is safe and reliable, thereby ensuring the continuous safe operation of the equipment. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following briefly introduces the drawings required for use in the embodiments of the present invention or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0034] Figure 1 One of the flow charts of the method for upgrading the trackside equipment system provided by the present invention;

[0035] Figure 2 The second flowchart of the method for upgrading the trackside equipment system provided by the present invention;

[0036] Figure 3 A schematic diagram of the structure of a trackside equipment system upgrade device provided by the present invention;

[0037] Figure 4 A schematic diagram of the structure of the trackside equipment system upgrade system provided by the present invention;

[0038] Figure 5 A schematic diagram of the physical structure of the electronic device provided by the present invention. DETAILED DESCRIPTION

[0039] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0040] The present invention aims at the problem that the prior art cannot guarantee the information security of the equipment without physical isolation during the upgrade. After the application software is downloaded, the upgrade process is not executed immediately. Instead, the downloaded application software is monitored by using existing applications and real data for multiple input data and output results. After confirming that the downloaded application software can be correctly executed, the system software upgrade is executed. This ensures that the software to be upgraded is safe and reliable, thereby ensuring the continuous safe operation of the equipment. The present invention will be described and introduced in detail through multiple embodiments in conjunction with the accompanying drawings.

[0041] Figure 1 One of the flow charts of the method for upgrading the trackside equipment system provided by the present invention is as follows: Figure 1 As shown, the method includes:

[0042] S101, obtaining real state data of the operation process obtained by an existing program of the safety control system in the trackside equipment, and using the existing program to calculate the real state data to obtain a reference result.

[0043] It can be understood that the present invention can use the existing running program before the upgrade to obtain the real status data generated during the actual operation of the safety control system in the trackside equipment. The existing running program can be called an existing program, which can be a program or software in the safety control system in the trackside equipment that can provide a certain service or realize a certain function, such as a control program in the trackside equipment, so the trackside equipment can be used to obtain the real status data of the safety control system in the trackside equipment.

[0044] After that, the existing running program is used to perform conventional logical business calculations on the real state data to obtain the real operation results, which can be used as reference results for verification. The real state data used for software verification can be either real-time data or historical data recorded by the train control system. Use historical data or real-time data to verify the software to ensure that the function is correct.

[0045] S102, using the shadow mode, running the OTA upgrade package obtained for the safety control system in the trackside equipment, and using the running program of the OTA upgrade package to calculate the real state data to obtain the result to be verified.

[0046] It can be understood that after obtaining the OTA upgrade package for the safety control system in the trackside equipment through OTA download, in order to verify whether the OTA upgrade package has normal business operation functions and fault-guided safety capabilities, and at the same time does not affect the normal operation of the safety control system in the trackside equipment, the present invention uses shadow mode to run the OTA upgrade package in the designated area of ​​the safety control system in the trackside equipment.

[0047] After starting the shadow mode to run the OTA upgrade package, the actual status data of the safety control system in the trackside equipment can be input into the running program of the OTA upgrade package, so as to use the running program of the OTA upgrade package to simulate the logical business calculation of the actual status data and obtain the operation result of the simulated operation, which can be called the result to be verified.

[0048] Among them, shadow mode is a virtual image of the existing operating system built by the shadow system. It is exactly the same as the real system. Users can choose to enable or exit this virtual image at any time. After the user enters shadow mode, all operations are virtual and will not affect the real system. All changes will disappear after exiting shadow mode. It has the same functions as the real system.

[0049] Optionally, the use of shadow mode to run the OTA upgrade package obtained for the safety control system in the trackside equipment includes: caching the OTA upgrade package obtained from the server into a sandbox or sandbox calculated by the train control system equipment, and using the shadow mode for isolated execution.

[0050] It can be understood that after downloading the upgrade file, i.e., the OTA upgrade package, from the server, the present invention puts the OTA upgrade package into a sandbox or sandbox for isolated execution to ensure that the train control system equipment is not attacked by viruses. Among them, the sandbox and sandbox can be implemented in a variety of ways, such as software prison, virtual machine, rule-based execution or secure computing mode, etc., and the present invention does not limit this.

[0051] S103, using the reference result to verify the result to be verified, and when the verified result meets the preset standard, using the OTA upgrade package to replace the existing files of the safety control system in the trackside equipment to achieve OTA upgrade of the safety control system in the trackside equipment.

[0052] It can be understood that the present invention verifies the accuracy of the result to be verified by using the reference result based on the reference result calculated by the real existing program and the result to be verified calculated by the OTA upgrade package, thereby obtaining a verified result. Then, it is determined whether the result of the verification meets the preset standard. If it meets the preset standard, it means that the OTA upgrade package can realize the relevant functions of the real existing program, and the safety performance can meet certain standards. Therefore, the OTA upgrade package can be written into the corresponding area of ​​the safety control system in the trackside equipment, and the OTA upgrade package can be used to replace the existing corresponding program files in the safety control system in the trackside equipment, so as to realize the OTA upgrade of the safety control system in the trackside equipment.

[0053] That is to say, the present invention does not execute the application software immediately after downloading it, but uses existing mature applications and real data to supervise the new application software. After multiple input data and output result supervisions, it is confirmed that the new upgraded software can be correctly executed and output reliable results, and then the running authority is given to the new upgraded software to complete the upgrade. It can ensure that the application can correctly obtain data and calculate and output correct results.

[0054] The trackside equipment system upgrade method provided by the present invention does not immediately execute the upgrade process after downloading the application software, but uses existing applications and real data to monitor the downloaded application software for multiple input data and output results, and only executes the system software upgrade after confirming that the downloaded application software can be correctly executed. This can ensure that the software to be upgraded is safe and reliable, thereby ensuring the continuous safe operation of the equipment.

[0055] Wherein, according to the trackside equipment system upgrade method provided by each of the above embodiments, optionally, there are multiple groups of real state data, and the use of the reference result to verify the result to be verified includes: for any group of real state data, by comparing the result to be verified obtained based on the real state data and the reference result, determine the result of this verification, and after obtaining the result of this verification, transfer to the next group of real state data, and execute the comparison process until the number of verifications reaches a preset number. Wherein, the preset standard includes: the proportion of verification passing results in the results of multiple verifications is not less than a preset threshold.

[0056] It can be understood that when the present invention verifies the OTA upgrade package to be used for upgrading based on the operation results, the entire result calculated using the OTA upgrade package will be compared with the result calculated by the existing software in the safety control system in the trackside equipment. If the results are consistent, the verification of the next data will continue.

[0057] After multiple comparisons and verifications, such as 5 or 10 times, and verification of calculation results of multiple scenarios, if all results of the upgraded software meet expectations, the upgraded software replaces the existing software, obtains the right to run, and becomes the official software.

[0058] That is to say, the verification of the upgraded downloaded application software of the present invention may include the verification of multiple frames of data. Only after a comprehensive judgment is made based on the verification of the multiple frames of data that the downloaded upgraded software has normal functions and fault-guided safety capabilities, the new upgraded application software will replace the existing software and be officially put into operation.

[0059] Among them, according to the trackside equipment system upgrade method provided by the above-mentioned embodiments, optionally, before the shadow mode is adopted to run the OTA upgrade package obtained for the safety control system in the trackside equipment, the trackside equipment system upgrade method provided by the present invention also includes: obtaining the upgrade instruction sent by the server, and sending identity authentication information to the server based on the upgrade instruction; obtaining the server identity information sent by the server after the authentication based on the identity authentication information is passed, and performing server identity authentication based on the server identity information; after the server identity authentication is passed, the server obtains the name and version number of the OTA upgrade package, and after confirming the upgrade based on the name and version number and the version information of the existing file, downloads the OTA upgrade package through the download link established by the server.

[0060] It can be understood that, Figure 2 As shown, it is the second flow chart of the trackside equipment system upgrade method provided by the present invention. Before verifying the downloaded OTA upgrade package, the OTA upgrade package must be downloaded from the server first, and the identity authentication of the server and the on-site equipment is required before downloading to avoid system errors.

[0061] Specifically, the present invention can firstly be initiated by the server to send an upgrade request, which can be triggered by a staff member. When the communication controller receives the upgrade instruction, it provides identity authentication information to the server. After the server confirms that it is correct, it sends its own identity information to the communication controller. After the communication controller confirms that it is correct, two-way identity authentication is completed.

[0062] Then, the server can send the name, version number and other information of the upgrade software to the communication controller, and the communication controller requests the version information of the existing software from the train control system and uploads it to the server. The staff can optionally confirm whether to upgrade. After receiving the confirmation instruction, the communication controller receives the link initiated by the server and starts to download the upgrade file remotely, that is, download the OTA upgrade package to the local.

[0063] Among them, according to the trackside equipment system upgrade method provided in the above embodiments, optionally, the caching of the OTA upgrade package in a sandbox or sandbox calculated by the train control system device includes: performing MD5 and / or CRC verification on the OTA upgrade package obtained from the server, and after the result of the verification is passed, caching the verified OTA upgrade package in the sandbox or sandbox calculated by the train control system device.

[0064] It can be understood that, Figure 2As shown, before running the OTA upgrade package to perform the shadow mode verification operation, the present invention can also first perform a check based on MD5 and / or CRC on the downloaded OTA upgrade package to verify the authenticity of the file information in the OTA upgrade package. That is to say, after the communication controller downloads the upgrade file (i.e., the OTA upgrade package), the MD5 code and / or CRC and other technologies are used to verify the downloaded file to ensure that there are no bit errors or data transmission errors during the transmission process.

[0065] After the verification based on MD5 and / or CRC is passed, the present invention puts the downloaded upgrade file into a sandbox or sandbox calculated by the train control system device for isolated execution, ensuring that the train control system device is not attacked by viruses. Among them, there are many implementation methods of sandbox and sandbox, such as software jail, virtual machine, rule-based execution or secure computing mode, etc.

[0066] Afterwards, you can Figure 2 As shown and described in the above embodiments, the real state data is calculated using an OTA upgrade package executed in isolation using shadow mode to complete the verification process of the above embodiments and ultimately achieve a safe and accurate OTA upgrade.

[0067] The present invention can detect whether the stored or transmitted information is damaged or tampered with by using MD5 and / or CRC to verify the authenticity of the file information, thereby preventing the file or information from being maliciously tampered with.

[0068] Among them, according to the trackside equipment system upgrade method provided by the above-mentioned embodiments, optionally, in the step of running the OTA upgrade package obtained for the safety control system in the trackside equipment, the present invention provides a trackside equipment system upgrade method which also includes: synchronously monitoring the running process information of the OTA upgrade package, the running process information including one or more of the computing resources occupied during the running process, the execution time, the running process and the running thread.

[0069] It can be understood that in the process of running the OTA upgrade package to calculate the real status data, the synchronous train control system equipment can also simultaneously monitor the computing resources occupied by the upgrade software (that is, the OTA upgrade package), the execution duration, the running process and threads, etc.

[0070] Among them, according to the trackside equipment system upgrade method provided by the above-mentioned embodiments, optionally, the trackside equipment system upgrade method provided by the present invention also includes: if the verification result does not meet the preset standard, the reference result and the result to be verified are sent to the server control center to obtain the result abnormality information confirmed by the staff based on the reference result and the result to be verified, and based on the result abnormality information, confirm whether there is an abnormality in the OTA upgrade package; and / or, the monitored operation process information is sent to the server control center to obtain the operation abnormality information identified by the staff based on the operation process information, and based on the operation abnormality information, confirm whether there is an abnormality in the operation process of the OTA upgrade package.

[0071] It can be understood that the key steps in the verification and upgrade process of the present invention can be controlled and confirmed by the staff. Specifically, when the entire calculation result of the OTA upgrade package is compared with the calculation result of the existing software, if the two results are inconsistent, the corresponding data, including the real state data and the calculation result, can be uploaded to the control center, and the staff can manually identify whether the result is normal and feed back the identification result to the control center.

[0072] In addition, when the synchronous train control system equipment monitors the computing resources occupied by the downloaded upgrade software, the execution duration, the running process and threads, etc., these data can also be fed back to the control center through the communication controller, and the staff can confirm whether there are any abnormalities.

[0073] It should be understood that the result supervision in the entire process of OTA upgrade of the present invention can be run by existing software or by independent third-party software. Where the process requires staff confirmation, it can be completed in a shorter time by the staff on duty, or it can be completed in a longer time without the staff on duty.

[0074] For example, within one day, the existing software and the upgraded software run at the same time, and the results are given at the same time. The communication controller uploads the original data and results to the server, and the server summarizes these data, and finally the staff makes the decision.

[0075] The key steps of the present invention are controlled by the staff, which can make good use of the staff's experience and knowledge, is more in line with the real scene, and has higher reliability.

[0076] Based on the same inventive concept, the present invention further provides a trackside equipment system upgrade device according to the above embodiments, and the device is used to implement the trackside equipment system upgrade in the above embodiments. Therefore, the description and definition in the trackside equipment system upgrade method in the above embodiments can be used for understanding each execution module in the present invention, and the details can be referred to the above method embodiments, which will not be repeated here.

[0077] According to one embodiment of the present invention, the structure of the trackside equipment system upgrade device is as follows: Figure 3 , which is a schematic diagram of the structure of the trackside equipment system upgrade device provided by the present invention, and which can be used to implement the trackside equipment system upgrade in the above-mentioned method embodiments, and which includes: a first calculation module 301, a second calculation module 302 and a verification upgrade module 303. Among them:

[0078] The first calculation module 301 is used to obtain the real status data of the operation process obtained by the existing program in the safety control system in the trackside equipment, and use the existing program to calculate the real status data to obtain a reference result; the second calculation module 302 is used to adopt a shadow mode to run the OTA upgrade package obtained for the safety control system in the trackside equipment, and use the running program of the OTA upgrade package to calculate the real status data to obtain a result to be verified; the verification upgrade module 303 is used to use the reference result to verify the result to be verified, and when the verification result meets the preset standard, use the OTA upgrade package to replace the existing file of the safety control system in the trackside equipment to realize the OTA upgrade of the safety control system in the trackside equipment.

[0079] Specifically, the first calculation module 301 can use the existing running program before the upgrade to obtain the real state data generated during the actual operation of the safety control system in the trackside equipment. The existing running program can be called an existing program, which can be a program or software in the safety control system in the trackside equipment that can provide a certain service or realize a certain function, such as a control program in the trackside equipment, so the trackside equipment can be used to obtain the real state data of the safety control system in the trackside equipment.

[0080] Afterwards, the first calculation module 301 uses the existing running program to perform conventional logical business calculations on the real state data to obtain real operation results, which can be used as reference results for verification. The real state data used for software verification can be either real-time acquired data or historical data recorded by the train control system. Use historical data or real-time data to verify the software to ensure that the function is correct.

[0081] Afterwards, after obtaining the OTA upgrade package through OTA download, in order to verify whether the OTA upgrade package has normal business operation functions and fault-guided safety capabilities, and does not affect the normal operation of the safety control system in the trackside equipment, the second computing module 302 runs the OTA upgrade package in the designated area of ​​the safety control system in the trackside equipment in shadow mode.

[0082] After starting the shadow mode to run the OTA upgrade package, the second calculation module 302 can input the real status data of the safety control system in the trackside equipment into the running program of the OTA upgrade package, so as to use the running program of the OTA upgrade package to simulate the logical business calculation of the real status data and obtain the calculation result of the simulated operation, which can be called the result to be verified.

[0083] Finally, the verification upgrade module 303 obtains the reference result calculated by the real existing program and the result to be verified calculated by the OTA upgrade package, and uses the reference result to verify the accuracy of the result to be verified, and obtains the verified result. Afterwards, the verification upgrade module 303 determines whether the verification result meets the preset standard. If it meets the preset standard, it means that the OTA upgrade package can realize the relevant functions of the real existing program, and the safety performance can meet certain standards. Therefore, the verification upgrade module 303 can write the OTA upgrade package into the corresponding area of ​​the safety control system in the trackside equipment, and use the OTA upgrade package to replace the existing corresponding program files in the safety control system in the trackside equipment, so as to realize the OTA upgrade of the safety control system in the trackside equipment.

[0084] The trackside equipment system upgrade device provided by the present invention does not immediately execute the upgrade process after downloading the application software, but uses existing applications and real data to monitor the downloaded application software for multiple input data and output results, and only executes the system software upgrade after confirming that the downloaded application software can be correctly executed. This can ensure that the software to be upgraded is safe and reliable, thereby ensuring the continuous safe operation of the equipment.

[0085] Optionally, the second computing module, when used in the shadow mode to run the OTA upgrade package obtained for the safety control system in the trackside equipment, is used to:

[0086] The OTA upgrade package obtained from the server is cached in the sandbox or sandbox calculated by the train control system device, and the shadow mode is used for isolated execution.

[0087] Optionally, there are multiple groups of real status data, and the verification upgrade module, when used to verify the result to be verified by using the reference result, is used to:

[0088] For any set of real state data, the result of this verification is determined by comparing the result to be verified obtained based on the real state data with the reference result, and after obtaining the result of this verification, the next set of real state data is transferred to execute the comparison process until the number of verifications reaches the preset number;

[0089] The preset standard includes: the proportion of verification passing results in the results of multiple verifications is not less than a preset threshold.

[0090] Optionally, the second calculation module, when used to cache the OTA upgrade package in a sandbox or sandbox calculated by a train control system device, is used to:

[0091] Perform MD5 and / or CRC verification on the OTA upgrade package obtained from the server, and after the verification result is passed, cache the OTA upgrade package that passes the verification into the sandbox or sandbox calculated by the train control system device.

[0092] Optionally, the trackside equipment system upgrade device further includes an identity authentication and download module, which is used to:

[0093] Obtaining an upgrade instruction sent by a server, and sending identity authentication information to the server based on the upgrade instruction;

[0094] Obtaining server identity information sent by the server after passing authentication based on the identity authentication information, and performing server identity authentication based on the server identity information;

[0095] After the server identity authentication is passed, the server obtains the name and version number of the OTA upgrade package, and after confirming the upgrade based on the name and version number and the version information of the existing file, downloads the OTA upgrade package through the download link established by the server.

[0096] Optionally, the second computing module is further used to:

[0097] Synchronously monitor the running process information of the OTA upgrade package, where the running process information includes one or more of the computing resources occupied during the running process, the execution time, the running process, and the running thread.

[0098] Optionally, the trackside equipment system upgrade device further includes an abnormality confirmation module, which is used to:

[0099] If the verification result does not meet the preset standard, the reference result and the result to be verified are sent to the server control center to obtain the result abnormality information confirmed by the staff based on the reference result and the result to be verified, and confirm whether the OTA upgrade package is abnormal based on the result abnormality information;

[0100] and / or

[0101] The monitored operation process information is sent to the server control center to obtain operation abnormality information identified by the staff based on the operation process information, and based on the operation abnormality information, confirm whether there is an abnormality in the operation process of the OTA upgrade package.

[0102] It is understandable that the present invention can implement the relevant program modules in the apparatus of the above-mentioned embodiments through a hardware processor. Moreover, the trackside equipment system upgrade apparatus of the present invention utilizes the above-mentioned program modules to implement the trackside equipment system upgrade process of the above-mentioned method embodiments. When used to implement the trackside equipment system upgrade in the above-mentioned method embodiments, the beneficial effects produced by the apparatus of the present invention are the same as those of the corresponding above-mentioned method embodiments, and the above-mentioned method embodiments can be referred to, and will not be repeated here.

[0103] The present invention also provides a trackside equipment system upgrade system, such as Figure 4 The figure is a schematic diagram of the structure of the trackside equipment system upgrade system provided by the present invention, and the trackside equipment system upgrade system includes a central device and a field device. The central device is a server for storing emergency software; the field device includes a communication controller and a train control system device.

[0104] The communication controller is used to communicate with the server, realize two-way identity verification between the server and the field equipment, MD5 / CRC verification of the OTA upgrade package, and version management, etc. It can include the trackside equipment system upgrade device of each embodiment above. The train control system equipment is the computer equipment that needs to be upgraded, that is, the equipment of the safety control system in the trackside equipment.

[0105] Figure 4 The servers, communication controllers and train control system equipment in the system can realize two-way identity verification between the server and the on-site equipment, download of OTA upgrade packages, MD5 / CRC verification of OTA upgrade packages, verification of the operation results of OTA upgrade packages, and upgrade of the safety control system in the trackside equipment through mutual information transmission and internal calculations.

[0106] As another aspect of the present invention, this embodiment provides an electronic device according to the above embodiments, and the electronic device includes a memory, a processor, and a program or instruction stored in the memory and executable on the processor, and when the processor executes the program or instruction, the steps of the trackside equipment system upgrade method described in the above embodiments are implemented.

[0107] Furthermore, the electronic device of the present invention may also include a communication interface and a bus. Figure 5 , is a schematic diagram of the physical structure of the electronic device provided by the present invention, including: at least one memory 501, at least one processor 502, a communication interface 503 and a bus 504.

[0108] Among them, the memory 501, the processor 502 and the communication interface 503 complete mutual communication through the bus 504, and the communication interface 503 is used for information transmission between the electronic device and the safety control system equipment in the trackside equipment; the memory 501 stores programs or instructions that can be run on the processor 502. When the processor 502 executes the program or instruction, the steps of the trackside equipment system upgrade method described in the above embodiments are implemented.

[0109] It can be understood that the electronic device at least includes a memory 501, a processor 502, a communication interface 503 and a bus 504, and the memory 501, the processor 502 and the communication interface 503 form a communication connection with each other through the bus 504, and can complete mutual communication, such as the processor 502 reading the program instructions of the trackside equipment system upgrade method from the memory 501. In addition, the communication interface 503 can also realize the communication connection between the electronic device and the safety control system equipment in the trackside equipment, and can complete the information transmission between them, such as realizing the writing of the OTA upgrade package through the communication interface 503.

[0110] When the electronic device is running, the processor 502 calls the program instructions in the memory 501 to execute the methods provided by the above-mentioned method embodiments, for example, including: obtaining the real state data of the operation process obtained by the existing program of the safety control system in the trackside equipment, and using the existing program to calculate the real state data to obtain a reference result; using the shadow mode, running the OTA upgrade package obtained for the safety control system in the trackside equipment, and using the running program of the OTA upgrade package to calculate the real state data to obtain a result to be verified; using the reference result to verify the result to be verified, and when the verification result meets the preset standard, using the OTA upgrade package to replace the existing file of the safety control system in the trackside equipment, to realize the OTA upgrade of the safety control system in the trackside equipment, etc.

[0111] The program instructions in the above-mentioned memory 501 can be implemented in the form of software functional units and can be stored in a computer-readable storage medium when sold or used as an independent product. Alternatively, all or part of the steps of implementing the above-mentioned method embodiments can be completed by hardware related to program instructions, and the above-mentioned program can be stored in a computer-readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the above-mentioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, ROM), random access memory (RandomAccess Memory, RAM), disk or optical disk and other media that can store program codes.

[0112] The present invention also provides a non-transitory computer-readable storage medium according to the above-mentioned embodiments, on which a program or instruction is stored. When the program or instruction is executed by a computer, the steps of the trackside equipment system upgrade method described in the above-mentioned embodiments are implemented, for example, including: obtaining the real status data of the operation process obtained by the existing program of the safety control system in the trackside equipment, and using the existing program to calculate the real status data to obtain a reference result; using the shadow mode, running the OTA upgrade package obtained for the safety control system in the trackside equipment, and using the running program of the OTA upgrade package to calculate the real status data to obtain a result to be verified; using the reference result to verify the result to be verified, and when the verified result meets the preset standard, using the OTA upgrade package to replace the existing file of the safety control system in the trackside equipment, to realize the OTA upgrade of the safety control system in the trackside equipment, etc.

[0113] As another aspect of the present invention, this embodiment further provides a computer program product according to the above embodiments, wherein the computer program product includes a computer program stored on a non-transitory computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer, the computer can execute the trackside equipment system upgrade method provided by the above method embodiments, the method including: obtaining real state data of the operation process obtained by an existing program of the safety control system in the trackside equipment, and using the existing program to calculate the real state data to obtain a reference result; using a shadow mode, running the OTA upgrade package obtained for the safety control system in the trackside equipment, and using the running program of the OTA upgrade package to calculate the real state data to obtain a result to be verified; using the reference result to verify the result to be verified, and when the verified result meets the preset standard, using the OTA upgrade package to replace the existing file of the safety control system in the trackside equipment to realize the OTA upgrade of the safety control system in the trackside equipment.

[0114] The electronic device, non-transitory computer-readable storage medium and computer program product provided by the present invention, by executing the steps of the trackside equipment system upgrade method described in the above embodiments, do not immediately execute the upgrade process after downloading the application software, but use existing applications and real data to monitor the downloaded application software for multiple input data and output results, and only after confirming that the downloaded application software can be executed correctly, perform the system software upgrade, which can ensure that the software to be upgraded is safe and reliable, thereby ensuring the continuous safe operation of the equipment.

[0115] It is understandable that the embodiments of the apparatus, electronic device, and storage medium described above are merely illustrative, and the units described as separate components may or may not be physically separated, and may be located in one place, or may be distributed on different network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment. Those of ordinary skill in the art may understand and implement it without creative effort.

[0116] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as a USB flash drive, a mobile hard disk, a ROM, a RAM, a magnetic disk or an optical disk, etc., including a number of instructions to enable a computer device (such as a personal computer, a server, or a network device, etc.) to execute the methods described in the above method embodiments or some parts of the method embodiments.

[0117] In addition, it should be understood by those skilled in the art that, in the application documents of the present invention, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the presence of other identical elements in the process, method, article or device including the element.

[0118] In the specification of the present invention, a large number of specific details are described. However, it should be understood that embodiments of the present invention can be practiced without these specific details. In some examples, known methods, structures and techniques are not shown in detail so as not to obscure the understanding of this specification. Similarly, it should be understood that in order to simplify the disclosure of the present invention and help understand one or more of the various inventive aspects, in the above description of exemplary embodiments of the present invention, various features of the present invention are sometimes grouped together into a single embodiment, figure or description thereof.

[0119] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for upgrading a trackside equipment system, characterized in that: include: Acquire the real state data of the operation process acquired by the existing program of the safety control system in the trackside equipment, and calculate the real state data by using the existing program to obtain a reference result; Using the shadow mode, running the OTA upgrade package obtained for the safety control system in the trackside equipment, and using the running program of the OTA upgrade package to calculate the real state data to obtain the result to be verified; The reference result is used to verify the result to be verified, and when the verified result meets the preset standard, the OTA upgrade package is used to replace the existing files of the safety control system in the trackside equipment to achieve OTA upgrade of the safety control system in the trackside equipment.

2. The method for upgrading the trackside equipment system according to claim 1, characterized in that: The shadow mode is used to run the OTA upgrade package obtained for the safety control system in the trackside equipment, including: The OTA upgrade package obtained from the server is cached in the sandbox or sandbox calculated by the train control system device, and the shadow mode is used for isolated execution.

3. The method for upgrading the trackside equipment system according to claim 1 or 2, characterized in that: The real state data has multiple groups, and the using the reference result to verify the result to be verified includes: For any set of real state data, the result of this verification is determined by comparing the result to be verified obtained based on the real state data with the reference result, and after obtaining the result of this verification, the next set of real state data is transferred to execute the comparison process until the number of verifications reaches the preset number; The preset standard includes: the proportion of verification passing results in the results of multiple verifications is not less than a preset threshold.

4. The method for upgrading the trackside equipment system according to claim 3, characterized in that: The caching the OTA upgrade package into a sandbox or sandbox calculated by a train control system device includes: Perform MD5 and / or CRC verification on the OTA upgrade package obtained from the server, and after the verification result is passed, cache the OTA upgrade package that passes the verification into the sandbox or sandbox calculated by the train control system device.

5. The method for upgrading the trackside equipment system according to claim 1, 2 or 4, characterized in that: Before the shadow mode is adopted to run the OTA upgrade package obtained for the safety control system in the trackside equipment, the method further includes: Obtaining an upgrade instruction sent by a server, and sending identity authentication information to the server based on the upgrade instruction; Obtaining server identity information sent by the server after passing authentication based on the identity authentication information, and performing server identity authentication based on the server identity information; After the server identity authentication is passed, the server obtains the name and version number of the OTA upgrade package, and after confirming the upgrade based on the name and version number and the version information of the existing file, downloads the OTA upgrade package through the download link established by the server.

6. The method for upgrading the trackside equipment system according to claim 1, characterized in that: The step of running the OTA upgrade package obtained for the safety control system in the trackside equipment also includes: Synchronously monitor the running process information of the OTA upgrade package, where the running process information includes one or more of the computing resources occupied during the running process, the execution time, the running process, and the running thread.

7. The method for upgrading the trackside equipment system according to claim 6, characterized in that: Also includes: If the verification result does not meet the preset standard, the reference result and the result to be verified are sent to the server control center to obtain the result abnormality information confirmed by the staff based on the reference result and the result to be verified, and confirm whether the OTA upgrade package is abnormal based on the result abnormality information; and / or, The monitored operation process information is sent to the server control center to obtain operation abnormality information identified by the staff based on the operation process information, and based on the operation abnormality information, confirm whether there is an abnormality in the operation process of the OTA upgrade package.

8. A trackside equipment system upgrade device, characterized in that: include: A first calculation module is used to obtain the real state data of the operation process obtained by the existing program of the safety control system in the trackside equipment, and calculate the real state data using the existing program to obtain a reference result; A second calculation module is used to run the OTA upgrade package obtained for the safety control system in the trackside equipment in a shadow mode, and use the running program of the OTA upgrade package to calculate the real state data to obtain a result to be verified; A verification and upgrade module is used to use the reference result to verify the result to be verified, and when the verification result meets the preset standard, use the OTA upgrade package to replace the existing file of the safety control system in the trackside equipment to realize the OTA upgrade of the safety control system in the trackside equipment.

9. An electronic device comprising a memory, a processor, and a program or instruction stored in the memory and executable on the processor, characterized in that: When the processor executes the program or instruction, the steps of the trackside equipment system upgrade method according to any one of claims 1 to 7 are implemented.

10. A non-transitory computer-readable storage medium having a program or instruction stored thereon, characterized in that: When the program or instruction is executed by a computer, the steps of the trackside equipment system upgrading method according to any one of claims 1 to 7 are implemented.

Images