An operation and maintenance method and device for an autonomous CTC system

Abstract

The present invention relates to an operation and maintenance method and device for an autonomous CTC system, including an upstream monitoring process and a downstream maintenance process. In the upstream monitoring process, the monitoring program collects operation and maintenance information, sends the operation and maintenance information to the operation and maintenance extension and the comprehensive maintenance server, and displays alarm and statistical information on the operation and maintenance terminal; in the downstream maintenance process, in response to the security policy of the autonomous CTC system set by the terminal operator through the operation and maintenance terminal, the security policy is sent to the monitoring program through the comprehensive maintenance server and the operation and maintenance extension, and the monitoring program makes the security policy take effect in the autonomous CTC system; the generality of the operation and maintenance method is improved, and customized real-time system operation and maintenance for the autonomous platform is realized.

Description

Technical Field

[0001] The present invention relates to the technical field of maintenance of railway dispatching and command systems, and particularly to an operation and maintenance method and device for an autonomous CTC system. Background Technique

[0002] The TDCS / CTC system has become the core system for railway dispatching and command. The key devices of the CTC system include application servers, database servers, self-discipline machines / comprehensive processors, and network devices, etc. The structure of the CTC system is as Figure 1 shown, including servers, operating systems, databases, network devices, and middleware. At the levels of hardware devices and operating systems, except for the self-discipline machine / comprehensive processor which uses dedicated devices, application servers and communication servers are all commercial COTS devices, and a large part of them use the Windows operating system; most database servers use imported minicomputers and commercial database systems from abroad. The vast majority of devices and operating systems used in the system are provided by foreign manufacturers. Therefore, the development of the CTC system and the construction of the Chinese railway are greatly restricted by foreign technologies. The CTC operation and maintenance method refers to the online monitoring and operation and maintenance management of general servers, terminal machines, windows / Linux operating systems, network devices, and databases that carry the CTC system services. The current CTC operation and maintenance have the following difficulties: (1) For commercial hardware devices of foreign servers, the device models change frequently, and the spare parts costs and maintenance difficulties for operation and maintenance units are relatively high; (2) The entire live network of the CTC system uses Oracle databases and IBM storage devices, but the overall price is relatively high, the product updates and upgrades quickly, and the operation and maintenance costs continue to increase; (3) The CTC system uses the Windows operating system extensively, and the risk of being attacked by the network or invaded by viruses is still very high, and the losses caused by information leakage incidents are inestimable.

[0003] The CTC system is a key information infrastructure and a Class-IV system for classified protection, and has very high requirements for the network security and information security of the railway dispatching and command system. However, as can be seen from the above existing application background, many core technologies of the CTC system are subject to foreign countries. At the national level, there are also the same problems with the core technologies of many domestic industries and systems as those in the CTC system. To solve this problem, China has clarified the construction strategy of "Digital China" and put forward the "2+8" security and controllability system. The transportation field is included in the 8 industries related to national economy and people's livelihood, and it is required to replace with autonomous products in aspects such as basic hardware, basic software, and industry application software to truly achieve autonomy and controllability. Currently, the CTC system has started to replace and apply autonomous products, carried out on-site pilot projects, and gradually carried out on-site applications.

[0004] With the gradual application and popularization of autonomous CTC, the autonomous software and hardware maintenance poses relatively high requirements for railway signal workers. How to accurately and efficiently help signal maintenance workers master the equipment status and promptly handle and solve fault problems becomes particularly important. However, the existing CTC operation and maintenance methods and systems are for general equipment, and there is no operation and maintenance method for the system developed autonomously. At present, the operation and maintenance methods mainly rely on regular manual detection, repair, and maintenance, and can only rely on the equipment status monitoring and manual maintenance methods to carry out periodic planned maintenance, unable to achieve preventive maintenance, and the real-time performance of CTC system operation and maintenance is poor. Some CTC operation and maintenance methods have also introduced real-time monitoring methods and technologies. However, due to the technical limitations of general equipment manufacturers, the real-time monitoring methods and technologies often can only adopt network communication protocols such as SNMP and IMM. In the autonomous CTC environment, the operating system version is different from the existing one, and the components included are also different. The general SNMP service or IMM module cannot meet the operation and maintenance requirements under the Xinchuang platform. In addition, the Regulations on the Protection of Critical Information Infrastructures and the basic requirements of Classified Protection 2.0 clearly put forward the requirements for secure operation and maintenance. As a critical information infrastructure and a Class-IV classified protection system, in the autonomous environment, the application of autonomous components such as servers, hardware, switches, operating systems, and middleware itself has information security design and applications, involving information security operation and maintenance information such as terminal security (such as viruses and malicious codes) and boundary security (illegal intrusion and illegal external connection), and a new maintenance method is more needed for support. Summary of the Invention

[0005] To solve the problems that the traditional CTC system operation and maintenance method relies on specific modules with poor versatility, cannot realize the maintenance of customized systems under the autonomous platform, and the operation and maintenance related to information security, the present invention provides an operation and maintenance method and device for an autonomous CTC system.

[0006] An operation and maintenance method for an autonomous CTC system includes an upstream monitoring process and a downstream maintenance process.

[0007] In the upstream monitoring process, the monitoring program collects operation and maintenance information, sends the operation and maintenance information to the operation and maintenance extension and the comprehensive maintenance server, and displays alarm and statistical information on the operation and maintenance terminal.

[0008] In the downstream maintenance process, in response to the security policy of the autonomous CTC system set by the terminal operator through the operation and maintenance terminal, the security policy is sent to the monitoring program through the comprehensive maintenance server and the operation and maintenance extension, and the monitoring program makes the security policy take effect in the autonomous CTC system.

[0009] Among them, the operation and maintenance method for the autonomous CTC system is applied to an autonomous CTC system that uses an autonomous server, an autonomous industrial control computer, and an autonomous terminal. The autonomous CTC system includes an operation and maintenance terminal, a comprehensive operation and maintenance server, an operation and maintenance extension, and a device monitoring program.

[0010] Preferably, the upstream monitoring process includes:

[0011] Data collection step: The monitoring program collects the basic operation and maintenance information and autonomous security operation and maintenance information of the autonomous CTC system, and sends the basic operation and maintenance information and autonomous security operation and maintenance information to the operation and maintenance extension through the CTC station local area network.

[0012] Preferably, in the data collection step, network communication is established according to the configuration information and a timer is started; if the timer times out, the underlying data is collected; the data is uploaded according to the configuration information, and the underlying data is saved and sent to the operation and maintenance extension.

[0013] Preferably, establishing network communication according to the configuration information and starting the timer specifically includes: reading the configuration information, establishing network communication according to the network configuration information in the configuration information, and starting the basic operation and maintenance information collection timer T1, the security alarm timer T2, and the security maintenance information collection timer T3 according to the timer information in the configuration information.

[0014] Preferably, if the timer times out to collect the underlying data, it specifically includes:

[0015] Parallelly judge whether the basic operation and maintenance information collection timer T1, the security alarm timer T2, and the security maintenance information collection timer T3 time out. If the basic operation and maintenance information collection timer T1 times out, collect the basic operation and maintenance information; if the security alarm timer T2 times out, collect security alarm information such as firewall alarms, abnormal user login alarms, and abnormal access alarms; if the security maintenance information collection timer T3 times out, collect security logs.

[0016] Preferably, uploading the data according to the configuration information, saving the underlying data and sending it to the operation and maintenance extension specifically includes: if the configuration information configures the data upload method as change upload, compare whether the data collected in adjacent cycles has changed. If so, upload and save the data; if the configuration information configures the data upload method as forced upload, upload and save the data; read the saved basic operation and maintenance data, security alarm data, and security logs, compress them and send them to the operation and maintenance extension.

[0017] Preferably, the upstream monitoring process further includes:

[0018] Data maintenance step: The operation and maintenance extension receives the information collected by each monitoring program and maintains the data according to the information type;

[0019] If the information type is basic operation and maintenance information, when the data exceeds the set threshold, an alarm message is generated and pushed to the operation and maintenance terminal to inform the user;

[0020] If the information type is security operation and maintenance information, the security operation and maintenance information is pushed to the operation and maintenance terminal through the alarm message to inform the user;

[0021] The operation and maintenance extension summarizes the alarm messages to the comprehensive operation and maintenance server, as Figure 2 shown in information flow D;

[0022] The above-mentioned upstream monitoring process further includes:

[0023] Statistical analysis step: The comprehensive operation and maintenance server receives the alarm messages from each operation and maintenance extension, stores them, classifies the faults, and conducts statistical analysis. The operation and maintenance terminal views the statistical content and alarm messages.

[0024] Preferably, the downstream maintenance process includes the following steps:

[0025] Policy setting step: Set the security policy through the operation and maintenance terminal, save the security policy information to the comprehensive maintenance server. The security policy includes the security policies of the firewall, user authentication, and access control in the autonomous operating system;

[0026] Policy transmission step: After the operation and maintenance extension sends a policy request, the comprehensive operation and maintenance server distributes the security policy to each operation and maintenance extension, and the operation and maintenance extension stores the security policy;

[0027] Policy update step: The operation and maintenance extension distributes the security policy to the devices in the autonomous CTC system for policy update.

[0028] Preferably, the basic operation and maintenance information includes the performance data, network card data, process data, port data, and service status data of the autonomous CTC system;

[0029] The autonomous security operation and maintenance information includes security policies and operation logs such as firewalls, access control, identity authentication, and autonomous trustworthiness.

[0030] The present invention also provides an operation and maintenance device for an autonomous CTC system, characterized in that: the operation and maintenance device for an autonomous CTC system includes:

[0031] The upstream monitoring module is configured to collect operation and maintenance information using a monitoring program, send the operation and maintenance information to the operation and maintenance extension and the comprehensive maintenance server, and display alarm and statistical information in the operation and maintenance terminal;

[0032] The downlink maintenance module is configured to send the security policy to the monitoring program through the comprehensive maintenance server and the operation and maintenance extension in response to the security policy of the autonomous CTC system set by the terminal operator through the operation and maintenance terminal, and the monitoring program makes the security policy take effect in the autonomous CTC system;

[0033] Among them, the operation and maintenance device for the autonomous CTC system is applied to the autonomous CTC system that uses autonomous servers, autonomous industrial control machines, and autonomous terminals. The autonomous CTC system includes an operation and maintenance terminal, a comprehensive operation and maintenance server, an operation and maintenance extension, and a device monitoring program.

[0034] An operation and maintenance method and device for an autonomous CTC system provided by the present invention are applied to an autonomous CTC system, and are suitable for an autonomous CTC system whose infrastructure includes CPU chips, servers, storage devices, switches, routers, etc., and whose basic software includes databases, operating systems, middleware, security products based on the information and communication technology innovation platform, and CTC terminal business software. It provides a customized real-time operation and maintenance method. The customized data collection and status warning methods, on the one hand, make the security operation and maintenance technology closer to the status of the key devices of the CTC system, and effectively monitor the operation status of autonomous devices and business programs in real time; on the other hand, through continuous monitoring of the device status and continuous analysis of security logs, perceive the health status and security status of CTC devices and the entire system, generate a situation awareness report, and guide users to perform preventive maintenance, thereby improving the operation reliability of the autonomous CTC. Brief Description of the Drawings

[0035] Figure 1 It is a schematic diagram of the CTC system structure in the prior art;

[0036] Figure 2 It is a schematic diagram of the autonomous CTC system structure;

[0037] Figure 3 It is a flowchart of the data collection step implementation provided by the embodiment of the present invention. Detailed Embodiments

[0038] The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Those of ordinary skill in the art can know that with the development of technology and the emergence of new scenarios, the technical solutions provided by the embodiments of the present application are equally applicable to similar technical problems.

[0039] In the description and claims of this application and the above-mentioned drawings, the terms "comprising" and "having" and any variations thereof are intended to cover non-exclusive inclusion, such that a process, method, system, product or device comprising a series of units need not be limited to those units, but may include other units not expressly listed or inherent to such process, method, product or device.

[0040] Embodiment 1

[0041] The first embodiment of the present invention relates to an operation and maintenance method for an autonomous CTC system.

[0042] The autonomous CTC system involved in the present invention is a domestically developed and autonomous CTC system. The monitoring objects specifically include CTC centers at the level of the National Railway Group and each railway administration, and CTC stations at the station level. The operation and maintenance method mentioned in the present invention is applied to an autonomous CTC system that uses autonomous servers, autonomous industrial control computers, and autonomous terminals.

[0043] The operation and maintenance method includes an upstream monitoring process and a downstream maintenance process. Among them,

[0044] During the upstream monitoring process, the monitoring program collects operation and maintenance information, sends the operation and maintenance information to the operation and maintenance extension and the comprehensive maintenance server, and displays alarm and statistical information on the operation and maintenance terminal.

[0045] During the downstream maintenance process, in response to the security policy of the autonomous CTC system set by the terminal operator through the operation and maintenance terminal, the security policy is sent to the monitoring program through the comprehensive maintenance server and the operation and maintenance extension, and the monitoring program makes the security policy take effect in the autonomous CTC system.

[0046] The autonomous CTC system includes an operation and maintenance terminal, a comprehensive operation and maintenance server, an operation and maintenance extension, and a device monitoring program. As Figure 2 shown, the monitoring program is set in the devices of the autonomous CTC system. The devices in the autonomous CTC system include autonomous terminals, autonomous servers, and autonomous industrial control computers. The monitoring program is used to monitor autonomous terminals, autonomous servers, and autonomous industrial control computers. The operation and maintenance terminal includes a central operation and maintenance terminal and a station operation and maintenance terminal. The operation and maintenance extension includes a central operation and maintenance extension and a station operation and maintenance extension.

[0047] The upstream monitoring process includes the following steps:

[0048] Data collection steps: The monitoring program collects the basic operation and maintenance information and autonomous security operation and maintenance information of the autonomous CTC system. The basic operation and maintenance information includes performance data, network card data, process data, port data, service status data, etc. of the autonomous CTC system. The autonomous security operation and maintenance information includes security policies and operation logs of firewalls, access controls, identity authentication, autonomous trust, etc., and sends the basic operation and maintenance information and autonomous security operation and maintenance information to the operation and maintenance extension through the CTC station local area network. The information flow is as shown in the information flow F in Figure 2 Figure 1.

[0049] The data collection steps are implemented in the manner as shown in Figure 3 Figure 2. Specifically: Establish network communication according to the configuration information and start the timer; If the timer times out, collect the underlying data; Upload the data according to the configuration information, save the underlying data and send it to the operation and maintenance extension.

[0050] Establish network communication according to the configuration information and start the timer, specifically including: Read the configuration information, establish network communication according to the network configuration information in the configuration information, and start the basic operation and maintenance information collection timer T1, security alarm timer T2, and security maintenance information collection timer T3 according to the timer information in the configuration information.

[0051] Judgment is made in parallel whether the basic operation and maintenance information collection timer T1, security alarm timer T2, and security maintenance information collection timer T3 time out. If the basic operation and maintenance information collection timer T1 times out, collect the basic operation and maintenance information; If the security alarm timer T2 times out, collect security alarm information such as firewall alarms, abnormal user login alarms, and abnormal access alarms; If the security maintenance information collection timer T3 times out, collect security logs.

[0052] Upload the data according to the configuration information, save the underlying data and send it to the operation and maintenance extension, specifically including: If the configuration information configures the data upload method as change upload, compare whether the data collected in adjacent cycles has changed. If so, upload and save the data; If the configuration information configures the data upload method as forced upload, upload and save the data; Read the saved basic operation and maintenance data, security alarm data, and security logs, compress them and send them to the operation and maintenance extension.

[0053] Data maintenance steps: The operation and maintenance extension receives the information collected by each monitoring program and maintains the data according to the information type. If the information type is basic operation and maintenance information, if the data exceeds the set threshold, an alarm message is generated and pushed to the operation and maintenance terminal to inform the user; If the information type is security operation and maintenance information, the security operation and maintenance information is pushed to the operation and maintenance terminal to inform the user through the alarm message, as shown in the information flow B' in Figure 2 Figure 3. At the same time, the operation and maintenance extension summarizes the alarm messages to the comprehensive operation and maintenance server, as shown in the information flow D in Figure 2 Figure 4.

[0054] Statistical analysis steps: The comprehensive operation and maintenance server receives the alarm information from each operation and maintenance extension, stores it, classifies faults, and conducts statistical analysis to perceive the health and security status of the CTC equipment and the entire system, generates a situation awareness report, and the operation and maintenance terminal views the statistical content, alarm information, and situation awareness report, as shown in Figure 2 information flow B shown in the figure.

[0055] The downstream maintenance process includes the following steps:

[0056] Policy setting steps: Set security policies through the operation and maintenance terminal and save the security policy information to the comprehensive maintenance server. Users set security policies through the central operation and maintenance terminal, including security policies for firewalls, user authentication, and access control in the autonomous operating system, as shown in Figure 2 information flow A shown in the figure. Each station terminal can also reissue the security policies within the scope of each station, as shown in Figure 2 information flow A' shown in the figure.

[0057] Policy transmission steps: After the operation and maintenance extension sends a policy request, the comprehensive operation and maintenance server distributes the security policy to each operation and maintenance extension, and the operation and maintenance extension stores the security policy, as shown in Figure 2 information flow C shown in the figure.

[0058] Policy update steps: The operation and maintenance extension distributes the security policy to the devices in the autonomous CTC system for policy update, as shown in Figure 2 information flow D shown in the figure.

[0059] Embodiment 2

[0060] The first embodiment of the present invention relates to an operation and maintenance device for an autonomous CTC system,

[0061] The autonomous CTC system involved in the present invention is a domestically developed and autonomous CTC system. The monitoring objects specifically include CTC centers at the level of the National Railway Administration and each railway administration, and CTC stations at the station level. The operation and maintenance device mentioned in the present invention is applied to an autonomous CTC system that uses autonomous servers, autonomous industrial control computers, and autonomous terminals.

[0062] The operation and maintenance device includes an upstream monitoring module and a downstream maintenance module, where

[0063] The upstream monitoring module is configured to collect operation and maintenance information using a monitoring program, send the operation and maintenance information to the operation and maintenance extension and the comprehensive maintenance server, and display alarm and statistical information on the operation and maintenance terminal;

[0064] The downlink maintenance module is configured to send the security policy to the monitoring program through the integrated maintenance server and the operation and maintenance extension in response to the security policy of the autonomous CTC system set by the terminal operator through the operation and maintenance terminal, and the monitoring program makes the security policy take effect in the autonomous CTC system.

[0065] The autonomous CTC system includes an operation and maintenance terminal, an integrated operation and maintenance server, an operation and maintenance extension, and a device monitoring program. As Figure 2 shown, the monitoring program is set in the devices of the autonomous CTC system. The devices in the autonomous CTC system include autonomous terminals, autonomous servers, and autonomous industrial control machines. The monitoring program is used to monitor autonomous terminals, autonomous servers, and autonomous industrial control machines. The operation and maintenance terminal includes a central operation and maintenance terminal and a station operation and maintenance terminal, and the operation and maintenance extension includes a central operation and maintenance extension and a station operation and maintenance extension.

[0066] The uplink monitoring module specifically includes:

[0067] A data acquisition module, configured to use the monitoring program to collect the basic operation and maintenance information and autonomous security operation and maintenance information of the autonomous CTC system. The basic operation and maintenance information includes performance data, network card data, process data, port data, and service status data of the autonomous CTC system. The autonomous security operation and maintenance information includes security policies and operation logs such as firewalls, access control, identity authentication, and autonomous trust, and sends the basic operation and maintenance information and autonomous security operation and maintenance information to the operation and maintenance extension through the CTC station local area network. The information flow is as Figure 2 shown by the information flow F in the figure.

[0068] The data acquisition step is implemented in the manner as Figure 3 shown in the figure. Specifically: establish network communication according to the configuration information and start the timer; if the timer times out, collect the underlying data; upload the data according to the configuration information, save the underlying data and send it to the operation and maintenance extension.

[0069] Establishing network communication according to the configuration information and starting the timer specifically includes: reading the configuration information, establishing network communication according to the network configuration information in the configuration information, and starting the basic operation and maintenance information acquisition timer T1, the security alarm timer T2, and the security maintenance information acquisition timer T3 according to the timer information in the configuration information.

[0070] Judging in parallel whether the basic operation and maintenance information acquisition timer T1, the security alarm timer T2, and the security maintenance information acquisition timer T3 time out. If the basic operation and maintenance information acquisition timer T1 times out, collect the basic operation and maintenance information; if the security alarm timer T2 times out, collect security alarm information such as firewall alarms, abnormal user login alarms, and abnormal access alarms; if the security maintenance information acquisition timer T3 times out, collect and save the security log.

[0071] Upload data according to the configuration information, save the underlying data and send it to the operation and maintenance extension. Specifically, it includes: if the configured data upload method in the configuration information is change-based upload, compare whether the data collected in adjacent cycles has changed. If so, upload and save the data; if the configured data upload method in the configuration information is forced upload, upload and save the data; read the saved basic operation and maintenance data, security warning data and security logs, compress them and send them to the operation and maintenance extension.

[0072] The data maintenance module is configured to control the operation and maintenance extension to receive the information collected by each monitoring program and maintain the data according to the information type. If the information type is basic operation and maintenance information, when the data exceeds the set threshold, an alarm message is generated and pushed to the operation and maintenance terminal to inform the user; if the information type is security operation and maintenance information, the security operation and maintenance information is pushed to the operation and maintenance terminal through the alarm message to inform the user, as Figure 2 shown by the information flow B' in Figure 2 below. At the same time, the operation and maintenance extension summarizes the alarm messages to the comprehensive operation and maintenance server, as

[0073] shown by the information flow D in Figure 2 below.

[0074] The downlink maintenance module also includes the following modules:

[0075] The policy setting module is configured to set security policies through the operation and maintenance terminal and save the policy information to the comprehensive maintenance server. The user sets security policies through the central operation and maintenance terminal, including the security policies of the firewall, user authentication and access control in the autonomous operating system, as Figure 2 shown by the information flow A in Figure 2 below. Each station terminal can also reissue the security policies within the scope of each station, as

[0076] shown by the information flow A' in Figure 2 below.

[0077] The policy transmission module is configured to control the comprehensive operation and maintenance server to send the security policies to each operation and maintenance extension after the operation and maintenance extension issues a policy request, and the operation and maintenance extension stores the security policies, as Figure 2 shown by the information flow C in

[0078] The CTC system is a critical information infrastructure and a Class-IV classified protection system. The autonomous CTC is built on a domestic IT infrastructure platform, integrating new-generation information technologies and undertaking the network security and information security of the CTC system as a critical information infrastructure in the new era. The infrastructure involved in the autonomous CTC includes CPU chips, servers, storage devices, switches, routers, etc. The basic software involved includes databases, operating systems, and middleware. In addition, there are security products based on the domestic IT infrastructure platform and CTC terminal business software. Therefore, whether considering the CTC hardware architecture, software architecture, or application information related to information security, the autonomous CTC not only requires re-architectural design and customized development in terms of business, but also needs to be organically combined with the software and hardware architecture of the domestic IT infrastructure platform in terms of operation and maintenance methods, and to conduct customized design in terms of data acquisition methods, status alarm methods, etc.

[0079] Compared with the operation and maintenance methods of the existing CTC system based on general-purpose devices, the operation and maintenance method provided by the present invention can not only perform operation and maintenance on the autonomous CTC system through technologies such as customized data acquisition and status alarm, but also meet the requirements of national critical information technology facility protection and Class-IV network security classified protection, making the security operation and maintenance technology closer to the status of the key devices of the CTC system itself. Through the monitoring and management of the key maintenance information of the key devices of the autonomous CTC system, the security maintenance information of access control, etc., it can effectively monitor the operation status of autonomous devices and business programs, and can also better manage the secure operation of autonomous devices, thus achieving the transformation from periodic planned maintenance or manual maintenance to real-time monitoring and preventive maintenance, that is, through continuous monitoring of device status and continuous analysis of security logs, perceiving the health status and security status of CTC devices and the entire system, generating a situation awareness report, and guiding users to conduct preventive maintenance, thereby improving the operation reliability of the autonomous CTC.

[0080] The step division of the above various methods is only for clear description. When implemented, they can be combined into one step or some steps can be split into multiple steps. As long as the same logical relationship is included, they are all within the protection scope of this patent; adding insignificant modifications or introducing insignificant designs to the algorithm or process, but not changing the core design of its algorithm and process are all within the protection scope of this patent.

[0081] The above examples are only specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in this technical field can modify or change the above embodiments without departing from the spirit and scope of the present invention. Therefore, all equivalent modifications or changes completed by those with ordinary knowledge in the technical field to which the present invention pertains without departing from the spirit and technical idea disclosed by the present invention should still be covered by the claims of the present invention.

Claims

1. An operation and maintenance method for an autonomous CTC system, the operation and maintenance method for the autonomous CTC system includes an upstream monitoring process and a downstream maintenance process. In the upstream monitoring process, the monitoring program collects operation and maintenance information, sends the operation and maintenance information to the operation and maintenance extension and the comprehensive maintenance server, and displays alarm and statistical information on the operation and maintenance terminal. In the downstream maintenance process, in response to the security policy of the autonomous CTC system set by the terminal operator through the operation and maintenance terminal, the security policy is sent to the monitoring program through the comprehensive maintenance server and the operation and maintenance extension, and the monitoring program makes the security policy take effect in the autonomous CTC system. Wherein, The operation and maintenance method for the autonomous CTC system is applied to an autonomous CTC system adopting an autonomous server, an autonomous industrial control computer and an autonomous terminal. The autonomous CTC system includes an operation and maintenance terminal, a comprehensive operation and maintenance server, an operation and maintenance extension and a device monitoring program. The upstream monitoring process includes: Data collection step: The monitoring program collects the basic operation and maintenance information and autonomous security operation and maintenance information of the autonomous CTC system, and sends the basic operation and maintenance information and autonomous security operation and maintenance information to the operation and maintenance extension through the CTC station local area network. In the data collection step, establish network communication according to the configuration information and start the timer; if the timer times out, collect the underlying data; upload the data according to the configuration information, save the underlying data and send it to the operation and maintenance extension. The establishment of network communication according to the configuration information and the start of the timer specifically includes: reading the configuration information, establishing network communication according to the network configuration information in the configuration information, and starting the basic operation and maintenance information collection timer T1, the security alarm timer T2, and the security maintenance information collection timer T3 according to the timer information in the configuration information. The specific content of collecting the underlying data if the timer times out includes: Judging in parallel whether the basic operation and maintenance information collection timer T1, the security alarm timer T2, and the security maintenance information collection timer T3 time out. If the basic operation and maintenance information collection timer T1 times out, collect the basic operation and maintenance information; if the security alarm timer T2 times out, collect security alarm information such as firewall alarm, abnormal user login alarm, and abnormal access alarm; if the security maintenance information collection timer T3 times out, collect the security log.

2. An operation and maintenance method for an autonomous CTC system according to claim 1, characterized in that: Uploading data according to the configuration information, saving the underlying data and sending it to the operation and maintenance extension specifically includes: if the configuration information configures the data upload method as change upload, compare whether the data collected in adjacent cycles has changed. If so, upload and save the data; if the configuration information configures the data upload method as forced upload, upload and save the data; read the saved basic operation and maintenance data, security alarm data and security log, compress them and send them to the operation and maintenance extension.

3. An operation and maintenance method for an autonomous CTC system according to claim 1, characterized in that: The upstream monitoring process further includes: Data maintenance step: The operation and maintenance extension receives the information collected by each monitoring program and maintains the data according to the information type. If the information type is basic operation and maintenance information, when the data exceeds the set threshold, an alarm message is generated and pushed to the operation and maintenance terminal to inform the user; if the information type is security operation and maintenance information, the security operation and maintenance information is pushed to the operation and maintenance terminal through the alarm message to inform the user; The operation and maintenance extension machines summarize the alarm messages to the comprehensive operation and maintenance server; The uplink monitoring process further includes: Statistical analysis step: The comprehensive operation and maintenance server receives the alarm messages from each operation and maintenance extension machine, stores them, classifies the faults, and conducts statistical analysis. The operation and maintenance terminal views the statistical content and alarm messages.

4. A method for operation and maintenance of an autonomous CTC system according to claim 1, characterized in that: The downlink maintenance process includes the following steps: Policy setting step: Set security policies through the operation and maintenance terminal, and save the security policy information to the comprehensive maintenance server. The security policies include security policies for firewalls, user authentication, and access control in the autonomous operating system; Policy transmission step: After the operation and maintenance extension machine sends a policy request, the comprehensive operation and maintenance server distributes the security policies to each operation and maintenance extension machine, and the operation and maintenance extension machine stores the security policies; Policy update step: The operation and maintenance extension machine distributes the security policies to the devices in the autonomous CTC system for policy update.

5. A method for operation and maintenance of an autonomous CTC system according to claim 1, characterized in that: The basic operation and maintenance information includes performance data, network card data, process data, port data, and service status data of the autonomous CTC system; the autonomous security operation and maintenance information includes security policies and operation logs for firewalls, access control, identity authentication, and autonomous trustworthiness.

6. An operation and maintenance device for an autonomous CTC system, characterized in that: The operation and maintenance device for the autonomous CTC system includes: The uplink monitoring module is configured to use a monitoring program to collect operation and maintenance information, send the operation and maintenance information to the operation and maintenance extension machine and the comprehensive maintenance server, and display alarm and statistical information on the operation and maintenance terminal; The downlink maintenance module is configured to respond to the security policies of the autonomous CTC system set by the terminal operator through the operation and maintenance terminal, send the security policies to the monitoring program through the comprehensive maintenance server and the operation and maintenance extension machine, and the monitoring program makes the security policies take effect in the autonomous CTC system; wherein, the operation and maintenance device for the autonomous CTC system is applied to an autonomous CTC system that uses autonomous servers, autonomous industrial control machines, and autonomous terminals. The autonomous CTC system includes an operation and maintenance terminal, a comprehensive operation and maintenance server, operation and maintenance extension machines, and a device monitoring program; The uplink monitoring process includes: Data collection step: The monitoring program collects the basic operation and maintenance information and autonomous security operation and maintenance information of the autonomous CTC system, and sends the basic operation and maintenance information and autonomous security operation and maintenance information to the operation and maintenance extension machine through the CTC station local area network; In the data collection step, establish network communication according to the configuration information and start a timer; if the timer times out, collect the underlying data; upload the data according to the configuration information, save the underlying data and send it to the operation and maintenance extension machine; Establishing network communication and starting a timer according to the configuration information specifically includes: reading the configuration information, establishing network communication according to the network configuration information in the configuration information, and starting the basic operation and maintenance information collection timer T1, the security alarm timer T2, and the security maintenance information collection timer T3 according to the timer information in the configuration information; If the timer times out, collecting underlying data specifically includes: Judging in parallel whether the basic operation and maintenance information collection timer T1, the security alarm timer T2, and the security maintenance information collection timer T3 time out. If the basic operation and maintenance information collection timer T1 times out, collect the basic operation and maintenance information; if the security alarm timer T2 times out, collect security alarm information such as firewall alarms, user abnormal login alarms, and abnormal access alarms; if the security maintenance information collection timer T3 times out, collect security logs.

Images