Key management method, device and storage medium for RSSP-II protocol

Abstract

The present invention discloses a key management method, device and storable medium of an RSSP‑II protocol, and relates to the technical field of network security, wherein the method comprises: S1: regularly matching an optimal node center according to the travel distance information, real-time location information and map information of the on-board device; S2: when matching to the optimal node center, the on-board device determines whether it is consistent with the connected node center, if it is consistent, no operation is performed, if it is inconsistent, the on-board device generates a verification key, and sends the verification key to the optimal node center to request identity verification; S3: when the verification is passed, the on-board device encrypts the data information and sends it to the optimal node center; the present invention can realize the secure transmission of messages between devices in a railway system.

Description

Technical Field

[0001] The present invention relates to the field of network security technology, and more particularly to a key management method, device and storable medium of an RSSP-II protocol. Background Art

[0002] At present, RSSP-II railway signal safety communication protocol is the protocol used for communication between the dispatching centralization (CTC), temporary speed limit server (TSRS) and radio block center (RBC) in the CTCS-3 level train control system.

[0003] However, in the prior art, since the vehicle-mounted equipment always transmits data to the same node center during continuous driving, the CPU system resource occupancy rate is high and the data transmission efficiency will decrease as the distance increases; and the key is only verified once during the device verification process, the system security is low.

[0004] Therefore, how to provide a key management method that can solve the above problems is an issue that those skilled in the art need to solve urgently. Summary of the invention

[0005] In view of this, the present invention provides a key management method, device and storable medium of the RSSP-II protocol, which can realize the secure transmission of messages between devices in a railway system.

[0006] In order to achieve the above object, the present invention adopts the following technical solution:

[0007] A key management method of RSSP-II protocol, applied to a key center, a node center and a vehicle-mounted device, wherein the key center is communicatively connected with a plurality of the node centers, comprising:

[0008] S1: regularly matching the optimal node center according to the driving distance information, real-time location information and map information of the vehicle-mounted device;

[0009] S2: When the optimal node center is matched, the vehicle-mounted device determines whether it is consistent with the connected node center. If it is consistent, no operation is performed. If it is inconsistent, the vehicle-mounted device generates a verification key and sends the verification key to the optimal node center to request identity verification;

[0010] S3: When the verification is passed, the vehicle-mounted device encrypts the data information and sends it to the optimal node center.

[0011] Preferably, the S1 specifically includes:

[0012] S11: regularly obtaining the travel distance information, the real-time location information and the map information of the vehicle-mounted device;

[0013] S12: matching corresponding node centers according to the driving distance information, the real-time location information and the map information;

[0014] S13: When there are multiple corresponding node centers, determine that the node with the least connected devices among the corresponding nodes is the optimal node center.

[0015] Preferably, S2 specifically includes:

[0016] S21: When the optimal node center is matched, and the vehicle-mounted device determines that it is inconsistent with the originally connected node center, the vehicle-mounted device sends a verification request to the optimal node center;

[0017] S22: the node center of the original connection sends the initial verification key to the optimal node center, and the vehicle-mounted device superimposes the verification request with an encrypted array, and the vehicle-mounted device sends the initial verification key and the verification request processed with the superimposed encrypted array to the optimal node center;

[0018] S23: The optimal node center uses the corresponding decryption array to decrypt the verification request and verifies whether the initial verification key is consistent. When both are consistent, the verification request is approved.

[0019] Preferably, the method further includes S4: the node center periodically updates the decryption array, and after updating the decryption array, shares the new verification key with other node centers.

[0020] Preferably, in step S4: when a node center confirms that the vehicle-mounted device connected to it needs to be connected to other node centers, the original node center deletes the old verification key and key-related information.

[0021] Furthermore, the present invention also provides a management device for a key management method of the RSSP-II protocol using any one of the above, comprising:

[0022] A matching module, used for regularly matching the optimal node center according to the driving distance information, real-time location information and map information of the vehicle-mounted device;

[0023] A verification module, used for, when matching to the optimal node center, the vehicle-mounted device to determine whether it is consistent with the connected node center, if consistent, no operation is performed, if inconsistent, the vehicle-mounted device generates a verification key, and sends the verification key to the optimal node center to request identity verification;

[0024] The encryption sending module is used for the vehicle-mounted device to encrypt the data information and send it to the optimal node center when the verification is passed.

[0025] Furthermore, the present invention also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, any of the key management methods described above is implemented.

[0026] It can be seen from the above technical solution that, compared with the prior art, the present invention discloses a key management method, device and storable medium for the RSSP-II protocol, which improves the efficiency of data transmission by regularly updating the driving distance information, real-time location information and map information of the vehicle-mounted equipment and matching the optimal node center; at the same time, in the process of data transmission with the new node, the original verification key and the newly generated key are verified at the same time, thereby further improving the security of data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0028] Figure 1 A flowchart of the key management method of the RSSP-II protocol provided by the present invention;

[0029] Figure 2 A structural block diagram of the key center, node center and vehicle-mounted equipment provided by the present invention;

[0030] Figure 3 A structural principle block diagram of a key management device for RSSP-II protocol provided by the present invention. DETAILED DESCRIPTION

[0031] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0032] See attached Figure 1-2 As shown, an embodiment of the present invention discloses a key management method of the RSSP-II protocol, which is applied to a key center, a node center and a vehicle-mounted device, wherein the key center is communicatively connected with a plurality of node centers, including:

[0033] S1: Regularly match the optimal node center based on the driving distance information, real-time location information and map information of the vehicle-mounted equipment;

[0034] S2: When the optimal node center is matched, the vehicle-mounted device determines whether it is consistent with the connected node center. If it is consistent, no operation is performed. If it is inconsistent, the vehicle-mounted device generates a verification key and sends the verification key to the optimal node center to request identity verification;

[0035] S3: When the verification is passed, the on-board device encrypts the data information and sends it to the optimal node center.

[0036] Specifically, in step S13, when the number of connected devices of the corresponding node centers is the same, the straight-line distances between the corresponding node centers and the vehicle-mounted device are obtained, and the closest one is selected as the optimal node center. The above steps can effectively reduce the data load of the node center and increase the data transmission efficiency.

[0037] In a specific embodiment, S1 specifically includes:

[0038] S11: Regularly obtain the driving distance information, real-time location information and map information of the vehicle-mounted device;

[0039] S12: Matching corresponding node centers according to driving distance information, real-time location information and map information;

[0040] S13: When there are multiple corresponding node centers, determine the node with the least connected devices among the corresponding nodes as the optimal node center.

[0041] In a specific embodiment, S2 specifically includes:

[0042] S21: When the optimal node center is matched, and the vehicle-mounted device judges that it is inconsistent with the originally connected node center, the vehicle-mounted device sends a verification request to the optimal node center;

[0043] S22: The node center of the original connection sends the initial verification key to the optimal node center, and the vehicle-mounted device superimposes the verification request with the encrypted array. The vehicle-mounted device sends the initial verification key and the verification request processed by the superimposed encrypted array to the optimal node center;

[0044] S23: The optimal node center uses the corresponding decryption array to decrypt the verification request and verify whether the initial verification key is consistent. When both are consistent, the verification request is passed.

[0045] In a specific embodiment, it also includes S4: the node center regularly updates the decryption array, and after updating the decryption array, shares the new verification key with other node centers.

[0046] In a specific embodiment, in step S4: when a node center confirms that the vehicle-mounted device connected to it needs to be connected to other node centers, the original node center deletes the old verification key and key-related information.

[0047] See attached Figure 3 As shown, an embodiment of the present invention further provides a management device for a key management method of the RSSP-II protocol using any one of the above embodiments, including:

[0048] A matching module, used to regularly match the optimal node center according to the driving distance information, real-time location information and map information of the vehicle-mounted equipment;

[0049] Verification module, used for when the vehicle-mounted device matches the optimal node center, judging whether it is consistent with the connected node center, if it is consistent, no operation is performed, if it is inconsistent, the vehicle-mounted device generates a verification key and sends the verification key to the optimal node center to request identity verification;

[0050] The encryption sending module is used for the vehicle-mounted device to encrypt the data information and send it to the optimal node center when the verification is passed.

[0051] An embodiment of the present invention further provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the key management method as described in any one of the embodiments is implemented.

[0052] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.

[0053] The above description of the disclosed embodiments enables one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A key management method for RSSP-II protocol, applied to a key center, a node center and a vehicle-mounted device, wherein the key center is communicatively connected with a plurality of the node centers, characterized in that: The following steps are involved: S1: Regularly matching the optimal node center according to the driving distance information, real-time location information and map information of the vehicle-mounted device, specifically including the following steps: S11: regularly obtaining the travel distance information, the real-time location information and the map information of the vehicle-mounted device; S12: matching corresponding node centers according to the driving distance information, the real-time location information and the map information; S13: When there are multiple corresponding node centers, determine that the node with the least connected devices among the corresponding nodes is the optimal node center; S2: When the optimal node center is matched, the vehicle-mounted device determines whether it is consistent with the connected node center. If it is consistent, no operation is performed. If it is inconsistent, the vehicle-mounted device generates a verification key and sends the verification key to the optimal node center to request identity verification, which specifically includes: S21: When the optimal node center is matched, and the vehicle-mounted device determines that it is inconsistent with the originally connected node center, the vehicle-mounted device sends a verification request to the optimal node center; S22: the node center of the original connection sends the initial verification key to the optimal node center, and the vehicle-mounted device superimposes the verification request with an encrypted array, and the vehicle-mounted device sends the initial verification key and the verification request processed with the superimposed encrypted array to the optimal node center; S23: The optimal node center decrypts the verification request using the corresponding decryption array, and verifies whether the initial verification key is consistent, and passes the verification request when both are consistent; S3: When the verification is passed, the vehicle-mounted device encrypts the data information and sends it to the optimal node center; S4: The node center periodically updates the decryption array, and after updating the decryption array, shares the new verification key with other node centers.

2. A key management method for RSSP-II protocol according to claim 1, characterized in that: In step S4: when a node center confirms that the vehicle-mounted device connected to it needs to be connected to other node centers, the original node center deletes the old verification key and key-related information.

3. A management device using the key management method of the RSSP-II protocol according to any one of claims 1 to 2, characterized in that: include: A matching module, used for regularly matching the optimal node center according to the driving distance information, real-time location information and map information of the vehicle-mounted device; A verification module, used for, when matching to the optimal node center, the vehicle-mounted device to determine whether it is consistent with the connected node center, if consistent, no operation is performed, if inconsistent, the vehicle-mounted device generates a verification key, and sends the verification key to the optimal node center to request identity verification; The encryption sending module is used for the vehicle-mounted device to encrypt the data information and send it to the optimal node center when the verification is passed.

4. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the key management method according to any one of claims 1 to 2 is implemented.

Images