Security cloud platform system based on coding and time service terminal and time service method

Abstract

The application relates to a secure cloud platform system and a time service method based on a coding and time service terminal, the system comprising a time service terminal and a cloud platform, the time service terminal transmitting coded time service timestamp information to the cloud platform, so that the time service terminal provides accurate time service for the cloud platform; the cloud platform internally generates time checking words according to the received time service timestamp, and provides the time checking words to an upper-layer application for security processing. Compared with the prior art, the application adopts a time service mode of a secure time service terminal to replace a traditional timing mode in the cloud platform, and has the advantages of avoiding systematic failure and random failure possibly caused by the timing in the cloud platform.

Description

Technical Field

[0001] This invention relates to a secure cloud platform system, and more particularly to a secure cloud platform system and timing method based on encoding (NISAL technology) and timing terminal. Background Technology

[0002] In recent years, with the development of cloud computing technology, cloud platforms have been widely applied to various industries. Due to their high scalability and flexibility, cloud platforms have begun to be used in non-safety system subsystems in the urban rail transit industry, such as integrated monitoring systems and automatic train monitoring systems. However, for embedded signaling systems with high real-time and safety requirements in the urban rail transit industry, this remains a gap; the industry is researching and promoting solutions that use cloud platforms to replace dedicated embedded systems. Safety-critical equipment in the industry (such as interlocking, train control, wireless block centers, temporary speed limit servers, area controllers, and line controllers) is based on either coded or non-coded solution platforms. Coded solutions have lower hardware requirements than non-coded solutions, but their R&D and application have higher technical barriers, and it is difficult to quickly cultivate a skilled workforce. For future secure cloud platform solutions, ensuring the timeliness of the system is a crucial issue.

[0003] Currently, one solution for timeliness verification in cloud platform systems is to have the cloud platform application system periodically generate timestamps, and then output these timestamps to the remote system (usually a security system) via a secure communication protocol to verify their timeliness. For example, suppose a control system consists of system A (a cloud platform virtual machine implementing logical operations) and system B (a terminal I / O real-time security system). Specifically, the communication message body between systems A and B includes timestamps from both sides. System B then compares its previous timestamp in the received message with its current timestamp to calculate the time difference and determine if the data sent by system A is timely. However, this existing approach only allows cloud platform timeliness verification at the application communication cycle level, failing to achieve more precise security timing, and the cloud platform application system cannot self-verify timeliness and perform security processing. Summary of the Invention

[0004] The purpose of this invention is to overcome the shortcomings of the existing technology and provide a secure cloud platform system and timing method based on encoding and timing terminals.

[0005] The objective of this invention can be achieved through the following technical solutions:

[0006] According to a first aspect of the present invention, a secure cloud platform system based on an encoding and timing terminal is provided, comprising a timing terminal and a cloud platform. The timing terminal transmits encoded timing timestamp information to the cloud platform, thereby enabling the timing terminal to provide accurate secure timing services to the cloud platform. The cloud platform internally generates time verification words periodically based on the received timing timestamps, and provides them to upper-layer applications for security processing, enabling the system to meet fault-oriented security design requirements.

[0007] As a preferred technical solution, the timing terminal communicates with the cloud platform via a network, high-speed serial port, CAN port, or PCI bus.

[0008] As a preferred technical solution, the timing terminal operates in two states: initialization state and timing service state.

[0009] As a preferred technical solution, the timing terminal adopts a real-time embedded system, and the timing interval is configured according to the application needs of the cloud platform system and the communication performance between the cloud platform system and the timing terminal.

[0010] According to a second aspect of the present invention, a time synchronization method is provided using the aforementioned secure cloud platform system based on encoding and timing terminals, the method comprising the following steps:

[0011] In step S101, when the timing terminal is in the initialization state, it continuously waits for the cloud platform to send the initial timing request message. After receiving the dual-channel initial timing request and verifying that it passes the verification, it enters the timing service state.

[0012] Step S102: After the internal dual-channel synchronization of the cloud platform is completed, both channels send an initial timing request message to the timing terminal.

[0013] Step S103: After the time synchronization terminal enters the time synchronization service state, it periodically generates two sets of coded timestamps.

[0014] Step S104: The time synchronization terminal opens a time window and accepts time synchronization requests from cloud platform channel 1 and channel 2; after receiving the request, it sends the encoded timestamp to the corresponding channel of the cloud platform.

[0015] Step S105: When the cloud platform receives the encoded timestamp, it replies with a response code;

[0016] If the timing terminal receives the correct response code from the cloud platform's dual channels within the time window, the timing terminal will continue to maintain the timing service state; otherwise, the timing terminal will switch to the initialization state and return to step S101.

[0017] In step S107, the cloud platform exchanges the timestamps received by each channel and performs a synchronization check on the timestamps. If the timestamps of the two channels are not synchronized, the application system is notified to perform security processing, and then the process returns to step S102; if they are synchronized, step S108 is executed.

[0018] In step S108, the cloud platform calculates the time verification word for the dual channels and provides it to the upper-layer application.

[0019] As a preferred technical solution, the dual-channel timing initial request messages in steps S101 and S102 are two different sets of feature value sequences.

[0020] As a preferred technical solution, the timestamp encoded in step S103 is a pseudo-random number sequence.

[0021] As a preferred technical solution, the time window in step S104 is configured based on the communication time performance between the cloud platform and the timing terminal, as well as the allowable error in timing.

[0022] As a preferred technical solution, the response code in step S105 is a set of codes that cycle through N periods, and is generated by changing the agreed code value each period by setting an offset and an offset increment.

[0023] As a preferred technical solution, N is 32.

[0024] As a preferred technical solution, the time verification word in step S108 can be used not only for the verification domain between the cloud platform and external communication, but also for the self-checking of the timing within the cloud platform.

[0025] According to a third aspect of the present invention, an electronic device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the program to implement the method described thereon.

[0026] According to a fourth aspect of the present invention, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, implements the method described thereon.

[0027] Compared with the prior art, the present invention has the following advantages:

[0028] (1) The present invention uses a secure timing terminal to replace the traditional timing method inside the cloud platform, thereby avoiding the systemic failure that may occur due to the timing inside the cloud platform.

[0029] (2) The time stamp of this invention is an encoded timestamp, which avoids random failures during transmission;

[0030] (3) The secure timing terminal of the present invention adopts coding technology, which has real-time requirements for hardware, but no security requirements, and the range of hardware selection is relatively wide.

[0031] (4) The time interval of the present invention can be configured according to actual needs;

[0032] (5) The communication time window between the timing terminal of this invention and the cloud platform can be configured according to the allowable tolerance range;

[0033] (6) The dual-channel timestamps of this invention can be mutually verified; the generated verification word can be used for upper-layer application verification, which improves the security of the system. Attached Figure Description

[0034] Figure 1 This is a schematic diagram of the software flow of the cloud platform of the present invention;

[0035] Figure 2 This is a schematic diagram of the software flow of the timing terminal of the present invention;

[0036] Figure 3 This is a schematic diagram of the system of the present invention. Detailed Implementation

[0037] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0038] The method of the present invention includes the following steps:

[0039] (1) The operation of the time synchronization terminal is divided into two operating states: initialization state and time synchronization service state;

[0040] (2) When the timing terminal is in the initialization state, it continuously waits for the cloud platform to send the timing initial request message. After receiving the dual-channel initial timing request and verifying that it passes the verification, it enters the timing service state.

[0041] (3) After the internal dual-channel synchronization of the cloud platform is completed, both channels send an initial timing request message to the timing terminal;

[0042] (4) After the time synchronization terminal enters the time synchronization service state, it generates two sets of coded timestamps at regular intervals;

[0043] (5) The time synchronization terminal opens the time window and accepts time synchronization requests from cloud platform channel 1 and channel 2; after receiving the request, it sends the encoded timestamp to the corresponding channel of the cloud platform;

[0044] (6) When the cloud platform receives the encoded timestamp, it replies with a response code; the response code is a set of codes that cycle through N periods to prevent the response code from being incorrectly fixed.

[0045] (7) If the timing terminal receives the correct response code from the cloud platform's dual channels within the time window, the timing terminal will continue to maintain the timing service state; otherwise, the timing terminal will switch to the initialization state of (1).

[0046] (8) The cloud platform interacts with each other through two channels to receive the timestamps and performs a synchronization check on the timestamps. If the timestamps of the two channels are not synchronized, the application system is notified to perform security processing, and then the process returns to step (3).

[0047] (9) The cloud platform computes the time verification word of the dual channels and provides it to the upper layer application.

[0048] The above steps also include the following characteristics:

[0049] In step (1), the timing terminal adopts a real-time embedded system to ensure real-time performance and reliability; the timing interval can be configured according to the application needs of the cloud platform system and the communication performance between the cloud platform system and the timing system.

[0050] The dual-channel timing initial request messages in steps (2) and (3) are two different sets of feature value sequences;

[0051] In step (4), the timestamp is encoded as a pseudo-random number sequence to ensure that the probability of the randomness failing and causing the dual channels to generate a valid timestamp is extremely low.

[0052] In step (5), the time window is configured based on the communication time performance between the cloud platform system and the time synchronization system, as well as the allowable error in time synchronization.

[0053] In step (6), a set of codes with 32 cycles is generated by changing the code value each cycle by setting an offset and an offset increment.

[0054] The time verification word in step (9) can be used not only for the verification domain between the cloud platform and external communication, but also for the self-check of the timing within the cloud platform.

[0055] Figure 1 and Figure 2 This invention provides a specific process for a cloud platform secure time synchronization scheme based on encoding, completing secure time synchronization from the time synchronization terminal to the cloud platform, combined with... Figure 1 and Figure 2 The following synchronization control steps are described in detail:

[0056] This invention provides a time synchronization method using the aforementioned secure cloud platform system based on encoding and timing terminals, the method comprising the following steps:

[0057] In step seq1, in this embodiment, channel 1 sends the feature value sequence as 0xAAAAAAAA, 0x12345678, 0xFFFFFFF; channel 2 sends the feature value sequence as 0xBBBBBBBB, 0x87654321, 0xEEEEEEEE.

[0058] In step seq2, the timing terminal is set to 18 milliseconds, and the time window is 4 milliseconds (18 milliseconds-22 milliseconds); the timing interval of the matching cloud platform is configured to 20 milliseconds, and the time tolerance range is ±2 milliseconds;

[0059] In step seq3, the cloud platform dual-channel timing is configured to 20ms. Channel 1 sends a request for timing, with the request message type 0x55 and the message content consisting of 5 bytes, including a 1-byte channel flag (0xAA for 1, 0xBB for 2) and a 4-byte timestamp count (0x0~0xFFFFFFFF).

[0060] In step seq4, it is determined whether a request message has been received. Based on the received request, a timestamp is replied to different channels. Here, the dual-channel timestamp pseudo-random number sequence is implemented using the LFSR algorithm. In this embodiment, the initial values ​​of the dual channels are 0x12340234 and 0x87654321, respectively, and the seed is 0x0B7A7124.

[0061] In step seq5, the response code for channel 1 is 0x01F6FB3B, and the response code for channel 2 is 0xF9F6F33B; the lower 2 bytes of the offset are 0xA8A0+N*0x8A0, and the higher 2 bytes are (lower 2 bytes)+N*0xA0; where N takes the value [0,31].

[0062] In step seq6, the correctness of the response code is verified according to a similar rule to seq5;

[0063] In step seq7, the time check word for channel 1 is F1F6EB3B; the time check word for channel 2 is E9F6E33B; these two check words can be used by upper-layer applications.

[0064] The above is an introduction to the method embodiments. The following system embodiments will further illustrate the solution of the present invention.

[0065] like Figure 3 As shown, the present invention comprises a cloud platform, a timing terminal, and remote I / O devices 1 to N, which communicate with each other via a network.

[0066] The timing within the cloud platform is not generated by the platform itself, but rather provided by the timing terminal. The timing terminal provides coded timestamps, which on the one hand prevents abnormal timestamp jumps caused by random failures, and on the other hand allows multiple channels of timestamps to cross-verify each other.

[0067] This invention takes a dual-channel secure time synchronization system of a 2-out-of-2 application system on a cloud platform as an example, where the two channels are referred to as Channel 1 and Channel 2. For a 3-out-of-2 system, an additional set of timestamps can be added in the same way.

[0068] The present invention enables the timing terminal and the cloud platform to transmit encoded timestamp information through network (or high-speed serial port, CAN port, PCI bus, etc.) communication, so that the timing terminal can provide accurate timing services to the cloud platform; at the same time, the cloud platform system can generate time verification words according to the timing timestamp at regular intervals, and provide them to the upper layer applications for security processing.

[0069] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working process of the described module can be referred to the corresponding process in the foregoing method embodiments, and will not be repeated here.

[0070] The electronic device of this invention includes a central processing unit (CPU), which can perform various appropriate actions and processes according to computer program instructions stored in read-only memory (ROM) or loaded from a storage unit into random access memory (RAM). The RAM may also store various programs and data required for device operation. The CPU, ROM, and RAM are interconnected via a bus. Input / output (I / O) interfaces are also connected to the bus.

[0071] Multiple components in the device are connected to the I / O interface, including: input units such as keyboards and mice; output units such as various types of displays and speakers; storage units such as disks and optical discs; and communication units such as network interface cards (NICs), modems, and wireless transceivers. The communication unit allows the device to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.

[0072] The processing unit executes the various methods and processes described above, such as methods S101 to S108. For example, in some embodiments, methods S101 to S108 may be implemented as computer software programs tangibly contained in a machine-readable medium, such as a storage unit. In some embodiments, part or all of the computer program may be loaded and / or installed on the device via ROM and / or a communication unit. When the computer program is loaded into RAM and executed by the CPU, one or more steps of methods S101 to S108 described above may be performed. Alternatively, in other embodiments, the CPU may be configured to execute methods S101 to S108 by any other suitable means (e.g., by means of firmware).

[0073] The functions described above in this document can be performed, at least in part, by one or more hardware logic components. For example, exemplary types of hardware logic components that can be used, without limitation, include: Field Programmable Gate Arrays (FPGAs), Application-Specific Integrated Circuits (ASICs), Application Standard Products (ASSPs), System-on-Chip (SoCs), Complex Programmable Logic Devices (CPLDs), and so on.

[0074] The program code used to implement the methods of the present invention can be written in any combination of one or more programming languages. This program code can be provided to a processor or controller of a general-purpose computer, special-purpose computer, or other programmable data processing device, such that when executed by the processor or controller, the program code causes the functions / operations specified in the flowcharts and / or block diagrams to be implemented. The program code can be executed entirely on the machine, partially on the machine, as a standalone software package partially on the machine and partially on a remote machine, or entirely on a remote machine or server.

[0075] In the context of this invention, a machine-readable medium can be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, apparatus, or device. A machine-readable medium can be a machine-readable signal medium or a machine-readable storage medium. Machine-readable media can include, but are not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0076] The above description is merely a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in the present invention, and these modifications or substitutions should all be covered within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A time synchronization method using a secure cloud platform system based on encoding and time synchronization terminals, characterized in that, The system includes a timing terminal and a cloud platform. The timing terminal transmits encoded timing timestamp information to the cloud platform, enabling the timing terminal to provide accurate and secure timing services to the cloud platform. The cloud platform internally generates time verification words based on the received timing timestamps at regular intervals, which are provided to upper-layer applications for security processing, enabling the system to meet fault-oriented security design requirements. The time synchronization method includes the following steps: In step S101, when the timing terminal is in the initialization state, it continuously waits for the cloud platform to send the timing initial request message. After receiving the dual-channel initial timing request and verifying it, it enters the timing service state. Step S102: After the internal dual-channel synchronization of the cloud platform is completed, both channels send an initial timing request message to the timing terminal. Step S103: After the time synchronization terminal enters the time synchronization service state, it periodically generates two sets of coded timestamps. Step S104: The time synchronization terminal opens a time window and accepts time synchronization requests from cloud platform channel 1 and channel 2; after receiving the request, it sends the encoded timestamp to the corresponding channel of the cloud platform. Step S105: When the cloud platform receives the encoded timestamp, it replies with a response code; If the timing terminal receives the correct response code from the cloud platform's dual channels within the time window, the timing terminal will continue to maintain the timing service state; otherwise, the timing terminal will switch to the initialization state and return to step S101. In step S107, the cloud platform exchanges the timestamps received by each channel and performs a synchronization check on the timestamps. If the timestamps of the two channels are not synchronized, the application system is notified to perform security processing, and then the process returns to step S102; if they are synchronized, step S108 is executed. In step S108, the cloud platform calculates the time verification word for the dual channels and provides it to the upper-layer application.

2. The time synchronization method according to claim 1, characterized in that, The timing terminal communicates with the cloud platform via network, high-speed serial port, CAN port or PCI bus.

3. The time synchronization method according to claim 1, characterized in that, The timing terminal operates in two states: initialization state and timing service state.

4. The time synchronization method according to claim 3, characterized in that, The timing terminal adopts a real-time embedded system, and the timing interval is configured according to the application needs of the cloud platform system and the communication performance between the cloud platform system and the timing terminal.

5. The time synchronization method according to claim 1, characterized in that, The dual-channel timing initial request messages in steps S101 and S102 are two different sets of feature value sequences.

6. The time synchronization method according to claim 1, characterized in that, The timestamp encoded in step S103 is a pseudo-random number sequence.

7. The time synchronization method according to claim 1, characterized in that, The time window in step S104 is configured based on the communication time performance between the cloud platform and the timing terminal, as well as the allowable error in timing.

8. The time synchronization method according to claim 1, characterized in that, The response code in step S105 is a set of codes that cycle through N periods. The code value is generated by changing the offset and offset increment in each period according to a pre-defined code value.

9. The time synchronization method according to claim 8, characterized in that, The value of N is 32.

10. The time synchronization method according to claim 1, characterized in that, The time verification word in step S108 can be used not only for the verification domain between the cloud platform and external communication, but also for the self-checking of the timing within the cloud platform.

11. An electronic device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the program, it implements the method as described in any one of claims 1 to 10.

12. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the program is executed by the processor, it implements the method as described in any one of claims 1 to 10.

Images