Clustered secure computer platform

Abstract

The application relates to a cluster type safety computer platform, which is centrally deployed, can realize centralized maintenance and is favorable for improving system availability. The safety computer platform is deployed on a track side and does not need to bear the severe working environment of a vehicle-mounted device, is high in reliability and can adopt high-performance hardware, thus being favorable for realizing more intelligent functions. The safety computer units in the safety computer platform communicate based on a wired network, and compared with the wireless communication between a vehicle-mounted safety computer platform and a track-side safety computer platform in a traditional train control system, the wired communication is better in reliability. A master and standby database cluster is introduced, the statelessness of safety applications can be realized, data synchronization during master and standby switching of the safety applications is avoided, the switching speed is accelerated, and the consistency of data during the master and standby switching process is ensured. The large-scale safety computer cluster platform is realized, and the problems existing in real-time performance and determination of virtualization on the safety computer platform do not need to be faced.

Description

Technical Field

[0001] This disclosure relates to the field of urban rail transit technology, and in particular to a clustered security computer platform. Background Technology

[0002] In a CBTC (Communication-Based Train Control) system, both the trackside controller and the onboard controller include a safety computer platform. Typically, each line requires dozens to over 100 sets of safety computer platform equipment, which are distributed across trains (1-2 sets per train) and signal equipment rooms at various centralized stations (usually 2 sets per centralized station). This distributed installation hinders unified system operation and maintenance. Furthermore, the onboard safety platform equipment must withstand harsh operating environments (including high and low temperatures, high humidity, vibration, dust, and strong electromagnetic interference), and its power is limited, making it difficult to use high-performance hardware while achieving high reliability.

[0003] The invention patent with publication number CN113022657A, entitled "An Improved CBTC System for Clustered Safety Computer Platform and a Digital Rail Transit Train Control Method", discloses a clustered safety computer platform (CBTC) system that centrally or decentralizedly deploys the on-board controller safety computer platform and the trackside controller safety computer platform at the trackside. However, this solution does not involve the safety computer platform architecture deployed at the trackside. The traditional safety computer platform is directly deployed at the trackside, and only 1 to 2 sets can be deployed in a standard cabinet, which occupies a lot of space.

[0004] The invention patent CN110920696A, titled "A Clustered Security Computer Platform for Rail Transit Control System," discloses a clustered security computer platform architecture based on a cloud platform. This architecture utilizes a (commercial) server with multi-core processors and employs virtualization technology to isolate processor cores. Two cores from different processors form a voting unit, with redundancy between the two groups of voting units forming a 2x2oo2 security computer unit. This security computer unit is then bound to a security application. However, this solution does not clearly address how to avoid potential security vulnerabilities arising from multi-core processors, such as bus contention between multiple processor cores and data inconsistencies due to shared cache. Furthermore, when using a server with multi-core processors, the failure of one processor can cause multiple applications running on that processor to switch simultaneously, resulting in lower system reliability compared to security computer platforms based on independent hardware. Summary of the Invention

[0005] To address the aforementioned problems, this application proposes a cluster-based secure computer platform, comprising:

[0006] Primary application cluster;

[0007] Backup application cluster;

[0008] Primary database cluster;

[0009] Backup database cluster;

[0010] A power supply is provided to power the primary application cluster, the backup application cluster, the primary database cluster, and the backup database cluster.

[0011] in:

[0012] The primary application cluster, the backup application cluster, the primary database cluster, and the backup database cluster are all composed of several Security Computer Units (SCUs).

[0013] Both the primary application cluster and the backup application cluster are used to deploy security applications for the train control system.

[0014] Both the primary database cluster and the backup database cluster are used to deploy real-time databases and provide database services.

[0015] The primary application cluster, the backup application cluster, the primary database cluster, and the backup database cluster all communicate with each other via a dual-ring TSN.

[0016] As an optional embodiment of this application, the power source may optionally include:

[0017] Several power boards;

[0018] The Security Computer Units (SCUs) in the primary application cluster, backup application cluster, primary database cluster, and backup database cluster are all powered separately by the power board.

[0019] As an optional implementation of this application, the primary application cluster may optionally include:

[0020] First standard server rack;

[0021] Several first security computer units (SCUs) are deployed in the first standard rack;

[0022] Several first TSN switches deployed in the first standard cabinet;

[0023] The first secure computer unit (SCU) participates in TSN communication through the first TSN switch.

[0024] As an optional implementation of this application, the backup application cluster may optionally include:

[0025] Second standard server rack;

[0026] Several second security computer units (SCUs) are deployed in the second standard rack.

[0027] Several second TSN switches deployed in the second standard rack;

[0028] The second security computer unit (SCU) participates in TSN communication through the second TSN switch.

[0029] As an optional implementation of this application, the first security computer unit SCU and the second security computer unit SCU may be 2oo2 or 2oo3 structures.

[0030] As an optional implementation of this application, the first security computer unit (SCU) and the second security computer unit (SCU) may be hot-standby redundant to each other, and together form a 2x2oo2 or 2x2oo3 structure.

[0031] As an optional implementation of this application, the primary database cluster may optionally include:

[0032] Third standard server rack;

[0033] Several third security computer units (SCUs) are deployed in the third standard rack.

[0034] Several third TSN switches are deployed in the third standard cabinet; wherein, the third secure computer unit (SCU) is equipped with a real-time database (RTDB).

[0035] The third secure computer unit (SCU) participates in TSN communication through the third TSN switch.

[0036] As an optional implementation of this application, the backup database cluster may optionally include:

[0037] Fourth standard server rack;

[0038] Several fourth security computer units (SCUs) are deployed in the fourth standard rack;

[0039] Several fourth TSN switches are deployed in the fourth standard cabinet; wherein, the fourth security computer unit (SCU) is equipped with a real-time database (RTDB).

[0040] The fourth security computer unit (SCU) participates in TSN communication through the fourth TSN switch.

[0041] As an optional implementation of this application, the third security computer unit (SCU) and the fourth security computer unit (SCU) are mutually hot-standby redundancy, and together form a 2x2oo2 or 2x2oo3 structure.

[0042] As an optional implementation of this application, the real-time database RTDB may be configured as a static database or a dynamic database.

[0043] Technical effects of the present invention:

[0044] This application centrally deploys the safety computer platform, enabling centralized maintenance and improving system availability. Deploying the safety computer platform near the trackside eliminates the need to withstand the harsh operating environment of onboard equipment (power limitations, vibration, wide temperature range, high humidity, strong electromagnetic interference, dust, etc.), ensuring high reliability. It also allows for the use of high-performance hardware, facilitating the implementation of more intelligent functions. The safety computer units within the platform communicate via a wired network, offering better reliability compared to the wireless communication between onboard and trackside safety computer platforms in traditional train control systems. The introduction of primary and backup database clusters enables stateless operation of safety applications, avoiding data synchronization during primary / backup switching, accelerating the switching process while ensuring data consistency.

[0045] This technology enables large-scale secure computer cluster platforms without fundamentally altering the existing secure computer platform structure and design theory based on dedicated hardware, thus avoiding the challenges of virtualization in terms of real-time performance and determinism in secure computer platforms.

[0046] Other features and aspects of this disclosure will become clear from the following detailed description of exemplary embodiments with reference to the accompanying drawings. Attached Figure Description

[0047] The accompanying drawings, which are included in and form part of this specification, illustrate exemplary embodiments, features, and aspects of this disclosure together with the specification and serve to explain the principles of this disclosure.

[0048] Figure 1 The diagram shown illustrates the application components of the clustered secure computer platform of the present invention.

[0049] Figure 2 The diagram shows a typical rack configuration of the clustered secure computer platform of the present invention.

[0050] Figure 3 The diagram shows the structural composition of the 2oo2 SCU of the present invention;

[0051] Figure 4 The diagram shown is a schematic diagram of the composition structure of the 2oo3 SCU of the present invention. Detailed Implementation

[0052] Various exemplary embodiments, features, and aspects of this disclosure will now be described in detail with reference to the accompanying drawings. The same reference numerals in the drawings denote elements that have the same or similar functions. Although various aspects of the embodiments are shown in the drawings, they are not necessarily drawn to scale unless specifically indicated otherwise.

[0053] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate for the embodiments of this application described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0054] In this application, the terms "upper," "lower," "left," "right," "front," "rear," "top," "bottom," "inner," "outer," "middle," "vertical," "horizontal," "lateral," and "longitudinal" indicate the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings. These terms are primarily for the purpose of better describing this application and its embodiments, and are not intended to limit the indicated device, element, or component to having a specific orientation, or to be constructed and operated in a specific orientation.

[0055] Furthermore, in addition to indicating location or positional relationship, some of the aforementioned terms may also have other meanings. For example, the term "above" may also be used in some cases to indicate a certain dependency or connection relationship. Those skilled in the art can understand the specific meaning of these terms in this application based on the specific circumstances.

[0056] In addition, the term "multiple" should mean two or more.

[0057] The term “exemplary” as used herein means “serving as an example, embodiment, or illustration.” Any embodiment illustrated herein as “exemplary” is not necessarily to be construed as superior to or better than other embodiments.

[0058] Furthermore, to better illustrate this disclosure, numerous specific details are set forth in the following detailed description. Those skilled in the art will understand that this disclosure can be practiced without certain specific details. In some instances, methods, means, components, and circuits well known to those skilled in the art have not been described in detail in order to highlight the main points of this disclosure.

[0059] In this embodiment, the deployment of security applications for the train control system will be left to the user to deploy, and this embodiment does not impose any restrictions.

[0060] Furthermore, there are no requirements regarding the database format, hardware model, specifications, etc. The number of cluster racks and the number of SCUs and RTDBs within each rack can be configured as needed.

[0061] Example 1

[0062] A clustered secure computer platform, comprising:

[0063] Primary application cluster;

[0064] Backup application cluster;

[0065] Primary database cluster;

[0066] Backup database cluster;

[0067] A power supply is provided to power the primary application cluster, the backup application cluster, the primary database cluster, and the backup database cluster.

[0068] in:

[0069] The primary application cluster, the backup application cluster, the pig sample database cluster, and the backup database cluster are all composed of several Security Computer Units (SCUs).

[0070] Both the primary application cluster and the backup application cluster are used to deploy security applications for the train control system.

[0071] Both the primary database cluster and the backup database cluster are used to deploy real-time databases and provide database services.

[0072] The primary application cluster, the backup application cluster, the primary database cluster, and the backup database cluster all communicate with each other through a dual-ring TSN (Time-Sensitive Network).

[0073] like Figure 1 As shown,

[0074] As an optional embodiment of this application, the power source may optionally include:

[0075] Several power boards;

[0076] The Security Computer Units (SCUs) in the primary application cluster, backup application cluster, primary database cluster, and backup database cluster are all powered separately by the power board.

[0077] The clustered security computer platform consists of independent miniaturized security computer units (SCUs) deployed in standard racks. Each SCU can be configured with two computing boards (2oo2, 2-out-of-2) or three computing boards (2oo3, 2-out-of-3), with each computing board powered by an independent power supply board. Schematic diagrams of the 2oo2 (2-out-of-2) or 2oo3 (2-out-of-3) configurations can be found in the appendix. Figure 3 and 4 As shown.

[0078] The Security Computer Units (SCUs) in the security computer cluster are divided into a primary application cluster and a backup application cluster. Each security computer unit in the primary application cluster and its corresponding security computer unit in the backup application cluster are hot-standby for each other, forming a 2x2oo2 (two out of two) or 2x2oo3 (two out of three) structure.

[0079] The primary application cluster and the backup application cluster are used to deploy security applications in the train control system, including but not limited to interlocking, ZC (area controller), RMC (resource manager), etc.

[0080] The secure computer cluster also includes a shared primary database cluster and a backup database cluster. The primary and backup database clusters can use secure computer units (SCUs) that are homogeneous or heterogeneous with the primary and backup application clusters.

[0081] Both the primary database cluster and the backup database cluster are real-time databases deployed in secure computer units. The database systems in the primary and backup database clusters only serve the secure computer units within the primary and backup application clusters, and output query results strictly according to the query request order within a defined time delay range.

[0082] The security computing unit that installs the real-time database in the primary database cluster and the corresponding security computing unit that installs the real-time database in the backup database cluster are hot-standby redundant to each other.

[0083] The real-time databases in the primary and standby database clusters can be configured as static or dynamic databases as needed.

[0084] The secure computer units within the primary application cluster, backup application cluster, primary database cluster, and backup database cluster communicate with each other via a dual-ring TSN.

[0085] like Figure 1As shown, the primary database cluster and the standby database cluster are mutually redundant with hot standby, as are the primary application cluster and the standby application cluster. They communicate and exchange data through a dual-ring TSN. This enables stateless security applications, avoids data synchronization during primary / standby failover, speeds up the failover process, and ensures data consistency during the failover.

[0086] Example 2

[0087] Combined with appendix Figure 2 The diagram shown is a typical rack configuration diagram of a clustered security computer platform.

[0088] As an optional implementation of this application, the primary application cluster may optionally include:

[0089] First standard server rack;

[0090] Several first security computer units (SCUs) are deployed in the first standard rack;

[0091] Several first TSN switches deployed in the first standard cabinet;

[0092] The first secure computer unit (SCU) participates in TSN communication through the first TSN switch.

[0093] As an optional implementation of this application, the backup application cluster may optionally include:

[0094] Second standard server rack;

[0095] Several second security computer units (SCUs) are deployed in the second standard rack.

[0096] Several second TSN switches deployed in the second standard rack;

[0097] The second security computer unit (SCU) participates in TSN communication through the second TSN switch.

[0098] As an optional implementation of this application, the first security computer unit SCU and the second security computer unit SCU may be 2oo2 or 2oo3 structures.

[0099] As an optional implementation of this application, the first security computer unit (SCU) and the second security computer unit (SCU) may be hot-standby redundant to each other, and together form a 2x2oo2 or 2x2oo3 structure.

[0100] As an optional implementation of this application, the primary database cluster may optionally include:

[0101] Third standard server rack;

[0102] Several third security computer units (SCUs) are deployed in the third standard rack.

[0103] Several third TSN switches are deployed in the third standard cabinet; wherein, the third secure computer unit (SCU) is equipped with a real-time database (RTDB).

[0104] The third secure computer unit (SCU) participates in TSN communication through the third TSN switch.

[0105] As an optional implementation of this application, the backup database cluster may optionally include:

[0106] Fourth standard server rack;

[0107] Several fourth security computer units (SCUs) are deployed in the fourth standard rack;

[0108] Several fourth TSN switches are deployed in the fourth standard cabinet; wherein, the fourth security computer unit (SCU) is equipped with a real-time database (RTDB).

[0109] The fourth security computer unit (SCU) participates in TSN communication through the fourth TSN switch.

[0110] As an optional implementation of this application, the third security computer unit (SCU) and the fourth security computer unit (SCU) are mutually hot-standby redundancy, and together form a 2x2oo2 or 2x2oo3 structure.

[0111] As an optional implementation of this application, the real-time database RTDB may be configured as a static database or a dynamic database.

[0112] The clustered security computer platform mainly consists of four racks: a primary application cluster, a backup application cluster, a primary database cluster, and a backup database cluster. Each rack contains two TSN switches. The primary and backup application cluster racks contain a certain number of SCUs as needed. The primary and backup database cluster racks contain a certain number of dynamic RTDBs and static RTDBs as needed. The number of racks and the number of SCUs and RTDBs within each rack can be configured as required.

[0113] Typical SCU structures with 2oo2 and 2oo3 structures are as follows: Figure 3 , Figure 4 As shown.

[0114] SCUs typically adopt a CPCI architecture. In the 2oo2 and 2oo3 architectures, each chassis contains 2 or 3 compute boards and 2 network switching boards, with each compute board powered by an independent power supply board.

[0115] The primary application cluster and the backup application cluster consist of miniaturized Safety Computer Units (SCUs) deployed in standard racks.

[0116] The primary and backup database clusters include an SCU containing an RTDB (Real-Time Database) with a real-time database installed.

[0117] The SCUs in the primary and standby application clusters and the SCUs in the primary and standby database clusters have RTDB installed, and they communicate with each other through a dual-ring TSN.

[0118] The safety computer units within the safety computer platform communicate via a wired network, which offers better reliability compared to the wireless communication between the onboard and trackside safety computer platforms in traditional train control systems.

[0119] The specific application of the above structure is not limited in this embodiment.

[0120] Therefore, by introducing a primary application cluster and a backup application cluster, as well as a primary and backup database cluster, this application can achieve statelessness of security applications, avoid data synchronization during primary-backup switching of security applications, speed up the switching process, and ensure data consistency during the primary-backup switching process.

[0121] It should be noted that although the above SCU deployment modes are illustrated using 2x2oo2 (two out of two) or 2x2oo3 (two out of three) structures as examples, those skilled in the art will understand that this disclosure is not limited to these. In fact, users can flexibly configure the SCU architecture according to their actual application scenarios, as long as the technical functions of this application can be implemented according to the above technical methods.

[0122] The various embodiments of this disclosure have been described above. These descriptions are exemplary and not exhaustive, and are not limited to the disclosed embodiments. Many modifications and variations will be apparent to those skilled in the art without departing from the scope and spirit of the described embodiments. The terminology used herein is chosen to best explain the principles, practical applications, or technical improvements to the technology in the market, or to enable others skilled in the art to understand the embodiments disclosed herein.

Claims

1. A clustered secure computer platform, characterized in that, include: The primary application cluster includes: a first standard rack; several first secure computer units (SCUs) deployed in the first standard rack; several first TSN switches deployed in the first standard rack; the first secure computer units (SCUs) participate in TSN communication through the first TSN switches; Backup application cluster; Primary database cluster; Backup database cluster; A power supply is provided to power the primary application cluster, the backup application cluster, the primary database cluster, and the backup database cluster. in: The primary application cluster, the backup application cluster, the primary database cluster, and the backup database cluster are all composed of several Security Computer Units (SCUs). Both the primary application cluster and the backup application cluster are used to deploy security applications for the train control system. Both the primary database cluster and the backup database cluster are used to deploy real-time databases and provide database services. The primary application cluster, the backup application cluster, the primary database cluster, and the backup database cluster all communicate with each other via a dual-ring TSN.

2. The clustered secure computer platform according to claim 1, characterized in that, The power source includes: Several power boards; The Security Computer Units (SCUs) in the primary application cluster, backup application cluster, primary database cluster, and backup database cluster are all powered separately by the power board.

3. The clustered secure computer platform according to claim 1, characterized in that, The backup application cluster includes: Second standard server rack; Several second security computer units (SCUs) are deployed in the second standard rack. Several second TSN switches deployed in the second standard rack; The second security computer unit (SCU) participates in TSN communication through the second TSN switch.

4. The clustered secure computer platform according to claim 3, characterized in that, Both the first security computer unit (SCU) and the second security computer unit (SCU) have a 2oo2 or 2oo3 structure.

5. The clustered secure computer platform according to claim 3, characterized in that, The first security computer unit (SCU) and the second security computer unit (SCU) are hot-standby redundancies for each other, and together they form a 2x2oo2 or 2x2oo3 structure.

6. The clustered secure computer platform according to claim 1, characterized in that, The primary database cluster includes: Third standard server rack; Several third security computer units (SCUs) are deployed in the third standard rack. Several third TSN switches are deployed in the third standard cabinet; wherein, the third secure computer unit (SCU) is equipped with a real-time database (RTDB). The third secure computer unit (SCU) participates in TSN communication through the third TSN switch.

7. The clustered secure computer platform according to claim 6, characterized in that, The backup database cluster includes: Fourth standard server rack; Several fourth security computer units (SCUs) are deployed in the fourth standard rack; Several fourth TSN switches are deployed in the fourth standard cabinet; wherein, the fourth security computer unit (SCU) is equipped with a real-time database (RTDB). The fourth security computer unit (SCU) participates in TSN communication through the fourth TSN switch.

8. The clustered secure computer platform according to claim 7, characterized in that, The third and fourth security computer units (SCUs) are hot-standby redundancies for each other, together forming a 2x2oo2 or 2x2oo3 structure.

9. The clustered secure computer platform according to claim 7, characterized in that, The real-time database (RTDB) is configured as either a static or dynamic database.

Images