Deployment methods and systems of CBTC systems on cloud platforms

Abstract

This invention provides a method and system for deploying a CBTC system on a cloud platform. The method includes: considering the redundancy architecture, resource, and cost constraints of the CBTC system, providing a deployment scheme for each subsystem of the traditional CBTC system on the cloud platform; calculating the reliability and security indicators of the cloud-based CBTC system based on the deployment scheme; and deploying the CBTC system to the cloud platform when the reliability, security, and deployment costs of the cloud-based CBTC system all meet corresponding preset conditions. If at least one of the reliability, security, and deployment costs of the CBTC system does not meet the corresponding preset conditions, selecting some subsystems to deploy to the cloud platform, so that the overall reliability, security, and deployment cost of the cloud-based CBTC system then meet the corresponding preset conditions. This invention provides a more flexible and economical CBTC system deployment scheme while ensuring driving safety.

Description

Technical Field

[0001] This invention relates to the field of rail communication technology, and in particular to a method and system for deploying a CBTC system on a cloud platform. Background Technology

[0002] CBTC (Communication Based Train Control System) is a continuously automatic train control system that utilizes high-precision train positioning, two-way high-capacity vehicle-to-ground communication, onboard and safety computers, and is widely used in urban rail transit. However, with the continuous development of urban rail transit, CBTC systems face challenges such as high construction and maintenance costs, low equipment resource utilization, high energy consumption, difficulties in upgrading and retrofitting, low levels of software and hardware compatibility and standardization, and incomplete data sharing.

[0003] A cloud computing platform is a physical service platform that utilizes the cloud computing model to provide services to users; it is often simply called a cloud platform. Cloud platforms are characterized by their versatility, large scale, high scalability, high availability, and on-demand service. Building a CBTC system using a cloud platform enables unified management and maintenance of CBTC system resources, reducing the complexity of project implementation and operation. Therefore, migrating CBTC systems to the cloud is a development trend for urban rail transit.

[0004] However, the reliability and security of deploying CBTC systems on cloud platforms are currently difficult to guarantee. Therefore, how to improve the reliability and security of deploying CBTC systems on cloud platforms is an important issue that the industry urgently needs to address. Summary of the Invention

[0005] This invention provides a method and system for deploying a CBTC system on a cloud platform, which addresses the shortcomings of existing technologies in ensuring the reliability and security of CBTC systems deployed on cloud platforms. It enables accurate calculation of the reliability and security of CBTC systems built on cloud platforms, thereby ensuring the reliability and security of CBTC systems built on cloud platforms.

[0006] This invention provides a method for deploying a CBTC system on a cloud platform, comprising:

[0007] Based on the service chain of each subsystem of the CBTC system in the cluster to be deployed on the cloud platform, determine the reliability and security indicators of the CBTC system.

[0008] If the reliability indicators, security indicators, and deployment costs of the CBTC system all meet the corresponding preset conditions, the CBTC system will be deployed to the cloud platform.

[0009] If at least one of the reliability indicators, security indicators, and deployment costs of the CBTC system fails to meet the corresponding preset conditions, a portion of the subsystems in the CBTC system are selected and deployed to the cloud platform, while another portion of the subsystems in the CBTC system are deployed on the ground, so that the total reliability indicators, total security indicators, and total deployment costs of the selected and other subsystems meet the corresponding preset conditions.

[0010] The preset condition for the reliability index is that the reliability index is greater than a first preset threshold, the preset condition for the security index is that the security index is greater than a second preset threshold, and the preset condition for the deployment cost is that the deployment cost is less than a third preset threshold.

[0011] According to a method for deploying a CBTC system on a cloud platform provided by the present invention, the step of selecting a portion of subsystems from the CBTC system to deploy to the cloud platform includes:

[0012] Based on the security integrity level of the subsystem, the reliability level of the redundancy structure adopted by the subsystem, or the security level of the redundancy structure adopted by the subsystem, a portion of the subsystems are selected from the CBTC system and deployed to the cloud platform.

[0013] According to a method for deploying a CBTC system on a cloud platform provided by the present invention, the step of selecting a portion of subsystems from the CBTC system to be deployed to the cloud platform based on the security integrity level of the subsystem, the reliability level of the redundancy structure adopted by the subsystem, or the security level of the redundancy structure adopted by the subsystem includes:

[0014] Deploy subsystems in the CBTC system with a security integrity level lower than the first preset level to the cloud platform; or

[0015] Deploy subsystems in the CBTC system with a reliability level greater than the second preset level of redundant structures to the cloud platform; or

[0016] Subsystems with a security level greater than the third preset level of the redundant structure in the CBTC system are deployed to the cloud platform.

[0017] According to the present invention, a method for deploying a CBTC system on a cloud platform is provided, wherein the cluster to be deployed of the CI subsystem, ZC subsystem and ATS subsystem of the CBTC system is a computing cluster, and the cluster to be deployed of the DSU subsystem of the CBTC system is a storage cluster.

[0018] The determination of the reliability and security metrics of the CBTC system based on the service chain of each subsystem in the cluster to be deployed on the cloud platform includes:

[0019] Determine the total failure rate of the service chain of the CBTC system located on the cloud platform under the computing cluster, the storage cluster, the management cluster and the network cluster on the cloud platform;

[0020] The redundancy unit failure rate of the CBTC system is determined based on the total failure rate and the migration success rate of the CBTC system on the cloud platform.

[0021] Based on the failure rate of the redundant units, the reliability and security indicators of the CBTC system are determined.

[0022] According to a method for deploying a CBTC system on a cloud platform provided by the present invention, the step of determining the total failure rate of the service chain of the CBTC system located on the cloud platform under the computing cluster, the storage cluster, the management cluster and the network cluster on the cloud platform includes:

[0023] Based on the probability of normal operation of the virtual software, virtual hardware, physical machines, and network equipment components to be deployed in the computing cluster and the number of physical machines and network equipment connections to be deployed in the cloud platform by the CBTC system, the failure rate of the service chain in the computing cluster under multiple network transmission paths is determined.

[0024] Based on the failure rate of the service chains within the computing cluster under multiple network transmission paths, the failure rates of the service chains within the management cluster, the network cluster, and the storage cluster under multiple network transmission paths are determined respectively.

[0025] The total failure rate is determined based on the failure rates of the service chains within the computing cluster, the management cluster, the network cluster, and the storage cluster across multiple network transmission paths.

[0026] According to a method for deploying a CBTC system on a cloud platform provided by the present invention, in the computing cluster, virtual machines with different functions are deployed on the same physical machine, and virtual machines with the same function are deployed on different physical machines.

[0027] According to the present invention, a method for deploying a CBTC system on a cloud platform is provided, wherein the physical machines in the management cluster, the network cluster, and the storage cluster are redundant.

[0028] This invention also provides a deployment system for a CBTC system on a cloud platform, comprising:

[0029] The module determines the reliability and security metrics of the CBTC system based on the service chains of each subsystem of the CBTC system in the cluster to be deployed on the cloud platform.

[0030] The deployment module is used to deploy the CBTC system to the cloud platform when the reliability indicators, security indicators, and deployment costs of the CBTC system all meet the corresponding preset conditions; and when at least one of the reliability indicators, security indicators, and deployment costs of the CBTC system does not meet the corresponding preset conditions, it selects a portion of the subsystems from the CBTC system to deploy to the cloud platform and deploys another portion of the subsystems from the CBTC system on the ground, so that the total reliability indicators, total security indicators, and total deployment costs of the selected portion of the subsystems and the other portion of the subsystems meet the corresponding preset conditions.

[0031] The preset condition for the reliability index is that the reliability index is greater than a first preset threshold, the preset condition for the security index is that the security index is greater than a second preset threshold, and the preset condition for the deployment cost is that the deployment cost is less than a third preset threshold.

[0032] The present invention also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the deployment method of the CBTC system on a cloud platform as described above.

[0033] The present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the deployment method of the CBTC system on a cloud platform as described above.

[0034] The CBTC system deployment method on a cloud platform provided by this invention determines the service chain of each subsystem of the CBTC system in the cluster to be deployed on the cloud platform, thereby determining the reliability and security of the CBTC system for the cloud platform. If the reliability, security, and deployment cost of the CBTC system for the cloud platform all meet preset conditions, the CBTC system is deployed on the cloud platform. If at least one of the reliability, security, and deployment cost of the CBTC system for the cloud platform does not meet the preset conditions, some subsystems are selected to be deployed to the cloud. This provides a more flexible and economical solution for deploying the CBTC system on a cloud platform while ensuring the reliability and security of the CBTC system for the cloud platform. Attached Figure Description

[0035] To more clearly illustrate the technical solutions in this invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this invention. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0036] Figure 1 This is a schematic diagram of the three-out-of-two redundancy structure and the two-out-of-two redundancy structure in the deployment method of the CBTC system on the cloud platform provided by the present invention;

[0037] Figure 2 This is a flowchart illustrating the deployment method of the CBTC system on a cloud platform provided by the present invention.

[0038] Figure 3 This is a schematic diagram illustrating the traditional CBTC system structure in the cloud platform deployment method of the CBTC system provided by the present invention;

[0039] Figure 4 This is a schematic diagram illustrating the CBTC system architecture of the cloud platform in the deployment method of the CBTC system on the cloud platform provided by the present invention;

[0040] Figure 5 This is a schematic diagram illustrating the factors affecting the reliability and security of the CBTC system on the cloud platform in the CBTC system deployment method provided by the present invention.

[0041] Figure 6 This is a schematic diagram illustrating the topology of the management cluster, network cluster, and storage cluster in the deployment method of the CBTC system on a cloud platform provided by this invention.

[0042] Figure 7 This is a structural diagram illustrating different virtual machine deployment methods in the CBTC system deployment method on a cloud platform provided by the present invention;

[0043] Figure 8 This is a schematic diagram of the deployment system of the CBTC system provided by the present invention on a cloud platform;

[0044] Figure 9 This is a schematic diagram of the structure of the electronic device provided by the present invention. Detailed Implementation

[0045] To make the objectives, technical solutions, and advantages of this invention clearer, the technical solutions of this invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of this invention. All other embodiments obtained by those skilled in the art based on the embodiments of this invention without creative effort are within the scope of protection of this invention.

[0046] First, let's introduce the following content:

[0047] CBTC systems are data-driven systems; attacks or malfunctions of any computing or network device can lead to system degradation or accidents. To ensure the safety of people's lives and property, CBTC systems must possess high availability, high reliability, and high real-time performance, and strictly adhere to fault-tolerant security principles. To meet these requirements, in addition to employing a dual-network redundant communication architecture, CBTC systems utilize security computers with dual-machine hot standby (primary / backup), two-out-of-two, and three-out-of-two structures for their security-critical equipment. Figure 1 As shown, the entire CBTC system can still function normally even when any computer or network device fails.

[0048] CBTC (Continuously Automated Train Control) is widely used in urban rail transit because it utilizes high-precision train positioning, two-way high-capacity vehicle-to-ground communication, onboard and safety computers. However, with the continuous development of urban rail transit, CBTC systems face challenges such as high construction and maintenance costs, low equipment resource utilization, high energy consumption, difficulties in upgrading and retrofitting, low levels of software and hardware compatibility and standardization, and incomplete data sharing.

[0049] The aforementioned problems pose challenges to breaking away from the traditional "layered" urban rail transit system and building a safer, more efficient, and energy-saving urban rail transit system. Cloud computing, as a new computing paradigm, utilizes virtualization technology to virtualize computing, network, and storage resources, providing users with elastic computing services on an on-demand, pay-as-you-go basis. A cloud computing platform is a physical service platform provided to users using the cloud computing model, often simply called a cloud platform. Cloud platforms are characterized by strong versatility, large scale, high scalability, high availability, and on-demand service, thus they are widely used in various fields. For example, using a cloud platform to build a CBTC system can achieve unified management and maintenance of CBTC system resources, reduce the complexity of engineering implementation and operation, improve the utilization rate of server hardware resources, and promote the transformation of server hardware from dual-machine redundancy to parallel distributed cluster mode. Based on the aforementioned problems facing urban rail transit development and the advantages of cloud platforms, migrating CBTC systems to the cloud is an inevitable development trend for urban rail transit.

[0050] However, the reliability and security of deploying CBTC systems on cloud platforms are currently difficult to guarantee, which has become an important issue that the industry urgently needs to address.

[0051] The following is combined with Figures 2-7 The method for deploying the CBTC system of the present invention on a cloud platform is described, such as... Figure 2 As shown, it includes:

[0052] Step 201: Determine the reliability and security indicators of the CBTC system based on the service chain of each subsystem of the CBTC system in the cluster to be deployed on the cloud platform.

[0053] The CBTC (Communication-based Train Control) system is a complex distributed control system composed of ground equipment, onboard equipment, and a data communication system (DCS). Ground equipment includes zone controllers (ZC), data storage units (DSU), computer interlocking (CI), and automatic train supervisors (ATS). Onboard equipment generally refers to the vehicle onboard controller (VOBC), which includes the automatic train protection system (ATP) and the automatic train operation system (ATO). The DCS consists of a ground backbone network and a vehicle-to-ground wireless communication network, used to enable data exchange between different subsystems. The ground backbone network enables communication between ground equipment, while communication between onboard equipment and ground equipment is achieved through the vehicle-to-ground wireless communication network. A traditional CBTC system structure diagram is shown below. Figure 3 As shown.

[0054] The CBTC system for cloud computing (CC-CBTC system) is to migrate the traditional CBTC system to the cloud platform.

[0055] Specifically, deploying the CBTC system on a cloud platform involves migrating the CI, ZC, and DSU subsystems controlling train operation from the ground equipment of the CBTC system to the cluster to be deployed on the cloud platform. The CC-CBTC system retains the ground's two-way self-healing ring network, and the communication network equipment accesses the cloud network through a wired network. Under the control of the CC-CBTC system's SDN network, it communicates with the ground ring network. The ground ring network data information is transmitted to the train through wireless network transmission equipment for wireless communication, thereby realizing the functions of the traditional CBTC system.

[0056] The cluster to be deployed is the cluster set up on the cloud platform. Clusters in the cloud platform are divided into four types according to their functions: computing cluster, network cluster, management cluster, and storage cluster.

[0057] Each subsystem of a traditional CBTC system has a corresponding cluster to be deployed. After deploying each subsystem to the cluster, the functions of the subsystems of the traditional CBTC system can be realized on the cloud platform.

[0058] The CC-CBTC system employs technologies such as virtualization, migration, and SDN to transform the traditional CBTC system's "overlay" architecture, which is based on physical machines, into a "resource pooling" service architecture where virtual machines and physical machines coexist.

[0059] Therefore, it is necessary to calculate the security and reliability indicators of the CC-CBTC system to ensure that the security and reliability indicators of the CC-CBTC system are not lower than those of the traditional CBTC system.

[0060] Specifically, determine the specific deployment plan for each subsystem of the CBTC system to be deployed on the cloud platform within the cluster to be deployed.

[0061] The specific deployment plan includes the redundant structure of the subsystem to be deployed on the cloud platform, the devices to be deployed, and the connection methods between the devices to be deployed.

[0062] Based on the specific deployment plan of the subsystems of the CBTC system to be deployed on the cloud platform, determine the service chain of each subsystem in the cluster to be deployed on the cloud platform.

[0063] Based on the service chain, calculate the reliability and security metrics of the CBTC system to be deployed on the cloud platform.

[0064] Step 202: If the reliability indicators, security indicators, and deployment costs of the CBTC system all meet the corresponding preset conditions, the CBTC system is deployed to the cloud platform.

[0065] When the reliability and security metrics of the CBTC system to be deployed on the cloud platform meet the preset conditions, that is, the reliability and security metrics of the CBTC system migrated to the cloud platform are greater than those of the traditional CBTC system; when the deployment cost of the CBTC system meets the corresponding preset conditions, that is, the deployment cost of the CBTC system migrated to the cloud platform is lower than the construction cost of the traditional CBTC system.

[0066] In this case, deploying the entire CBTC system on a cloud platform can save on construction costs while ensuring the reliability and security of the CC-CBTC system.

[0067] Step 203: If at least one of the reliability indicators, security indicators, and deployment costs of the CBTC system does not meet the corresponding preset conditions, select a portion of the subsystems from the CBTC system to deploy on the cloud platform, and deploy another portion of the subsystems from the CBTC system on the ground, so that the total reliability indicators, total security indicators, and total deployment costs of the selected portion of the subsystems and the other portion of the subsystems meet the corresponding preset conditions.

[0068] The preset condition for the reliability index is that the reliability index is greater than a first preset threshold, the preset condition for the security index is that the security index is greater than a second preset threshold, and the preset condition for the deployment cost is that the deployment cost is less than a third preset threshold.

[0069] The first preset threshold is the reliability index of the traditional CBTC system under the specific deployment scheme of the same seed system; the second preset threshold is the security index of the traditional CBTC system under the specific deployment scheme of the same seed system. When the reliability index of the cloud platform's CBTC system is greater than the first preset threshold and the security index is greater than the second preset threshold, that is, the reliability and security of the cloud platform's CBTC system are greater than the reliability and security of the traditional CBTC system.

[0070] The third preset threshold is the deployment cost of a traditional CBTC system under the specific deployment scheme of the same seed system.

[0071] If the reliability and / or security of the CBTC system does not meet the corresponding preset conditions, that is, the CBTC system migrated to the cloud platform cannot guarantee the reliability and security of the system itself, and thus cannot guarantee the safety of train operation.

[0072] If the deployment cost of the CBTC system does not meet the corresponding preset conditions, that is, the deployment cost of the CBTC system migrated to the cloud platform is higher than the deployment cost of the traditional CBTC system, there is no need to migrate it to the cloud platform.

[0073] Therefore, if at least one of the reliability, security, and deployment cost of the CC-CBTC system fails to meet the corresponding preset conditions, a portion of the subsystems from the CBTC system can be deployed to the cloud platform while the other portion remains deployed on the ground. This results in the reliability and security metrics of the newly constructed cloud-based CBTC system being greater than those of the traditional CBTC system under the same deployment scheme; and the deployment cost of the newly constructed cloud-based CBTC system being less than that of the traditional CBTC system under the same deployment scheme.

[0074] This invention determines the service chain of each subsystem of the CBTC system in the cluster to be deployed on the cloud platform, thereby determining the reliability and security of the CBTC system for the cloud platform. When the reliability, security, and deployment cost of the CBTC system for the cloud platform all meet preset conditions, the CBTC system is deployed on the cloud platform. When at least one of the reliability, security, and deployment cost of the CBTC system for the cloud platform does not meet the preset conditions, some subsystems are selected to be deployed to the cloud. This provides a more flexible and economical solution for deploying the CBTC system to the cloud platform while ensuring the reliability and security of the CBTC system for the cloud platform.

[0075] In the deployment method of the CBTC system on a cloud platform of the present invention, the step of selecting a portion of subsystems from the CBTC system and deploying them to the cloud platform includes:

[0076] Based on the security integrity level of the subsystem, the reliability level of the redundancy structure adopted by the subsystem, or the security level of the redundancy structure adopted by the subsystem, a portion of the subsystems are selected from the CBTC system and deployed to the cloud platform.

[0077] Specifically, the safety integrity level is a discrete level defined in the international standard IEC 61508. It is used to measure the probability that a safety-related system will successfully perform its specified safety functions; the higher the probability, the higher the safety integrity level.

[0078] Different redundancy structures offer varying levels of reliability and security. For instance, a 3-out-of-2 redundancy structure is more reliable than a 2-out-of-2 redundancy structure; however, a 2-out-of-2 redundancy structure offers greater security than a 3-out-of-2 redundancy structure.

[0079] Therefore, when selecting a portion of the subsystems in a CBTC system to deploy on a cloud platform, appropriate subsystems should be selected based on actual needs and by referring to the different security integrity, reliability, and security levels of the subsystems.

[0080] For example, if the reliability of the CBTC system to be deployed to the cloud platform does not reach the first preset threshold, the subsystem with a more reliable redundant structure will be deployed to the cloud platform, while the subsystem with a less reliable redundant structure will still be deployed in the traditional way.

[0081] If the security of the CBTC system to be deployed to the cloud platform does not reach the second preset threshold, the subsystem with a more secure redundant structure will be deployed to the cloud platform, while the subsystem with a less reliable redundant structure will still be deployed in the traditional way.

[0082] In the deployment method of the CBTC system on a cloud platform of the present invention, the step of selecting a portion of subsystems from the CBTC system to be deployed to the cloud platform based on the security integrity level of the subsystem, the reliability level of the redundancy structure adopted by the subsystem, or the security level of the redundancy structure adopted by the subsystem includes:

[0083] Deploy subsystems in the CBTC system with a security integrity level lower than the first preset level to the cloud platform; or

[0084] Deploy subsystems in the CBTC system with a reliability level greater than the second preset level of redundant structures to the cloud platform; or

[0085] Subsystems with a security level greater than the third preset level of the redundant structure in the CBTC system are deployed to the cloud platform.

[0086] The first preset level is determined based on the actual deployment situation.

[0087] When selecting some subsystems to deploy to the cloud platform based on the security integrity level of the reference subsystem, select subsystems with a security integrity level lower than the first preset level to deploy to the cloud platform.

[0088] Specifically, subsystems with higher security integrity requirements have higher hardware requirements, resulting in higher costs and difficulties in deploying them to the cloud platform. Furthermore, the security integrity of these subsystems is more difficult to guarantee after deployment. Therefore, choosing subsystems with lower security integrity requirements for deployment to the cloud platform can minimize the impact on the overall security integrity of the CBTC system deployed to the cloud platform.

[0089] The security integrity levels of the subsystems are shown in Table 1 below:

[0090] Table 1. Overview of Safety Integrity Level Requirements

[0091] Subsystem Safety Integrity Level (SIL) Train Overspeed Protection System (ATP) Level 4 Computer interlocking system (CI) Level 4 Automatic Train Monitoring System (ATS) Level 2 Automatic Train Operation (ATO) Level 2 Axle counting Level 4

[0092] For example, the ATS subsystem has a lower security integrity level and can be prioritized for deployment to the cloud platform, while the CI and ZC subsystems have higher security integrity levels and are therefore less prioritized for deployment to the cloud platform.

[0093] Optionally, when the deployment cost of the CBTC system to be deployed exceeds a third preset threshold, some subsystems may be selected to be deployed to the cloud platform based on the security integrity level of the subsystems.

[0094] The second preset level is determined based on the actual deployment situation.

[0095] Different redundancy structures have different levels of reliability. Device nodes with low reliability are more prone to failure and danger. Therefore, subsystems with higher reliability redundancy structures are prioritized for cloud deployment to ensure the reliability of train operation in the CC-CBTC system.

[0096] For example, a 3-out-of-2 architecture is more reliable than a 2-out-of-2 architecture, so subsystems using a 3-out-of-2 architecture are prioritized for cloud deployment. Since CI subsystems typically use a 3-out-of-2 architecture, some cloud deployment solutions can prioritize deploying CI subsystems to the cloud platform.

[0097] Optionally, when the reliability of the CBTC system to be deployed is less than a first preset threshold, a subsystem with higher reliability is selected and deployed to the cloud platform.

[0098] The third preset level is determined based on the actual deployment situation.

[0099] Different redundancy structures offer varying levels of security. Subsystems with higher security redundancy are prioritized for cloud deployment to ensure the safe operation of the CC-CBTC system trains.

[0100] For example, the two-out-of-two structure has the highest security. Therefore, ZC subsystems that adopt the two-out-of-two structure are usually prioritized for deployment on the platform.

[0101] Optionally, when the security of the CBTC system to be deployed is less than the second preset threshold, a subsystem with higher security is selected and deployed to the cloud platform.

[0102] This invention provides a specific solution for deploying some subsystems to the cloud platform when considering cost factors when deploying a CBTC system on a cloud platform. This solution selects some subsystems based on the security integrity level, reliability, and security of each subsystem. This allows the CBTC system to be deployed to be partially deployed to the cloud platform even if at least one of the reliability, security, and deployment cost conditions is not met. This preserves the advantages of cloud computing for the CBTC system as much as possible, while ensuring the security, reliability, and cost of the constructed CC-CBTC system.

[0103] Furthermore, when the reliability, security, and cost of the CC-CBTC system all meet the corresponding preset thresholds, that is, when the construction cost of the CBTC system is saved by deploying the CBTC system to the cloud platform, the subsystems deployed to the cloud platform can also adopt a redundant structure with higher cost, reliability, and security. Thus, while keeping the total cost unchanged or reducing, the reliability and security of the CC-CBTC system are further improved compared to the traditional CBTC system, and the CBTC system on the cloud platform can be deployed more flexibly.

[0104] In the deployment method of the CBTC system on the cloud platform of the present invention, the cluster to be deployed of the CI subsystem, ZC subsystem and ATS subsystem of the CBTC system is a computing cluster, and the cluster to be deployed of the DSU subsystem of the CBTC system is a storage cluster.

[0105] Based on the actual operation of CBTC system trains on the line, the ATS, ZC, and CI subsystems that control train operation on the ground in the traditional CBTC system are identified as the computing clusters of the cloud platform, and the DSU subsystem is identified as the storage clusters of the cloud platform. This makes the architecture of the CBTC system as follows: Figure 4 As shown.

[0106] The determination of the reliability and security metrics of the CBTC system based on the service chain of each subsystem in the cluster to be deployed on the cloud platform includes:

[0107] Determine the total failure rate of the service chain of the CBTC system located on the cloud platform under the computing cluster, the storage cluster, the management cluster and the network cluster on the cloud platform;

[0108] The CC-CBTC system also includes a management cluster and a network cluster. Only when the storage cluster, management cluster, and network cluster of the CC-CBTC system are all functioning normally can the CC-CBTC system work with the computing cluster to complete the function of controlling train operation.

[0109] Furthermore, since the CC-CBTC system adds resource management, SDN centralized network control, and centralized storage functions through management clusters, storage clusters, and network clusters, the impact of the addition of these functional nodes or networks on the reliability and security of the CC-CBTC system should also be analyzed when analyzing the reliability and security of the CC-CBTC system.

[0110] The network serves as a transparent data transmission platform, employing various error detection methods, such as cyclic redundancy check, to ensure reliable communication. It only affects system reliability and availability, not security. For other functional nodes, their impact on the CBTC system's reliability and security metrics must be determined.

[0111] Specifically, based on the CBTC subsystems to be deployed on the cloud platform, that is, the total failure rate λ6 in the security structure considering the effects of management, network and storage clusters.

[0112] The redundancy unit failure rate of the CBTC system is determined based on the total failure rate and the migration success rate of the CBTC system on the cloud platform.

[0113] Based on the determined total failure rate λ6 of the CC-CBTC system, migration is considered an independent influencing factor in the reliability and security calculation indicators of the CC-CBTC system. Successful migration means a decrease in the failure rate of redundant units in the CC-CBTC system. Therefore, the formula for calculating the failure rate of redundant units in the CC-CBTC system under the influence of migration is as follows:

[0114] λ'=λ6-μ m μ m =λ6×μ

[0115] Where, μ m It represents the probability of a successful migration, which is influenced by the total failure rate λ6 of the CBTC system and the probability of the deployed software migrating and recovering.

[0116] Based on the failure rate of the redundant units, the reliability and security indicators of the CBTC system are determined.

[0117] By substituting the calculated redundancy failure rate λ' of the CC-CBTC system into the calculation formula for the security and reliability indicators of the traditional CBTC system, the security and reliability of the subsystems of the CBTC system deployed on the cloud platform under different redundancy structures can be obtained.

[0118] The redundancy structures include two-out-of-two, three-out-of-two, and two-by-two-out-of-two structures. By substituting the failure rate of the redundant units of the system into the corresponding reliability and security index calculation formulas of the redundant structures, the reliability and security of the CBTC system can be calculated.

[0119] The formulas for calculating the reliability and safety of the two-out-of-two structure are as follows:

[0120]

[0121] PFH 1oo2 =2((1-β)D )λ DD +(1-β)λ DU (1-β)λ DU t CE +βλ DU ,β D =0.5β

[0122] The formulas for calculating the reliability and safety of a 3-out-of-2 structure are as follows:

[0123]

[0124] PFH 2oo3 =6((1-β) D )λ DD +(1-β)λ DU (1-β)λ DU t CE +βλ DU

[0125] The formulas for calculating the reliability and safety of a two-out-of-two structure are as follows:

[0126]

[0127] PFH 2×2oo2 =2(1-β)λ DU1oo2 ((1-β D )λ DD1oo2 +(1-β)λ DU1oo2 +λ SD1oo2 )t CE1oo2 +2(1-K)λ DD1oo2 +βλ DU1oo2

[0128] The meanings of the parameters in each formula can be found in the IEC 61508 standard and relevant references. λ 1oo2 PFH is a reliability indicator for a 2-out-of-2 configuration. 1oo2 λ is the safety indicator for a two-out-of-two structure. 2oo3 PFH is the reliability index for a 2-out-of-3 structure. 2oo3 λ is the safety indicator for a 2-out-of-3 structure. 2×1oo2 PFH is the reliability index for a two-out-of-two structure. 2×2oo2 This is a safety indicator for the two-out-of-two structure.

[0129] In the above formula, the parameters related to λ can all be obtained from λ' according to the IEC61508 standard.

[0130] Alternatively, if the subsystem adopts other redundant structures, the calculation methods for the corresponding reliability and safety indicators can be determined by referring to the IEC61508 standard.

[0131] Based on the above formula, the failure rate λ' of the redundant units of the CC-CBTC system can be obtained. Substituting it into the calculation formula of the security and reliability indicators of the traditional CBTC system, the security and reliability of the CC-CBTC system under different redundancy structures can be obtained. When its reliability is greater than the first preset threshold and its security is greater than the second preset threshold, the CBTC system can be deployed to the cloud platform.

[0132] In the deployment method of the CBTC system on a cloud platform of the present invention, the step of determining the total failure rate of the service chain of the CBTC system located on the cloud platform under the computing cluster, the storage cluster, the management cluster and the network cluster on the cloud platform includes:

[0133] Based on the probability of normal operation of the virtual software, virtual hardware, physical machines, and network equipment components to be deployed in the computing cluster and the number of physical machines and network equipment connections to be deployed in the cloud platform by the CBTC system, the failure rate of the service chain in the computing cluster under multiple network transmission paths is determined.

[0134] The calculation method for the failure rate λ2 of the service chain within the computing cluster under multiple network transmission paths is derived from the failure rate λ1 of the service chain within the computing cluster under a single network transmission path.

[0135] Specifically, when considering only the impact of the rental costs of virtual software, virtual hardware, physical machine hardware, and network equipment deployed in a single service chain within a computing cluster, a single service chain within the computing cluster, such as... Figure 5 As shown.

[0136] The CC-CBTC system only functions correctly when all components in the service chain are working properly. Therefore, the failure rate λ1 of the service chain within the computing cluster under a single network transmission path is:

[0137] λ1=1-r1×r2×r3×r4

[0138]

[0139] Where r1, r2, r3, and r4 represent the probabilities of virtual software, virtual hardware, physical machine hardware, and network device components working properly, respectively. This represents the probability of failure of the virtual software 'a' to be deployed; This represents the failure probability of virtual device i; failure factors related to virtual device i include three types: virtual machine, virtual machine monitor, and operating system. Let j be the failure probability of physical device j, which includes four types: computing, management, network, and storage. Select one type of device to fail for calculation. The failure probability of factor b1, which is related to the primary network, includes three types: primary network devices, virtual links of primary network devices, and physical links. c is the number of primary network devices traversed.

[0140] Based on this, further considering the impact of the number of physical machine-to-network device connections and the number of network device-to-network device connections on the service chain failure rate, the failure rate λ2 of the service chain within the computing cluster under multiple network transmission paths is determined as follows:

[0141] λ² = 1 - r₁ × r₂ × r₃ × (1 - (1 - r₄)) d )

[0142] Where d represents the number of physical machines directly connected to the primary network devices.

[0143] Based on the failure rate of the service chains within the computing cluster under multiple network transmission paths, the failure rates of the service chains within the management cluster, the network cluster, and the storage cluster under multiple network transmission paths are determined respectively.

[0144] Specifically, in the CC-CBTC system, the management cluster, network cluster, and storage cluster implement their functions using physical machines as the basic unit, and communicate with the computing cluster through secondary network devices. The network topology of the management, network, and storage clusters is as follows: Figure 6 As shown.

[0145] Given the aforementioned network topology of the management cluster, network cluster, and storage cluster, the failure rate of the service chain within these clusters across multiple network transmission paths is determined as follows:

[0146] λ3=λ4=λ5=1-r′3×r′4×r5

[0147]

[0148] Where λ3, λ4, and λ5 represent the failure rates of service chains within the management cluster, network cluster, and storage cluster under multiple network transmission paths, respectively. r′3, r′4, and r5 represent the probabilities that all physical machines, primary network devices, and secondary network devices in the cluster are functioning normally, respectively. e is the number of physical machines, f is the number of primary network devices in a single reliable service chain, g is the number of physical machines connected to primary network devices, h is the number of secondary network devices in a single reliable service chain, and p is the number of primary network devices connected to secondary network devices. The failure probability of factor b2, which is related to the secondary network, includes three types: secondary network devices, virtual links of secondary network devices, and physical links.

[0149] The total failure rate is determined based on the failure rates of the service chains within the computing cluster, the management cluster, the network cluster, and the storage cluster across multiple network transmission paths.

[0150] Taking into account the combined effects of the computing cluster, network cluster, management cluster, and storage cluster, the total failure rate λ6 of the service chain across multiple network transmission paths is:

[0151]

[0152] The total failure rate λ6 is the total failure rate of redundant units in the security structure that takes into account the effects of all cluster functions.

[0153] In the deployment method of the CBTC system on the cloud platform of the present invention, virtual machines with different functions are deployed on the same physical machine in the computing cluster, while virtual machines with the same function are deployed on different physical machines.

[0154] Because the cloud computing CBTC system uses virtualization technology based on virtual machines or containers, a single physical machine contains multiple virtual machines.

[0155] If a physical machine fails due to external or internal factors such as environmental or human factors, all virtual machines contained within it will also fail. If we disregard the deployment constraints of redundant units in a redundant fault-tolerant structure or secure computing platform within the cloud platform's physical machines, deploying all functionally identical redundant units in a redundant structure within a single physical machine would result in... Figure 7 As shown in part (a), if physical machine A or B fails, all virtual machines with the same functionality contained in it will also fail. This will reduce the system's ability to cope with system failures, that is, increase the probability of common cause failures and reduce system reliability.

[0156] Therefore, considering the deployment constraints of redundant units with the same functionality, virtual machines with the same functionality should be deployed on different physical machines, and virtual machines with different functions should be deployed on the same physical machine, such as... Figure 7 As shown in part (b).

[0157] Specifically, virtual machines with the same function in a redundant fault-tolerant structure or a secure computer platform are called homogeneous nodes, while virtual machines with different functions are called heterogeneous nodes.

[0158] For example, in a 2x2-out-of-2 structure, the four redundant computation nodes are homogeneous nodes, and the two redundant voting nodes are also homogeneous nodes. Computation nodes and voting nodes are heterogeneous nodes.

[0159] When traditional CBTC systems assess the security of a security redundancy structure, they typically study the dangerous failure rate of each redundant unit within that structure. The dangerous failure rate includes both measurable and unmeasurable dangerous failure rates.

[0160] In traditional CBTC systems, data consistency is primarily determined by voting nodes in a secure redundancy structure. This ensures that the system is redirected to the secure side in the event of a dangerous failure, thus guaranteeing system security. If redundant nodes simultaneously experience unpredictable dangerous failures, the output data will still be consistent. In this case, the output could indicate either a secure-side failure or a dangerous-side failure. To maximize system security, this type of failure should be considered a dangerous-side failure.

[0161] Therefore, when deploying traditional CBTC systems to cloud platforms, while ensuring the security requirements of redundant nodes, it is also necessary to constrain the deployment locations of homogeneous nodes to avoid increasing the probability of critical side failures due to common cause failures of homogeneous nodes deployed on the same physical machine. Additionally, it is necessary to constrain the deployment location relationships between compute nodes and voting nodes, voting nodes and switching nodes, and compute nodes and switching nodes among heterogeneous nodes to prevent simultaneous failures of voting and switching nodes with fault-tolerant safety features, thus preventing the failure to achieve fault-tolerant safety and increasing the probability of critical side failures.

[0162] Based on this, due to differences in function and design, heterogeneous nodes are less affected by common-cause failures than homogeneous nodes. Furthermore, to improve physical machine resource utilization, heterogeneous nodes can be deployed on the same physical machine. However, to prevent common-cause failures of redundant nodes, virtual machines, and physical machines from impacting the advantages of redundancy, homogeneous nodes in redundant fault-tolerant structures and secure computer platforms cannot be deployed on the same physical machine. Specifically, computing nodes with the same function, voting nodes, and switching nodes cannot be deployed on the same physical machine.

[0163] Furthermore, to ensure that the secure computing nodes, voting nodes, and switching nodes in the secure computer platform can still be directed to the secure side when the physical machine fails, that is, the failure of the physical machine will not cause the above three types of nodes or two types of nodes to fail at the same time, the computing nodes, voting nodes, and switching nodes are not deployed in the same physical machine in pairs.

[0164] In the deployment method of the CBTC system on the cloud platform of the present invention, the physical machines in the management cluster, the network cluster and the storage cluster are redundant.

[0165] Since cloud computing infrastructure is the foundation for the normal operation of cloud subsystems of the CBTC system on the cloud platform, the physical devices of the management cluster, network cluster, and storage cluster of the CBTC system on the cloud platform should all have redundant devices to meet the availability requirements of the CBTC system on the cloud platform.

[0166] Optionally, the physical devices for the management cluster and storage cluster employ an N-machine hot standby redundancy approach. The value of N must ensure that the reliability and security of the cloud platform's CBTC system are no less than those of a traditional CBTC system.

[0167] This invention improves the security of devices within each cluster and reduces the risk of common-cause failures due to physical machine failures by designing hot standby redundancy for physical machines in the management and storage clusters, and by preventing virtual machines with the same functions from being deployed on the same physical machine while deploying virtual machines with different functions on the same physical machine. This enhances the reliability and security of the cloud platform's CBTC system and maintains the advantages of redundancy in the subsystems.

[0168] Based on this, each subsystem needs to adopt a dual-network redundancy approach to ensure secure and reliable communication. Cloud computing uses SDN controllers to achieve centralized and unified management of network resources and provide normal communication services. A single controller may cause network bottlenecks due to attacks or failures, resulting in a single point of failure. Therefore, from a security perspective, to ensure the security of the SDN network, the number of SDN controllers should be at least M, where the value of M must ensure that the reliability and security of the cloud platform's CBTC system are no less than those of a traditional CBTC system.

[0169] When a system exchanges information, its data may pass through different types and numbers of network devices. Therefore, the system's reliability and security are also affected by the system network. Parameters affecting system reliability and security in the system network include the number of network device nodes connected to the physical machine and the number of network devices connected to those devices.

[0170] Based on the network device functions of the CBTC cloud computing system, switches are designated as primary network devices, and routers as secondary network devices. Connections between network devices require specific cascading ports. Due to the limited number of cascading ports and to prevent broadcast storms, each primary network device in this network security group can connect to at least one primary network device and at least one secondary network device, and each secondary network device can connect to at least one secondary network device. The number of ports connecting network devices to physical machines is relatively large, and the number of physical machines connected depends on the actual number of devices used.

[0171] Alternatively, if communication between physical machines is limited to only two hops, the predictability of latency can be guaranteed, and the number of network devices traversed by the cloud platform's CBTC system can be minimized, thereby maximizing the reliability of the cloud platform's CBTC system.

[0172] Furthermore, to prevent the number of virtual machines deployed on physical machines from exceeding the load balancing limit and causing a decrease in physical machine performance, a physical machine resource utilization limit threshold is set to θ.

[0173] The value of θ is determined by actual needs.

[0174] In summary, the CBTC system deployment method of this invention, considering the deployment factors of physical machines and virtual machines in each cluster and resource constraints, provides a deployment method that ensures the security of the subsystem redundancy structure of the CBTC system on the cloud platform. It also proposes a method to quantitatively calculate the reliability and security of the CBTC system on the cloud platform based on the service chain of the specific devices in the cluster to which the subsystem belongs. Based on the reliability, security, and deployment cost of the CBTC system on the cloud platform, it selects to deploy all or part of the CBTC system on the cloud platform, thus ensuring the practicality, security, flexibility, and economy of the CBTC system. Furthermore, the physical machine and virtual machine deployment method proposed in this invention is universal and applicable to traditional CPS systems with redundancy capabilities deployed to the cloud.

[0175] The deployment system of the CBTC system on the cloud platform provided by the present invention is described below. The deployment system of the CBTC system on the cloud platform described below can be referred to in correspondence with the deployment method of the CBTC system on the cloud platform described above.

[0176] Reference Figure 8 The CBTC system deployment system on the cloud platform includes a determination module 801 and a deployment module 802.

[0177] The determination module 801 is used to determine the reliability and security indicators of the CBTC system based on the service chain of each subsystem of the CBTC system in the cluster to be deployed on the cloud platform.

[0178] The deployment module 802 is used to deploy the CBTC system to the cloud platform when the reliability, security and deployment cost of the CBTC system meet the corresponding preset conditions.

[0179] This invention determines the service chain of each subsystem of the CBTC system in the cluster to be deployed on the cloud platform, thereby determining the reliability and security of the CBTC system for the cloud platform. When the reliability, security, and deployment cost of the CBTC system for the cloud platform all meet preset conditions, the CBTC system is deployed on the cloud platform. When at least one of the reliability, security, and deployment cost of the CBTC system for the cloud platform does not meet the preset conditions, some subsystems are selected to be deployed to the cloud. This provides a more flexible and economical solution for deploying the CBTC system to the cloud platform while ensuring the reliability and security of the CBTC system for the cloud platform.

[0180] Figure 9 An example is a schematic diagram of the physical structure of an electronic device, such as... Figure 9As shown, the electronic device may include: processor 810, communication interface 920, memory 930 and communication bus 940, wherein the processor 810, communication interface 920 and memory 930 communicate with each other through communication bus 940. The processor 910 can call logical instructions in the memory 930 to execute a method for deploying a CBTC system on a cloud platform. This method includes: determining the redundancy failure rate of the CBTC system based on the clusters of each subsystem to be deployed on the cloud platform; determining the reliability and security of the CBTC system based on the redundancy failure rate; deploying the CBTC system to the cloud platform if the reliability, security, and deployment cost of the CBTC system all meet corresponding preset conditions; and selecting a portion of the subsystems from the CBTC system to deploy to the cloud platform and deploying another portion of the CBTC system on the ground if at least one of the reliability, security, and deployment cost of the CBTC system does not meet the corresponding preset conditions, such that the total reliability, total security, and total deployment cost of the selected and deployed subsystems meet the corresponding preset conditions. The preset conditions for reliability are that the reliability is greater than a first preset threshold, the preset conditions for security are that the security is greater than a second preset threshold, and the preset conditions for deployment cost are that the deployment cost is less than a third preset threshold.

[0181] Furthermore, the logical instructions in the aforementioned memory 930 can be implemented as software functional units and, when sold or used as independent products, can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, essentially, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0182] In another aspect, the present invention also provides a non-transitory computer-readable storage medium storing a computer program thereon, which, when executed by a processor, implements a method for deploying a CBTC system on a cloud platform as provided by the above methods. This method includes: determining the redundancy failure rate of the CBTC system based on the cluster of subsystems to be deployed on the cloud platform; determining the reliability and security of the CBTC system based on the redundancy failure rate; deploying the CBTC system to the cloud platform if the reliability, security, and deployment cost of the CBTC system all meet corresponding preset conditions; and selecting a portion of the subsystems from the CBTC system to deploy to the cloud platform and deploying another portion of the CBTC system on the ground if at least one of the reliability, security, and deployment cost of the CBTC system does not meet the corresponding preset conditions, such that the total reliability, total security, and total deployment cost of the selected and deployed subsystems meet the corresponding preset conditions. The preset conditions for reliability are that the reliability is greater than a first preset threshold, the preset conditions for security are that the security is greater than a second preset threshold, and the preset conditions for deployment cost are that the deployment cost is less than a third preset threshold.

[0183] The system embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0184] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.

[0185] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for deploying a CBTC system on a cloud platform, characterized in that, include: Based on the service chain of each subsystem of the CBTC system in the cluster to be deployed on the cloud platform, determine the reliability and security indicators of the CBTC system. If the reliability indicators, security indicators, and deployment costs of the CBTC system all meet the corresponding preset conditions, the CBTC system will be deployed to the cloud platform. If at least one of the reliability indicators, security indicators, and deployment costs of the CBTC system fails to meet the corresponding preset conditions, a portion of the subsystems in the CBTC system are selected and deployed to the cloud platform, while another portion of the subsystems in the CBTC system are deployed on the ground, so that the total reliability indicators, total security indicators, and total deployment costs of the selected and other subsystems meet the corresponding preset conditions. The preset condition corresponding to the reliability index is that the reliability index is greater than a first preset threshold, the preset condition corresponding to the security index is that the security index is greater than a second preset threshold, and the preset condition corresponding to the deployment cost is that the deployment cost is less than a third preset threshold. The clusters to be deployed in the CI subsystem, ZC subsystem and ATS subsystem of the CBTC system are computing clusters, and the clusters to be deployed in the DSU subsystem of the CBTC system are storage clusters. The determination of the reliability and security metrics of the CBTC system based on the service chain of each subsystem in the cluster to be deployed on the cloud platform includes: Determine the total failure rate of the service chain of the CBTC system located on the cloud platform under the computing cluster, the storage cluster, the management cluster and the network cluster on the cloud platform; The redundancy unit failure rate of the CBTC system is determined based on the total failure rate and the migration success rate of the CBTC system on the cloud platform. Based on the failure rate of the redundant units, the reliability and security indicators of the CBTC system are determined.

2. The method for deploying the CBTC system on a cloud platform according to claim 1, characterized in that, The steps for selecting a subset of subsystems from the CBTC system and deploying them to the cloud platform include: Based on the security integrity level of the subsystem, the reliability level of the redundancy structure adopted by the subsystem, or the security level of the redundancy structure adopted by the subsystem, a portion of the subsystems are selected from the CBTC system and deployed to the cloud platform.

3. The method for deploying the CBTC system on a cloud platform according to claim 2, characterized in that, The step of selecting a subset of subsystems from the CBTC system to deploy to the cloud platform based on the security integrity level of the subsystem, the reliability level of the redundancy structure used by the subsystem, or the security level of the redundancy structure used by the subsystem includes: Deploy subsystems in the CBTC system with a security integrity level lower than the first preset level to the cloud platform; or Deploy subsystems in the CBTC system with a reliability level greater than the second preset level of redundant structures to the cloud platform; or Subsystems with a security level greater than the third preset level of the redundant structure in the CBTC system are deployed to the cloud platform.

4. The method for deploying the CBTC system on a cloud platform according to claim 1, characterized in that, The step of determining the total failure rate of the service chain of the CBTC system located on the cloud platform under the computing cluster, the storage cluster, the management cluster and the network cluster on the cloud platform includes: Based on the probability of normal operation of the virtual software, virtual hardware, physical machines, and network equipment components to be deployed in the computing cluster and the number of physical machines and network equipment connections to be deployed in the cloud platform by the CBTC system, the failure rate of the service chain in the computing cluster under multiple network transmission paths is determined. Based on the failure rate of the service chains within the computing cluster under multiple network transmission paths, the failure rates of the service chains within the management cluster, the network cluster, and the storage cluster under multiple network transmission paths are determined respectively. The total failure rate is determined based on the failure rates of the service chains within the computing cluster, the management cluster, the network cluster, and the storage cluster across multiple network transmission paths.

5. The method for deploying the CBTC system on a cloud platform according to claim 4, characterized in that, In the computing cluster, virtual machines with different functions are deployed on the same physical machine, while virtual machines with the same function are deployed on different physical machines.

6. The method for deploying the CBTC system on a cloud platform according to claim 1, characterized in that, The management cluster, the network cluster, and the storage cluster all have physical machine redundancy.

7. A deployment system for a CBTC system on a cloud platform, characterized in that, include: The module determines the reliability and security metrics of the CBTC system based on the service chains of each subsystem of the CBTC system in the cluster to be deployed on the cloud platform. The deployment module is used to deploy the CBTC system to the cloud platform when the reliability indicators, security indicators, and deployment costs of the CBTC system all meet the corresponding preset conditions; and when at least one of the reliability indicators, security indicators, and deployment costs of the CBTC system does not meet the corresponding preset conditions, it selects a portion of the subsystems from the CBTC system to deploy to the cloud platform and deploys another portion of the subsystems from the CBTC system on the ground, so that the total reliability indicators, total security indicators, and total deployment costs of the selected portion of the subsystems and the other portion of the subsystems meet the corresponding preset conditions. The preset condition corresponding to the reliability index is that the reliability index is greater than a first preset threshold, the preset condition corresponding to the security index is that the security index is greater than a second preset threshold, and the preset condition corresponding to the deployment cost is that the deployment cost is less than a third preset threshold. The clusters to be deployed in the CI subsystem, ZC subsystem and ATS subsystem of the CBTC system are computing clusters, and the clusters to be deployed in the DSU subsystem of the CBTC system are storage clusters. The determination of the reliability and security metrics of the CBTC system based on the service chain of each subsystem in the cluster to be deployed on the cloud platform includes: Determine the total failure rate of the service chain of the CBTC system located on the cloud platform under the computing cluster, the storage cluster, the management cluster and the network cluster on the cloud platform; The redundancy unit failure rate of the CBTC system is determined based on the total failure rate and the migration success rate of the CBTC system on the cloud platform. Based on the failure rate of the redundant units, the reliability and security indicators of the CBTC system are determined.

8. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the deployment method of the CBTC system on the cloud platform as described in any one of claims 1 to 6.

9. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the deployment method of the CBTC system on a cloud platform as described in any one of claims 1 to 6.

Images