Train onboard safety monitoring cloud system and monitoring method, train safety monitoring system
Through the train on-board safety monitoring cloud system, the problems of train data security and health management have been solved, all-round safety monitoring and intelligent operation and maintenance have been achieved, and the train data security and operational stability have been improved.
Patent Information
- Application Number
- CN202310276824.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2023-03-20
- Publication Date
- 2025-09-16
- Estimated Expiration
- 2043-03-20
AI Technical Summary
The existing train control system lacks comprehensive data security protection, health management and proactive emergency response functions. The data transmitted to the ground by the traditional train network control system and passenger management system is one-way data, which cannot meet the needs of future data security and smart trains. In addition, there is a lack of isolation between different networks, which easily leads to data interference.
A train onboard safety monitoring cloud system was designed, including a train data security subsystem, a safety monitoring subsystem, a health management subsystem, and an emergency management subsystem. It is connected through an internal communication network to achieve data security identification, forwarding, and isolation, providing comprehensive safety monitoring and intelligent operation and maintenance functions.
It improves train data security and operational stability, can accurately identify the safety and health issues currently facing the train, realize automatic closed-loop processing of faults and remote emergency control, and improve operation and maintenance efficiency.
Smart Images

Figure CN117118999B_ABST
Abstract
Description
Technical Field
[0001] The present invention belongs to the field of rail transportation technology, and specifically relates to a train on-board safety monitoring cloud system and monitoring method, and a train safety monitoring system. Background Art
[0002] Current train control systems lack comprehensive data security protection, health management, and proactive emergency response capabilities. They often focus solely on train monitoring logic, and current monitoring functions primarily focus on surveillance, lacking comprehensive safety control and enforcement. Furthermore, train operations and maintenance rely solely on simple statistical management methods and manual safety and health assurance, which is increasingly unable to meet the safety and intelligence requirements of modern trains. Furthermore, current train communication data is universal and transparent, making it easy to analyze or tamper with. Different networks are not isolated, and data can interfere with each other.
[0003] The traditional train network control system TCMS, passenger management system PIS and ground operation and maintenance system have relatively independent train operation and maintenance architectures. Figure 1 As shown, the Train Network Control System (TCMS) and the Passenger Management System (PIS) each have their own internal communication networks. Only a small amount of information, including train station announcements, broadcasts, and PIS status displays, is transmitted between the TCMS and PIS via the onboard network. The remaining large amounts of useful data are transmitted via independent train-to-ground channels to the ground-based operations and maintenance system for diagnosis and display. Data transmitted from the TCMS and PIS to the ground is one-way and unsecured. Data security is provided solely by the ground-based intelligent operations and maintenance system, which typically employs simple firewall-like security policies and lacks the ability or channel to send control commands from the ground to the onboard network. Upon receiving data from the TCMS and PIS, the ground-based intelligent operations and maintenance system performs appropriate diagnosis and displays. Summary of the Invention
[0004] The present invention provides a train on-board safety monitoring cloud system and monitoring method, and a train safety monitoring system to solve the problem that the data transmitted to the ground by the existing traditional train network control system and passenger management system is one-way data, has no security guarantee, and cannot meet the needs of future data security and smart trains.
[0005] Based on the above-mentioned purpose, the present invention proposes a train on-board safety monitoring cloud system, including: a train data security subsystem, which is connected to the ground service network, the train control network and the train information network, and is used for data security identification and forwarding with the ground service network, the train control network and the train information network; a train health management subsystem, which is connected to the train data security subsystem and is used for intelligent operation and maintenance of various systems and equipment of the train; a train safety monitoring subsystem, which is connected to the train data security subsystem and the train health management subsystem and is used to monitor the safety of train operation.
[0006] Optionally, the train on-board safety monitoring cloud system also includes: a train emergency management subsystem (i.e., a train emergency management center) connected to the train data security subsystem (i.e., a train data security center) and the train safety monitoring subsystem (i.e., a train safety monitoring center); the train emergency management subsystem is used to perform remote emergency control of train operation.
[0007] Optionally, the train data security subsystem, the train safety monitoring subsystem, the train health management subsystem (i.e., the train health management center) and the train emergency management subsystem are connected through an internal communication network.
[0008] Optionally, the internal communication network is optical fiber or Ethernet.
[0009] Optionally, the external data of the train safety monitoring subsystem, the train health management subsystem and the train emergency management subsystem are securely identified by the train data security subsystem and then transmitted to the ground service network, the train control network or the train information network; the data of the ground service network, the train control network or the train information network are securely managed by the train data security subsystem and then forwarded to the train safety monitoring subsystem, the train health management subsystem and the train emergency management subsystem.
[0010] Optionally, the train data security subsystem performs security management on accessed data and devices through security policies including but not limited to dynamic host configuration protocol services, device IP address whitelist, MAC address whitelist, communication port whitelist, and VLAN division.
[0011] Optionally, the train data security subsystem isolates the data of the ground service network, the train control network and the train information network to ensure the secure exchange of data between the ground service network, the train control network and the train information network.
[0012] Optionally, the train data security subsystem includes a first data security subsystem (i.e., a first data security center) and a second data security subsystem (i.e., a second data security center). The first data security subsystem communicates with the ground service network, and the second data security subsystem is communicatively connected to the train control network and the train information network. The first data security subsystem and the second data security subsystem are both connected to the train safety monitoring subsystem, the train health management subsystem, and the train emergency management subsystem.
[0013] Based on the same inventive concept, the present invention also proposes a train safety monitoring system, including: a ground service network and the aforementioned train on-board safety monitoring cloud system.
[0014] Based on the same inventive concept, the present invention also proposes a train safety monitoring method applied to the aforementioned train on-board safety monitoring cloud system, including: data from the ground service network, train control network and train information network are securely managed through the train data security subsystem and forwarded to the train safety monitoring subsystem and the train health management subsystem; train driving safety is monitored through the train safety monitoring subsystem; various train systems and equipment are intelligently operated and maintained through the train health management subsystem; external data of the train safety monitoring subsystem and the train health management subsystem are securely identified by the train data security subsystem and then transmitted to the ground service network, the train control network or the train information network.
[0015] From the above, it can be seen that the beneficial effects of the technical solution provided by the present invention are: the present invention provides a train on-board safety monitoring cloud system and monitoring method, a train safety monitoring system, the train on-board safety monitoring cloud system includes: a train data security subsystem, a train safety monitoring subsystem connected to the train data security subsystem and a train health management subsystem; the train safety monitoring subsystem is also connected to the train health management subsystem, and the train data security subsystem is connected to the ground service network, the train control network, and the train information network; the train data security subsystem is used for data security identification and forwarding with the ground service network, the train control network, and the train information network, the train safety monitoring subsystem is used to monitor the train driving safety, and the train health management subsystem is used for intelligent operation and maintenance of various systems and equipment of the train, which can accurately identify the safety and health problems currently faced by the train, and improve train data security and operational stability. BRIEF DESCRIPTION OF THE DRAWINGS
[0016] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.
[0017] Figure 1 This is a structural diagram of a train operation and maintenance architecture in the prior art;
[0018] Figure 2 This is a schematic diagram of the structure of a train onboard safety monitoring cloud system according to an embodiment of the present invention;
[0019] Figure 3This is a schematic structural diagram of another train-mounted safety monitoring cloud system according to an embodiment of the present invention;
[0020] Figure 4 Schematic diagram of the flow of a train safety monitoring method according to an embodiment of the present invention. DETAILED DESCRIPTION
[0021] In order to make the objectives, technical solutions and advantages of the present disclosure more clearly understood, the present disclosure is further described in detail below in conjunction with specific embodiments and with reference to the accompanying drawings.
[0022] It should be noted that, unless otherwise defined, the technical terms or scientific terms used in the embodiments of the present invention should have the usual meanings understood by people with ordinary skills in the field to which the present disclosure belongs. The "first", "second" and similar words used in the embodiments of the present invention do not indicate any order, quantity or importance, but are only used to distinguish different components. "Include" or "comprise" and similar words mean that the elements or objects appearing before the word include the elements or objects listed after the word and their equivalents, without excluding other elements or objects. "Connect" or "connected" and similar words are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect. "Up", "down", "left", "right" and the like are only used to indicate relative positional relationships. When the absolute position of the described object changes, the relative positional relationship may also change accordingly.
[0023] The embodiment of the present invention implements a train vehicle-mounted safety monitoring cloud system, such as Figure 1 As shown, the train onboard safety monitoring cloud system includes: a train data security center, a train safety monitoring center connected to the train data security center, and a train health management center; the train safety monitoring center is also connected to the train health management center, and the train data security center is connected to the ground service network, the train control network, and the train information network; the train data security center is used to securely identify and forward data with the ground service network, the train control network, and the train information network; the train safety monitoring center is used to monitor train driving safety, and the train health management center is used to perform intelligent operation and maintenance of various train systems and equipment. The train data security center securely manages and forwards data input to or output from the ground service network, the train control network, and the train information network, which can accurately identify the safety and health issues currently facing the train, improving train data security and operational stability.
[0024] In an embodiment of the present invention, the train onboard safety monitoring cloud system further includes: a train emergency management center connected to the train data security center and the train safety monitoring center; the train emergency management center is used to perform remote emergency control of train operations. The train onboard safety monitoring cloud system in this embodiment of the present invention serves as the central convergence point for the train control network, passenger information network, and ground service network. While ensuring data security, it can decentralizedly dispatch and centrally process the data and functions of the three networks. Its primary service target is the train control system, ensuring safe, stable operation and intelligent maintenance of the train.
[0025] In this embodiment of the present invention, the train control network, or train control system network, includes but is not limited to traction, braking, running, door, air conditioning, fire protection, high-voltage insulation, and instability control. The train information network includes but is not limited to a passenger management system (PIS) and Wi-Fi. The train data security center, train safety monitoring center, train health management center, and train emergency management center are connected via an internal communication network for rapid data exchange. Alternatively, non-secure or secure communication protocols can be used as needed. The internal communication network utilizes fiber optic or Ethernet, for example.
[0026] The external data of the train safety monitoring center, the train health management center and the train emergency management center are securely identified by the train data security center and then transmitted to the ground service network, the train control network or the train information network.
[0027] Data from the ground service network, the train control network, or the train information network is securely managed by the train data security center and then forwarded to the train safety monitoring center, the train health management center, and the train emergency management center. The train data security center isolates the data from the ground service network, the train control network, and the train information network to ensure the secure exchange of data between them. Data that cannot be identified or is identified as non-secure will be automatically discarded or denied access by the security center. Specifically, the train data security center securely manages access to data and devices through active or passive security strategies, including but not limited to Dynamic Host Configuration Protocol (DHCP), device IP address whitelists, MAC address whitelists, communication port whitelists, and Virtual Local Area Network (VLAN) partitioning. It also isolates the train control network, train information network, and train-ground service network, ensuring the secure exchange of data between the three networks. This prevents the access of unknown devices and the flow of unknown ports and data. It also provides real-time early warnings or alarms to ensure train data security and improve train data security and operational stability.
[0028] In this embodiment of the present invention, the train safety monitoring center integrates all faults and logic related to train operation safety, such as traction blockade, speed limit, emergency braking, cutoff, and reset. It then develops a closed-loop control method for these faults, records relevant data, and backs it up to the ground for subsequent analysis. This control strategy can complement the train control system, and the safety-related logic of the train control system can also be moved up to the train safety monitoring center. The train safety monitoring center also provides safety monitoring, control, and prompts based on fault cause and fault level, achieving automatic closed-loop fault handling.
[0029] The Train Health Management Center can decouple current faults based on the fault tree to prevent the reporting of associated and secondary faults. It also provides precise fault notifications through the human-machine interface, guiding drivers, crew members, and operations and maintenance personnel in troubleshooting and resolving the faults. Some faults can be proactively repaired based on actual operating conditions and experience, greatly improving operation and maintenance efficiency. Furthermore, based on fault triggering conditions, early predictions and early warnings can be made based on real-time data. Early warning information can also be sent to the ground for relevant operations or operational preparations. The Train Health Management Center provides health and fault predictions, fault handling prompts, and proactive repairs, providing safety assurance technology for intelligent operations and maintenance, further improving operation and maintenance efficiency.
[0030] The train emergency management center can provide remote emergency control. In an emergency situation, the center can prompt the driver to perform emergency operations based on actual operating conditions. Furthermore, while ensuring data security, the center can automatically execute ground-based emergency operation instructions or prompt the driver to perform corresponding operations based on train operating conditions and remote ground-based commands. This enables remote emergency operations or prompts between train and ground, improving emergency response capabilities and efficiency.
[0031] In the embodiment of the present invention, Figure 3 As shown, the train data security center includes a first data security center and a second data security center. The first data security center communicates with the ground service network, and the second data security center is connected to the train control network and the train information network. The first data security center and the second data security center are both connected to the train safety monitoring center, the train health management center, and the train emergency management center.
[0032] The external data of the train safety monitoring center, the train health management center and the train emergency management center are securely identified by the first data security center and then transmitted to the ground service network, and are securely identified by the second data security center and then transmitted to the train control network or train information network.
[0033] Data from the ground service network is securely managed by the first data security center and then forwarded to the train safety monitoring center, the train health management center, and the train emergency management center. The second data security center isolates data from the train control network and the train information network to ensure secure data exchange between them. Data from the train control network or train information network is securely managed by the second data security center and then forwarded to the train safety monitoring center, the train health management center, and the train emergency management center. Data that cannot be identified or is deemed non-secure will be automatically discarded or denied access by the security center.
[0034] To sum up, the train on-board safety monitoring cloud system of an embodiment of the present invention includes: a train data security center, a train safety monitoring center connected to the train data security center, and a train health management center; the train safety monitoring center is also connected to the train health management center, and the train data security center is connected to the ground service network, the train control network, and the train information network; the train data security center is used for data security identification and forwarding with the ground service network, the train control network, and the train information network, the train safety monitoring center is used to monitor the train driving safety, and the train health management center is used for intelligent operation and maintenance of various train systems and equipment, which can accurately identify the safety and health issues currently faced by the train, and improve train data security and operational stability.
[0035] An embodiment of the present invention further provides a train safety monitoring system, comprising a ground service network and the aforementioned train onboard safety monitoring cloud system.
[0036] The embodiment of the present invention also provides a train safety monitoring method, which is applied to the aforementioned train vehicle-mounted safety monitoring cloud system. Figure 4 As shown, the train safety monitoring method includes:
[0037] Step S11: Data from the ground service network, train control network, and train information network are securely managed by the train data security center and forwarded to the train safety monitoring center and train health management center.
[0038] In this embodiment of the present invention, the train data security center isolates data from the ground service network, the train control network, and the train information network to ensure secure data exchange between them. Data that cannot be identified or is deemed non-secure is automatically discarded or denied access by the security center.
[0039] Step S12: monitoring the train running safety through the train safety monitoring center.
[0040] The Train Safety Monitoring Center (TSMC) integrates all faults and logic related to train safety, such as traction blockades, speed limits, emergency braking, cutoffs, and resets. It then develops a closed-loop control method for these faults, records relevant data, and backs it up to the ground for subsequent analysis. These control strategies complement the train control system, allowing the safety-related logic of the train control system to be moved up to the TSMC. The TSMC also provides safety monitoring, control, and notifications based on fault cause and severity, enabling automated closed-loop fault handling.
[0041] Step S13: Perform intelligent operation and maintenance of various systems and equipment of the train through the train health management center.
[0042] The Train Health Management Center can decouple current faults based on a fault tree to prevent the reporting of associated and secondary faults. It also provides precise fault notifications through the human-machine interface, guiding drivers, crew members, and maintenance personnel in troubleshooting and resolving them. Some faults can be proactively repaired based on actual operating conditions and experience, significantly improving operation and maintenance efficiency. The Center can also provide early predictions and warnings based on real-time data, based on fault triggering conditions. These warnings can be transmitted to ground personnel for relevant actions or operational preparations.
[0043] Step S14: The external data of the train safety monitoring center and the train health management center are securely identified by the train data security center and then transmitted to the ground service network, the train control network or the train information network.
[0044] In the train safety monitoring method of an embodiment of the present invention, data from the ground service network, the train control network, and the train information network are securely managed by the train data security center and forwarded to the train safety monitoring center and the train health management center; the train driving safety is monitored by the train safety monitoring center; the various systems and equipment of the train are intelligently operated and maintained by the train health management center; the external data of the train safety monitoring center and the train health management center are securely identified by the train data security center and then transmitted to the ground service network, the train control network, or the train information network, which can accurately identify the safety and health issues currently faced by the train and improve train data security and operational stability.
[0045] The foregoing description is of specific embodiments of the present invention. In some cases, the actions or steps described in the embodiments of the present invention may be performed in an order different from that shown in the embodiments and still achieve the desired results. In addition, the processes depicted in the accompanying drawings do not necessarily require the specific order or sequential order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.
[0046] The method of the above embodiment is applied to the corresponding system in the above embodiment and has the beneficial effects of the corresponding system embodiment, which will not be described in detail here.
[0047] Those skilled in the art should understand that the discussion of any of the above embodiments is merely illustrative and is not intended to imply that the scope of the present disclosure is limited to these examples. Based on the concept of the present disclosure, the technical features in the above embodiments or different embodiments may be combined, the steps may be implemented in any order, and there are many other variations of the different aspects of the embodiments of the present invention as described above, which are not provided in detail for the sake of simplicity.
[0048] The embodiments of the present invention are intended to cover all such substitutions, modifications, and variations that fall within the broad scope of the appended claims. Therefore, any omissions, modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the embodiments of the present invention should be included in the scope of protection of this disclosure.
Claims
1. A train-mounted safety monitoring cloud system, characterized by: The train onboard safety monitoring cloud system includes: The train data security subsystem is connected to the ground service network, the train control network and the train information network, and is used for secure identification and forwarding of data with the ground service network, the train control network and the train information network; The train health management subsystem is connected to the train data security subsystem and is used for intelligent operation and maintenance of various train systems and equipment; A train safety monitoring subsystem, connected to the train data security subsystem and the train health management subsystem, for monitoring train operation safety; Train emergency management subsystem: connected to the train data security subsystem and the train safety monitoring subsystem, used for remote emergency control of train operation; The external data of the train safety monitoring subsystem, the train health management subsystem and the train emergency management subsystem are securely identified by the train data security subsystem and then transmitted to the ground service network, the train control network or the train information network; The data of the ground service network, the train control network or the train information network is securely managed by the train data security subsystem and then forwarded to the train safety monitoring subsystem, the train health management subsystem and the train emergency management subsystem; The train data security subsystem isolates the data of the ground service network, the train control network and the train information network to ensure the secure exchange of data among the ground service network, the train control network and the train information network; The train data security subsystem includes a first data security subsystem and a second data security subsystem. The first data security subsystem communicates with the ground service network, and the second data security subsystem is communicatively connected to the train control network and the train information network. The first data security subsystem and the second data security subsystem are both connected to the train safety monitoring subsystem, the train health management subsystem and the train emergency management subsystem.
2. The train-mounted safety monitoring cloud system according to claim 1, characterized in that: The train data security subsystem, the train safety monitoring subsystem, the train health management subsystem and the train emergency management subsystem are connected via an internal communication network.
3. The train-mounted safety monitoring cloud system according to claim 2, characterized in that: The internal communication network is optical fiber or Ethernet.
4. The train-mounted safety monitoring cloud system according to claim 1, characterized in that: The train data security subsystem manages the access data and devices securely through security policies including but not limited to dynamic host configuration protocol services, device IP address whitelist, MAC address whitelist, communication port whitelist, and VLAN division.
5. A train safety monitoring system, characterized in that: The train safety monitoring system includes: a ground service network and a train onboard safety monitoring cloud system according to any one of claims 1 to 4.
6. A train safety monitoring method applied to a train onboard safety monitoring cloud system according to any one of claims 1 to 4, characterized in that: The train safety monitoring method comprises: Data from the ground service network, train control network, and train information network are securely managed by the train data security subsystem and forwarded to the train safety monitoring subsystem and train health management subsystem; Monitoring train operation safety through the train safety monitoring subsystem; Intelligent operation and maintenance of various train systems and equipment are carried out through the train health management subsystem; The external data of the train safety monitoring subsystem and the train health management subsystem are securely identified by the train data security subsystem and then transmitted to the ground service network, the train control network or the train information network.
Citation Information
Patent Citations
Integrated system of mobile application platform and Intranet-Internet data security exchange platform
CN106209801A
Industrial communication gateway, and industrial data security isolation system and method
CN108494672A