Intelligent management control system of rail train

Abstract

The embodiment of the invention provides an intelligent management control system for a rail train, and the system comprises IMCUs, and a head train and a tail train of the train are respectively provided with one IMCU; each train subsystem of the rail train, each IMCU and the train subsystem are connected through wireless communication; each train subsystem comprises but is not limited to a real-time monitoring system, a bow net monitoring system, a running gear monitoring system, a train door system and a storage battery state monitoring system; wherein the train subsystem is used for forming monitoring data, and the monitoring data comprises train state information and fault information; and the IMCU is used for carrying out data lossless acquisition on monitoring data of the train subsystem. The technical problem that the reliability of remote guidance and maintenance is insufficient due to the fact that processing and transmission of important monitoring information in an existing train are insufficient is solved.

Description

Technical Field

[0001] The present application relates to the field of rail transit technology, and in particular, to an intelligent management and control system for rail trains. Background Art

[0002] With the rapid development of urban rail transit, the production business supporting safe operation is increasing. There is an urgent need to reliably transmit information such as train operation status and faults to the ground, so that ground operation and maintenance personnel can timely understand the vehicle operation status, thereby providing remote expert technical support and remote diagnosis for train operation. The vehicle intelligent management system is a ground software system platform that supports train operation inspection and maintenance. Its main function is to rely on the train control and diagnostic system (TCMS) and the intelligent monitoring system to realize the basic data of each subsystem of the vehicle through wireless transmission channels or public networks, thereby providing remote expert technical support and remote diagnosis for train operation. The intelligent monitoring system can access the train TCMS network / subsystem network through the multi-function vehicle bus (MVB bus) and Ethernet bus to obtain train data, and access the vehicle-ground wireless network through a unified communication interface to transmit the collected data to the ground intelligent expert diagnosis system, thereby improving the level of intelligent management of trains and operational efficiency.

[0003] In the existing technical solution, each system of the train transmits data with TCMS through MVB bus / Ethernet connection. Each system of the train includes train signal system, traction system (TCU), braking system (BCU), auxiliary power supply system (SIV), air conditioning system (HVAC), door intelligent monitoring system (DOOR), passenger information system (PIS), fire alarm (FAS), running gear monitoring system (RDS), anti-collision system and pantograph monitoring system (PMS), etc. For important real-time information of mainline trains and subsystems, important fault information such as fire alarm, the existing central control unit (CCU) or data recorder (ERM) device in the TCMS system is used as a data sending device to send train data to relevant ground professionals, so as to be used for the ground control center to understand and guide the troubleshooting of mainline trains in real time. However, as a non-dedicated on-board data sending device, CCU / ERM has deficiencies in data processing capability, subsystem proprietary data transmission, vehicle-ground safety authentication, and data lossless download, which will greatly reduce the reliability of remote guidance operation and maintenance.

[0004] The details are as follows:

[0005] (1) Insufficient network data processing capabilities. The data transmission device not only processes vehicle control logic / vehicle data records, but also processes vehicle-to-ground transmission data, which limits the CPU processing power and storage capacity.

[0006] (2) The subsystem’s proprietary data processing capability is poor. For subsystems such as TCU and BCU, their internal proprietary data cannot be transmitted through TCMS. When proprietary channels or dedicated tools are required for transmission, CCU / ERM, as the vehicle-mounted data transmission device, cannot have the interface or cannot support the proprietary data transmission protocol.

[0007] (3) Network CCU / ERM, as an on-board data transmission device, does not have the vehicle-ground security authentication function and cannot achieve secure data transmission;

[0008] (4) Network CCU / ERM, as an on-board data transmission device, lacks a mechanism to ensure lossless data download, which hinders data analysis by the ground intelligent expert diagnosis system.

[0009] Therefore, there are deficiencies in many aspects of the processing and transmission of important monitoring information in existing trains, resulting in technical problems such as insufficient reliability of remote guidance and maintenance.

[0010] The above information disclosed in the background section is only for enhancing understanding of the background of the present application and therefore it may contain information that does not form the prior art known to a person of ordinary skill in the art. Summary of the invention

[0011] The embodiment of the present application provides an intelligent management and control system for rail trains to solve the technical problem that the processing and transmission of important monitoring information in existing trains are insufficient, resulting in insufficient reliability of remote guidance and maintenance.

[0012] The intelligent management and control system of a rail train in an embodiment of the present application includes:

[0013] IMCU, the head car and the tail car of the train are each equipped with an IMCU;

[0014] Each train subsystem of a rail train, each of the IMCU and the train subsystem is connected via wireless communication; each train subsystem includes but is not limited to a real-time monitoring system, a pantograph monitoring system, a running gear monitoring system, a door system, and a battery status monitoring system;

[0015] Among them, the train subsystem is used to form monitoring data, which includes train status information and fault information; IMCU is used to collect the monitoring data of the train subsystem without loss of data.

[0016] The embodiment of the present application adopts the above technical solution, which has the following technical effects:

[0017] In the intelligent management and control system of the rail train of the embodiment of the present application, the train subsystem is used to form monitoring data, and the monitoring data includes train status information and fault information. The head car and the tail car are each equipped with an IMCU, and each of the IMCUs is connected to the train subsystem via wireless communication. The IMCU is used to perform data lossless collection of the monitoring data of the train subsystem. Data lossless collection is achieved for the monitoring data, providing a data basis for the intelligent management and control system of the rail train of the embodiment of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0019] Figure 1 A schematic diagram of a rail train using the intelligent management and control system of the rail train of the present application;

[0020] Figure 2 A schematic diagram of an intelligent management and control system for a rail train of the present application;

[0021] Figure 3 for Figure 2 The flowchart of the IMCU of the intelligent management and control system shown in the figure performs lossless data collection on the monitoring data of the SED of each train subsystem;

[0022] Figure 4 for Figure 2 A flow chart of a control method for performing data analysis on collected real-time monitoring data by a real-time data transmission control module of an IMCU of the intelligent management and control system shown;

[0023] Figure 5 for Figure 2 The IMCU of the intelligent management and control system shown is used to send the analyzed monitoring data to the flow chart of the ground intelligent expert diagnosis system;

[0024] Figure 6 for Figure 2 Schematic diagram of the intelligent protection control method of the intelligent management and control system shown;

[0025] Figure 7 for Figure 2 The flowchart of the two-way authentication between the IMCU of the intelligent management and control system and the ground intelligent expert diagnosis system is shown;

[0026] Figure 8 for Figure 2 The flowchart shown is that the IMCU of the intelligent management and control system controls the ground intelligent expert diagnosis system to download lossless data from the IMCU. DETAILED DESCRIPTION

[0027] In order to make the technical solutions and advantages in the embodiments of the present application more clearly understood, the exemplary embodiments of the present application are further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than an exhaustive list of all the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments can be combined with each other without conflict.

[0028] A unified explanation of the English in this application:

[0029] Intelligent monitoring and certification unit, referred to as IMCU.

[0030] Vehicle fixed terminal equipment, Standard End Device, referred to as SED.

[0031] Transmission Control Protocol, referred to as TCP, is a connection-oriented, reliable, byte stream-based transport layer communication protocol.

[0032] GDS is the abbreviation of ground delivery service.

[0033] GDS is the abbreviation of General Data Service in English, and Ground Server in Chinese.

[0034] Embodiment 1

[0035] like Figure 1 and Figure 2 As shown, the intelligent management and control system of the rail train in the embodiment of the present application includes:

[0036] IMCU, the head car and the tail car of the train are each equipped with an IMCU;

[0037] Each train subsystem of a rail train, each of the IMCU and the train subsystem is connected via wireless communication; each train subsystem includes but is not limited to a real-time monitoring system, a pantograph monitoring system, a running gear monitoring system, a door system, and a battery status monitoring system;

[0038] Among them, the train subsystem is used to form monitoring data, which includes train status information and fault information; IMCU is used to collect the monitoring data of the train subsystem without loss of data.

[0039] In the intelligent management and control system of the rail train of the embodiment of the present application, the train subsystem is used to form monitoring data, and the monitoring data includes train status information and fault information. The head car and the tail car are each equipped with an IMCU, and each of the IMCUs is connected to the train subsystem via wireless communication. The IMCU is used to perform data lossless collection of the monitoring data of the train subsystem. Data lossless collection is achieved for the monitoring data, providing a data basis for the intelligent management and control system of the rail train of the embodiment of the present application.

[0040] In implementation, such as Figure 1 and Figure 2 As shown, the intelligent management and control system of the rail train also includes:

[0041] A ground intelligent expert diagnosis system, each of the IMCUs and the ground intelligent expert diagnosis system are connected via wireless communication;

[0042] IMCU is also used to analyze the collected monitoring data and send it to the ground intelligent expert diagnosis system;

[0043] IMCU is also used for two-way authentication with the ground intelligent expert diagnosis system;

[0044] IMCU is also used to control the ground intelligent expert diagnosis system to download lossless data from IMCU;

[0045] Among them, the monitoring data includes real-time monitoring data and non-real-time monitoring data. The real-time monitoring data includes real-time operation data and real-time fault data. The non-real-time monitoring data includes non-real-time operation data. The non-real-time monitoring data is stored in the data storage module of the IMCU. The real-time monitoring data is stored in the data storage module of the IMCU and is transmitted in real time with the ground intelligent expert diagnosis system.

[0046] The transmission path of monitoring data is: each train subsystem generates monitoring data, IMCU collects monitoring data losslessly, and IMCU analyzes the collected monitoring data and sends it to the ground intelligent expert diagnosis system. Before the transmission of monitoring data, two-way authentication is required between IMCU and the ground intelligent expert diagnosis system to ensure the security of the transmitted monitoring data.

[0047] In implementation, IMCU is also used for master-slave data backup between two IMCUs;

[0048] IMCU is also used for its own intelligent protection.

[0049] Specifically, each train subsystem sends train status information and fault information to the IMCU via MVB / Ethernet communication.

[0050] Specifically, the IMCU establishes a wireless connection with the ground intelligent expert diagnosis system through LTE / 4G / 5G and other means.

[0051] Specifically, the IMCU is used to perform the following management and control methods:

[0052] Lossless data collection between IMCU and various train subsystems;

[0053] IMCU analyzes the collected data and sends it to the ground intelligent expert diagnosis system;

[0054] IMCU's own intelligent protection;

[0055] Two-way authentication between IMCU and ground intelligent expert diagnosis system;

[0056] The ground intelligent expert diagnosis system downloads lossless data from the IMCU;

[0057] Master-slave data backup between two IMCUs.

[0058] All intelligent trains in this application should be equipped with a vehicle intelligent management and control system, which has heterogeneous data collection, storage, forwarding, intelligent retrieval and transmission functions, and provides reliable data and stable transmission channels for fault diagnosis and hidden danger mining of intelligent networking-related equipment, laying the foundation for accelerating the realization of intelligent train status repair. The overall design of the vehicle intelligent management system adopts an intelligent monitoring and certification unit (IMCU for short), which can manage the networked intelligent subsystem and realize the networking architecture with the ground intelligent expert diagnosis system through the vehicle-to-ground transmission channel WLAN / LTE. The intelligent monitoring and certification unit IMCU can provide reliable data and stable transmission channels for fault diagnosis and hidden danger mining of intelligent networking-related equipment, laying the foundation for accelerating the realization of train status repair.

[0059] The intelligent management and control system mainly consists of an intelligent monitoring and authentication unit, an on-board antenna and other equipment, each of which is equipped with an intelligent monitoring and authentication unit in the head car and the tail car of the whole train. The data preprocessing module of the intelligent monitoring and authentication unit IMCU supports data preprocessing functions such as invalid value identification within the valid value range, so as to ensure the quality of collected data; through the large-capacity storage module, file cache storage including Ethernet offline data files is stored; the on-board energy storage capacitor module can achieve a short-term maintenance of the whole machine working for about 10 seconds when the external input power is cut off; the safety communication module provides communication guarantee, supports network disconnection re-dial, network disconnection reconnection, and packet loss retransmission mechanism, to ensure the reliability of Ethernet data collection and information train-to-ground transmission.

[0060] In the train network, if the train control network (TCMS) adopts the multi-function vehicle bus (MVB) communication, and the train builds the vehicle intelligent management network and maintenance network based on Ethernet communication, the intelligent monitoring and authentication unit is connected to the TCMS, vehicle intelligent management network and maintenance network through the MVB and Ethernet interfaces respectively; if the train control network adopts Ethernet communication, the train TCMS is integrated with the vehicle intelligent management network, maintenance network, etc., and the intelligent monitoring and authentication unit is connected to the integrated network through the Ethernet interface.

[0061] According to the specific actual application requirements, the intelligent monitoring and authentication unit collects TCMS data, or realizes in-vehicle Ethernet collection through the vehicle's TCU, BCU and other subsystems. The sampling and sending frequency can reach 100 milliseconds, which can meet the full data port collection and upload function based on the communication bus.

[0062] In the implementation, the IMCU is used to collect the monitoring data of each train subsystem without loss of data. Specifically, the IMCU collects the monitoring data of the SED of each train subsystem without loss of data, such as Figure 3 As shown, including the following:

[0063] When the TCP connection between SED and IMCU is normal and the life signal is normal,

[0064] Step S321: SED sends the original monitoring data of the storage status to IMCU;

[0065] Step S322: The IMCU receives the original monitoring data of the storage status, analyzes, searches, and packages the data into data storage information and sends it to the SED;

[0066] Step S323: SED receives the latest data storage information; and obtains the subsequent state original monitoring data starting from the latest data storage information locally, and then encapsulates the subsequent state original monitoring data and sends it to IMCU;

[0067] Step S324: The IMCU receives the latest original monitoring data and stores it in a local corresponding file;

[0068] Step S325: The IMCU encapsulates the received original monitoring data of the latest status to form data storage information and sends it to the SED;

[0069] Return to step S323;

[0070] Among them, SED is the English abbreviation for vehicle fixed terminal equipment.

[0071] In implementation, such as Figure 3 As shown, the method for judging whether the TCP connection between the SED and the IMCU is normal and whether the life signal is normal includes the following steps:

[0072] Step S311: SED initiates a TCP connection to IMCU;

[0073] Step S312: Determine whether the TCP connection is successful:

[0074] If the connection is unsuccessful, jump to step S311;

[0075] If the connection is successful, continue to step S313;

[0076] Step S313: The SED and the IMCU monitor each other's life signals;

[0077] Step S314: Determine whether the vital signal is normal:

[0078] If the vital signal is abnormal, jump to step S313;

[0079] If the life signal is normal, the TCP connection between the SED and the IMCU is normal and the life signal is normal, execute step S321;

[0080] Among them, TCP is the abbreviation of Transmission Control Protocol.

[0081] In implementation, such as Figure 3 As shown, step S322 specifically includes the following steps:

[0082] Step S322-1: IMCU receives the original monitoring data of the storage status sent by SED;

[0083] Step S322-2: The IMCU analyzes and obtains the device information of the SED; wherein the device information of the SED includes device type identification, switch code, switch end interface code, vehicle soft address, vehicle hard address, train code, IP address, process code and behavior code information;

[0084] Step S322-3: The IMCU searches for the data and location information of the device that has been successfully stored recently based on the model identification, switch code, switch end interface code, vehicle soft address, vehicle hard address, train code, IP address, process code, and behavior code information as data storage information;

[0085] Step S322-4: The IMCU encapsulates the data storage information of the original monitoring data and sends it to the SED.

[0086] In implementation, such as Figure 4 As shown, the control method for the real-time data transmission control module of the IMCU to perform data parsing on the collected real-time monitoring data includes:

[0087] Step S411: Establishing a connection between the IMCU for real-time data transmission and each train subsystem;

[0088] Step S412: IMCU receives real-time monitoring data;

[0089] Step S413: The IMCU determines whether the protocol of the received real-time monitoring data is correct:

[0090] If the protocol is correct, execute step S414;

[0091] If the protocol is incorrect, jump to step S418;

[0092] Step S414: IMCU parses the frame sequence number;

[0093] Step S415: Determine whether the frame sequence number is valid:

[0094] If the frame sequence number is valid, execute step S416;

[0095] If the frame sequence number is invalid, execute step S419;

[0096] Step S419: Determine whether the number is lost: if the number is lost, jump to step S412; if not, jump to step S420;

[0097] Step S416: Real-time monitoring data is confirmed to be valid;

[0098] Step S417: performing analysis, wherein the analysis content includes one or more of global protocol analysis, forwarding protocol analysis, fault code analysis, operating status analysis, traction system analysis, braking system analysis, and air conditioning system analysis;

[0099] Step S418: The real-time monitoring data of the train is entered into the database;

[0100] Step S420: The protocol parsing of a single real-time monitoring data packet is completed.

[0101] In implementation, such as Figure 5 As shown, the IMCU is also used to send the parsed monitoring data to the ground intelligent expert diagnosis system, including the following steps:

[0102] Step S511: The IMCU frames the parsed monitoring data and stores it in a buffer area;

[0103] Step S512: The IMCU caches the real-time data in the real-time data cache area;

[0104] Step S513: Determine whether there is data in the cache at a certain interval:

[0105] If there is data, execute step S514;

[0106] If there is no data, jump to step S512;

[0107] Step S514: Determine whether the content of the data area is greater than the limit value:

[0108] If the content of the data area is not greater than the limit value, execute step S515;

[0109] If the content of the data area is greater than the limit value, execute step S523;

[0110] Step S523: write the file, save the data that has not been sent or failed to be sent, and clear the buffer area content; then jump to step S512;

[0111] Step S515: sending data to the TCP-Client module; wherein the TCP-Client module is a TCP-client module;

[0112] Step S516: The TCP-Client module sends data to the server;

[0113] Step S517: Determine whether the communication is successful:

[0114] If the communication is successful, execute step S521: delete the data from the buffer area, and then jump to step S512;

[0115] If the communication is unsuccessful, execute step S522: if the TCP-Client module sends data to the server and resends it three times and still fails, then jump to step S512;

[0116] The initiator of the TCP connection is the TCP-Client module, and the receiver of the TCP connection is the TCP server (ie, TCPServer).

[0117] In implementation, such as Figure 7 As shown, the bidirectional authentication between the IMCU and the ground intelligent expert diagnosis system is specifically the bidirectional identity authentication between the IMCU and the GDS of the ground intelligent expert diagnosis system. The bidirectional identity authentication method between the IMCU and the GDS includes the following:

[0118] Step S711: IMCU initiates a TCP connection to GDS;

[0119] Step S712: Determine whether the TCP connection is successful:

[0120] If the TCP connection is unsuccessful, jump to step S711;

[0121] If the TCP connection is successful, the IMCU will verify whether the GDS's identity is legal;

[0122] If the IMCU verifies that the identity of the GDS is not legitimate, then jump to step S711;

[0123] When IMCU verifies the legality of GDS's identity, GDS will verify the legality of IMCU's identity:

[0124] When GDS verifies that the identity of IMCU is legitimate, it determines that both IMCU and GDS are legitimate, and successfully establishes a secure TCP connection;

[0125] If the GDS verifies that the identity of the IMCU is illegal, it jumps to step S771;

[0126] Step S771: GDS disconnects.

[0127] In implementation, after the TCP connection is successful, the process of IMCU verifying whether the identity of GDS is legal includes the following steps:

[0128] Step S721: GDS sends public_GDS and digital signature to IMCU; public_GDS is the GDS data public key module;

[0129] Step S722: After receiving public_GDS and the digital signature, the IMCU uses public_Hash to verify the digital signature; where public_Hash is a public key signature verification module;

[0130] Step S723: Determine whether the digital signature verification is successful:

[0131] After the digital signature verification is successful, execute step S731;

[0132] If the digital signature verification fails, jump to step S711;

[0133] Step S731: IMCU generates an impact number, and uses public_GDS to encrypt the impact number to form an impact number ciphertext, and sends it to GDS;

[0134] Step S732: GDS receives the impact number ciphertext and sends the digital signature to IMCU;

[0135] Step S733: IMCU uses public_GDS, impact number ciphertext and received digital signature for signature verification;

[0136] Step S734: Determine whether the digital signature verification is successful:

[0137] After the digital signature verification is successful, IMCU verifies the legality of GDS identity, and then GDS verifies whether IMCU's identity is legal;

[0138] If the digital signature verification fails, jump to step S711.

[0139] In implementation, such as Figure 7 As shown in the figure, after the IMCU verifies the legality of the GDS identity, the process of GDS verifying whether the IMCU identity is legal includes the following steps:

[0140] Step S741: IMCU sends public_IMCU and digital signature to GDS; public_IMCU is the IMCU data public key module;

[0141] Step S742: After receiving the public_IMCU and the digital signature, the GDS uses the public_Hash to verify the digital signature;

[0142] Step S743: Determine whether the digital signature verification is successful:

[0143] After the digital signature verification is successful, execute step S751;

[0144] If the digital signature verification fails, jump to step S771;

[0145] In implementation, such as Figure 4 As shown, step S751: GDS generates an impact number, and uses public_IMCU to encrypt the impact number to form an impact number ciphertext, and sends it to IMCU;

[0146] Step S752: IMCU receives the impact number ciphertext and sends the digital signature to GDS;

[0147] Step S753: GDS uses public_IMCU, impact number ciphertext and received digital signature for signature verification;

[0148] Step S754: Determine whether the digital signature verification is successful:

[0149] After the digital signature verification is successful, execute step S761;

[0150] If the digital signature verification fails, jump to step S771;

[0151] like Figure 7 As shown, step S761: GDS verifies that the IMCU identity is legitimate, and then determines that the IMCU and GDS have successfully established a secure TCP connection; then jump to step S781;

[0152] After step S771, jump to step S781.

[0153] For the process of "Step S732: GDS receives the impact number ciphertext and sends the digital signature to IMCU", the main steps are as follows:

[0154] 1) GDS receives the impact number ciphertext;

[0155] 2) GDS uses private_GDS to decrypt and obtain the plaintext of the impact number; where private_GDS is the GDS data private key module;

[0156] 3) GDS uses private_GDS to digitally sign the plaintext of the impact number;

[0157] 4) GDS sends the digital signature to IMCU.

[0158] For the process of "Step S752: IMCU receives the impact number ciphertext and sends the digital signature to GDS", the main steps are as follows:

[0159] 1) IMCU receives the impact number ciphertext;

[0160] 2) IMCU uses private_IMCU to decrypt and obtain the plaintext of the impact number; where private_IMCU is the IMCU data private key module;

[0161] 3) IMCU uses private_IMCU to digitally sign the impact number plaintext;

[0162] 4) IMCU sends the digital signature to GDS.

[0163] In implementation, such as Figure 8 As shown, the IMCU controls the ground intelligent expert diagnosis system to download lossless data from the IMCU, including the following:

[0164] Step S811: GDS obtains the data download request and forms a data download request ciphertext and sends it to IMCU;

[0165] Step S821: The IMCU receives the data download request ciphertext and uses a decryption algorithm to decrypt the ciphertext to form a data download request plaintext.

[0166] Step S822: The IMCU successfully obtains the download file information from the data download request plain text, the download file information includes the file name, the successful download size, whether the download is completed, and the total file size;

[0167] like Figure 8 As shown, step S830: determine whether the file name length in the downloaded file information is zero:

[0168] If the length of the file name in the downloaded file information is not zero, execute step S832;

[0169] If the length of the file name in the downloaded file information is zero, execute step S833;

[0170] Step S833: IMCU retrieves and obtains file information and reads the starting position; then, executes step S841;

[0171] like Figure 8 As shown, step S831-1: determine whether the download is complete:

[0172] If the download is complete, execute step S831-2;

[0173] If the download is not complete, execute step S832-1;

[0174] like Figure 8 As shown, in step S831-2, the IMCU retrieves the next file from the file list in the buffer area, and the file records are sorted in ascending order according to time sequence; the file includes a real-time data packet and / or a non-real-time data packet;

[0175] Step S831-3: Determine whether there are any undownloaded files in the file list:

[0176] If there are still undownloaded files in the list, execute step 831-4;

[0177] Step S831-4: The IMCU obtains the file information of the undownloaded file including: file name, total file size, file content, and sets the file reading start position (i.e., Start Position) to 0; then, executes step S841;

[0178] like Figure 8 As shown, if there is no undownloaded file in the list, execute step S831-5;

[0179] Step S831-5: IMCU sends the information that SED has no latest device status file to download to GDS;

[0180] Step S831-6: GDS obtains another SED status file data download record; then jumps to step S811;

[0181] like Figure 8 As shown, step S832-1: IMCU locally retrieves the file according to the file name;

[0182] Step S832-2: Determine whether the file is successfully retrieved;

[0183] If the file is successfully retrieved, execute step S832-3;

[0184] If the file is not successfully retrieved, jump to step S831-2;

[0185] Step S832-3: IMCU sets the file reading start position (i.e., Start Position) to SuccessSize+1; then, executes step S841;

[0186] like Figure 8 As shown, step S841: IMCU records the above download information and encapsulates the data frame and sends it to GDS;

[0187] Step S842: GDS receives data frame;

[0188] Step S843: Determine whether the GDS verification block digital summary passes:

[0189] If the GDS verification block digital summary passes, execute step S844;

[0190] Step S844: GDS determines whether it is a new file:

[0191] If the GDS determines that the file is not a new file, it executes step S845;

[0192] Step S845: GDS stores the file data locally and records the file download success information;

[0193] If the GDS verification block digital summary fails, execute step S843-1;

[0194] like Figure 8 As shown, step S843-1: GDS records the reason for verification failure; then jumps to step S811;

[0195] like Figure 8 As shown, if the GDS determines that it is a new file, it executes step S844-1; then jumps to step S845;

[0196] Step S844-1: GDS creates a file name locally according to the file name in the data protocol, and executes step S845;

[0197] After step S845, execute step S846;

[0198] Step S846: Determine whether all the contents in the file are downloaded completely?

[0199] If all the contents in the file are downloaded completely, execute step S847;

[0200] If all the contents in the file are not downloaded completely, execute step S846-1;

[0201] like Figure 8As shown, step S847: GDS identifies the successful download of integrity information; then execute steps S846-1 and S848;

[0202] Step S848: GDS records the successful and complete download information in the file list;

[0203] Step S846-1: GDS will check whether the successfully downloaded block information is complete and send it to IMCU.

[0204] The present application is introduced below based on an embodiment of the intelligent management and control system of a rail train of the present application.

[0205] Figure 1 Schematic diagram of a rail train using the intelligent management and control system of the rail train of the present application. Figure 1 As shown, in the embodiment of the present application, the control network adopts a gigabit jumping ring intelligent Ethernet structure as an example for explanation. The intelligent management control system (i.e., the vehicle intelligent management network) communicates with the train control and diagnostic system (TCMS) in the vehicle and the control units of each subsystem of the train through the Ethernet interface, and is mainly used for real-time monitoring of the comprehensive status of the vehicle and real-time reminder of remote faults. The intelligent monitoring and authentication unit IMCU collects data intelligently, mainly including three parts: hard-wired signal data, communication transmission status and fault data of each subsystem, and sensor online monitoring data. The data is transmitted to the ground 100% in real-time wirelessly through intelligent safety protection. At the same time, after the train returns to the depot, it can also download the intelligent system data to the ground server in batches through the depot WLAN network.

[0206] like Figure 1 As shown, the intelligent monitoring and authentication unit IMCU relies on the TCMS network / Ethernet information network to obtain real-time data of each subsystem on the train, and establishes a wireless connection with the ground through LTE / 4G / 5G and other methods. When using LTE, the Ethernet interface on the IMCU host is connected to the on-board switch device of the LTE channel, and wireless data transmission is carried out through the antenna of the LTE channel; when using 4G / 5G, the IMCU host will be equipped with a 4G / 5G communication board, or a separate wireless gateway conversion module will be used, and then data transmission will be carried out through the matching wireless antenna. For the collection of non-real-time offline data record files through Ethernet, when the train returns to the depot, the Wi-Fi system network in the depot can be used to achieve rapid landing requirements.

[0207] In the present invention, the TCMS system, running gear monitoring system, catenary monitoring system, door intelligent monitoring system, battery monitoring system (BMS), etc. send train status information and fault information to the intelligent monitoring authentication unit IMCU through MVB / Ethernet communication. After receiving the data, the IMCU parses and stores it, and packages and sends the data through the transmission control module. At the same time, in order to ensure the reliability and security of data transmission, the legitimacy of the ground equipment is authenticated by the IMCU and the legitimacy of the ground equipment is authenticated by the IMCU, so as to realize lossless download of train data, thereby providing a data basis for comprehensive monitoring of ground train status, fault alarm analysis, and intelligent hidden danger mining of vehicle equipment, thereby improving the efficiency of vehicle operation and maintenance, greatly reducing the probability of train accidents caused by human errors, and improving the reliability of train operation.

[0208] Figure 2 A schematic diagram of an intelligent management and control system for a rail train of the present application;

[0209] Figure 2 In the IMCU, the management and control method of train intelligent monitoring and authentication is as follows:

[0210] 1) Intelligent collection (lossless data collection);

[0211] 2) Intelligent processing (data analysis, data transmission);

[0212] 3) Intelligent protection (firewall, VPN and other protection strategies);

[0213] 4) Intelligent authentication (two-way authentication with ground equipment);

[0214] 5) Smart Download (100% lossless data download)

[0215] 6) Intelligent backup (master-slave data backup), etc.

[0216] In the present invention, when the operating status and fault data of vehicle fixed terminal devices (Standard End Device, SED) such as TCMS, RDS, PMS, DOOR, BMS, etc. communicate with IMCU through MVB / Ethernet, taking TCP-based Ethernet communication as an example, the data lossless collection process control method between SED and IMCU is as follows.

[0217] Figure 3 for Figure 2 The flowchart shown is that the IMCU of the intelligent management and control system performs lossless data collection on the monitoring data of the SED of each train subsystem.

[0218] superior Figure 3In the process, the train data terminal subsystem SED sends real-time data to IMCU via TCP for data caching. IMCU acts as a TCP server and sends the subsystem data packets to the ground intelligent expert diagnosis system. The main processing process of "IMCU receives, analyzes, searches and encapsulates data storage information and sends it to SED" is as follows:

[0219] 1) IMCU receives the storage status raw data request from SED;

[0220] 2) IMCU analyzes and obtains the SED’s device type identification, switch code, switch-side interface code, vehicle soft address, vehicle hard address, train code, IP address, process code, and behavior code;

[0221] 3) IMCU searches for the most recently successfully stored data and its location information of the device based on the device type identification, switch code, interface code, address soft code, train code, and IP address;

[0222] 4) Encapsulate the latest data storage information and send it to SED.

[0223] In the present invention, after receiving the original train operation status data sent by each SED, the IMCU parses the distributed sub-packaging of each subsystem data, and processes and sends the data after data fusion, cleaning and feature extraction. Figure 4 shown.

[0224] Figure 4 for Figure 2 A flow chart of a control method for performing data analysis on collected real-time monitoring data by a real-time data transmission control module of an IMCU of the intelligent management and control system shown;

[0225] In the present invention, after the IMCU analyzes the received operating status data of each system, it processes each system in the buffer area and determines whether there is packet loss and damage, and then sends the data to the ground intelligent expert diagnosis system. At the same time, after the primary analysis of the data, the abnormal results of the analysis are sent to the on-board HMI of the train network control system for display, realizing the timely fault detection function. The IMCU data transmission process control method is as follows Figure 5 shown.

[0226] like Figure 5As shown, the program running in IMCU will automatically frame the received sub-device data, and the framed data will be stored in the real-time data buffer. Every certain interval (such as 500ms) will determine whether there is data in the buffer. If no data is detected, it will be resent to realize the packet loss retransmission function. If data is detected, the program will further automatically determine whether the content of the data area is greater than the limit value. If it is greater than the limit value, it will write a file to save the data that has not been sent or failed to send, thereby preventing data loss caused by abnormalities such as power failure. If it is within the limit value range, the program will send the data to the TCPClient module of IMCU, and the data will be sent to the ground server device through the TCPClient module. When IMCU detects that the communication connection with the ground server is successfully established, it will delete this part of the data from the IMCU buffer and continue to send the subsequent data packets. The data transmission process must be carried out under normal power supply conditions of the vehicle equipment, and is jointly guaranteed by the vehicle TCMS, each subsystem, IMCU, wireless transmission channel and ground server. If there is abnormal power supply, channel blockage or insufficient bandwidth, data transmission will be affected. IMCU effectively solves the original problems of data access delay, poor network environment, data packet loss, etc., and provides a foundation for subsequent vehicle-centric data interaction.

[0227] The IMCU in the present invention has the functions of data framing and feature extraction, and can timely transmit important data to the ground intelligent expert diagnosis system through the wireless communication channel. When wireless data transmission is carried out with ground equipment, in order to ensure the security and reliability of data transmission, relevant information input security protection strategies will be carried out, such as:

[0228] 1) IMCU provides dual VLAN forwarding technology to prevent penetration of transparent transmission technology;

[0229] 2) IMCU provides firewall function to filter the data process entering the vehicle network and prevent illegal process intrusion;

[0230] 3) IMCU provides application layer VPN technology to prevent the penetration of application layer data;

[0231] 4) IMCU provides two-way identity authentication technology to prevent illegal terminals from gaining the trust and infiltration of IMCU.

[0232] Figure 6 for Figure 2 The schematic diagram of the intelligent protection control method of the intelligent management control system shown.

[0233] In order to prevent interference and misoperation between devices from different manufacturers and to ensure that functions of different subnets do not interfere with each other, VLAN technology is used to intelligently isolate different subnets or devices of different categories. The IMCU collects data by accessing different VLAN subnets in the vehicle, and then forwards the data to the local area network of the vehicle-ground wireless channel through routing strategies, thereby realizing dual VLAN data forwarding.

[0234] Since the IMCU device network has an interface with the external wireless communication network, the on-board firewall blocking and filtering strategy deployed in series between the two can solve the problem of unauthorized access and login to the train network from the outside, and can also provide monitoring and protection for abnormal messages, abnormal traffic, and external intrusion behaviors to meet the requirements for security boundaries in the security framework. Access strategies can include access control, application whitelists, heartbeat monitoring, NAT, session restrictions, and status monitoring. For example, when performing access control on data packets, the IMCU firewall module can verify the policy based on the source address, destination address, protocol type, source port, destination port, and network interface of the data packet to determine whether access is allowed. By setting up a soft firewall or an independent firewall board, the logical function isolation of the internal network and the external information interaction network can be achieved.

[0235] The train can realize wireless Internet access such as WLAN, 4G, and 5G by adding wireless communication modules to the IMCU. The full range of security products can flexibly support ADSL, static IP, DHCP and other Internet access methods. In order to ensure the security of the IMCU before accessing the VPN, when the user logs in to the VPN, the system will check the health status of the client's IMCU host, including the host's operating system, whether the firewall software is installed, whether the anti-virus software is installed, whether the latest patch is installed, and other information. If the host is in poor health, the administrator can restrict the IMCU host from connecting to the wireless LAN. Install an application layer VPN, such as installing an IPSec VPN client on the IMCU, so that the ground control center (OCC) application server can be accessed through an encrypted tunnel. This ensures the encryption and immutability of data transmission.

[0236] Through two-way vehicle-ground authentication, the ground equipment can be securely identified to ensure that the data source meets the design expectations. Setting IMCU device authentication, authority management and other secure access functions can be achieved through identity intelligent recognition, wireless identity confirmation, asymmetric encryption, public key encryption or private key decryption and other technologies.

[0237] In the present invention, the IMCU and the ground server (GDS) realize two-way authentication, and can quickly retrieve vehicle data from the local according to the ground requirements. After retrieving the local data online, the train characteristic data and the original data are sent to the ground server in time. At the same time, the real-time status of the on-board intelligent Ethernet network can be sent to the ground server to realize remote real-time monitoring of the train status, and finally guide the operation and maintenance to improve the reliability and safety of subway operations. If necessary, the IMCU can receive the on-board configuration data from the legitimate ground server in the library and forward it to the corresponding target device to complete the personalized intelligent management function at the train level, vehicle level or device level. In this process, the IMCU has the function of intelligent verification of configuration data, and transmits the verification results to the on-board display, so that the driver and maintenance personnel can judge whether the configuration data of the equipment meets the design expectations through the on-board display. The control method of the two-way identity authentication process between IMCU and the ground server is as follows: Figure 7 .

[0238] Figure 7 for Figure 2 The flowchart of the two-way authentication between the IMCU of the intelligent management and control system and the ground intelligent expert diagnosis system is shown.

[0239] In the present invention, lossless data downloading between the vehicle and the ground is required to realize fast data downloading in the library and ensure that 100% of the vehicle-borne data is downloaded to the ground without data loss. The vehicle-borne raw data, characteristic data, cumulative data, alarm warning information, historical configuration data, etc. are transmitted to the ground in real time, and the integrity of file transmission is guaranteed. This is the basis for intelligent analysis by the ground intelligent expert diagnosis system. Lossless data downloading is achieved through multi-threaded breakpoint resumption technology, anti-tampering technology, completion retransmission and other technologies. The control method of 100% downloading process of IMCU and ground server data is as follows: Figure 8 shown.

[0240] Figure 8 for Figure 2 The flowchart shown is that the MCU of the intelligent management and control system controls the ground intelligent expert diagnosis system to download lossless data from the IMCU. Figure 8 As shown, for Figure 8 When 100% of the vehicle data is downloaded, the control method for the following process is specifically implemented as follows:

[0241] (1) GDS obtains data download and forms ciphertext to send to IMCU. The main controls are as follows:

[0242] 1) GDS obtains the locally stored status file data download record, the last downloaded file information (file name, successful download size SuccessSize, whether the download is completed, total file size). If there is no download record, the file name is empty and the size is 0. Check the unique identifier of the SED device;

[0243] 2) Get the required status file data download block size set to BlockSize;

[0244] 3) Encapsulate the request status file data frame and use encryption standards (such as DES encryption) to form ciphertext;

[0245] 4) Send the ciphertext to IMCU.

[0246] (2) IMCU retrieves and obtains file information and reads the starting position. The main controls are as follows:

[0247] 1) IMCU retrieves the first file name from the file list, and the records in the file list are sorted in ascending chronological order;

[0248] 2) Get file information: file name, total file size;

[0249] 3) Set the file reading starting position StartPosition to 0.

[0250] (3) IMCU records the above download information and encapsulates the data frame and sends it to GDS. The main control is as follows:

[0251] 1) IMCU records the file information of successful and complete downloads; it also records the file information of partial downloads;

[0252] 2) Read data of size BlockSize from the file starting at position StartPosition, and generate a digital summary for the data;

[0253] 3) Encapsulate the data frame and send it to GDS.

[0254] The intelligent monitoring and authentication unit in the present invention has a master-slave redundancy function and is independent of system equipment such as the control network. Its master-slave intelligent collaboration is determined autonomously without manual intervention, providing a virtual gateway service function to meet the current situation that the terminal device can only set one gateway address, and can ensure that the configuration data verification service has a unique virtual service network address. The intelligent diagnosis of the master-slave redundancy function of the intelligent management control unit has the following characteristics:

[0255] 1) When the network is unobstructed, only one is the master and the other is the backup, and the master-slave status is displayed on the HMI;

[0256] 2) When the network is disconnected, each part is the master, and the HMI shows that both IMCUs are in the master state;

[0257] 3) Whether they are both masters or there is only one master, there is only one virtual service address, i.e., the virtual gateway;

[0258] 4) Master-slave synchronization backup of management data and network status.

[0259] Beneficial effects brought by the technical solution of this application

[0260] 1) IMCU can collect network intelligent operation and maintenance and vehicle data, and has strong data collection and processing capabilities and large storage capacity.

[0261] 2) For safety protection, soft / hard protection can be implemented to ensure vehicle network security;

[0262] 3) For on-board data download, encryption technology can be used to achieve 100% lossless data download, realizing the remote monitoring and maintenance support function of train status;

[0263] 4) By adopting master-slave redundancy, the redundancy quality of train-to-ground transmission is improved, and the availability of train remote support is improved.

[0264] In the description of the present application and its embodiments, it should be understood that the orientation or positional relationship indicated by the terms "top", "bottom", "height", etc. is based on the orientation or positional relationship shown in the accompanying drawings, and is only for the convenience of describing the present application and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore should not be understood as a limitation on the present application.

[0265] In the present application and its embodiments, unless otherwise clearly specified and limited, the terms "set", "install", "connect", "connect", "fix" and the like should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection, an electrical connection, or a communication; it can be a direct connection, or an indirect connection through an intermediate medium, it can be the internal connection of two elements or the interaction relationship between two elements. For ordinary technicians in this field, the specific meanings of the above terms in the present application can be understood according to the specific circumstances.

[0266] In the present application and its embodiments, unless otherwise clearly specified and limited, a first feature being "above" or "below" a second feature may include the first and second features being in direct contact, or may include the first and second features not being in direct contact but being in contact through another feature between them. Moreover, a first feature being "above", "above" and "above" a second feature includes the first feature being directly above and obliquely above the second feature, or simply indicates that the first feature is higher in level than the second feature. A first feature being "below", "below" and "below" a second feature includes the first feature being directly above and obliquely above the second feature, or simply indicates that the first feature is lower in level than the second feature.

[0267] The disclosure above provides many different embodiments or examples to realize the different structures of the present application. In order to simplify the disclosure of the present application, the parts and settings of specific examples are described above. Of course, they are only examples, and the purpose is not to limit the present application. In addition, the present application can repeat reference numbers and / or reference letters in different examples, and this repetition is for the purpose of simplification and clarity, which itself does not indicate the relationship between the various embodiments and / or settings discussed. In addition, the various specific processes and material examples provided by the present application, but those of ordinary skill in the art can be aware of the application of other processes and / or the use of other materials.

[0268] Although the preferred embodiments of the present application have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications falling within the scope of the present application.

[0269] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. An intelligent management and control system for a rail train, characterized in that: include: IMCU, the head car and the tail car of the train are each equipped with an IMCU; Each train subsystem of a rail train, each of the IMCU and the train subsystem is connected via wireless communication; each train subsystem includes but is not limited to a real-time monitoring system, a pantograph monitoring system, a running gear monitoring system, a door system, and a battery status monitoring system; Among them, the train subsystem is used to form monitoring data, which includes train status information and fault information; IMCU is used to collect the monitoring data of the train subsystem without loss of data.

2. The intelligent management and control system of a rail vehicle according to claim 1, characterized in that: Also includes: A ground intelligent expert diagnosis system, each of the IMCUs and the ground intelligent expert diagnosis system are connected via wireless communication; IMCU is also used to analyze the collected monitoring data and send it to the ground intelligent expert diagnosis system; IMCU is also used for two-way authentication with the ground intelligent expert diagnosis system; IMCU is also used to control the ground intelligent expert diagnosis system to download lossless data from IMCU; Among them, the monitoring data includes real-time monitoring data and non-real-time monitoring data. The real-time monitoring data includes real-time operation data and real-time fault data. The non-real-time monitoring data includes non-real-time operation data. The non-real-time monitoring data is stored in the data storage module of the IMCU. The real-time monitoring data is stored in the data storage module of the IMCU and is transmitted in real time with the ground intelligent expert diagnosis system.

3. The intelligent management and control system of a rail vehicle according to claim 2, characterized in that: IMCU is used to collect the monitoring data of each train subsystem without loss of data. Specifically, IMCU collects the monitoring data of SED of each train subsystem without loss of data, including the following: When the TCP connection between SED and IMCU is normal and the life signal is normal, Step S321: SED sends the original monitoring data of the storage status to IMCU; Step S322: The IMCU receives the original monitoring data of the storage status, analyzes, searches, and packages the data into data storage information and sends it to the SED; Step S323: SED receives the latest data storage information; And obtain the subsequent status original monitoring data starting from the latest data storage information from the local, and then encapsulate the subsequent status original monitoring data and send it to the IMCU; Step S324: The IMCU receives the latest original monitoring data and stores it in a local corresponding file; Step S325: The IMCU encapsulates the received original monitoring data of the latest status to form data storage information and sends it to the SED; Return to step S323; Among them, SED is the English abbreviation for vehicle fixed terminal equipment.

4. The intelligent management and control system for rail vehicles according to claim 3, characterized in that: The method for judging whether the TCP connection between the SED and the IMCU is normal and whether the life signal is normal includes the following steps: Step S311: SED initiates a TCP connection to IMCU; Step S312: Determine whether the TCP connection is successful: If the connection is unsuccessful, jump to step S311; If the connection is successful, continue to step S313; Step S313: The SED and the IMCU monitor each other's life signals; Step S314: Determine whether the vital signal is normal: If the vital signal is abnormal, jump to step S313; If the life signal is normal, the TCP connection between the SED and the IMCU is normal and the life signal is normal, execute step S321; Among them, TCP is the abbreviation of Transmission Control Protocol.

5. The intelligent management and control system of a rail vehicle according to claim 4, characterized in that: Step S322 specifically includes the following steps: Step S322-1: IMCU receives the original monitoring data of the storage status sent by SED; Step S322-2: The IMCU analyzes and obtains the device information of the SED; wherein the device information of the SED includes device type identification, switch code, switch end interface code, vehicle soft address, vehicle hard address, train code, IP address, process code and behavior code information; Step S322-3: The IMCU searches for the data and location information of the device that has been successfully stored recently based on the model identification, switch code, switch end interface code, vehicle soft address, vehicle hard address, train code, IP address, process code, and behavior code information as data storage information; Step S322-4: The IMCU encapsulates the data storage information of the original monitoring data and sends it to the SED.

6. The intelligent management and control system for rail vehicles according to claim 5, characterized in that: The control method of the real-time data transmission control module of IMCU for analyzing the collected real-time monitoring data includes: Step S411: Establishing a connection between the IMCU for real-time data transmission and each train subsystem; Step S412: IMCU receives real-time monitoring data; Step S413: The IMCU determines whether the protocol of the received real-time monitoring data is correct: If the protocol is correct, execute step S414; If the protocol is incorrect, jump to step S418; Step S414: IMCU parses the frame sequence number; Step S415: Determine whether the frame sequence number is valid: If the frame sequence number is valid, execute step S416; If the frame sequence number is invalid, execute step S419; Step S419: Determine whether the number is lost: if the number is lost, jump to step S412; if not, jump to step S420; Step S416: Real-time monitoring data is confirmed to be valid; Step S417: performing analysis, wherein the analysis content includes one or more of global protocol analysis, forwarding protocol analysis, fault code analysis, operating status analysis, traction system analysis, braking system analysis, and air conditioning system analysis; Step S418: The real-time monitoring data of the train is entered into the database; Step S420: The protocol parsing of a single real-time monitoring data packet is completed.

7. The intelligent management and control system of a rail vehicle according to claim 1, characterized in that: The IMCU is also used to send the parsed monitoring data to the ground intelligent expert diagnosis system, including the following steps: Step S511: The IMCU frames the parsed monitoring data and stores it in a buffer area; Step S512: The IMCU caches the real-time data in the real-time data cache area; Step S513: Determine whether there is data in the cache at a certain interval: If there is data, execute step S514; If there is no data, jump to step S512; Step S514: Determine whether the content of the data area is greater than the limit value: If the content of the data area is not greater than the limit value, execute step S515; If the content of the data area is greater than the limit value, execute step S523; Step S523: write the file, save the data that has not been sent or failed to be sent, and clear the buffer area content; then jump to step S512; Step S515: Send data to the TCP-Client module; the TCP-Client module is a TCP-client module; Step S516: The TCP-Client module sends data to the server; Step S517: Determine whether the communication is successful: If the communication is successful, execute step S521: delete the data from the buffer area, and then jump to step S512; If the communication is unsuccessful, execute step S522: if the TCP-Client module sends data to the server and resends it three times and still fails, then jump to step S512; The initiator of the TCP connection is the TCP client TCP Client, and the receiver of the TCP connection is the TCP server TCP Server.

8. The intelligent management and control system of a rail vehicle according to claim 1, characterized in that: The two-way authentication between the IMCU and the ground intelligent expert diagnosis system is specifically the two-way identity authentication between the IMCU and the GDS of the ground intelligent expert diagnosis system. The method of the two-way identity authentication between the IMCU and the GDS includes the following: Step S711: IMCU initiates a TCP connection to GDS; Step S712: Determine whether the TCP connection is successful: If the TCP connection is unsuccessful, jump to step S711; If the TCP connection is successful, the IMCU will verify whether the GDS's identity is legal; If the IMCU verifies that the identity of the GDS is not legitimate, then jump to step S711; When IMCU verifies the legality of GDS's identity, GDS will verify the legality of IMCU's identity: When GDS verifies that the identity of IMCU is legitimate, it determines that both IMCU and GDS are legitimate, and successfully establishes a secure TCP connection; If the GDS verifies that the identity of the IMCU is illegal, it jumps to step S771; Step S771: GDS disconnects.

9. The intelligent management and control system for rail vehicles according to claim 8, characterized in that: After the TCP connection is successful, the process of IMCU verifying whether the GDS identity is legitimate includes the following steps: Step S721: GDS sends public_GDS and digital signature to IMCU; public_GDS is the GDS data public key module; Step S722: After receiving public_GDS and the digital signature, the IMCU uses public_Hash to verify the digital signature; where public_Hash is a public key signature verification module; Step S723: Determine whether the digital signature verification is successful: After the digital signature verification is successful, execute step S731; If the digital signature verification fails, jump to step S711; Step S731: IMCU generates an impact number, and uses public_GDS to encrypt the impact number to form an impact number ciphertext, and sends it to GDS; Step S732: GDS receives the impact number ciphertext and sends the digital signature to IMCU; Step S733: IMCU uses public_GDS, impact number ciphertext and received digital signature for signature verification; Step S734: Determine whether the digital signature verification is successful: After the digital signature verification is successful, IMCU verifies the legality of GDS identity, and then GDS verifies whether IMCU's identity is legal; If the digital signature verification fails, jump to step S711.

10. The intelligent management and control system for rail vehicles according to claim 9, characterized in that: After IMCU verifies the legality of GDS identity, the process of GDS verifying whether the IMCU identity is legal includes the following steps: Step S741: IMCU sends public_IMCU and digital signature to GDS; public_IMCU is the IMCU data public key module; Step S742: After receiving the public_IMCU and the digital signature, the GDS uses the public_Hash to verify the digital signature; Step S743: Determine whether the digital signature verification is successful: After the digital signature verification is successful, execute step S751; If the digital signature verification fails, jump to step S771; Step S751: GDS generates an impact number, and uses public_IMCU to encrypt the impact number to form an impact number ciphertext, and sends it to IMCU; Step S752: IMCU receives the impact number ciphertext and sends the digital signature to GDS; Step S753: GDS uses public_IMCU, impact number ciphertext and received digital signature for signature verification; Step S754: Determine whether the digital signature verification is successful: After the digital signature verification is successful, execute step S761; If the digital signature verification fails, jump to step S771; Step S761: GDS verifies that the IMCU identity is legitimate, and determines that the IMCU and GDS have successfully established a secure TCP connection; then jump to step S781; After step S771, jump to step S781.

11. The intelligent management and control system for rail vehicles according to claim 10, characterized in that: IMCU controls the ground intelligent expert diagnosis system to download lossless data from IMCU, including the following: Step S811: GDS obtains the data download request and forms a data download request ciphertext and sends it to IMCU; Step S821: The IMCU receives the data download request ciphertext and uses a decryption algorithm to decrypt the ciphertext to form a data download request plaintext. Step S822: The IMCU successfully obtains the download file information from the data download request plain text, the download file information includes the file name, the successful download size, whether the download is completed, and the total file size; Step S830: Determine whether the length of the file name in the downloaded file information is zero: If the length of the file name in the downloaded file information is not zero, execute step S832; If the length of the file name in the downloaded file information is zero, execute step S833; Step S833: IMCU retrieves and obtains file information and reads the starting position; then, executes step S841; Step S831-1: Determine whether the download is complete: If the download is complete, execute step S831-2; If the download is not complete, execute step S832-1; Step S831-2, the IMCU retrieves the next file from the file list in the buffer area, and the file records are sorted in ascending order according to time sequence; the file includes real-time data packets and / or non-real-time data packets; Step S831-3: Determine whether there are any undownloaded files in the file list: If there are still undownloaded files in the list, execute step 831-4; Step S831-4: The IMCU obtains the file information of the undownloaded file including: file name, total file size, file content, and sets the file reading start position to 0; then, executes step S841; If there is no undownloaded file in the list, execute step S831-5; Step S831-5: IMCU sends the information that SED has no latest device status file to download to GDS; Step S831-6: GDS obtains another SED status file data download record; then jumps to step S811; Step S832-1: The IMCU locally retrieves the file according to the file name; Step S832-2: Determine whether the file is successfully retrieved; If the file is successfully retrieved, execute step S832-3; If the file is not successfully retrieved, jump to step S831-2; Step S832-3: IMCU sets the file reading start position to SuccessSize+1; then, execute step S841; Step S841: IMCU records the above download information and encapsulates the data frame and sends it to GDS; Step S842: GDS receives data frame; Step S843: Determine whether the GDS verification block digital summary passes: If the GDS verification block digital summary passes, execute step S844; Step S844: GDS determines whether it is a new file: If the GDS determines that the file is not a new file, it executes step S845; Step S845: GDS stores the file data locally and records the file download success information; If the GDS verification block digital summary fails, execute step S843-1; Step S843-1: GDS records the reason for verification failure; then jumps to step S811; If the GDS determines that it is a new file, it executes step S844-1 and then jumps to step S845; Step S844-1: GDS creates a file name locally according to the file name in the data protocol, and executes step S845; After step S845, execute step S846; Step S846: Determine whether all the contents in the file are downloaded completely? If all the contents in the file are downloaded completely, execute step S847; If all the contents in the file are not downloaded completely, execute step S846-1; Step S847: GDS indicates that the integrity information has been successfully downloaded; then, step S846-1 and step S848 are executed; Step S848: GDS records the successful and complete download information in the file list; Step S846-1: GDS will check whether the successfully downloaded block information is complete and send it to IMCU.

Images