A subway signal equipment area controller safety detection method, device, equipment and medium

Abstract

The present application discloses a subway signal equipment area controller security detection method, device, equipment and medium, which relates to the field of computer technology. It includes: obtaining the original information received by the area controller application of the subway signal equipment, and verifying the original information to obtain the first information verification result; verifying the validity of the original information based on the first information verification result, and sending the original information after the validity verification to the area controller application, so that the area controller application performs corresponding application logic processing on the original information to obtain the target key output information; verifying the target key output information sent by the area controller application to obtain the second information verification result, and determining whether to execute the safety processing measures for the area controller application based on the second information verification result. Thereby avoiding software defects caused by human logical negligence or mindset and improving the security of the software.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a method, device, equipment and medium for safety detection of a subway signal equipment area controller. Background Art

[0002] CBTC (Communication Based Train Control System) is a core system for urban rail transit operations that is highly automated, complex, and related to operational safety and efficiency. Although the technology of signal system equipment manufacturers has matured and has standardized R&D processes such as design, development, and testing, there are still widespread undiscovered software logic design defects that are left in the engineering design stage, and even endanger driving safety during the passenger operation stage.

[0003] At present, the mainstream of the subway industry is built according to the standards of fully automatic operation lines. Under the premise of unmanned driving and supervision, the key technologies of fully automatic operation, such as train control technology, monitoring system linkage technology, fault handling technology, supervision management technology, etc., have lower and lower tolerance for software defects. The zone controller (ZC, Zone Control) of the subway signal system equipment is developed and designed according to the model required by the standard. In terms of protection and identification of software defects, it is also mainly carried out through process control. Although it can alleviate the probability of software defects to a certain extent. But it still depends on the professional quality of developers. Most of the software defects are caused by human logical negligence, fixed thinking or complex scenarios that are not clearly sorted out.

[0004] From the above, it can be seen that how to avoid software defects caused by human logical negligence or fixed thinking and improve software security is an urgent problem to be solved. Summary of the invention

[0005] In view of this, the purpose of the present invention is to provide a subway signal equipment area controller safety detection method, device, equipment and medium, which can avoid software defects caused by human logical negligence or mindset and improve software security. The specific scheme is as follows:

[0006] In a first aspect, the present application provides a subway signal equipment area controller safety detection method, which is applied to an independent safety verification module, including:

[0007] Acquire original information received by the regional controller application of the subway signal equipment, and verify the original information as an object to be detected to obtain a first information verification result;

[0008] Verifying the validity of the original information based on the first information verification result, and sending the original information after the validity verification to the regional controller application, so that the regional controller application performs corresponding application logic processing on the original information to obtain target key output information of the regional controller application;

[0009] The target key output information sent by the regional controller application is verified to obtain a second information verification result, and based on the second information verification result, it is determined whether to execute a security processing measure for the regional controller application.

[0010] Optionally, the acquiring of original information received by the regional controller application of the subway signal equipment and verifying the original information as an object to be detected to obtain a first information verification result includes:

[0011] Acquire the in-station section route information sent by the computer interlocking subsystem and received by the regional controller application of the subway signal equipment, and verify the in-station section route information to obtain the in-station section route information verification result;

[0012] and / or, obtaining interlocking route information sent by the computer interlocking subsystem and received by the regional controller application of the subway signal equipment, and verifying the interlocking route information to obtain an interlocking route information verification result;

[0013] And / or, obtaining the train location information sent by the automatic train monitoring system and received by the regional controller application of the subway signal equipment, and verifying the train location information to obtain a train location information verification result.

[0014] Optionally, verifying the validity of the original information based on the first information verification result, and sending the original information after the validity verification to the regional controller application includes:

[0015] Determining whether the original information has an abnormality based on the first information verification result;

[0016] If there is no abnormality in the original information, sending the original information to the regional controller application;

[0017] If there is an abnormality in the original information, directing the original information to a safe process, and sending the original information after the safe process to the regional controller application;

[0018] Accordingly, the determining whether to execute the security processing measure for the zone controller application based on the second information verification result includes:

[0019] Determining whether the target key output information is abnormal based on the second information verification result;

[0020] If there is no abnormality in the target key output information, sending the target key output information to the regional controller application;

[0021] If the target key output information has an abnormal situation, the target key output information is directed to safety processing, and safety processing measures for the zone controller application are executed.

[0022] Optionally, the verifying the target key output information sent by the regional controller application to obtain a second information verification result includes:

[0023] Verifying the mobile authorization information sent by the regional controller application to obtain a mobile authorization information verification result;

[0024] And / or, verifying the handover authorization information sent by the regional controller application to obtain a handover authorization information verification result.

[0025] Optionally, the verifying the mobility authorization information sent by the regional controller application to obtain a mobility authorization information verification result includes:

[0026] Performing a signal permission check on the mobile authorization information to obtain a first mobile authorization information check sub-result;

[0027] and / or, performing a signal permission overlap check on the mobile authorization information to obtain a second mobile authorization information check sub-result;

[0028] and / or, performing a legality check on the temporary speed limit in the mobile authorization information to obtain a third mobile authorization information check sub-result;

[0029] Based on the first mobile authorization information check sub-result, the second mobile authorization information check sub-result and the third mobile authorization information check sub-result, performing a key information consistency check on the sent message to obtain the mobile authorization information verification result;

[0030] The sent message is safety output information and / or process control status information, including any one or a combination of platform screen door system, emergency close button, registration / logout and special control related information.

[0031] Optionally, the verifying the handover authorization information sent by the regional controller application to obtain a handover authorization information verification result includes:

[0032] Checking the signal permission within the handover range of the overlapping area of ​​the adjacent area controller to obtain a first handover authorization information check sub-result;

[0033] and / or, checking the signal permission overlap within the overlapping area handover range of the adjacent area controllers to obtain a second handover authorization information check sub-result;

[0034] and / or, performing a legality check on the temporary speed limit within the handover range of the overlapping area of ​​the adjacent area controller to obtain a third handover authorization information check sub-result;

[0035] Based on the first handover authorization information check sub-result, the second handover authorization information check sub-result and the third handover authorization information check sub-result, performing a key information consistency check on the sent message to obtain the handover authorization information verification result;

[0036] The sent message is safety output information and / or process control status information, including any one or a combination of platform screen door system, emergency close button, registration / logout and special control related information.

[0037] Optionally, the subway signal equipment area controller safety detection method further includes:

[0038] respectively configuring a shared cache area and respective independent data cache areas for the independent security check module and the regional controller application;

[0039] The shared cache area is used to store external interface information, static data and general functions; the independent data cache area is used to store the check function of the independent safety check module and the data processing function of the regional controller application.

[0040] In a second aspect, the present application provides a subway signal equipment area controller safety detection device, which is applied to an independent safety verification module, including:

[0041] An input information verification module is used to obtain original information received by the regional controller application of the subway signal equipment, and verify the original information as an object to be detected to obtain a first information verification result;

[0042] an input information processing module, configured to verify the validity of the original information based on the first information verification result, and send the original information after the validity verification to the regional controller application, so that the regional controller application performs corresponding application logic processing on the original information to obtain target key output information of the regional controller application;

[0043] The output information verification module is used to verify the target key output information sent by the regional controller application to obtain a second information verification result, and determine whether to execute a security processing measure for the regional controller application based on the second information verification result.

[0044] In a third aspect, the present application provides an electronic device, including:

[0045] Memory, used to store computer programs;

[0046] The processor is used to execute the computer program to implement the aforementioned subway signal equipment area controller safety detection method.

[0047] In a fourth aspect, the present application provides a computer-readable storage medium for storing a computer program, wherein the computer program, when executed by a processor, implements the aforementioned subway signal equipment area controller safety detection method.

[0048] The present application provides a method for safety detection of a subway signal equipment area controller. First, original information of an object to be detected received by an area controller application of the subway signal equipment is obtained, and the original information is verified to obtain a first information verification result; then, information processing is performed on the original information based on the first information verification result, and the processed information is sent to the area controller application, so that the area controller application performs corresponding application logic processing on the processed information to obtain target key output information of the area controller application; finally, the target key output information sent by the area controller application is verified to obtain a second information verification result, and based on the second information verification result, it is determined whether to execute safety processing measures for the area controller application.

[0049] As can be seen from the above, the present application performs a security check on the input and output information of the regional controller application through the independent security check module, that is, normal input or output is allowed only after the verification condition check is passed, otherwise the information should be directed to security processing or corresponding security processing measures should be taken, which can improve the overall software security technology level. And by adding an independent security check module to perform security verification on software functions, the logical impact on existing software can be reduced, software defects caused by human logical negligence or mindset can be avoided, and the security of the software can be improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0050] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.

[0051] Figure 1 A flow chart of a safety detection method for a subway signal equipment area controller applied to an independent safety verification module disclosed in this application;

[0052] Figure 2 A data inspection flow chart of a subway signal equipment area controller safety detection method disclosed in this application;

[0053] Figure 3 Another method for checking the safety of a subway signal equipment area controller disclosed in the present application is a flow chart for outputting data inspection;

[0054] Figure 4 A flowchart of a specific subway signal equipment area controller safety detection method disclosed in this application;

[0055] Figure 5 This is a data transmission diagram of a subway signal equipment area controller safety detection method disclosed in this application;

[0056] Figure 6 A schematic diagram of a subway signal equipment area controller safety detection device disclosed in this application;

[0057] Figure 7 This is a structural diagram of an electronic device disclosed in this application. DETAILED DESCRIPTION

[0058] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0059] At present, the mainstream of the subway industry is built according to the standards of fully automatic operation lines. Under the premise of unmanned driving and supervision, the key technologies of fully automatic operation, such as train control technology, monitoring system linkage technology, fault handling technology, supervision management technology, etc., have lower and lower tolerance for software defects. The regional controller of the subway signal system equipment is developed and designed according to the model required by the standard. In terms of protection and identification of software defects, it is also mainly carried out through process control, although it can alleviate the probability of software defects to a certain extent. But it still depends on the professional quality of developers. The generation of software defects is mostly caused by human logical negligence, mindset or complex scenarios that are not clearly sorted out. To this end, the present application provides a safety detection scheme for subway signal equipment regional controllers, which can avoid software defects caused by human logical negligence or mindset and improve the safety of software.

[0060] See also Figure 1 As shown, the embodiment of the present application discloses a subway signal equipment area controller safety detection method applied to an independent safety verification module, including:

[0061] Step S11, obtaining original information received by the area controller application of the subway signal equipment, and verifying the original information as an object to be detected to obtain a first information verification result.

[0062] In this embodiment, the independent safety check module obtains original information from the interface module of the regional controller application of the subway signal equipment, and checks the original information to obtain the first information check result. Among them, the independent safety check function cache area and the check function of the independent safety check module are independent of the regional controller application, and are compiled into an executable program with the regional controller application, which can be run in each CPU of the security platform. Specifically, the subway signal equipment regional controller safety detection method may also include: respectively configuring a shared cache area and a respective independent data cache area for the independent safety check module and the regional controller application; wherein the shared cache area is used to store external interface information, static data and general functions; the independent data cache area is used to store the check function of the independent safety check module and the data processing function of the regional controller application. That is, the independent safety check module takes independence measures, does not cause the modification of the main architecture and core logic of the regional controller application software when designing the module, adds independent monitoring software safety function verification, and reduces the logical impact on the existing software.

[0063] In this embodiment, the independent security verification module verifies the security and rationality of the original information sent by the target object. The target object is a core device in the CBTC system that establishes a communication connection with the regional controller application of the subway signal equipment, including but not limited to the vehicle on-board controller (VOBC), the computer interlocking subsystem (CBI) and the automatic train supervision system (ATS). It can be understood that the specific method of the independent security verification module for verification needs to be determined according to the type of original information sent by the target object. Specifically, the obtaining of original information received by the regional controller application of the subway signal equipment and checking the original information as the object to be detected to obtain the first information verification result may include: obtaining the station section route information sent by the computer interlocking subsystem received by the regional controller application of the subway signal equipment, and performing a conflict check on the locking of the station section by multiple routes and the simultaneous existence of multiple train receiving routes in the station section, so as to obtain the station section route information verification result; and / or, obtaining the interlocking route information sent by the computer interlocking subsystem received by the regional controller application of the subway signal equipment, and checking the open state of the interlocking route signal and the section occupation state, as well as checking the interlocking route signal display and the route type, so as to obtain the interlocking route information verification result; and / or, obtaining the train position information sent by the train automatic monitoring system received by the regional controller application of the subway signal equipment, and checking the train grade and train mode compliance, the offset and section length within the section, the uniqueness of the train ID, and the maximum and minimum position order in the train position, so as to obtain the train position information verification result.

[0064] Step S12: verify the validity of the original information based on the first information verification result, and send the original information after the validity verification to the regional controller application, so that the regional controller application performs corresponding application logic processing on the original information to obtain the target key output information of the regional controller application.

[0065] In this embodiment, the independent safety verification module verifies the validity of the original information based on the first information verification result. Specifically, the verification of the validity of the original information based on the first information verification result, and sending the original information after the validity verification to the regional controller application, may include: judging whether there is an abnormality in the in-station section route information based on the verification result of the in-station section route information; if there is no abnormality in the in-station section route information, sending the in-station section route information to the regional controller application; if there is an abnormality in the in-station section route information, directing the in-station section route information to safety processing, so that all routes that are checked for conflicts are treated as invalid, and sending the in-station section route information after safety processing to the regional controller application; and / or, judging the interlocking route information based on the interlocking route information result. Whether there is an abnormality in the information; if there is no abnormality in the interlocking route information, the interlocking route information is sent to the regional controller application; if there is an abnormality in the interlocking route information, the interlocking route information is directed to safety processing, so that the route signal is processed as closed, and the interlocking route information after safety processing is sent to the regional controller application; and / or, based on the train position information verification result, it is judged whether there is an abnormality in the train position information; if there is no abnormality in the train position information, the train position information is sent to the regional controller application; if there is an abnormality in the train position information, the train position information is directed to safety processing, and the information after safety processing is sent to the regional controller application. That is, the original information is processed by the independent safety verification module to avoid the regional controller application from receiving erroneous or conflicting information that threatens the system security, and the real-time safety monitoring of external safety-critical inputs can be completed without affecting the normal operation logic of the regional controller application, effectively improving software security.

[0066] Step S13: verifying the target key output information sent by the regional controller application to obtain a second information verification result, and determining whether to execute a security processing measure for the regional controller application based on the second information verification result.

[0067] In this embodiment, the independent security verification module verifies the target key output information sent by the regional controller application to obtain a second information verification result, and determines whether to execute security processing measures for the regional controller application based on the second information verification result. The target key output information is information generated by the regional controller application performing corresponding application logic processing on the processed information; the key output information includes but is not limited to driving permission (MA, Movement Authority, also known as movement authorization) information and adjacent ZC handover authorization information (RRI, Route Related Information, also known as handover authority related information). Specifically, the verification of the target key output information sent by the regional controller application to obtain the second information verification result may include: verifying the movement authorization information sent by the regional controller application to obtain the movement authorization information verification result; and / or, verifying the handover authorization information sent by the regional controller application to obtain the handover authorization information verification result.

[0068] See also Figure 2As shown, in a specific implementation, the verification of the mobile authorization information sent by the regional controller application to obtain the mobile authorization information verification result may include: checking the train to-be-sent message and determining whether the to-be-sent message contains the mobile authorization information; performing a signal permission check on the mobile authorization information to obtain a first mobile authorization information check sub-result; and / or performing a signal permission overlap check on the mobile authorization information to obtain a second mobile authorization information check sub-result; and / or performing a legality check on the temporary speed limit in the mobile authorization information to obtain a third mobile authorization information check sub-result; based on the first mobile authorization information check sub-result, the second mobile authorization information check sub-result and the third mobile authorization information check sub-result, performing a key information consistency check on the sent message to obtain the mobile authorization information verification result. Wherein, the sent message is safety output information and / or process control status information, including any one or a combination of platform screen door system, emergency close button, registration / deregistration and special control related information. That is, the independent safety verification module verifies the position and status of the turnout, the status of the signal, the occupancy status of the section, the closed and locked status of the safety door, the occupancy status of the restricted section, etc., and guides safety processing when the verification fails; the independent safety verification module detects whether the movement authorization information is associated with other trains and whether the current route section is other routes; the independent safety verification module checks whether there is a corresponding temporary speed limit ID through temporary speed limit information (TSR, Temporary Speed ​​Restriction); the independent safety verification module checks the message to be sent to check whether the message to be sent is consistent with the MA and temporary speed limit package that have passed the detection, as well as the consistency of PSD (Platform Screen Doors, i.e. platform screen door system), ESB (Emergency Stop Button, i.e. emergency stop button), registration / logout and other security information with process control status information. The mobile authorization information is verified by the independent security verification module to prevent the regional controller application from sending erroneous or conflicting information that threatens system security. Real-time security monitoring of external security-critical outputs can be completed without affecting the normal operating logic of the regional controller application, effectively improving software security.

[0069] Correspondingly, determining whether to execute security processing measures for the regional controller application based on the second information verification result may include: judging whether there is an abnormality in the mobile authorization information based on the mobile authorization information verification result; if there is no abnormality in the mobile authorization information, sending the mobile authorization information to the target vehicle controller through the regional controller application; if there is an abnormality in the mobile authorization information, directing the target key output information to security processing, and executing security processing measures for the regional controller application.

[0070] See also Figure 3 As shown, in a specific implementation, the verification of the handover authorization information sent by the regional controller application to obtain the handover authorization information verification result may include: determining whether there is a next handover point; if there is a next handover point, checking the signal permission within the handover range of the overlapping area of ​​the adjacent regional controller to obtain a first handover authorization information check sub-result; and / or, checking the overlap of the signal permission within the handover range of the overlapping area of ​​the adjacent regional controller to obtain a second handover authorization information check sub-result; and / or, checking the legality of the temporary speed limit within the handover range of the overlapping area of ​​the adjacent regional controller to obtain a third handover authorization information check sub-result; based on the first handover authorization information check sub-result, the second handover authorization information check sub-result and the third handover authorization information check sub-result, performing a key information consistency check on the sent message to obtain the handover authorization information verification result. Wherein, the sent message is safety output information and / or process control status information, including any one or a combination of platform screen door system, emergency close button, registration / deregistration and special control related information. That is, the independent safety verification module verifies the position and status of the turnout, the status of the signal machine, the occupied status of the section, the closed and locked status of the safety door, the occupied status of the restricted section, etc., and guides the safety processing when the verification fails; the independent safety verification module detects whether the movement authorization information is associated with other trains and whether the current route section is other routes; the independent safety verification module checks whether there is a corresponding temporary speed limit ID through the temporary speed limit information; the independent safety verification module checks the message to be sent to check whether the message to be sent is consistent with the RRI and temporary speed limit package that have passed the detection, as well as the consistency of the handover train and its status, train sequencing, station delay and other security information with the process control status information. The handover authorization information is verified by the independent safety verification module to avoid the regional controller application from sending erroneous or conflicting information that threatens the system security. It can complete the real-time security monitoring of external safety-critical outputs without affecting the normal operating logic of the regional controller application, effectively improving the software security.

[0071] Correspondingly, the determination of whether to execute security processing measures for the regional controller application based on the second information verification result may include: judging whether there is an abnormality in the handover authorization information based on the handover authorization information verification result; if there is no abnormality in the handover authorization information, sending the handover authorization information to the adjacent regional controller application through the regional controller application; if there is an abnormality in the handover authorization information, directing the handover authorization information to security processing, and executing security processing measures for the regional controller application.

[0072] As can be seen from the above, the embodiment of the present application configures a shared cache area and independent data cache areas for the independent security check module and the regional controller application respectively, which does not cause modifications to the main architecture and core logic of the regional controller application software during module design, adds independent monitoring software security function verification, and reduces the logical impact on existing software. The independent security check module processes the input and output information to prevent the regional controller application from receiving or sending erroneous or conflicting information that threatens system security. Without affecting the normal operating logic of the regional controller application, real-time security monitoring of external security-critical inputs is completed, which can avoid software defects caused by human logical negligence or mindset and improve software security.

[0073] See also Figure 4 As shown, the embodiment of the present application provides a specific subway signal equipment area controller safety detection method, including:

[0074] When the regional controller application software is working normally or abnormally, the independent safety verification software continuously monitors the device's external safety-critical inputs and outputs to achieve real-time safety monitoring and effectively improve software security. Specifically, the regional controller application software receives input data through an interface, performs interface status processing on the input data, and then sends the processed input data to the reactive fault safety verification module for independent safety verification of the input data. Then, the input data that has completed the safety verification is subjected to application logic processing to obtain mobile authorization information and handover related information; the mobile authorization information and handover related information are independently verified by the reactive fault safety verification module to obtain an output package, and sent to the target device through an interface. Among them, the application logic processing includes but is not limited to status management processing, map management processing, train location report processing, train management processing, mobile authorization processing, and train handover processing.

[0075] It should be noted that see Figure 5As shown, the reactive fault safety check module and the regional controller application software have independent memory buffers. When the regional controller application software inputs or outputs information, the input or output information is allocated to the corresponding buffer through the interface processing module, and the input or output information is checked by the independent safety check module. That is, at the software requirement level, it exists as an independent safety check function, and the independent safety check function buffer and check function are independent of the existing software. At the software architecture level, an independent safety check module is added; it is compiled into an executable program with the existing software and runs in each CPU of the security platform.

[0076] As can be seen from the above, the embodiment of the present application uses independent safety verification software to continuously monitor the external safety-critical input and output of the device to achieve real-time safety monitoring, effectively improving software security. In addition, the reactive fault safety verification module and the regional controller application software have independent memory buffers. This can avoid software defects caused by human logical negligence or mindset, and improve software security.

[0077] See also Figure 6 As shown, the embodiment of the present application provides a subway signal equipment area controller safety detection device, including:

[0078] An input information verification module 11 is used to obtain original information received by the regional controller application of the subway signal equipment, and verify the original information as an object to be detected to obtain a first information verification result;

[0079] An input information processing module 12 is used to check the validity of the original information based on the first information verification result, and send the original information after the validity verification to the regional controller application, so that the regional controller application performs corresponding application logic processing on the original information to obtain the target key output information of the regional controller application;

[0080] The output information verification module 13 is used to verify the target key output information sent by the regional controller application to obtain a second information verification result, and determine whether to execute a security processing measure for the regional controller application based on the second information verification result.

[0081] As can be seen from the above, the embodiment of the present application performs a security check on the input and output information of the regional controller application through the independent security check module, that is, normal input or output is allowed only after the verification condition check is passed, otherwise the information should be directed to security processing or corresponding security processing measures should be taken, which can improve the overall software security technology level. And by adding an independent security check module to perform security verification on software functions, the logical impact on existing software can be reduced, software defects caused by human logical negligence or mindset can be avoided, and the security of the software can be improved.

[0082] In some specific implementations, the input information checking module 11 may specifically include:

[0083] A first input information checking unit is used to obtain the in-station section route information sent by the computer interlocking subsystem and received by the area controller application of the subway signal equipment, and to check the in-station section route information to obtain the in-station section route information checking result;

[0084] A second input information checking unit is used to obtain the interlocking route information sent by the computer interlocking subsystem and received by the area controller application of the subway signal equipment, and to check the interlocking route information to obtain the interlocking route information checking result;

[0085] The third input information checking unit is used to obtain the train position information sent by the train automatic monitoring system and received by the regional controller application of the subway signal equipment, and to verify the train position information to obtain the train position information verification result.

[0086] In some specific implementations, the input information processing module 12 may specifically include:

[0087] An input information abnormality judgment unit, used to judge whether the original information has an abnormality based on the first information verification result;

[0088] a first input information processing unit, configured to send the original information to the zone controller application if there is no abnormality in the original information;

[0089] The second input information processing unit is used to direct the original information to safety processing if there is an abnormality in the original information, and send the original information after safety processing to the regional controller application.

[0090] In some specific implementations, the output information checking module 13 may specifically include:

[0091] A first output information checking submodule, used for checking the mobile authorization information sent by the regional controller application to obtain a mobile authorization information checking result;

[0092] A second output information checking submodule, used for checking the handover authorization information sent by the regional controller application to obtain a handover authorization information checking result;

[0093] an output information abnormality judgment unit, used for judging whether the target key output information has an abnormality based on the second information verification result;

[0094] a first output information processing unit, configured to send the target key output information to the regional controller application if there is no abnormality in the target key output information;

[0095] The second output information processing unit is used to direct the target key output information to safety processing if there is an abnormality in the target key output information, and execute safety processing measures for the zone controller application.

[0096] Furthermore, in some specific implementations, the first output information checking submodule may specifically include:

[0097] a first mobile authorization information check sub-result generating unit, configured to perform a signal permission check on the mobile authorization information to obtain a first mobile authorization information check sub-result;

[0098] a second mobile authorization information check sub-result generating unit, configured to perform a signal permission overlap check on the mobile authorization information to obtain a second mobile authorization information check sub-result;

[0099] a third mobile authorization information check sub-result generating unit, configured to perform a legality check on the temporary speed limit in the mobile authorization information to obtain a third mobile authorization information check sub-result;

[0100] A mobile authorization information verification result generating unit is used to perform a key information consistency check on the sent message based on the first mobile authorization information check sub-result, the second mobile authorization information check sub-result and the third mobile authorization information check sub-result to obtain the mobile authorization information verification result; wherein, the sent message is safety output information and / or process control status information, including any one or a combination of platform screen door system, emergency close button, registration / deregistration and special control related information.

[0101] Furthermore, in some specific implementations, the second output information checking submodule may specifically include:

[0102] A first handover authorization information check sub-result generating unit, configured to check the signal permission within the handover range of the overlapping area of ​​the adjacent area controller to obtain a first handover authorization information check sub-result;

[0103] A second handover authorization information check sub-result generating unit, configured to check the signal permission overlap within the handover range of the overlapping area of ​​the adjacent area controllers to obtain a second handover authorization information check sub-result;

[0104] A third handover authorization information check sub-result generating unit, configured to perform a legality check on the temporary speed limit within the handover range of the overlapping area of ​​the adjacent area controllers to obtain a third handover authorization information check sub-result;

[0105] A handover authorization information verification result generating unit is used to perform a key information consistency check on the sent message based on the first handover authorization information check sub-result, the second handover authorization information check sub-result and the third handover authorization information check sub-result to obtain the handover authorization information verification result; wherein, the sent message is safety output information and / or process control status information, including any one or a combination of platform screen door system, emergency close button, registration / deregistration and special control related information.

[0106] Furthermore, in some specific implementations, the subway signal equipment area controller safety detection device may also include:

[0107] A data cache area configuration module, used to configure a shared cache area and independent data cache areas for the independent security check module and the regional controller application respectively;

[0108] The shared cache area is used to store external interface information, static data and general functions; the independent data cache area is used to store the check function of the independent safety check module and the data processing function of the regional controller application.

[0109] Furthermore, the present application also discloses an electronic device. Figure 7 This is a structural diagram of an electronic device 20 according to an exemplary embodiment, and the content in the figure cannot be regarded as any limitation on the scope of use of this application. The electronic device 20 may specifically include: at least one processor 21, at least one memory 22, a power supply 23, a communication interface 24, an input / output interface 25, and a communication bus 26. The memory 22 is used to store a computer program, and the computer program is loaded and executed by the processor 21 to implement the relevant steps in the safety detection method of the subway signal equipment area controller disclosed in any of the aforementioned embodiments. In addition, the electronic device 20 in this embodiment may specifically be an electronic computer.

[0110] In this embodiment, the power supply 23 is used to provide working voltage for each hardware device on the electronic device 20; the communication interface 24 can create a data transmission channel between the electronic device 20 and the external device, and the communication protocol it follows is any communication protocol that can be applied to the technical solution of the present application, and is not specifically limited here; the input and output interface 25 is used to obtain external input data or output data to the outside world, and its specific interface type can be selected according to specific application needs and is not specifically limited here.

[0111] In addition, the memory 22, as a carrier for storing resources, can be a read-only memory, a random access memory, a disk or an optical disk, etc. The resources stored thereon can include an operating system 221, a computer program 222, etc., and the storage method can be temporary storage or permanent storage.

[0112] The operating system 221 is used to manage and control the hardware devices and computer program 222 on the electronic device 20, which can be Windows Server, Netware, Unix, Linux, etc. In addition to the computer program that can be used to complete the subway signal device area controller safety detection method performed by the electronic device 20 disclosed in any of the aforementioned embodiments, the computer program 222 can further include computer programs that can be used to complete other specific tasks.

[0113] Furthermore, the present application also discloses a computer-readable storage medium for storing a computer program; wherein, when the computer program is executed by a processor, the aforementioned disclosed subway signal equipment area controller safety detection method is implemented. For the specific steps of the method, reference may be made to the corresponding contents disclosed in the aforementioned embodiments, and no further description will be given here.

[0114] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.

[0115] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0116] The steps of the method or algorithm described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0117] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0118] The technical solution provided by the present application is introduced in detail above. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea. At the same time, for general technicians in this field, according to the idea of ​​the present application, there will be changes in the specific implementation methods and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A safety detection method for a subway signal equipment area controller, characterized in that: Applicable to independent safety verification modules, including: Acquire original information received by the regional controller application of the subway signal equipment, and verify the original information as an object to be detected to obtain a first information verification result; Verifying the validity of the original information based on the first information verification result, and sending the original information after the validity verification to the regional controller application, so that the regional controller application performs corresponding application logic processing on the original information to obtain target key output information of the regional controller application; the target key output information includes the mobile authorization information sent by the regional controller application and the handover authorization information sent by the regional controller application; Verifying the target key output information sent by the regional controller application to obtain a second information verification result, and determining whether to execute a security processing measure for the regional controller application based on the second information verification result; the second information verification result includes a mobile authorization information verification result and a handover authorization information verification result; The process of verifying the target key output information sent by the regional controller application to obtain a second information verification result includes: Verifying the mobile authorization information sent by the regional controller application to obtain a mobile authorization information verification result; and / or, verifying the handover authorization information sent by the regional controller application to obtain a handover authorization information verification result; The process of verifying the mobile authorization information sent by the regional controller application to obtain a verification result of the mobile authorization information includes: Performing a signal permission check on the mobile authorization information to obtain a first mobile authorization information check sub-result; and / or, performing a signal permission overlap check on the mobile authorization information to obtain a second mobile authorization information check sub-result; and / or, performing a legality check on the temporary speed limit in the mobile authorization information to obtain a third mobile authorization information check sub-result; Based on the first mobile authorization information check sub-result, the second mobile authorization information check sub-result and the third mobile authorization information check sub-result, performing a key information consistency check on the sent message to obtain the mobile authorization information verification result; The process of verifying the handover authorization information sent by the regional controller application to obtain a handover authorization information verification result includes: Checking the signal permission within the handover range of the overlapping area of ​​the adjacent area controller to obtain a first handover authorization information check sub-result; and / or, checking the signal permission overlap within the overlapping area handover range of the adjacent area controllers to obtain a second handover authorization information check sub-result; and / or, performing a legality check on the temporary speed limit within the handover range of the overlapping area of ​​the adjacent area controller to obtain a third handover authorization information check sub-result; Based on the first handover authorization information check sub-result, the second handover authorization information check sub-result and the third handover authorization information check sub-result, performing a key information consistency check on the sent message to obtain the handover authorization information verification result; The sent message is safety output information and / or process control status information, including any one or a combination of platform screen door system, emergency close button, registration / logout and special control related information.

2. The subway signal equipment area controller safety detection method according to claim 1 is characterized in that: The method of acquiring the original information received by the regional controller application of the subway signal equipment and verifying the original information as the object to be detected to obtain the first information verification result includes: Acquire the in-station section route information sent by the computer interlocking subsystem and received by the regional controller application of the subway signal equipment, and verify the in-station section route information to obtain the in-station section route information verification result; and / or, obtaining interlocking route information sent by the computer interlocking subsystem and received by the regional controller application of the subway signal equipment, and verifying the interlocking route information to obtain an interlocking route information verification result; And / or, obtaining the train location information sent by the automatic train monitoring system and received by the regional controller application of the subway signal equipment, and verifying the train location information to obtain a train location information verification result.

3. The subway signal equipment area controller safety detection method according to claim 1 is characterized in that: The verifying the validity of the original information based on the first information verification result, and sending the original information after the validity verification passes to the regional controller application, includes: Determining whether the original information has an abnormality based on the first information verification result; If there is no abnormality in the original information, sending the original information to the regional controller application; If there is an abnormality in the original information, directing the original information to a safe process, and sending the original information after the safe process to the regional controller application; Accordingly, the determining whether to execute the security processing measure for the zone controller application based on the second information verification result includes: Determining whether the target key output information is abnormal based on the second information verification result; If there is no abnormality in the target key output information, sending the target key output information to the regional controller application; If the target key output information has an abnormal situation, the target key output information is directed to safety processing, and safety processing measures for the zone controller application are executed.

4. The subway signal equipment area controller safety detection method according to any one of claims 1 to 3, characterized in that: Also includes: respectively configuring a shared cache area and respective independent data cache areas for the independent security check module and the regional controller application; The shared cache area is used to store external interface information, static data and general functions; the independent data cache area is used to store the check function of the independent safety check module and the data processing function of the regional controller application.

5. A subway signal equipment area controller safety detection device, characterized in that: Applicable to independent safety verification modules, including: An input information verification module is used to obtain original information received by the regional controller application of the subway signal equipment, and verify the original information as an object to be detected to obtain a first information verification result; an input information processing module, configured to verify the validity of the original information based on the first information verification result, and send the original information after the validity verification to the regional controller application, so that the regional controller application performs corresponding application logic processing on the original information to obtain target key output information of the regional controller application; the target key output information includes the mobile authorization information sent by the regional controller application and the handover authorization information sent by the regional controller application; an output information verification module, configured to verify the target key output information sent by the regional controller application to obtain a second information verification result, and determine whether to execute a security processing measure for the regional controller application based on the second information verification result; the second information verification result includes a mobile authorization information verification result and a handover authorization information verification result; Wherein, the output information verification module includes: A first output information checking submodule, used for checking the mobile authorization information sent by the regional controller application to obtain a mobile authorization information checking result; A second output information checking submodule, used for checking the handover authorization information sent by the regional controller application to obtain a handover authorization information checking result; The first output information checking submodule includes: a first mobile authorization information check sub-result generating unit, configured to perform a signal permission check on the mobile authorization information to obtain a first mobile authorization information check sub-result; a second mobile authorization information check sub-result generating unit, configured to perform a signal permission overlap check on the mobile authorization information to obtain a second mobile authorization information check sub-result; a third mobile authorization information check sub-result generating unit, configured to perform a legality check on the temporary speed limit in the mobile authorization information to obtain a third mobile authorization information check sub-result; a mobile authorization information verification result generating unit, configured to perform a key information consistency check on the sent message based on the first mobile authorization information check sub-result, the second mobile authorization information check sub-result, and the third mobile authorization information check sub-result, so as to obtain the mobile authorization information verification result; The second output information checking submodule includes: A first handover authorization information check sub-result generating unit, configured to check the signal permission within the handover range of the overlapping area of ​​the adjacent area controller to obtain a first handover authorization information check sub-result; A second handover authorization information check sub-result generating unit, configured to check the signal permission overlap within the handover range of the overlapping area of ​​the adjacent area controllers to obtain a second handover authorization information check sub-result; A third handover authorization information check sub-result generating unit, configured to perform a legality check on the temporary speed limit within the handover range of the overlapping area of ​​the adjacent area controllers to obtain a third handover authorization information check sub-result; A handover authorization information verification result generating unit is used to perform a key information consistency check on the sent message based on the first handover authorization information check sub-result, the second handover authorization information check sub-result and the third handover authorization information check sub-result to obtain the handover authorization information verification result; the sent message is safety output information and / or process control status information, including any one or a combination of platform screen door system, emergency close button, registration / deregistration and special control related information.

6. An electronic device, characterized in that: include: Memory, used to store computer programs; A processor is used to execute the computer program to implement the subway signal equipment area controller safety detection method as described in any one of claims 1 to 4.

7. A computer-readable storage medium, characterized in that: Used to store a computer program, wherein when the computer program is executed by a processor, the subway signal equipment area controller safety detection method as described in any one of claims 1 to 4 is implemented.

Images