Urban rail transit trackside data secure transmission method and system

Abstract

The invention discloses an urban rail transit trackside data secure transmission method and system. The method comprises the following steps: step 1, setting a rail circuit transmission process; 2, setting an inter-rail cable conveying process; step 3, setting a transponder transmission process; 4, setting a wireless transmission process; and 5, selecting a data exchange security mechanism. Different processes aim at ensuring the accuracy, integrity and safety of data in the transmission process, meanwhile, the transmission efficiency is improved so as to meet the operation requirements of an urban rail transit system, data conflicts and transmission errors are avoided, the transmission reliability is improved, information interference is avoided, the effectiveness of data transmission is ensured, and the data transmission efficiency is improved. The method is an important guarantee for safe, efficient and stable operation of urban rail transit.

Description

Technical Field

[0001] The present invention relates to the field of data transmission, and in particular to a method and system for secure transmission of trackside data in urban rail transit. Background Art

[0002] Trackside data refers to data related to train operation generated, collected or transmitted by trackside equipment in urban rail transit systems. These data are crucial to ensure the safety, efficiency and punctuality of train operation. They provide necessary input and feedback for train control systems, signal systems, monitoring systems, etc., so as to achieve precise control and optimization of train operation; During the trackside data transmission process, the trackside data security transmission method and system will be used to ensure data security.

[0003] The existing trackside data security transmission method and system have poor data security protection effect, which easily leads to data loss or leakage, and has a certain impact on the use of the trackside data security transmission method and system. Therefore, a method and system for urban rail transit trackside data security transmission is proposed. Summary of the invention

[0004] The technical problem to be solved by the present invention is: how to solve the problem that the existing method and system for secure transmission of trackside data have poor data security protection effect, easily lead to data loss or leakage, and bring certain impacts on the use of the method and system for secure transmission of trackside data, and provide a method and system for secure transmission of trackside data in urban rail transit.

[0005] The present invention solves the above technical problems through the following technical solutions, and the present invention comprises the following steps: Step 1: Set up the track circuit transmission process; Step 2: Set up the inter-rail cable transmission process; Step 3: Set up the transponder transmission process; Step 4: Set up the wireless transmission process; Step 5: Select data exchange security mechanism.

[0006] Furthermore, the specific process of setting the track circuit transmission process is as follows: First, check the track occupancy: conduct real-time monitoring and use electrical signals to determine whether the track is occupied by a train; The process of determining whether the track is occupied by a train is as follows: when the track is occupied by a train, the electrical connection between the transmitter and the receiver will be changed, that is, the occupation state of the track is identified; the occupation state includes track idleness and track occupation; When the occupancy status is that the track is idle, information is sent: confirm that the track is idle, that is, prepare the information to be sent, and the information sent includes the status of the track, the display status of the signal, and the position of the switch; When encoding information, the information will be encoded into a preset type of electrical signal and transmitted on the track circuit; The coded signal is sent to the track circuit via a transmitter; When the occupancy status is track occupied, the switching device is switched, and after detecting track occupancy, the switching logic is triggered to stop sending information by turning off the transmitter or changing the electrical state of the track circuit; To ensure that no erroneous information is sent when the track is occupied when switching the device, set the transmitter to the off state or send a specific signal indicating track occupation; Receive and process information. When the track is idle, the receiving device receives and processes the information sent from the track circuit; The received information will be used to update the status after security verification. The updated status includes updating the track occupancy status, signal display status or switch position. Security verification includes verifying integrity and correctness.

[0007] Furthermore, the process of setting the track circuit transmission process also includes feeding back the track occupancy status and other relevant information to the central control system or operator for monitoring the status of the track circuit and the operation of the train. It also performs fault detection, identifying and reporting any problems that could affect safe transmission of the track circuit.

[0008] Furthermore, the specific process of setting the inter-rail cable transmission process includes: Laying cables, sending messages and receiving information. After laying cables, cable testing is required. If the test passes, the cables are allowed to be used. The specific process of laying the cable is as follows: Location selection: Lay a dedicated cable line next to the railway track, which is independent of the track; Cable type selection: The selected cable must meet the preset conditions.

[0009] The specific process of sending message information is as follows: Generate ATP message information, which contains train operation data, including speed limit, location information and signal status. ATP message information is continuously sent to the rail direction through the laid cable line; At the sending end, a sending device is set up to encode the ATP message information into an electrical signal and inject it into the cable for transmission; The train is equipped with receiving equipment to capture the electrical signals transmitted in the cable and decode them into the original ATP message information; After receiving the ATP message information, the receiving device on the train will send the ATP message information to the onboard ATP system or other related equipment for processing.

[0010] The on-board equipment evaluates the train's operating status based on the ATP message information received and makes corresponding control decisions, including adjusting speed, sounding an alarm or performing emergency braking.

[0011] Furthermore, the specific process of setting the transponder transmission process is as follows: First, the transponder is set at the preset position of the track circuit, including the station entrance signal, the station exit and the block division boundary of the interval; Transponders include fixed data transponders and variable data transponders; Fixed data transponders store long-term unchanged information, including line parameters; The variable data transponder stores variable information as needed, including temporary speed limits; Data exchange, i.e. data sending and receiving: Data transmission: The transponder sends the encoded data message to the vehicle antenna through the antenna.

[0012] Data reception and processing: After the vehicle-mounted antenna receives the data message sent by the transponder, it will transmit it to the transponder transmission module (BTM); The transponder transmission module (BTM) filters, amplifies, demodulates and decodes the received data to restore the user message, which is then sent to the on-board train control device for processing.

[0013] Furthermore, the specific process of setting the wireless transmission process is as follows: First, establish the train-to-ground communication, then set up the wireless switch and trackside wireless unit AP; The data from the control center is forwarded to the trackside wireless unit AP through the wireless switch; The trackside wireless unit AP is a wireless communication device deployed along the track, which communicates with the on-board wireless communication device through a wireless network; The on-board wireless communication equipment is installed on the train and is used to exchange real-time data with the trackside wireless unit AP. Then, data is sent: first, data preparation is performed on the trackside equipment. The trackside equipment prepares the data to be transmitted to the train according to the train's running requirements and track status. The trackside wireless unit AP sends the data to be transmitted to the train through the wireless network to the receiving device on the train. Finally, data reception is performed: after receiving the data sent by the trackside wireless unit AP, the receiving device on the train decodes and verifies the data to verify its integrity and accuracy; The receiving device passes the decoded data to the on-board device for processing. The on-board device adjusts the train parameters, including running speed and direction, based on the received data.

[0014] Further, the process of setting up the wireless transmission process also includes the train sending data to the trackside equipment; When a train sends data to the trackside equipment, it is necessary to prepare the train data in advance: during the operation of the train, the train generates data that needs to be sent to the trackside equipment, including the train's position, speed and running status; The data that needs to be sent to the trackside equipment is sent through the wireless network, and the on-board wireless communication device sends the data that needs to be sent to the trackside equipment to the trackside wireless unit AP through the wireless network; After receiving the data sent by the train, the trackside wireless unit AP decodes and verifies it, and then passes the data to the control center or other trackside equipment for processing.

[0015] Furthermore, the data exchange security mechanism selects the following contents: First, set up hierarchical isolation between networks: set up security mechanisms for different network areas to perform secure isolation and controlled exchange of data, that is, deploy secure data exchange systems and network gates between different network areas to block attacks based on the TCP / IP protocol; After that, the vehicle safety equipment is deployed, and the vehicle network gateway is deployed on the vehicle operation and maintenance channel to perform one-way transmission of vehicle operation information, CCTV, and PIS data in a secure manner; Deploy vehicle traffic and log monitoring and auditing equipment by bypassing the switches at both ends of the vehicle to audit and analyze the internal and external network traffic of the vehicle, receive logs collected by vehicle network equipment and security equipment, and perceive the safety inside the vehicle; Finally, a reverse locking mechanism is set up: when a communication failure occurs between a trackside trusted node or a normally operating train onboard equipment that exceeds the system safety time limit, the hash value of the global data protection will be verified and locked.

[0016] Furthermore, the content selected by the data exchange security mechanism also includes the selection of a data exchange strategy, and the data exchange strategy includes: Selection of encryption technology: During data transmission, encryption technology is selected to encrypt data; Use encryption algorithms and key management strategies to prevent data from being stolen or tampered with during transmission.

[0017] Selection of authentication technology: Authentication technology is used to ensure the authenticity of the identities of both communicating parties, prevent unauthorized users from accessing sensitive information, and use digital signatures and identity authentication systems to authenticate the identities of both communicating parties and verify data integrity.

[0018] Access control settings: Set different user permissions, adopt role-based access control (RBAC) or attribute-based access control (ABAC) strategies, and fine-grained permission management.

[0019] Data desensitization and de-identification settings: Desensitize or de-identify sensitive data by using obfuscation, replacement, blanking or encryption to reduce sensitivity without changing the purpose; Security monitoring and auditing: Use video monitoring systems, log recording and analysis systems to conduct real-time monitoring and auditing of the data transmission process; Backup and recovery policy settings: Back up data regularly.

[0020] A system for secure data transmission along the trackside of urban rail transit, the system comprising: Track circuit transmission module, used to set track circuit transmission process; Track cable module, used to set up the track cable transmission process; A transponder transmission module, used to set up a transponder transmission process; A wireless transmission module is used to set up a wireless transmission process; Selection module, used for selecting data exchange security mechanism.

[0021] Compared with the prior art, the present invention has the following advantages: the urban rail transit trackside data security transmission method and system ensures data transmission on the track in an idle state, avoids data conflicts and transmission errors, improves transmission reliability, can timely transmit track circuit information to the interlocking system, provides accurate signals for train operation, and ensures the safety and efficiency of train operation. When the train occupies the track, the switching device stops sending information, avoids information interference, and ensures the effectiveness of data transmission.

[0022] The specially laid cable line provides an independent transmission channel for ATP message information, avoiding interference with other signals, improving transmission clarity, and continuously sending ATP message information to provide real-time and accurate operation guidance for trains, ensuring the stability and safety of train operation. The receiving equipment on the train can accurately receive and process message information, providing strong support for train operation.

[0023] The setting of the transponder enables the train to obtain the required information at a specific location, improving the pertinence and accuracy of data transmission. When the train passes through the transponder, it senses the information, realizes the instant transmission and reception of data, and improves the transmission efficiency. The two-way data exchange between the train and the transponder enables the information to be updated and synchronized in real time, providing more flexible and reliable support for train operation.

[0024] The establishment of the line-train-ground communication system facilitates real-time data exchange between trains and the ground, improves the timeliness and accuracy of data transmission, and the trackside equipment sends data to the train through the wireless network, realizing rapid data transmission and reception. The receiving equipment on the train can receive and process data in real time, providing more intelligent and efficient decision-making support for train operation.

[0025] The network hierarchical isolation strategy is adopted to isolate different network areas securely and exchange data in a controlled manner, effectively preventing data leakage and illegal access, and improving data security. Encryption technology is used to encrypt the transmitted data, ensuring the confidentiality and integrity of the data and preventing the data from being stolen or tampered with during transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] Figure 1 It is the overall flow chart of the present invention. DETAILED DESCRIPTION

[0027] The following is a detailed description of an embodiment of the present invention. This embodiment is implemented on the premise of the technical solution of the present invention, and a detailed implementation method and a specific operation process are given, but the protection scope of the present invention is not limited to the following embodiment.

[0028] like Figure 1 As shown, this embodiment provides a technical solution: a method for secure transmission of trackside data in urban rail transit, comprising the following steps: Step 1: Set up the track circuit transmission process; Step 2: Set up the inter-rail cable transmission process; Step 3: Set up the transponder transmission process; Step 4: Set up the wireless transmission process; Step 5: Select data exchange security mechanism.

[0029] The specific process of the urban rail transit trackside data security transmission method varies according to different transmission methods. The specific process is as follows: The track circuit transmission process can be described in detail as follows: Check track occupancy System monitoring: The track circuit system first conducts real-time monitoring to determine whether the track is occupied by a train through electrical signals. This is usually achieved through the electrical connection status between the transmitter and receiver in the track circuit.

[0030] Occupancy determination: If the track is occupied by a train, the electrical connection between the transmitter and receiver will be changed (for example, the current is shunted or short-circuited), and the system can identify the occupancy status of the track.

[0031] Send message (when track is free) Message preparation: Once the system confirms that the track is free, it prepares the message to be sent. This information may include the status of the track (free or occupied), the display status of the signal, the position of the switch, etc.

[0032] Information Encoding: Information is encoded into a specific electrical signal format for transmission over track circuits.

[0033] Transmitting the signal: The coded signal is sent onto the track circuit, usually by a transmitter, which places the signal onto the conductors of the track circuit so that it can be detected by the train or other receiving equipment.

[0034] Switching device (when train occupies track) Occupancy detection: When a train occupies the track, the electrical characteristics of the track circuit change, which usually causes the transmitter to detect an abnormal condition.

[0035] Switching logic: Upon detecting track occupancy, the system triggers switching logic. This may involve shutting down the transmitter, changing the electrical state of the track circuit, or taking other actions to stop sending information.

[0036] Safety handling: The switching device ensures that no erroneous information is sent when the track is occupied. This is usually achieved by setting the track circuit to a safe state, for example, setting the transmitter to the off state or sending a specific signal indicating track occupation.

[0037] Receiving and processing information Information reception: When the track is idle, the receiving equipment (such as the interlocking system or other related systems) will receive and process the information sent from the track circuit.

[0038] Status update: The received information will be used to update the system status, for example, the track occupancy status, signal display status or switch position.

[0039] Security Verification: Received information is security verified to ensure its integrity and correctness. This usually involves checksums and checks on the information, as well as cross-verification with other system states.

[0040] 5. Feedback and Monitoring Status Feedback: The system may feed back the track occupancy status and other relevant information to the central control system or operators so that they can monitor the status of the track circuits and the operation of the trains.

[0041] Fault Detection: The system also performs fault detection to identify and report any problems that may affect the safe transmission of the track circuit.

[0042] It should be noted that the track circuit transmission process may vary depending on the track circuit system and application scenario. The above process provides a general framework, but the specific implementation details may vary from system to system.

[0043] The Track Cable Transfer process is indeed a complex but critical system used to transmit information in the Automatic Train Protection (ATP) system. Below is a detailed explanation of the Track Cable Transfer process: Laying cables Location selection: Next to the railway track, a suitable location needs to be selected to lay a dedicated cable line. This line is independent of the track and is designed to ensure stable and secure transmission of information.

[0044] Cable type: The selected cable should have good anti-interference ability and durability to adapt to the complex conditions in the railway environment.

[0045] Laying method: The cable is usually fixed on the ground beside the track, or laid through special brackets and pipes to ensure its stability and safety. Laying test is required during the cable laying process, and it is allowed to be used if the test passes.

[0046] Send message information ATP message information: The message information generated by the ATP system contains key data of train operation, such as speed limit, location information, signal status, etc.

[0047] Transmission method: Through the already laid cable lines, the ATP system can continuously send these message information to the rail direction. This is usually transmitted in the form of electrical signals through the wires in the cable.

[0048] Transmitting equipment: At the transmitting end, there will be a dedicated transmitting equipment responsible for encoding the ATP message information into electrical signals and injecting them into the cable for transmission.

[0049] 3. Receive information Receiving equipment: The train is equipped with special receiving equipment to capture the electrical signals transmitted in the cable and decode them into the original ATP message information.

[0050] Information transmission: Once the message information is received, the receiving equipment on the train will immediately pass the information to the on-board ATP system or other related equipment for processing.

[0051] Processing flow: The on-board equipment will evaluate the train's operating status based on the received ATP message information and make corresponding control decisions, such as adjusting the speed, issuing an alarm or performing emergency braking.

[0052] Summarize The cable transmission process between tracks is an integral part of the ATP system, which ensures the accurate transmission and processing of train operation information. By laying special cable lines, sending message information and receiving and processing information, the ATP system can achieve real-time monitoring and precise control of train operation, thereby ensuring the safety and efficiency of train operation.

[0053] In addition, with the continuous advancement of technology, the inter-track cable transmission process is also being optimized and improved. For example, some advanced systems have begun to use wireless communication technology to replace traditional cable transmission methods to improve the flexibility and reliability of information transmission. However, no matter what transmission method is used, ensuring the accurate, timely and secure transmission of information is always the core goal of the ATP system.

[0054] During the cable laying process, a series of tests are required to ensure the safe and reliable operation of the cable. The specific test process is as follows: Basic Test Continuity test: Use a tester or similar equipment to test whether each core of the cable is unobstructed and whether the wiring method is correct. This is the basic step to check the quality of cable construction.

[0055] Insulation resistance test: Use a megohmmeter of the corresponding level (e.g. 1000V megohmmeter for 0.6 / 1kV cables, 2500V megohmmeter for cables above 0.6 / 1kV) to measure the insulation resistance of each cable core to the ground or to the metal shielding layer. Ensure that the insulation performance of the cable meets the requirements, and the insulation resistance of the outer sheath and inner lining of the rubber-plastic cable is not less than 0.5MΩ·km.

[0056] Special Test Withstand voltage test: For newly laid cables or cable lines that have had junction boxes reinstalled or connectors removed during operation, a withstand voltage test should be carried out. The withstand voltage test may include DC withstand voltage and leakage current tests, power frequency withstand voltage tests, etc., to detect the insulation performance and withstand voltage capacity of the cable under high voltage.

[0057] Comprehensive cable system testing: According to international standards (such as TSB67, ISO11801, etc.), the entire cable system is fully tested. Test parameters include length, attenuation, near-end crosstalk, attenuation-to-crosstalk ratio, return loss, transmission delay, etc., to ensure that the cable system meets the design standards and performance requirements. The test report should include information such as the test time, location, operator name, standard used, and test results.

[0058] Third-party spot check testing After the construction is completed, a third party will conduct a random inspection test on the integrated wiring system to ensure the overall quality of the cable system. The proportion of random inspection tests is usually 10% to 20%, and the test content can be the same or similar to the certification test.

[0059] Phase verification and no-load running test Phase check: For newly laid cables or repaired cable lines, the cable phase should be checked to ensure that it is consistent with the grid phase. Phase check can be performed using methods such as the megohmmeter method or the indicator light method.

[0060] No-load operation test: After the cable line is tested and meets the specified requirements, a no-load operation test should be carried out. Observe the operation of the cable system. The no-load operation time is usually 24 hours, and no abnormal phenomenon should occur during this period.

[0061] Other special tests (if necessary) Depending on the specific conditions and usage requirements of the cable system, other special tests may be required, such as partial discharge tests, insulating oil tests, etc.

[0062] Through the above test steps, the performance and quality of the cable system can be fully evaluated to ensure that it can meet the complex conditions in the railway environment and achieve stable and secure transmission of information; The testing process also includes: Pre-laying inspection and preparation Site survey and route planning: Before laying, a detailed site survey is conducted to determine the best laying route for the cable to avoid conflicts with railway facilities and to consider the convenience of future maintenance and overhaul.

[0063] Cable quality inspection: Check each cable to be laid one by one, including appearance, insulation thickness, conductor resistance, etc., to ensure that each cable meets the design specifications and quality standards.

[0064] Real-time monitoring during the laying process Tension and pull monitoring: During the laying process, tension sensors and force gauges are used to monitor the tension and pull of the cable in real time to ensure that they are within a safe range and to avoid performance degradation or damage caused by excessive stretching.

[0065] Depth and position monitoring: Use underground detection equipment (such as radar or sonar) to monitor the laying depth and position of the cable in real time to ensure that its distance from the ground or track meets the regulations and avoids interference or damage from the external environment.

[0066] Comprehensive testing after laying High-frequency signal transmission test: Use a high-frequency signal generator to send signals of specific frequency at both ends of the cable, and use the receiver to detect the attenuation and interference of the signal to evaluate the performance of the cable in high-frequency communication.

[0067] Electromagnetic compatibility test: An electromagnetic interference source is set near the cable to simulate the electromagnetic interference situation in the railway environment and test the cable's anti-interference ability and electromagnetic compatibility.

[0068] Environmental adaptability test: Expose the cable to extreme temperature, humidity, vibration and other environmental conditions, observe its performance changes, and ensure that it can maintain stable transmission in various harsh environments.

[0069] Intelligent diagnostic system testing: If the cable system is equipped with an intelligent diagnostic system (such as fault location, online monitoring, etc.), special tests are required to verify its accuracy and reliability.

[0070] Long-term monitoring and maintenance plan Establish a monitoring system: After the cable is laid, establish a long-term monitoring system to regularly collect and analyze the cable operation data and detect potential problems in a timely manner.

[0071] Develop a maintenance plan: Based on the test results and operating data of the cable, develop a detailed maintenance plan, including regular inspection, cleaning, and repairs, to ensure the long-term and stable operation of the cable.

[0072] Training and knowledge transfer: Provide professional training to maintenance personnel to enable them to understand the structure, performance and maintenance requirements of the cable system and improve maintenance efficiency and quality.

[0073] Through the above test process, the performance and stability of the cable in the railway environment can be evaluated more comprehensively and in-depth to ensure that it can meet the high requirements of railway communication and signal transmission.

[0074] The balise transmission process is a crucial link in the railway communication system, which ensures the data exchange between the train and the ground. The following is a detailed explanation of the balise transmission process: Set up transponder Location selection: Balises are carefully placed at specific locations on the track circuit, which are usually key nodes for train operation, such as station entry signals, station exits, and block division boundaries between intervals.

[0075] Transponder type: Transponders include fixed data transponders and variable data transponders. Fixed data transponders store long-term unchanged information such as line parameters, while variable data transponders can store variable information such as temporary speed limits as needed.

[0076] Train passes by balise: Induction mechanism: When a train passes over a transponder, the onboard antenna sends electromagnetic energy to activate the transponder. The transponder converts the received electromagnetic energy into working power through the principle of electromagnetic induction, thereby starting the electronic circuit.

[0077] Information reading: Once the transponder is activated, it will send out the transponder transmission message that was pre-stored or transmitted by the LEU (programmable logic unit). These messages contain all the information stored in the transponder.

[0078] Two-way data exchange (actually one-way data sending and receiving) Data transmission: It should be clarified that the "two-way data exchange" in the transponder transmission process is not accurate. In fact, the transponder mainly sends data to the train, rather than receiving information sent by the train. The transponder sends the encoded data message to the on-board antenna through the antenna.

[0079] Data reception and processing: After the vehicle-mounted antenna receives the data message sent by the transponder, it will transmit it to the transponder transmission module (BTM). The BTM filters, amplifies, demodulates and decodes the received data to restore the user message. These messages are then sent to the vehicle-mounted train control equipment for processing.

[0080] Balise installation and maintenance: Balise installation should meet the requirements of the railway communication system to ensure that it can accurately and reliably transmit information. Balise maintenance is also very important, including regular inspection of the balise surface for debris and loose bolts.

[0081] Safety and reliability: The safety and reliability of the balise transmission process are crucial to the normal operation of the railway system. Therefore, during the design and implementation process, various factors, such as electromagnetic interference and equipment failure, need to be fully considered, and corresponding measures need to be taken to prevent and respond.

[0082] In summary, the balise transmission process is a complex but critical system that ensures the accuracy and reliability of data exchange between trains and the ground. The performance and safety of the railway communication system can be further improved by carefully setting up balises, optimizing data transmission and processing processes, and strengthening equipment maintenance.

[0083] The wireless transmission process plays a vital role in the train-to-ground communication system, ensuring real-time and efficient data exchange between the train and the ground control center. The following is a detailed explanation of the process: Establishing vehicle-to-ground communication Function of the control center: The control center is the core of the vehicle-ground communication system, and is responsible for managing and monitoring the operation of the entire system.

[0084] The control center realizes the functions of on-board ATP (automatic train protection) and ATO (automatic train operation) through specific communication protocols and algorithms.

[0085] Wireless switch and trackside wireless unit AP: The wireless switch is the bridge connecting the control center and the trackside equipment. It is responsible for forwarding the data from the control center to the trackside wireless unit AP.

[0086] Trackside wireless units APs are wireless communication devices deployed along the track. They communicate with on-board wireless communication devices through wireless networks.

[0087] On-board wireless communication equipment: The on-board wireless communication equipment is installed on the train and is used to exchange real-time data with the trackside wireless unit AP.

[0088] These devices typically have high-speed, high-reliability communication capabilities to ensure real-time transmission of data.

[0089] Sending data: Data preparation for trackside equipment: Trackside equipment (such as signals, switches, etc.) prepares data to be transmitted to the train based on the train's operating requirements and track conditions.

[0090] Data is sent via wireless network: The trackside wireless unit AP sends this data to the receiving device on the train via the wireless network.

[0091] Wireless networks usually use dedicated communication frequency bands to ensure the stability and security of data transmission.

[0092] Receiving Data Data reception by train receiving equipment: After receiving the data sent by the trackside wireless unit AP, the receiving equipment on the train decodes and verifies it to ensure the integrity and accuracy of the data.

[0093] Data is transmitted to the on-board device: The receiving device transmits the decoded data to the on-board device (such as ATP / ATO system) for processing.

[0094] The on-board equipment adjusts the train's running speed, direction and other parameters based on the received data to ensure the safe operation of the train.

[0095] The train sends data to the trackside equipment: Preparation of train data: During the operation of the train, some data will be generated that needs to be sent to the trackside equipment, such as the train's position, speed, operating status, etc.

[0096] Data is sent via wireless network: The on-board wireless communication device sends this data to the trackside wireless unit AP via wireless network.

[0097] Receiving and processing by trackside equipment: After the trackside wireless unit AP receives the data sent by the train, it decodes and verifies it, and then passes the data to the control center or other trackside equipment for processing.

[0098] The wireless transmission process realizes real-time data exchange between the train and the ground control center in the train-to-ground communication system. The control center, wireless switch, trackside wireless unit AP and on-board wireless communication equipment work together to ensure accurate and efficient data transmission. At the same time, the process also supports the train to send data to trackside equipment, realizing two-way communication and providing strong guarantee for the safe operation of the train.

[0099] The spoiler process of security mechanism and data exchange is as follows: Safety mechanism selection: Inter-network hierarchical isolation: Strategy description: According to business characteristics, security and reliability requirements, security mechanisms are set up for different network areas (such as safe production network, internal management network and external service network) to achieve secure isolation and controlled exchange of data.

[0100] Implementation method: Secure data exchange systems (such as front-end and back-end servers) and network gates can be deployed between different network areas to block various attacks based on the TCP / IP protocol and ensure the secure transmission of data.

[0101] Vehicle safety equipment deployment Deploy an on-board network gateway on the vehicle's intelligent operation and maintenance channel to achieve safe and reliable one-way transmission of vehicle operation information, CCTV, and PIS data.

[0102] A dedicated vehicle-mounted firewall is deployed between the vehicle-to-ground wireless communication vehicle terminal and the vehicle's internal network switch to achieve network attack protection, virus protection, perception of vehicle-specific protocols, and trusted management and control of communication behaviors.

[0103] Deploy on-board traffic and log monitoring and auditing equipment in bypass mode at both ends of the vehicle to audit and analyze the internal and external network traffic of the vehicle, receive logs from on-board network devices and security equipment, and achieve comprehensive perception of in-vehicle safety.

[0104] Reverse locking mechanism: This mechanism is designed to ensure that trackside data is not incorrectly refreshed due to misoperation or human error.

[0105] When a communication failure occurs between a trackside trusted node or an onboard device of a normally operating train in the system that exceeds the system safety time limit, the hash value of the global data protection will be verified and locked to ensure the safety of the system in the event of a failure.

[0106] Data exchange strategy: Encryption technology: During data transmission, encryption technology can be used to ensure the confidentiality of data.

[0107] Use strong encryption algorithms and key management strategies to prevent data from being stolen or tampered with during transmission.

[0108] Authentication Technology Authentication technology can ensure the authenticity of the identities of both communicating parties and prevent unauthorized users from accessing sensitive information.

[0109] Digital signatures, identity authentication systems and other means are used to authenticate the identities of both communicating parties and verify data integrity.

[0110] Access Control: Set different user permissions to ensure that only authorized personnel can access and operate data.

[0111] Use strategies such as role-based access control (RBAC) or attribute-based access control (ABAC) to implement fine-grained permission management.

[0112] Data desensitization and de-identification: Desensitize or de-identify sensitive data to reduce the risk of data leakage.

[0113] Use technical means such as obfuscation, replacement, blanking, and encryption to ensure that the sensitivity of data is reduced without changing its purpose.

[0114] Security Monitoring and Auditing: Use video surveillance systems, log recording and analysis systems and other means to monitor and audit the data transmission process in real time.

[0115] Timely detect abnormal behaviors and security risks to ensure compliance and security of data transmission.

[0116] Backup and recovery strategy: Back up important data regularly and be able to restore it quickly when needed.

[0117] Adopt high-availability architecture and disaster recovery solutions to ensure that business operations can be quickly restored when data is lost or damaged.

[0118] By adopting security mechanisms such as network hierarchical isolation, on-board safety equipment deployment, reverse locking mechanism, and data exchange strategies such as encryption technology, authentication technology, and access control, the safe transmission and efficient use of trackside data can be ensured.

[0119] A system for secure data transmission along the trackside of urban rail transit, the system comprising: Track circuit transmission module, used to set track circuit transmission process; Track cable module, used to set up the track cable transmission process; A transponder transmission module, used to set up a transponder transmission process; A wireless transmission module is used to set up a wireless transmission process; Selection module, used for selecting data exchange security mechanism.

[0120] In summary, the present invention, when used,.

[0121] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In the description of the present invention, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0122] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, without contradiction.

[0123] Although the embodiments of the present invention have been shown and described above, it is to be understood that the above embodiments are exemplary and are not to be construed as limitations of the present invention. A person skilled in the art may change, modify, replace and vary the above embodiments within the scope of the present invention.

Claims

1. A method for secure transmission of trackside data in urban rail transit, characterized in that: The following steps are involved: Step 1: Set up the track circuit transmission process; Step 2: Set up the inter-rail cable transmission process; Step 3: Set up the transponder transmission process; Step 4: Set up the wireless transmission process; Step 5: Select data exchange security mechanism.

2. The method for secure transmission of trackside data in urban rail transit according to claim 1, characterized in that: The specific process of setting the track circuit transmission process is as follows: First, check the track occupancy: conduct real-time monitoring and use electrical signals to determine whether the track is occupied by a train; The process of determining whether the track is occupied by a train is as follows: when the track is occupied by a train, the electrical connection between the transmitter and the receiver will be changed, that is, the occupation state of the track is identified; the occupation state includes track idleness and track occupation; When the occupancy status is that the track is idle, information is sent: confirm that the track is idle, that is, prepare the information to be sent, and the information sent includes the status of the track, the display status of the signal, and the position of the switch; When encoding information, the information will be encoded into a preset type of electrical signal and transmitted on the track circuit; The coded signal is sent to the track circuit via a transmitter; When the occupancy status is track occupied, the switching device is switched, and after detecting track occupancy, the switching logic is triggered to stop sending information by turning off the transmitter or changing the electrical state of the track circuit; To ensure that no erroneous information is sent when the track is occupied when switching the device, set the transmitter to the off state or send a specific signal indicating track occupation; Receive and process information. When the track is idle, the receiving device receives and processes the information sent from the track circuit; The received information will be used to update the status after security verification. The updated status includes updating the track occupancy status, signal display status or switch position. Security verification includes verifying integrity and correctness.

3. A method for secure transmission of trackside data in urban rail transit according to claim 2, characterized in that: The process of setting up the track circuit transmission process also includes feeding back the track occupancy status and other relevant information to the central control system or operator for monitoring the status of the track circuit and the operation of the train. It also performs fault detection, identifying and reporting problems that affect the safe transmission of track circuits.

4. The method for secure transmission of trackside data in urban rail transit according to claim 1, characterized in that: The specific process of setting the inter-rail cable transmission process includes: Laying cables, sending messages and receiving information. After laying cables, cable testing is required. If the test passes, the cables are allowed to be used. The specific process of laying the cable is as follows: Location selection: Lay a dedicated cable line next to the railway track, which is independent of the track; Cable type selection: The selected cable should meet the preset conditions; The specific process of sending message information is as follows: Generate ATP message information, which contains train operation data, including speed limit, location information and signal status. ATP message information is continuously sent to the rail direction through the laid cable line; At the sending end, a sending device is set up to encode the ATP message information into an electrical signal and inject it into the cable for transmission; The train is equipped with receiving equipment to capture the electrical signals transmitted in the cable and decode them into the original ATP message information; After receiving the ATP message information, the receiving device on the train will send the ATP message information to the onboard ATP system or other related equipment for processing; The on-board equipment evaluates the train's operating status based on the ATP message information received and makes corresponding control decisions, including adjusting speed, sounding an alarm or performing emergency braking.

5. The method for secure transmission of trackside data in urban rail transit according to claim 1, characterized in that: The specific process of setting the transponder transmission process is as follows: First, the transponder is set at the preset position of the track circuit, including the station entrance signal, the station exit and the block partition boundary of the interval; Transponders include fixed data transponders and variable data transponders; Fixed data transponders store long-term unchanged information, including line parameters; The variable data transponder stores variable information as needed, including temporary speed limits; Data exchange, i.e. data sending and receiving: Data transmission: The transponder sends the encoded data message to the vehicle antenna through the antenna; Data reception and processing: After the vehicle-mounted antenna receives the data message sent by the transponder, it will transmit it to the transponder transmission module; The transponder transmission module filters, amplifies, demodulates and decodes the received data to restore the user message, which is then sent to the on-board train control device for processing.

6. The method for secure transmission of trackside data in urban rail transit according to claim 1, characterized in that: The specific process of setting the wireless transmission process is as follows: First, establish the train-to-ground communication, then set up the wireless switch and trackside wireless unit AP; The data from the control center is forwarded to the trackside wireless unit AP through the wireless switch; The trackside wireless unit AP is a wireless communication device deployed along the track, which communicates with the on-board wireless communication device through a wireless network; The on-board wireless communication equipment is installed on the train and is used to exchange real-time data with the trackside wireless unit AP. Then, data is sent: first, data preparation is performed on the trackside equipment. The trackside equipment prepares the data to be transmitted to the train according to the train's operating requirements and track status. The trackside wireless unit AP sends the data to be transmitted to the train through the wireless network to the receiving device on the train. Finally, data reception is performed: after receiving the data sent by the trackside wireless unit AP, the receiving device on the train decodes and verifies the data to verify its integrity and accuracy; The receiving device passes the decoded data to the on-board device for processing. The on-board device adjusts the train parameters, including running speed and direction, based on the received data.

7. A method for secure transmission of trackside data in urban rail transit according to claim 6, characterized in that: The process of setting up the wireless transmission process also includes the train sending data to the trackside equipment; When a train sends data to the trackside equipment, it is necessary to prepare the train data in advance: during the operation of the train, the train generates data that needs to be sent to the trackside equipment, including the train's position, speed and running status; The data that needs to be sent to the trackside equipment is sent through the wireless network, and the on-board wireless communication device sends the data that needs to be sent to the trackside equipment to the trackside wireless unit AP through the wireless network; After receiving the data sent by the train, the trackside wireless unit AP decodes and verifies it, and then passes the data to the control center or other trackside equipment for processing.

8. The method for secure transmission of trackside data in urban rail transit according to claim 1, characterized in that: The data exchange security mechanism selected content is as follows: First, set up hierarchical isolation between networks: set up security mechanisms for different network areas to perform secure isolation and controlled exchange of data, that is, deploy secure data exchange systems and network gateway devices between different network areas to block attacks based on the TCP / IP protocol; After that, the vehicle safety equipment is deployed, and the vehicle network gateway is deployed on the vehicle operation and maintenance channel to perform one-way transmission of vehicle operation information, CCTV, and PIS data in a secure manner; Deploy vehicle traffic and log monitoring and auditing equipment by bypassing the switches at both ends of the vehicle to audit and analyze the internal and external network traffic of the vehicle, receive logs collected by vehicle network equipment and security equipment, and perceive the safety inside the vehicle; Finally, a reverse locking mechanism is set up: when a communication failure occurs between a trackside trusted node or a normally operating train onboard equipment that exceeds the system safety time limit, the hash value of the global data protection will be verified and locked.

9. A method for secure transmission of trackside data in urban rail transit according to claim 8, characterized in that: The content of the data exchange security mechanism selection also includes the selection of data exchange strategies, which include: Selection of encryption technology: During data transmission, encryption technology is selected to encrypt data; Use encryption algorithms and key management strategies to prevent data from being stolen or tampered with during transmission; Selection of authentication technology: Authentication technology is used to ensure the authenticity of the identities of both parties in communication, prevent unauthorized users from accessing sensitive information, and use digital signatures and identity authentication systems to perform identity authentication and data integrity verification on both parties in communication; Access control settings: Set different user permissions, adopt role-based access control or attribute-based access control strategies, and fine-grained permission management; Data desensitization and de-identification settings: Desensitize or de-identify sensitive data by using obfuscation, replacement, blanking or encryption to reduce sensitivity without changing the purpose; Security monitoring and auditing: Use video monitoring systems, log recording and analysis systems to conduct real-time monitoring and auditing of the data transmission process; Backup and recovery policy settings: Back up data regularly.

10. A system for secure data transmission along the trackside of urban rail transit, the system being based on the transmission method according to any one of claims 1 to 9, characterized in that: The system comprises: Track circuit transmission module, used to set track circuit transmission process; Track cable module, used to set up the track cable transmission process; A transponder transmission module, used to set up a transponder transmission process; A wireless transmission module is used to set up a wireless transmission process; Selection module, used for selecting data exchange security mechanism.

Images