Data monitoring method, equipment, medium and system for railway signal security data network

Abstract

The embodiment of the invention provides a data monitoring method, equipment, medium and system for a railway signal safety data network. The method comprises the following steps: acquiring an optical fiber shunt signal which is an optical fiber signal acquired from an optical fiber channel established between a switch in a secure data network and other equipment; performing signal analysis operation on the optical fiber shunt signal to obtain channel state data corresponding to the optical fiber channel; the channel state data represents the interaction state between the interaction devices corresponding to the optical fiber channels; and carrying out equipment interaction abnormity monitoring based on the channel state data. According to the embodiment of the invention, the method can achieve the monitoring of the interaction state between the devices in the security data network.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of data monitoring technology, and in particular to a data monitoring method, device, medium and system for a railway signal safety data network. Background Art

[0002] The railway signal safety data network is a communication platform that provides data interaction for the related hardware equipment of the ground train operation control system. The railway signal safety data network carries the key system equipment required for train operation control business, such as TCC (Train Control Center), CBI (Computer-Based Interlocking), TSRS (Temporary Speed ​​Restriction Server) and RBC (Radio Block Center). These devices can realize information transmission and interaction through the railway signal safety data network to jointly ensure the safe operation of trains.

[0003] The core equipment in the railway signal safety data network includes industrial-grade Ethernet switches, ODF (Optical Distribution Frame), fiber optic patch cords, and network cables. These devices form a ring network structure through optical fiber connection to achieve redundant data transmission and backup.

[0004] In the related technology, EMS (Element Management System) is the network management device of the railway signal safety data network. It obtains the operating status of network devices and the operating status between devices from each switch of the railway signal safety data network through SNMP (Simple Network Management Protocol) to realize the monitoring and maintenance of the railway signal safety data network. However, EMS can only obtain the physical status of the equipment in the signal safety data network, and has little perception of the business data carried by the signal safety data network. When the status of the on-site safety equipment is normal, but there is a problem with the data interaction between the devices, it is difficult to locate the root cause of the fault. Summary of the invention

[0005] In view of this, the embodiments of the present application provide a data monitoring method, device, medium and system for a railway signal safety data network, which realizes the monitoring of device interaction anomalies.

[0006] The technical solution of the embodiment of the present application is implemented as follows:

[0007] On the one hand, an embodiment of the present application provides a data monitoring method for a railway signal safety data network, comprising:

[0008] Acquire a fiber optic branch signal, wherein the fiber optic branch signal is a fiber optic signal obtained by collecting a fiber optic branch signal from a fiber optic channel established between a switch and other devices in a secure data network;

[0009] Performing a signal analysis operation on the optical fiber branch signal to obtain channel status data corresponding to the optical fiber channel; the channel status data represents the interaction status between the interaction devices corresponding to the optical fiber channel;

[0010] Based on the channel status data, device interaction abnormality monitoring is performed.

[0011] In some embodiments, obtaining the optical fiber branching signal comprises:

[0012] The optical fiber branching signal sent by the optical fiber signal acquisition device is received. The optical fiber signal acquisition device is arranged at the optical fiber interface position of the security data network switch to be connected in parallel to the optical fiber channel.

[0013] In some embodiments, performing a signal parsing operation on the optical fiber branch signal to obtain channel status data corresponding to the optical fiber channel includes:

[0014] The optical fiber branch signal is amplified to obtain a processed optical fiber signal; the processed optical fiber signal is converted into an electrical signal, and the electrical signal is analyzed to obtain channel status data corresponding to the optical fiber channel.

[0015] In some embodiments, the device interaction abnormality monitoring based on the channel status data includes:

[0016] According to the preset railway signal safety data network technical specifications and safety communication protocols, the channel status data is analyzed in layers to obtain status data corresponding to each model layer;

[0017] Based on the security protocol interface logic corresponding to each model layer, the status data corresponding to the model layer is monitored for abnormalities.

[0018] In some embodiments, the secure data network includes a plurality of optical fiber channels, and obtaining the optical fiber branch signal includes:

[0019] Displaying a plurality of fiber channel virtual icons in a display interface, wherein the fiber channel virtual icons correspond one to one to the fiber channels in the secure data network;

[0020] In response to a selection operation on the plurality of optical fiber channel virtual icons, a to-be-monitored optical fiber channel is determined from the plurality of optical fiber channels; and an optical fiber branching signal in the to-be-monitored optical fiber channel is acquired.

[0021] In some embodiments, the abnormality monitoring of the state data corresponding to the model layer based on the security protocol interface logic corresponding to each model layer includes:

[0022] According to the security protocol interface logic corresponding to each model layer, monitor whether the status data corresponding to the model layer is abnormal;

[0023] If an abnormality is detected, abnormal warning information for the model layer is output.

[0024] On the other hand, an embodiment of the present application provides an electronic device, including:

[0025] A memory for storing executable instructions;

[0026] The processor is used to implement some or all of the steps in the above method when executing the executable instructions stored in the memory.

[0027] On the other hand, an embodiment of the present application provides a computer-readable storage medium storing executable instructions for implementing some or all of the steps in the above method when executed by a processor.

[0028] In another aspect, an embodiment of the present application provides a data monitoring subsystem, comprising: an optical fiber signal acquisition device and a monitoring server; the optical fiber signal acquisition device is arranged at the optical fiber interface position of the secure data network switch;

[0029] The optical fiber signal acquisition device is used to collect optical fiber branch signals from the optical fiber channel between the switch and other devices in the security data network; and send the optical fiber branch signals to the monitoring server;

[0030] The monitoring server is used to parse the optical fiber branching signal, obtain channel status data corresponding to the optical fiber channel, and perform device interaction abnormality monitoring based on the channel status data.

[0031] On the other hand, an embodiment of the present application provides a secure data system, including: a secure data network, and the above-mentioned data monitoring subsystem.

[0032] In an embodiment of the present application, a fiber optic branching signal is obtained, where the fiber optic branching signal is a fiber optic signal obtained by collecting the fiber optic branching signal from a fiber optic channel established between a switch and other devices in a secure data network; a signal analysis operation is performed on the fiber optic branching signal to obtain channel status data corresponding to the fiber optic channel; the channel status data characterizes the interaction status between interactive devices corresponding to the fiber optic channel; and based on the channel status data, device interaction abnormality monitoring is performed.

[0033] On the one hand, the embodiment of the present application obtains the channel status data corresponding to the optical fiber channel, so through the above channel status data, it is possible to monitor the interaction status between various devices in the security data network. In this way, when the status of the on-site devices is normal but there is a problem with the data interaction between the devices, the root cause of the fault can be quickly located.

[0034] On the other hand, the embodiment of the present application adopts the method of fiber channel branching to branch and collect part of the fiber optic signal from the fiber optic channel between the devices of the security data network, and then monitor the interaction status between the interactive devices through the collected fiber optic signal. In the above scheme, a unidirectional signal transmission channel from the security data network to the external monitoring device is provided, and there is no reverse data transmission channel from the external device to the security data network. Therefore, in the actual monitoring process, there is no situation of invading the security data network through the external monitoring device to attack data. Therefore, the physical isolation between the external device and the internal line network of the security data network can be achieved, thereby improving the data security of the security data network and reducing security risks.

[0035] It should be understood that the above general description and the following detailed description are merely exemplary and explanatory, and are not intended to limit the technical solutions of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the embodiments of the present application. For ordinary technicians in this field, other drawings can also be obtained based on these drawings.

[0037] Figure 1 A schematic diagram of the structure of a railway signal safety data network in a related technology;

[0038] Figure 2 A schematic diagram of the connection relationship between EMS network management equipment and railway signal safety data network in a related technology;

[0039] Figure 3 A schematic diagram of the implementation flow of a data monitoring method applicable to an embodiment of the present application;

[0040] Figure 4 A schematic diagram of the structure of a secure data system applicable to an embodiment of the present application;

[0041] Figure 5 A schematic diagram of a hardware entity of an electronic device applicable to an embodiment of the present application. DETAILED DESCRIPTION

[0042] In order to enable those skilled in the art to better understand the technical solutions in the embodiments of the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments in the embodiments of the present application should fall within the scope of protection of the embodiments of the present application.

[0043] The terms used in the embodiments of the present application are only for the purpose of describing specific embodiments, and are not intended to limit the present application. The singular forms of "a", "said" and "the" used in the embodiments of the present application and the appended claims are also intended to include plural forms, unless the context clearly indicates other meanings. It should also be understood that the term "and / or" used in the embodiments of the present application refers to and includes any or all possible combinations of one or more associated listed items.

[0044] It should also be pointed out that the terms "first\second\third" involved in the embodiments of the present application are only used to distinguish similar objects and do not represent a specific ordering of the objects. It can be understood that "first\second\third" can be interchanged in a specific order or sequence where permitted, so that the embodiments of the present application described here can be implemented in an order other than that illustrated or described here.

[0045] In addition, the term "and / or" in the embodiments of the present application is only a description of the association relationship of the associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0046] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein are only for the purpose of describing this application and are not intended to limit this application.

[0047] See also Figure 1 and Figure 2The railway signal safety data network carries the key system equipment required for train operation control services, such as TCC (Train Control Center), CBI (Computer-Based Interlocking), TSRS (Temporary Speed ​​Restriction Server) and RBC (Radio Block Center).

[0048] See also Figure 1 and Figure 2 The railway signal safety data network usually adopts a physically independent dual-ring redundant network architecture to ensure the reliability of business data transmission between each station, relay station and central signal room equipment. The core equipment in the railway signal safety data network includes industrial-grade Ethernet switches, ODF racks, fiber jumpers and network cables, etc. These devices form a ring network structure through optical fiber connection to achieve redundant data transmission and backup.

[0049] In the related art, EMS is usually used as the network management equipment of the railway signal safety data network. Figure 2 As shown in the figure, EMS monitors the online operation status of the equipment in the railway signal safety data network in the form of a topology view. EMS obtains the operation status of network equipment and the operation status between equipment from each switch of the railway signal safety data network through the SNMP protocol, realizing the monitoring and maintenance of the railway signal safety data network.

[0050] EMS can only obtain the physical status of equipment in the signal safety data network, and has little perception of the business data carried by the signal safety data network. When the status of on-site safety equipment is normal but there is a problem with the data interaction between devices, it is difficult to locate the root cause of the fault.

[0051] In view of this, an embodiment of the present application provides a data monitoring method for a railway signal safety data network, which obtains a fiber optic signal by collecting fiber optic branch signals on a fiber optic channel established between a switch and other devices in the safety data network, performs a signal analysis operation on the fiber optic branch signal, obtains channel status data corresponding to the fiber optic channel, and monitors device interaction abnormalities based on the channel status data.

[0052] On the one hand, the embodiment of the present application obtains the channel status data corresponding to the optical fiber channel, so through the above channel status data, it is possible to monitor the interaction status between various devices in the security data network. In this way, when the status of the on-site devices is normal but there is a problem with the data interaction between the devices, the root cause of the fault can be quickly located.

[0053] On the other hand, the embodiment of the present application adopts the method of fiber channel branching to branch and collect part of the fiber optic signal from the fiber optic channel between the devices of the security data network, and then monitor the interaction status between the interactive devices through the collected fiber optic signal. In the above scheme, a unidirectional signal transmission channel from the security data network to the external monitoring device is provided, and there is no reverse data transmission channel from the external device to the security data network. Therefore, in the actual monitoring process, there is no situation of invading the security data network through the external monitoring device to attack data. Therefore, the physical isolation between the external device and the internal line network of the security data network can be achieved, thereby improving the data security of the security data network and reducing security risks.

[0054] The specific implementation of the embodiment of the present application is further explained below in conjunction with the accompanying drawings of the embodiment of the present application.

[0055] Figure 3 Schematic diagram of the implementation process of the data monitoring method applicable to the embodiment of the present application. Figure 3 As shown, the data monitoring method of the embodiment of the present application may include the following steps S301 to S303:

[0056] Step S301, obtaining a fiber optic branching signal, where the fiber optic branching signal is a fiber optic signal obtained by collecting a fiber optic branching signal from a fiber optic channel established between a switch and other devices in a secure data network.

[0057] Specifically, the safety data network can be a railway signal safety data network, an urban rail transit signal safety data network, an aviation signal safety data network, a maritime signal safety data network, a highway traffic signal safety data network or a safety data network in other fields that implements data interaction between devices through switches. Fiber optic branch signal acquisition refers to the acquisition of a portion of the fiber optic signal in a fiber optic channel.

[0058] Exemplarily, a tool for collecting optical fiber branching signals can be connected in parallel from the optical fiber interface position of a switch in a secure data network to the optical fiber channel established between the switch and other devices in a fiber channel secure data network to collect optical fiber branching signals of the optical fiber channel between the switch and other devices.

[0059] Step S302: Perform a signal analysis operation on the optical fiber branching signal to obtain channel status data corresponding to the optical fiber channel; the channel status data represents the interaction status between the interaction devices corresponding to the optical fiber channel.

[0060] Specifically, the signal parsing operation of the embodiment of the present application refers to the process of parsing the original, unprocessed optical fiber branch signal to convert the original optical fiber branch signal into state data that can characterize the interaction state between the interactive devices corresponding to the optical fiber channel. The channel state data of the embodiment of the present application is any data that can represent the interaction state between the interactive devices. In the embodiment of the present application, the specific content of the channel state data is not limited. Exemplarily, the channel state data may include at least one of the following: the interaction data between each train control system device (CBI, TCC, RBC, TSRS) in the railway signal safety data network, including CBI-RBC, CBI-TCC, CBI-CBI, TCC-TSRS, TCC-TCC, RBC-TSRS, RBC-RBC, TSRS-TSRS information data used to control the operation of the train, and the interaction between each train control system device follows the agreed interface protocol, and may also include the optical power, bit error rate and channel data flow of the optical fiber channel calculated according to the interaction data between each train control system device in the railway signal safety data network.

[0061] For example, a signal analysis operation can be performed on the optical fiber branch signal by a highly sensitive optical module or other equipment for analyzing the optical fiber branch signal, thereby converting the original optical fiber branch signal into an electrical signal, and then determining the channel status data corresponding to the optical fiber channel by analyzing the electrical signal. Among them, the optical module with high sensitivity can be SFP (Small Form-factor Pluggable, small hot-pluggable optical module), CFP (Centum gigabits FormPluggable, dense wavelength division optical communication module), etc.

[0062] Step S303: Monitor device interaction anomalies based on channel status data.

[0063] Specifically, the corresponding interaction anomaly monitoring can be performed according to the content contained in the channel status data. In addition, when the channel status data contains content of multiple dimensions, the interaction anomaly monitoring corresponding to the content of each dimension can also be performed separately, or some target dimensions can be selected from multiple dimensions to perform interaction anomaly monitoring corresponding to the content of the target dimension. Exemplarily, when the channel status data includes the optical power of the optical fiber channel, the optical power anomaly of the optical fiber channel can be monitored; when the channel status data includes the device connection status data of the security layer, the device connection status data of the security layer can be monitored; when the channel status data includes the business interaction data of the application layer, the business interaction data of the application layer can be monitored.

[0064] Device interaction anomalies may include situations where the optical power of the fiber channel or the channel data flow is less than the set value, packet sticking in the Transmission Control Protocol / Internet Protocol model, packet loss in the Transmission Control Protocol / Internet Protocol model, abnormal connection disconnection between devices at the security layer, and abnormal business interaction process at the application layer.

[0065] Exemplarily, the channel status data can be analyzed in layers according to the technical specifications of the railway signal safety data network and the safety communication protocol to obtain the status data corresponding to each model layer, and based on the safety protocol interface logic corresponding to each model layer, the status data corresponding to the model layer can be monitored for abnormalities.

[0066] Among them, the model layer may include at least one of the following: physical layer, link layer, network layer, transport layer, security layer, application layer, etc. The status data corresponding to the model layer may be data characterizing the status information of the model layer. Specifically, it may include at least one of the following: physical layer status data corresponding to the physical layer, link layer status data corresponding to the link layer, network layer status data corresponding to the network layer, transport layer status data corresponding to the transport layer, security layer status data corresponding to the security layer, and application layer status data corresponding to the application layer.

[0067] In some embodiments, based on the security protocol interface logic corresponding to each model layer, a deep learning model trained with a large number of interaction anomaly cases can be used to analyze the interaction anomaly of the state data corresponding to each model layer, so as to realize the interaction anomaly monitoring of the state data corresponding to each model layer. Among them, the deep learning model can be ANN (Artificial Neural Network), CNN (Convolutional Neural Network), RNN (Recurrent Neural Network), LSTM (Long Short-Term Memory), etc.

[0068] Optionally, the status data obtained after hierarchical analysis of the channel status data can be classified and sorted according to protocol type or device type, and the sorted status data can be displayed on a display interface to facilitate classified query of corresponding status data and interactive abnormality analysis based on each status data.

[0069] In the above embodiment, by performing interaction anomaly monitoring on the status data corresponding to each model layer respectively, the problem of interaction anomaly can be located more accurately and quickly, thereby performing fault diagnosis and repair more efficiently.

[0070] On the one hand, the embodiment of the present application realizes the monitoring of the interaction status between each device in the security data network through the obtained channel status data. In this way, when the status of the on-site equipment is normal but there is a problem with the data interaction between the devices, the root cause of the fault can be quickly located; on the other hand, the embodiment of the present application adopts the method of fiber optic channel branching, and collects part of the fiber optic signal from the fiber optic channel between the devices of the security data network, and then monitors the interaction status between the interactive devices through the collected fiber optic signal. In the above scheme, a unidirectional signal transmission channel from the security data network to the external monitoring device is provided, and there is no reverse data transmission channel from the external device to the security data network. Therefore, in the actual monitoring process, there is no situation of invading the attack data into the security data network through the external monitoring device. Therefore, the physical isolation between the external device and the internal line network of the security data network can be achieved, thereby improving the data security of the security data network and reducing security risks.

[0071] Optionally, in some embodiments, a fiber optic branching signal sent by a fiber optic signal acquisition device may be received to obtain the fiber optic branching signal. The fiber optic signal acquisition device is disposed at the fiber optic interface position of a switch in a secure data network to be connected in parallel to a fiber optic channel.

[0072] Specifically, the optical fiber signal acquisition device may be a passive device such as OFS (Optical Fiber Splitter).

[0073] Exemplarily, the fiber optic signal acquisition device can be set at the fiber optic interface position of the switch in the security data network and connected in parallel to the fiber optic channel to collect the fiber optic branch signal of the fiber optic channel between the switch and other devices in the security data network through the fiber optic signal acquisition device.

[0074] On the one hand, the above embodiments connect the optical fiber signal acquisition device to the optical fiber channel in parallel, without changing the existing network structure of the security data network, thus avoiding the impact on the data transmission in the security data network; on the other hand, the optical fiber signal acquisition device that uses unidirectional acquisition of optical fiber branch signals avoids the reverse transmission of the data of the optical fiber signal acquisition device to the optical fiber channel, thus achieving the physical isolation between the optical fiber signal acquisition device and the internal line network of the security data network, improving the data security of the security data network, and reducing the security risk. Optionally, in some of the embodiments, the optical fiber branch signal can be amplified to obtain a processed optical fiber signal, the processed optical fiber signal can be converted into an electrical signal, and the electrical signal can be analyzed to obtain the channel status data corresponding to the optical fiber channel.

[0075] Exemplarily, the processed optical fiber signal obtained by the signal amplification process can be converted into an electrical signal at the physical layer, and the electrical signal can be analyzed in layers to obtain channel status data corresponding to each model layer.

[0076] In the above-mentioned embodiment, the signal amplification processing is performed on the optical fiber branching signal, so that the quality and reliability of the optical fiber branching signal can be improved, thereby improving the accuracy of the channel status data determined according to the optical fiber branching signal.

[0077] Optionally, in some of the embodiments, the secure data network includes multiple fiber optic channels, and multiple fiber optic channel virtual icons can be displayed in the display interface. The fiber optic channel virtual icons correspond one-to-one to the fiber optic channels in the secure data network. In response to a selection operation on the multiple fiber optic channel virtual icons, a fiber optic channel to be monitored is determined from the multiple fiber optic channels; and a fiber optic branching signal in the fiber optic channel to be monitored is obtained.

[0078] Specifically, during the process of monitoring data on the secure data network, the channel status data corresponding to each optical fiber channel in the secure data network may be displayed on a display interface of the user terminal.

[0079] Exemplarily, the fiber channel virtual icons corresponding to each fiber channel in the secure data network can be displayed on the display interface so that the corresponding fiber channels can be operated according to the fiber channel virtual icons. For example, the system for monitoring data on the secure data network can respond to the selection operation for a fiber channel virtual icon, determine the fiber channel to be monitored corresponding to the fiber channel virtual icon from multiple fiber channels of the secure data network, and obtain the fiber optic branching signal in the fiber channel to be monitored. It is understandable that the system for monitoring data on the secure data network can simultaneously respond to the selection operation for multiple fiber channel virtual icons, determine the multiple fiber channels to be monitored corresponding to the multiple fiber channel virtual icons from each fiber channel of the secure data network, and obtain the fiber optic branching signals in the multiple fiber channels to be monitored.

[0080] In the above embodiment, the optical fiber channel virtual icon corresponding to each optical fiber channel is displayed on the display interface, so that the corresponding optical fiber channel can be operated according to the optical fiber channel virtual icon, thereby improving the convenience of targeted monitoring of the optical fiber channel and thus improving the management efficiency of the optical fiber channel.

[0081] Optionally, in some of the embodiments, the state data corresponding to the model layer can be monitored for abnormalities according to the security protocol interface logic corresponding to each model layer. If an abnormality is detected, abnormal alarm information for the model layer is output.

[0082] Specifically, each model layer may include a physical layer, a link layer, a network layer, a transport layer, a security layer, an application layer, etc. Taking the application layer as an example, the security protocol interface logic corresponding to the application layer may be the S / MIME (Secure / Multipurpose Internet Mail Extensions) protocol, the SSL / TLS (Secure Sockets Layer / Transport Layer Security) protocol, etc., wherein the S / MIME protocol is a security protocol for e-mails, providing data encryption and digital signature functions, and the SSL / TLS protocol is used to encrypt communications between Web browsers and servers. Abnormal alarm information for the model layer may be packet sticking of the transmission control protocol / Internet protocol model, packet loss of the transmission control protocol / Internet protocol model, abnormal disconnection of the connection between devices at the security layer, and abnormal business interaction processes at the application layer, etc.

[0083] Exemplarily, the state data corresponding to each model layer can be monitored for abnormalities by using machine learning algorithms, clustering analysis algorithms or other algorithms for abnormal monitoring according to the security protocol interface logic corresponding to the model layers such as the physical layer, link layer, network layer, transport layer, security layer, and application layer. When an abnormality is detected in the state data corresponding to a certain model layer, abnormal alarm information for the model layer is output.

[0084] Optionally, an abnormal alarm for the model layer may be issued via audio, or abnormal alarm information for the model layer may be displayed via a display interface of a user terminal.

[0085] In some embodiments, abnormal warning information for the model layer can be displayed on the display interface of the user terminal so that the user can intuitively view the abnormal situation.

[0086] In the above embodiment, by performing abnormal monitoring and abnormal alarm on the status data corresponding to each model layer, the problem of interaction abnormality can be located more accurately and quickly, thereby performing fault diagnosis and repair more efficiently.

[0087] An embodiment of the present application provides an electronic device, including a memory and a processor, wherein the memory is used to store executable instructions, and the processor is used to implement some or all of the steps in the above method when executing the executable instructions stored in the memory.

[0088] The embodiment of the present application provides a computer-readable storage medium on which executable instructions are stored, and when the computer program is executed by a processor, some or all of the steps in the above method are implemented. The computer-readable storage medium can be transient or non-transient.

[0089] It should be noted here that the description of the various embodiments above tends to emphasize the differences between the various embodiments, and the same or similar aspects can be referenced to each other. The description of the above device and storage medium embodiments is similar to the description of the above method embodiments, and has similar beneficial effects as the method embodiments. For technical details not disclosed in the device and storage medium embodiments of the present application, please refer to the description of the method embodiments of the present application for understanding.

[0090] Based on the above embodiments, the present application also provides a secure data system, such as Figure 4 As shown, the secure data system 400 includes a secure data network 410 and a data monitoring subsystem 420 .

[0091] The data monitoring subsystem 420 includes an optical fiber signal acquisition device 421 and a monitoring server 422 . The optical fiber signal acquisition device 421 is arranged at the optical fiber interface position of the internal switch of the secure data network 410 .

[0092] The optical fiber signal acquisition device 421 is used to collect optical fiber branch signals from the optical fiber channels between the switches and other devices in the secure data network 410 , and send the optical fiber branch signals to the monitoring server 422 .

[0093] Specifically, the optical fiber signal acquisition device 421 may be a passive device such as an OFS (Optical Fiber Splitter).

[0094] In the embodiment of the present application, the optical fiber signal acquisition device 421 can be connected in parallel to each optical fiber channel of the secure data network 410. The optical fiber signal acquisition device 421 can be connected in parallel to the optical fiber channel without changing the existing network structure of the secure data network 410, thereby avoiding the impact on the data transmission in the secure data network 410. In addition, the optical fiber signal acquisition device 421 that collects the optical fiber branch signal in a unidirectional manner avoids the reverse transmission of the data of the optical fiber signal acquisition device 421 to the optical fiber channel, thereby achieving physical isolation between the optical fiber signal acquisition device 421 and the internal line network of the secure data network 410, thereby improving the data security of the secure data network 410 and reducing security risks.

[0095] The monitoring server 422 is used to parse the optical fiber branching signal, obtain the channel status data corresponding to the optical fiber channel, and perform device interaction abnormality monitoring based on the channel status data.

[0096] In an embodiment of the present application, the monitoring server 422 can parse the optical fiber signal collected by the optical fiber signal acquisition device 421 to obtain channel status data corresponding to the optical fiber channel, and monitor the interaction status between devices in the security data network 410 based on the channel status data. In this way, when the status of the on-site equipment is normal but there is a problem with the data interaction between the devices, the root cause of the fault can be quickly located.

[0097] In an embodiment of the present application, the data monitoring subsystem 420 also includes a user terminal 423, which is connected to a monitoring server 422 and is used to display channel status data of each optical fiber channel in the security data network and abnormal device interaction conditions through a display interface, so that users can intuitively view channel status data and abnormal alarm conditions, thereby improving the management efficiency of the optical fiber channel.

[0098] In addition, the display interface of the user terminal 423 can also display the fiber channel virtual icons corresponding to each fiber channel in the secure data network 410. The monitoring server 422 determines the fiber channel to be monitored from the multiple fiber channels in response to the selection operation of the multiple fiber channel virtual icons, and obtains the fiber branching signal in the fiber channel to be monitored. The convenience of targeted monitoring of the fiber channel is improved, thereby improving the management efficiency of the fiber channel.

[0099] Figure 5 A schematic diagram of a hardware entity of an electronic device applicable to an embodiment of the present application is shown in FIG. Figure 5 As shown, the hardware entity of the electronic device 500 includes: a processor 501 and a memory 502, wherein the memory 502 stores a computer program that can be run on the processor 501, and the processor 501 implements the steps in the method of any of the above embodiments when executing the program.

[0100] The memory 502 stores computer programs that can be run on the processor. The memory 502 is configured to store instructions and applications executable by the processor 501. It can also cache data to be processed or processed by the processor 501 and various modules in the electronic device 500 (for example, image data, audio data, voice communication data, and video communication data). This can be achieved through flash memory (FLASH) or random access memory (Random Access Memory, RAM).

[0101] When the processor 501 executes the program, the steps of any of the above data monitoring methods are implemented. The processor 501 generally controls the overall operation of the electronic device 500.

[0102] An embodiment of the present application provides a computer storage medium, which stores one or more programs. The one or more programs can be executed by one or more processors to implement the steps of the data monitoring method of any of the above embodiments.

[0103] It should be noted here that the description of the above storage medium and device embodiments is similar to the description of the above method embodiments, and has similar beneficial effects as the method embodiments. For technical details not disclosed in the storage medium and device embodiments of this application, please refer to the description of the method embodiments of this application for understanding.

[0104] The processor may be at least one of an Application Specific Integrated Circuit (ASIC), a Digital Signal Processor (DSP), a Digital Signal Processing Device (DSPD), a Programmable Logic Device (PLD), a Field Programmable Gate Array (FPGA), a Central Processing Unit (CPU), a controller, a microcontroller, and a microprocessor. It is understandable that the electronic device that implements the functions of the processor may also be other, and the embodiments of the present application are not specifically limited.

[0105] The above-mentioned computer storage medium / memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a magnetic random access memory (FRAM), a flash memory (Flash Memory), a magnetic surface memory, an optical disk, or a compact disc read-only memory (CD-ROM) and the like; it can also be various terminals including one or any combination of the above-mentioned memories, such as mobile phones, computers, tablet devices, personal digital assistants, etc.

[0106] It should be understood that "one embodiment" or "an embodiment" or "some embodiments" mentioned throughout the specification means that specific features, structures or characteristics related to the embodiment are included in at least one embodiment of the present application. Therefore, "in one embodiment" or "in one embodiment" or "in some embodiments" appearing throughout the specification may not necessarily refer to the same embodiment. In addition, these specific features, structures or characteristics can be combined in one or more embodiments in any suitable manner. It should be understood that in various embodiments of the present application, the size of the sequence number of the above-mentioned processes does not mean the order of execution, and the execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present application. The above-mentioned sequence numbers of the embodiments of the present application are only for description and do not represent the advantages and disadvantages of the embodiments. The above description of each embodiment tends to emphasize the differences between the various embodiments, and the same or similar aspects can be referenced to each other. For the sake of brevity, this article will not repeat them.

[0107] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or device including the element.

[0108] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. The embodiments described above are only schematic. For example, the division of the modules is only a logical function division. There may be other division methods in actual implementation, such as: multiple modules or components can be combined, or can be integrated into another system, or some features can be ignored, or not executed. In addition, the coupling, direct coupling, or communication connection between the components shown or discussed can be through some interfaces, and the indirect coupling or communication connection of devices or modules can be electrical, mechanical or other forms.

[0109] The modules described above as separate components may or may not be physically separated, and the components displayed as modules may or may not be physical modules; they may be located in one place or distributed on multiple network units; some or all of the modules may be selected according to actual needs to achieve the purpose of the present embodiment.

[0110] In addition, all functional modules in the embodiments of the present application may be integrated into one processing unit, or each module may be a separate unit, or two or more modules may be integrated into one unit; the above-mentioned integrated modules may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0111] A person of ordinary skill in the art can understand that all or part of the steps of implementing the above-mentioned method embodiment can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium. When the program is executed, it executes the steps of the above-mentioned method embodiment; and the aforementioned storage medium includes: various media that can store program codes, such as mobile storage devices, ROMs, magnetic disks or optical disks.

[0112] Alternatively, if the above-mentioned integrated unit of the present application is implemented in the form of a software function module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the embodiment of the present application can essentially or in other words, the part that contributes to the relevant technology can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for enabling an electronic device to execute all or part of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as mobile storage devices, ROMs, magnetic disks, or optical disks.

[0113] The methods disclosed in several method embodiments provided in this application can be arbitrarily combined without conflict to obtain new method embodiments.

[0114] The features disclosed in several product embodiments provided in this application can be arbitrarily combined without conflict to obtain new product embodiments.

[0115] The features disclosed in several method or device embodiments provided in this application can be arbitrarily combined without conflict to obtain new method embodiments or device embodiments.

[0116] The above is only an implementation method of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A data monitoring method for a railway signal safety data network, characterized in that: include: Acquire a fiber optic branch signal, wherein the fiber optic branch signal is a fiber optic signal obtained by collecting a fiber optic branch signal from a fiber optic channel established between a switch and other devices in a secure data network; Performing a signal analysis operation on the optical fiber branch signal to obtain channel status data corresponding to the optical fiber channel; The channel status data represents the interaction status between the interaction devices corresponding to the optical fiber channel; Based on the channel status data, device interaction abnormality monitoring is performed.

2. The method according to claim 1, characterized in that The step of obtaining the optical fiber branch signal comprises: The optical fiber branching signal sent by the optical fiber signal acquisition device is received. The optical fiber signal acquisition device is arranged at the optical fiber interface position of the switch in the security data network to be connected in parallel to the optical fiber channel.

3. The method according to claim 2, characterized in that The performing a signal analysis operation on the optical fiber branch signal to obtain channel status data corresponding to the optical fiber channel includes: The optical fiber branch signal is amplified to obtain a processed optical fiber signal; the processed optical fiber signal is converted into an electrical signal, and the electrical signal is analyzed to obtain channel status data corresponding to the optical fiber channel.

4. The method according to any one of claims 1 to 3, characterized in that: The device interaction abnormality monitoring based on the channel status data includes: According to the preset railway signal safety data network technical specifications and safety communication protocols, the channel status data is analyzed in layers to obtain status data corresponding to each model layer; Based on the security protocol interface logic corresponding to each model layer, the status data corresponding to the model layer is monitored for abnormalities.

5. The method according to any one of claims 1 to 3, characterized in that: The secure data network includes a plurality of optical fiber channels, and the step of obtaining the optical fiber branch signal includes: Displaying a plurality of fiber channel virtual icons in a display interface, wherein the fiber channel virtual icons correspond one to one to the fiber channels in the secure data network; In response to a selection operation on the plurality of optical fiber channel virtual icons, a to-be-monitored optical fiber channel is determined from the plurality of optical fiber channels; and an optical fiber branching signal in the to-be-monitored optical fiber channel is acquired.

6. The method according to claim 4, characterized in that The abnormality monitoring of the state data corresponding to the model layer based on the security protocol interface logic corresponding to each model layer includes: According to the security protocol interface logic corresponding to each model layer, monitor whether the status data corresponding to the model layer is abnormal; If an abnormality is detected, abnormal warning information for the model layer is output.

7. An electronic device, characterized in that: include: A memory for storing executable instructions; A processor, used to implement the data monitoring method described in any one of claims 1 to 6 when executing the executable instructions stored in the memory.

8. A computer-readable storage medium, characterized in that: Executable instructions are stored, which are used to implement the data monitoring method described in any one of claims 1 to 6 when executed by a processor.

9. A data monitoring subsystem, comprising: Optical fiber signal acquisition equipment and monitoring server; The optical fiber signal acquisition device is arranged at the optical fiber interface position of the secure data network switch; The optical fiber signal acquisition device is used to collect optical fiber branch signals from the optical fiber channel between the switch and other devices in the security data network; and send the optical fiber branch signals to the monitoring server; The monitoring server is used to parse the optical fiber branching signal, obtain channel status data corresponding to the optical fiber channel, and perform device interaction abnormality monitoring based on the channel status data.

10. A secure data system comprising: A secure data network, and a data monitoring subsystem as claimed in claim 9.

Images