A data monitoring method, device, medium and system for a railway signal safety data network

Abstract

Embodiments of the present application provide a data monitoring method, device, medium and system for a railway signal safety data network. The method can include: obtaining an optical fiber shunt signal, the optical fiber shunt signal being an optical fiber signal obtained by performing optical fiber shunt signal collection on an optical fiber channel established between a switch and other devices in the safety data network; performing a signal analysis operation on the optical fiber shunt signal to obtain channel state data corresponding to the optical fiber channel; the channel state data representing an interaction state between the interactive devices corresponding to the optical fiber channel; and based on the channel state data, performing device interaction anomaly monitoring. Through the embodiments of the present application, the interaction state between each device in the safety data network can be monitored.

Description

TECHNICAL FIELD

[0001] Embodiments of the present application relate to the technical field of data monitoring, and in particular to a data monitoring method, device, medium and system for a railway signal safety data network. BACKGROUND

[0002] The railway signal safety data network is a communication platform for providing data interaction for related hardware devices of a ground train operation control system. The railway signal safety data network carries key system devices required by train operation control services, such as a TCC (Train Control Center), a CBI (Computer-Based Interlocking), a TSRS (Temporary Speed Restriction Server), and an RBC (Radio Block Center), and the like. These devices can realize information transmission and interaction through the railway signal safety data network to jointly ensure safe operation of trains.

[0003] Core devices in the railway signal safety data network include industrial-grade Ethernet switches, ODFs (Optical Distribution Frames), optical fiber jumpers, and network cables, and the like. These devices are connected through optical fiber connection to form a ring network structure to realize redundant transmission and backup of data.

[0004] In related technologies, an EMS (Element Management System) is a network management device of the railway signal safety data network. The EMS acquires running states of network devices and running states between devices from each switch in the railway signal safety data network through an SNMP (Simple Network Management Protocol) to realize monitoring and maintenance of the railway signal safety data network. However, the EMS can only acquire physical states of devices in the signal safety data network, and has less perception of service data carried by the signal safety data network. In the case that states of on-site safety devices are normal, but data interaction between devices has a problem, it is difficult to locate the root cause of the fault. SUMMARY

[0005] Therefore, embodiments of the present application provide a data monitoring method, device, medium and system for a railway signal safety data network, which realizes monitoring of abnormal device interaction.

[0006] The technical scheme of embodiments of the present application is implemented as follows:

[0007] In one aspect, the embodiments of the present application provide a data monitoring method for a railway signal safety data network, comprising:

[0008] obtaining a fiber tapping signal, the fiber tapping signal being a fiber signal obtained by performing fiber tapping signal collection on a fiber channel established between a switch and other devices in the safety data network;

[0009] performing signal analysis on the fiber tapping signal to obtain channel state data corresponding to the fiber channel; the channel state data representing an interaction state between the interactive devices corresponding to the fiber channel;

[0010] performing device interaction anomaly monitoring based on the channel state data.

[0011] In some embodiments, the obtaining of the fiber tapping signal comprises:

[0012] receiving the fiber tapping signal sent by a fiber signal collection device, the fiber signal collection device being arranged at a fiber interface position of the switch of the safety data network to access the fiber channel in parallel.

[0013] In some embodiments, the performing of the signal analysis on the fiber tapping signal to obtain the channel state data corresponding to the fiber channel comprises:

[0014] performing signal amplification processing on the fiber tapping signal to obtain a processed fiber signal; converting the processed fiber signal into an electrical signal and analyzing the electrical signal to obtain the channel state data corresponding to the fiber channel.

[0015] In some embodiments, the performing of the device interaction anomaly monitoring based on the channel state data comprises:

[0016] performing hierarchical analysis on the channel state data according to a preset railway signal safety data network technical specification and safety communication protocol to obtain state data corresponding to each model layer respectively;

[0017] performing anomaly monitoring on the state data corresponding to each model layer based on a safety protocol interface logic corresponding to each model layer.

[0018] In some embodiments, the safety data network comprises a plurality of fiber channels, and the obtaining of the fiber tapping signal comprises:

[0019] displaying a plurality of fiber channel virtual icons in a display interface, the fiber channel virtual icons corresponding one-to-one to the fiber channels in the safety data network;

[0020] In response to a selection operation on the plurality of fiber channel virtual icons, a fiber channel to be monitored is determined from the plurality of fiber channels; and an optical fiber tap signal in the fiber channel to be monitored is acquired.

[0021] In some embodiments, the abnormality monitoring on the state data corresponding to the model layer based on the security protocol interface logic corresponding to each model layer comprises:

[0022] According to the security protocol interface logic corresponding to each model layer, it is monitored whether the state data corresponding to the model layer is abnormal.

[0023] If an abnormality is monitored, an abnormality alarm information for the model layer is output.

[0024] In another aspect, the embodiments of the present application provide an electronic device, comprising:

[0025] A memory for storing executable instructions;

[0026] A processor for executing the executable instructions stored in the memory to implement some or all steps of the above method.

[0027] In another aspect, the embodiments of the present application provide a computer readable storage medium storing executable instructions for implementing some or all steps of the above method when executed by a processor.

[0028] In another aspect, the embodiments of the present application provide a data monitoring subsystem, comprising: an optical fiber signal acquisition device and a monitoring server; the optical fiber signal acquisition device is arranged at an optical fiber interface position of a security data network switch;

[0029] The optical fiber signal acquisition device is configured to acquire an optical fiber tap signal from an optical fiber channel between a switch and other devices in a security data network; and send the optical fiber tap signal to the monitoring server.

[0030] The monitoring server is configured to parse the optical fiber tap signal to obtain channel state data corresponding to the optical fiber channel, and perform device interaction abnormality monitoring based on the channel state data.

[0031] In another aspect, the embodiments of the present application provide a security data system, comprising: a security data network, and the above-mentioned data monitoring subsystem.

[0032] In the embodiments of the present application, the optical fiber shunt signal is obtained, the optical fiber shunt signal is the optical fiber signal obtained by performing optical fiber shunt signal collection on the optical fiber channel established between the switch and other devices in the safety data network; a signal analysis operation is performed on the optical fiber shunt signal to obtain channel state data corresponding to the optical fiber channel; the channel state data represents the interaction state between the interactive devices corresponding to the optical fiber channel; and device interaction anomaly monitoring is performed based on the channel state data.

[0033] In one aspect, the embodiments of the present application obtain channel state data corresponding to the optical fiber channel, so that the interaction state between the devices in the safety data network can be monitored through the above-mentioned channel state data. In this way, in the case that the field device state is normal but the data interaction between the devices has a problem, the root cause of the fault can be quickly located.

[0034] On the other hand, the embodiments of the present application use the optical fiber channel shunt method to collect part of the optical fiber signal from the optical fiber channel between the safety data network devices, and then monitor the interaction state between the interactive devices through the collected optical fiber signal. In the above-mentioned scheme, a one-way signal transmission channel from the safety data network to the external monitoring device is provided, and there is no reverse data transmission channel from the external device to the safety data network, so there is no case of intrusion attack data from the external monitoring device to the safety data network in the actual monitoring process, and thus the physical isolation between the external device and the internal line network of the safety data network can be achieved, thereby improving the data security of the safety data network and reducing the safety risk.

[0035] It should be understood that the above general description and the following detailed description are only exemplary and explanatory, but not limiting the technical solutions of the present application. BRIEF DESCRIPTION OF DRAWINGS

[0036] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the drawings needed in the embodiments or the prior art description will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments described in the embodiments of the present application, and other drawings can also be obtained by those skilled in the art based on these drawings.

[0037] Figure 1 It is a structure schematic diagram of a railway signal safety data network in a related technology;

[0038] Figure 2 It is a connection relationship schematic diagram of an EMS network management device and a railway signal safety data network in a related technology;

[0039] Figure 3 It is an implementation flow schematic diagram of a data monitoring method suitable for the embodiments of the present application;

[0040] Figure 4 Structure diagram of a security data system according to an embodiment of the present application;

[0041] Figure 5 Hardware entity diagram of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0042] In order to make the personnel in the art better understand the technical solutions in the embodiments of the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments of the present application. All other embodiments obtained by those of ordinary skill in the art based on the embodiments in the embodiments of the present application shall belong to the scope of protection of the embodiments of the present application.

[0043] The terms used in the embodiments of the present application are merely for the purpose of describing specific embodiments, and are not intended to limit the present application. The singular forms "a", "an" and "the" used in the embodiments of the present application and the appended claims are also intended to include the plural forms, unless the context clearly indicates otherwise. It should also be understood that the term "and / or" used in the embodiments of the present application means and includes any or all possible combinations of one or more associated listed items.

[0044] It should also be noted that the terms "first", "second", "third" involved in the embodiments of the present application are only used to distinguish similar objects, and do not represent a specific order of the objects. Understandably, "first", "second", "third" can be interchanged with a specific order or sequence as allowed, so that the embodiments of the present application described herein can be implemented in an order other than that illustrated or described herein.

[0045] In addition, the term "and / or" in the embodiments of the present application is only used to describe the association relationship of the associated objects, which means that there can be three relationships, for example, A and / or B can represent the three cases of A alone, A and B together, and B alone. In addition, the character " / " in this paper generally represents that the front and rear associated objects have an "or" relationship.

[0046] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which the present application belongs. The terms used herein are only for the purpose of describing the present application and are not intended to limit the present application.

[0047] Reference is made to Figure 1 and Figure 2The railway signal safety data network carries key system devices required by train operation control services, such as a TCC (Train Control Center), a CBI (Computer-Based Interlocking), a TSRS (Temporary Speed Restriction Server), and an RBC (Radio Block Center).

[0048] Referring to Figure 1 and Figure 2 The railway signal safety data network usually adopts a dual-ring redundant network architecture laid physically independently to ensure the reliability of service data transmission between stations, relay stations, and central signal machine room devices. Core devices in the railway signal safety data network include industrial-grade Ethernet switches, ODF racks, optical fiber jumpers, and network cables, which are connected by optical fibers to form a ring network structure, realizing redundant transmission and backup of data.

[0049] In the related art, an EMS is usually taken as a network management device of the railway signal safety data network. As shown in Figure 2 , the EMS monitors the online operation status of the signal safety data network devices of the line in a topology view. The EMS obtains the operation status of network devices and the operation status between devices from each switch in the railway signal safety data network through an SNMP protocol, realizing monitoring and maintenance of the railway signal safety data network.

[0050] Only the physical status of devices in the signal safety data network can be obtained through the EMS, and the sensing of service data carried by the signal safety data network is less. In the case that the status of on-site safety devices is normal, but the data interaction between devices has a problem, it is difficult to locate the root cause of the fault.

[0051] Therefore, an embodiment of the present application provides a data monitoring method for a railway signal safety data network. The method includes the following steps: collecting optical fiber signals by performing optical fiber tapping signal acquisition on optical fiber channels established between switches and other devices in the safety data network; performing signal analysis on the optical fiber tapping signals to obtain channel status data corresponding to the optical fiber channels; and performing device interaction anomaly monitoring based on the channel status data.

[0052] On the one hand, the embodiment of the present application obtains channel status data corresponding to the optical fiber channels. Therefore, the interaction status between devices in the safety data network can be monitored through the above channel status data. In this way, in the case that the status of on-site devices is normal, but the data interaction between devices has a problem, the root cause of the fault can be quickly located.

[0053] In another aspect, the embodiment of the present application adopts the way of fiber channel shunting to shunt part of the fiber signals from the fiber channel between the devices in the secure data network, and further monitors the interaction state between the interactive devices through the collected fiber signals. In the above scheme, a one-way signal transmission channel from the secure data network to the external monitoring device is provided, and there is no reverse data transmission channel from the external device to the secure data network, so that there is no case of intrusion of attack data from the external monitoring device to the secure data network in the actual monitoring process, and thus the physical isolation between the external device and the internal line network of the secure data network can be achieved, thereby improving the data security of the secure data network and reducing the security risk.

[0054] The embodiment of the present application will be further described below in combination with the accompanying drawings of the embodiment of the present application.

[0055] Figure 3 The implementation flowchart of the data monitoring method of the embodiment of the present application is shown in FIG. 1. As shown in FIG. 1, the data monitoring method of the embodiment of the present application can include the following steps S301 to S303: Figure 3

[0056] Step S301, acquiring a fiber shunt signal, the fiber shunt signal being a fiber signal obtained by fiber shunt signal collection from a fiber channel established between a switch and other devices in a secure data network.

[0057] Specifically, the secure data network can be a railway signal secure data network, a city rail transit signal secure data network, an aviation signal secure data network, a navigation signal secure data network, a highway traffic signal secure data network, or a secure data network in other fields for realizing data interaction between devices through a switch. Fiber shunt signal collection refers to collecting part of the fiber signals in the fiber channel.

[0058] For example, a tool for collecting the fiber shunt signal can be connected in parallel to the fiber channel established between the switch and other devices in the secure data network from the fiber interface position of the switch in the secure data network, so as to collect the fiber shunt signal of the fiber channel between the switch and other devices.

[0059] Step S302, performing a signal analysis operation on the fiber shunt signal to obtain channel state data corresponding to the fiber channel; the channel state data representing the interaction state between the interactive devices corresponding to the fiber channel.

[0060] ​Specifically, the signal analysis operation of the embodiment of the present application refers to a process of analyzing an original, unprocessed optical fiber branch signal to convert the original optical fiber branch signal into state data capable of representing the interaction state between the corresponding interactive devices of the optical fiber channel. The channel state data of the embodiment of the present application is any data capable of representing the interaction state between the interactive devices, and the embodiment of the present application does not limit the specific content of the channel state data. Exemplarily, the channel state data can include at least one of the following: interaction data between each train control system device (CBI, TCC, RBC, TSRS) in the railway signal safety data network, including CBI-RBC, CBI-TCC, CBI-CBI, TCC-TSRS, TCC-TCC, RBC-TSRS, RBC-RBC, TSRS-TSRS, information data for controlling train operation, and interaction between each train control system device in accordance with the agreed interface protocol, and can also include optical power, bit error rate and channel data flow of the optical fiber channel calculated according to the interaction data between each train control system device in the railway signal safety data network.

[0061] Exemplarily, the signal analysis operation can be performed on the optical fiber branch signal by a high-sensitivity optical module or other device for analyzing the optical fiber branch signal, so as to convert the original optical fiber branch signal into an electrical signal, and then determine the channel state data corresponding to the optical fiber channel by analyzing the electrical signal. The high-sensitivity optical module can be an SFP (Small Form-factor Pluggable), a CFP (Centum gigabits Form Pluggable), or the like.

[0062] Step S303, based on the channel state data, performing device interaction abnormality monitoring.

[0063] Specifically, the corresponding interaction abnormality monitoring can be performed according to the content contained in the channel state data. In addition, when the channel state data contains content of multiple dimensions, the interaction abnormality monitoring corresponding to each dimension of content can also be performed, or a part of target dimensions can be selected from the multiple dimensions, and then the interaction abnormality monitoring corresponding to the target dimension content is performed. Exemplarily, when the channel state data includes the optical power of the optical fiber channel, the optical power abnormality of the optical fiber channel can be monitored; when the channel state data includes the device connection state data of the safety layer, the device connection state data of the safety layer can be monitored; when the channel state data includes the service interaction data of the application layer, the service interaction data of the application layer can be monitored.

[0064] The device interaction exception can include that the optical power or channel data flow of the fiber channel is less than a set value, packet sticking of a transmission control protocol / internet protocol model, packet loss of the transmission control protocol / internet protocol model, device interconnection exception disconnection of a security layer, service interaction flow exception of an application layer, and the like.

[0065] Exemplarily, the channel state data can be hierarchically parsed according to the railway signal safety data network technical specification and the safety communication protocol, to obtain state data corresponding to each model layer, and the state data corresponding to each model layer is monitored for exception based on the safety protocol interface logic corresponding to each model layer.

[0066] The model layer can include at least one of a physical layer, a link layer, a network layer, a transmission layer, a security layer, and an application layer, and the state data corresponding to the model layer can be data representing state information of the model layer, and specifically can include at least one of physical layer state data corresponding to the physical layer, link layer state data corresponding to the link layer, network layer state data corresponding to the network layer, transmission layer state data corresponding to the transmission layer, security layer state data corresponding to the security layer, and application layer state data corresponding to the application layer.

[0067] In some embodiments, the state data corresponding to each model layer can be analyzed for interaction exception based on the safety protocol interface logic corresponding to each model layer, by using a deep learning model trained with a large number of interaction exception cases, to realize interaction exception monitoring of the state data corresponding to each model layer. The deep learning model can be an ANN (Artificial Neural Network), a CNN (Convolutional Neural Network), an RNN (Recurrent Neural Network), an LSTM (Long Short-Term Memory), or the like.

[0068] Optionally, the state data obtained after hierarchical parsing of the channel state data can be classified and arranged according to protocol types or device types, and the arranged state data can be displayed on a display interface, to facilitate classified query of the corresponding state data and interaction exception analysis according to each state data.

[0069] In the above embodiments, the state data corresponding to each model layer is monitored for interaction exception respectively, which can more accurately and quickly locate the problem of interaction exception, thereby more efficiently performing fault diagnosis and repair.

[0070] In one aspect, the embodiments of the present application realize the monitoring of the interaction state between devices in the secure data network through the obtained channel state data. In this way, in the case that the field device state is normal but the data interaction between devices has a problem, the fault source can be quickly located. On the other hand, the embodiments of the present application use the optical fiber channel splitting manner to split and collect part of the optical fiber signals from the optical fiber channel between the secure data network devices, and then monitor the interaction state between the interaction devices through the collected optical fiber signals. In the above scheme, a one-way signal transmission channel from the secure data network to the external monitoring device is provided, and there is no reverse data transmission channel from the external device to the secure data network. Therefore, in the actual monitoring process, there is no case of intrusion attack data from the external monitoring device to the secure data network, so that the physical isolation between the external device and the internal line network of the secure data network can be realized, thereby improving the data security of the secure data network and reducing the security risk.

[0071] Optionally, in some embodiments, the optical fiber splitting signals sent by the optical fiber signal collection device can be received to obtain the optical fiber splitting signals. The optical fiber signal collection device is arranged at the optical fiber interface position of the switch in the secure data network to be connected in parallel to the optical fiber channel.

[0072] Specifically, the optical fiber signal collection device can be a passive device such as an OFS (Optical Fiber Splitter).

[0073] For example, the optical fiber signal collection device can be arranged at the optical fiber interface position of the switch in the secure data network and connected in parallel to the optical fiber channel, so as to collect the optical fiber splitting signals of the optical fiber channel between the switch and other devices in the secure data network through the optical fiber signal collection device.

[0074] On the one hand, the above embodiments connect the optical fiber signal collection device in parallel to the optical fiber channel, without changing the existing network structure of the secure data network, thereby avoiding the influence on the data transmission in the secure data network. On the other hand, the optical fiber signal collection device used for one-way collection of the optical fiber splitting signals avoids the reverse transmission of the data of the optical fiber signal collection device to the optical fiber channel, realizes the physical isolation between the optical fiber signal collection device and the internal line network of the secure data network, improves the data security of the secure data network, and reduces the security risk. Optionally, in some embodiments, the optical fiber splitting signals can be subjected to signal amplification processing to obtain processed optical fiber signals, the processed optical fiber signals can be converted into electrical signals, and the electrical signals can be analyzed to obtain the channel state data corresponding to each model layer.

[0075] For example, the processed optical fiber signals obtained through signal amplification processing can be converted into electrical signals at the physical layer, the electrical signals can be analyzed layer by layer to obtain the channel state data corresponding to each model layer.

[0076] In the above embodiments, the signal amplification processing is performed on the fiber branch signal, so as to improve the quality and reliability of the fiber branch signal, thereby improving the accuracy of the channel state data determined according to the fiber branch signal.

[0077] Optionally, in some embodiments, the secure data network includes a plurality of fiber channels, a plurality of fiber channel virtual icons corresponding to the fiber channels in the secure data network are displayed on the display interface, and the to-be-monitored fiber channel is determined from the plurality of fiber channels in response to a selection operation on the plurality of fiber channel virtual icons; and the fiber branch signal in the to-be-monitored fiber channel is acquired.

[0078] Specifically, in the process of data monitoring on the secure data network, the channel state data corresponding to each fiber channel in the secure data network is displayed on the display interface of the user terminal.

[0079] For example, the system for data monitoring on the secure data network can determine the to-be-monitored fiber channel corresponding to the fiber channel virtual icon from the plurality of fiber channels of the secure data network in response to a selection operation on the fiber channel virtual icon, and acquire the fiber branch signal in the to-be-monitored fiber channel. It can be understood that the system for data monitoring on the secure data network can simultaneously determine a plurality of to-be-monitored fiber channels corresponding to a plurality of fiber channel virtual icons from the fiber channels of the secure data network in response to selection operations on the plurality of fiber channel virtual icons, and acquire the fiber branch signals in the plurality of to-be-monitored fiber channels.

[0080] In the above embodiments, the fiber channel virtual icon corresponding to each fiber channel is displayed on the display interface, and the corresponding fiber channel is operated according to the fiber channel virtual icon. The convenience of targeted monitoring of the fiber channel is improved, thereby improving the management efficiency of the fiber channel.

[0081] Optionally, in some embodiments, the state data corresponding to the model layer can be monitored according to the security protocol interface logic corresponding to each model layer, and if an anomaly is detected, an anomaly alarm information for the model layer is output.

[0082] Specifically, each model layer can include a physical layer, a link layer, a network layer, a transport layer, a security layer, an application layer, and the like. Taking the application layer as an example, the security protocol interface logic corresponding to the application layer can be an S / MIME (Secure / Multipurpose Internet Mail Extensions) protocol, an SSL / TLS (Secure Sockets Layer / Transport Layer Security) protocol, and the like, where the S / MIME protocol is a security protocol for electronic mail, providing data encryption and digital signature functions, and the SSL / TLS protocol is used to encrypt communications between a web browser and a server. The abnormal alarm information for the model layer can be packet sticking of a transmission control protocol / internet protocol model, packet loss of the transmission control protocol / internet protocol model, device interconnection abnormal disconnection of the security layer, and service interaction process abnormality of the application layer, and the like.

[0083] Exemplarily, the state data corresponding to each model layer can be monitored for abnormalities according to the security protocol interface logic corresponding to the physical layer, the link layer, the network layer, the transport layer, the security layer, the application layer, and the like, through a machine learning algorithm, a clustering analysis algorithm, or other algorithms for abnormal monitoring. In the case where it is detected that the state data corresponding to a certain model layer is abnormal, abnormal alarm information for the model layer is output.

[0084] Optionally, the abnormal alarm for the model layer can be made through audio, or the abnormal alarm information for the model layer can be displayed through a display interface of a user terminal.

[0085] In some embodiments, the abnormal alarm information for the model layer can be displayed on a display interface of a user terminal, so as to facilitate the user to intuitively view the abnormal situation.

[0086] In the above embodiments, the state data corresponding to each model layer is monitored for abnormalities and the abnormal alarm is made, which can more accurately and quickly locate the problem of the interaction abnormality, thereby more efficiently performing fault diagnosis and repair.

[0087] Embodiments of the present application provide an electronic device, comprising a memory and a processor, wherein the memory is configured to store executable instructions, and the processor is configured to implement some or all steps of the above method when executing the executable instructions stored in the memory.

[0088] Embodiments of the present application provide a computer readable storage medium having stored thereon executable instructions, which are executed by a processor to implement some or all steps of the above method. The computer readable storage medium can be transitory or non-transitory.

[0089] It should be noted that the above description of various embodiments tends to emphasize differences between the various embodiments, and the same or similar parts can be referred to each other. The above description of the device and storage medium embodiments is similar to the description of the method embodiments, and has similar beneficial effects as the method embodiments. For technical details not disclosed in the device and storage medium embodiments of the present application, please refer to the description of the method embodiments for understanding.

[0090] Based on the foregoing embodiments, the embodiments of the present application also provide a secure data system, such as Figure 4 As shown in the figure, the secure data system 400 includes a secure data network 410 and a data monitoring subsystem 420.

[0091] The data monitoring subsystem 420 includes an optical fiber signal acquisition device 421 and a monitoring server 422, and the optical fiber signal acquisition device 421 is arranged at the optical fiber interface position of the internal switch of the secure data network 410.

[0092] The optical fiber signal acquisition device 421 is configured to acquire optical fiber branch signals from the optical fiber channels between the switch and other devices in the secure data network 410, and send the optical fiber branch signals to the monitoring server 422.

[0093] Specifically, the optical fiber signal acquisition device 421 can be a passive device such as an OFS (Optical Fiber Splitter).

[0094] In the embodiments of the present application, the optical fiber signal acquisition device 421 can be connected in parallel to each optical fiber channel of the secure data network 410. By connecting the optical fiber signal acquisition device 421 in parallel to the optical fiber channel, the existing network structure of the secure data network 410 does not need to be changed, avoiding the influence on the data transmission in the secure data network 410. And using the optical fiber signal acquisition device 421 for one-way acquisition of optical fiber branch signals avoids the reverse transmission of data of the optical fiber signal acquisition device 421 to the optical fiber channel, realizes the physical isolation between the optical fiber signal acquisition device 421 and the internal line network of the secure data network 410, improves the data security of the secure data network 410, and reduces the security risk.

[0095] The monitoring server 422 is configured to parse the optical fiber branch signals to obtain channel state data corresponding to the optical fiber channel, and perform device interaction anomaly monitoring based on the channel state data.

[0096] In the embodiment of the present application, the monitoring server 422 can analyze the optical fiber signals collected by the optical fiber signal collection device 421 to obtain channel state data corresponding to the optical fiber channel, and monitor the interaction state between devices in the secure data network 410 according to the channel state data. In this way, in the case that the on-site device state is normal but the data interaction between devices has a problem, the root cause of the fault can be quickly located.

[0097] In the embodiment of the present application, the data monitoring subsystem 420 further includes a user terminal 423 connected to the monitoring server 422, for displaying the channel state data of each optical fiber channel in the secure data network and the device interaction abnormality through a display interface, so that the user can intuitively view the channel state data and the abnormal alarm condition, thereby improving the management efficiency of the optical fiber channel.

[0098] In addition, the display interface of the user terminal 423 can also display the virtual icons of the optical fiber channels corresponding to each optical fiber channel in the secure data network 410. The monitoring server 422 determines a to-be-monitored optical fiber channel from the plurality of optical fiber channels and acquires the optical fiber branch signal in the to-be-monitored optical fiber channel in response to a selection operation on the plurality of optical fiber channel virtual icons. The convenience of targeted monitoring of the optical fiber channel is improved, thereby improving the management efficiency of the optical fiber channel.

[0099] Figure 5 For the hardware entity of the electronic device suitable for the embodiment of the present application, as shown in Figure 5 the hardware entity of the electronic device 500 includes a processor 501 and a memory 502, wherein the memory 502 stores a computer program executable on the processor 501, and the processor 501 implements the steps in the method of any of the above embodiments when executing the program.

[0100] The memory 502 stores a computer program executable on the processor, and the memory 502 is configured to store instructions and applications executable by the processor 501, and can also cache data to be processed by the processor 501 and each module in the electronic device 500 (for example, image data, audio data, voice communication data and video communication data) that has been processed, which can be realized by FLASH or RAM.

[0101] The processor 501 executes the program to implement the steps of the data monitoring method of any of the above embodiments. The processor 501 generally controls the overall operation of the electronic device 500.

[0102] The embodiment of the present application provides a computer storage medium, and the computer storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the steps of the data monitoring method according to any one of the above embodiments.

[0103] It should be noted that the description of the above storage medium and device embodiments is similar to the description of the above method embodiments, and has similar beneficial effects to the method embodiments. For technical details not disclosed in the storage medium and device embodiments of the present application, please refer to the description of the method embodiments of the present application for understanding.

[0104] The processor can be at least one of an Application Specific Integrated Circuit (ASIC), a Digital Signal Processor (DSP), a Digital Signal Processing Device (DSPD), a Programmable Logic Device (PLD), a Field Programmable Gate Array (FPGA), a Central Processing Unit (CPU), a controller, a microcontroller, and a microprocessor. It can be understood that the electronic device for realizing the functions of the processor can also be other devices, and the embodiment of the present application is not limited specifically.

[0105] The computer storage medium / memory can be a Read Only Memory (ROM), a Programmable Read-Only Memory (PROM), an Erasable Programmable Read-Only Memory (EPROM), an Electrically Erasable Programmable Read-Only Memory (EEPROM), a Ferromagnetic Random Access Memory (FRAM), a Flash Memory, a magnetic surface memory, an optical disc, a Compact Disc Read-Only Memory (CD-ROM), or the like. The computer storage medium / memory can also be various terminals including one or any combination of the above memories, such as a mobile phone, a computer, a tablet device, a personal digital assistant, and the like.

[0106] It should be understood that every feature, structure, or characteristic described above that is mentioned in connection with an "embodiment" or "one embodiment" or "some embodiments" refers to features, structures, or characteristics common to at least one embodiment of the application. Thus, use of the expressions "in one embodiment" or "in an embodiment" or "in some embodiments" appearing in various places throughout the specification are not necessarily referring to the same embodiment of the application. Furthermore, these features, structures, or characteristics can be combined in any suitable manner in one or more embodiments. It should be understood that the sequence of the processes described above does not mean the order of execution, and the execution order of the processes should be determined according to their functions and inherent logic, and should not constitute any limitation on the implementation process of the embodiments of the application. The sequence numbers of the above embodiments of the application are only for description, and do not represent the advantages or disadvantages of the embodiments. The above description of each embodiment tends to emphasize the differences between each embodiment, and the same or similar parts can be referred to each other, and for the sake of brevity, they will not be described herein.

[0107] It should be noted that the terms "comprising", "including", or any other variant thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements recited, but can also include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without more limitations, an element defined by the statement "comprising a" does not exclude the existence of additional identical elements in the process, method, article, or apparatus that includes the element.

[0108] In several embodiments provided by the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. The above-described embodiments are only illustrative. For example, the division of the modules is only a logical function division, and actual implementation can have another division manner, such as: multiple modules or components can be combined, or can be integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the displayed or discussed components can be indirect coupling or communication connection through some interfaces, devices or modules, which can be electrical, mechanical or other forms.

[0109] The modules described above as separate components can or can not be physically separate, and the components shown as modules can or can not be physical modules; they can be located in one place or distributed on multiple network units; and some or all of the modules can be selected according to actual needs to achieve the purpose of the embodiments.

[0110] In addition, each functional module in each embodiment of the present application can be integrated in one processing unit, or each module can be a single unit, or two or more modules can be integrated in one unit. The integrated module can be realized in the form of hardware or hardware plus software function unit.

[0111] Those skilled in the art can understand that all or part of the steps of the above-mentioned method embodiments can be completed by program instruction related hardware, and the foregoing program can be stored in a computer readable storage medium. When the program is executed, the steps of the method embodiments are executed. The foregoing storage medium includes mobile storage devices, ROM, magnetic discs or optical discs, and various storage medium that can store program codes.

[0112] Alternatively, when the integrated units of the present application are realized in the form of software function modules and sold or used as independent products, they can also be stored in a computer readable storage medium. Based on this understanding, the technical solutions of the embodiments of the present application can be embodied in the form of software products, which are stored in a storage medium and include a number of instructions for causing an electronic device to execute all or part of the methods described in the embodiments of the present application. The foregoing storage medium includes mobile storage devices, ROM, magnetic discs or optical discs, and various storage medium that can store program codes.

[0113] The methods disclosed in the several method embodiments of the present application can be combined arbitrarily without conflict to obtain new method embodiments.

[0114] The features disclosed in the several product embodiments of the present application can be combined arbitrarily without conflict to obtain new product embodiments.

[0115] The features disclosed in the several method or device embodiments of the present application can be combined arbitrarily without conflict to obtain new method or device embodiments.

[0116] The above is only an embodiment of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art can easily think of changes or replacements within the technical range disclosed in the present application, which should be covered in the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A data monitoring method for a railway signal safety data network, characterized in that: include: The optical fiber branch signal is collected by branching the optical fiber channel, wherein the optical fiber branch signal is an optical fiber signal obtained by collecting the optical fiber branch signal in a unidirectional optical fiber signal transmission channel branch from the switch in the secure data network to the external monitoring device, and there is no reverse data transmission channel through the external monitoring device to the secure data network; performing a signal analysis operation on the optical fiber branch signal to obtain channel status data corresponding to the optical fiber channel; The channel status data represents the interaction status between the interaction devices corresponding to the optical fiber channel; Based on the channel status data, perform device interaction anomaly monitoring; The performing of a signal analysis operation on the optical fiber branch signal to obtain channel status data corresponding to the optical fiber channel includes: The optical fiber branch signal is amplified and processed at the physical layer to convert the optical fiber signal into an electrical signal, and the electrical signal is analyzed layer by layer to obtain channel status data corresponding to each model layer.

2. The method according to claim 1, characterized in that The collecting of optical fiber branch signals in the form of optical fiber channel branching includes: The optical fiber branching signal of the optical fiber channel branching sent by the optical fiber signal acquisition device is received. The optical fiber signal acquisition device is set at the optical fiber interface position of the switch in the security data network to be connected in parallel to the optical fiber channel.

3. The method according to any one of claims 1-2, characterized in that The device interaction abnormality monitoring based on the channel status data includes: According to the preset railway signal safety data network technical specifications and safety communication protocols, the channel status data is analyzed in layers to obtain the status data corresponding to each model layer; Based on the security protocol interface logic corresponding to each model layer, the status data corresponding to the model layer is monitored for abnormalities.

4. The method according to any one of claims 1 to 2, characterized in that The secure data network includes a plurality of optical fiber channels, and collecting optical fiber branch signals in the form of optical fiber channel branching includes: Displaying a plurality of fiber channel virtual icons in a display interface, wherein the fiber channel virtual icons correspond one-to-one to the fiber channels in the secure data network; In response to a selection operation on the plurality of fiber channel virtual icons, a fiber channel to be monitored is determined from the plurality of fiber channels; and corresponding fiber branch signals are acquired through the fiber channel branches included in the fiber channel to be monitored.

5. The method according to claim 3, characterized in that The abnormality monitoring of the state data corresponding to the model layer based on the security protocol interface logic corresponding to each model layer includes: According to the security protocol interface logic corresponding to each model layer, monitor whether the status data corresponding to the model layer is abnormal; If an abnormality is detected, an abnormality warning message for the model layer is output.

6. An electronic device, characterized in that: include: a memory for storing executable instructions; The processor is configured to implement the data monitoring method according to any one of claims 1 to 5 when executing the executable instructions stored in the memory.

7. A computer-readable storage medium, characterized in that Executable instructions are stored, which are used to implement the data monitoring method described in any one of claims 1 to 5 when executed by a processor.

8. A data monitoring subsystem comprising: Unidirectional optical fiber signal acquisition equipment and monitoring server; The unidirectional optical fiber signal acquisition device is arranged at the optical fiber interface position of the secure data network switch; The unidirectional fiber optic signal acquisition device is used to collect fiber optic branch signals from fiber optic channel branches between switches and other devices in the secure data network; and transmit the fiber optic branch signals to the monitoring server, wherein the fiber optic branch signals are fiber optic signals obtained by collecting fiber optic branch signals from a unidirectional fiber optic signal transmission channel branch from the switch in the secure data network to the external monitoring device, and the unidirectional fiber optic signal acquisition device does not have a reverse data transmission channel through the external monitoring device to the secure data network; The monitoring server is used to parse the optical fiber branch signal, obtain channel status data corresponding to the optical fiber channel, and perform device interaction abnormality monitoring based on the channel status data, wherein parsing the optical fiber branch signal includes: amplifying and processing the optical fiber branch signal at the physical layer to convert the optical fiber signal into an electrical signal, and performing layered analysis on the electrical signal.

9. A secure data system comprising: A secure data network, and a data monitoring subsystem as claimed in claim 8.

Images