System and method for updating rail transit CBTC (Communication Based Train Control) signal system software

Abstract

The invention discloses a system for updating software of a rail transit CBTC (Communication Based Train Control) signal system, which comprises an upgrading server serving as an upgrading initiator and a client system applied to equipment to be upgraded, the upgrading server comprises a database module used for storing the version of the software operated by the current client, the public key of the client and the version of the software to be upgraded; the encrypted packet generation module is used for signing and encrypting an original upgrade packet imported by a user; the first log management module is used for recording events and errors occurring in the upgrade server; the first interface module is used for being responsible for an interface between the first interface module and the upgrade server operating system; and the first TFTP module is used for providing a method for downloading the encrypted software package by the client. The invention further discloses a rail transit CBTC signal system software updating method. According to the method, the problem that the software updating of the rail transit CBTC signal system needs to consume a large amount of manpower, material resources and time is solved.

Description

Technical Field

[0001] The present invention relates to a system and method for updating software of a rail transit CBTC signal system Background Art

[0002] Rail transit CBTC (communication-based train control) signal system equipment is diverse, the system architecture is distributed, and the equipment is scattered in different locations. The existing software upgrade method uses manual upgrades of individual devices one by one, which requires a lot of manpower, material resources and time. In addition, the consistency of data and software between devices can only be manually confirmed by upgrade personnel, which poses the risk of inconsistent or mismatched software versions between devices.

[0003] Therefore, a system and method for updating the software of a rail transit CBTC signal system are provided. Summary of the invention

[0004] The purpose of the present invention is to overcome the existing defects and provide a system and method for updating the software of a rail transit CBTC signal system, which solves the problem that the software update of the rail transit CBTC signal system requires a lot of manpower, material resources and time.

[0005] The technical solution to achieve the above purpose is:

[0006] A system for updating software of a rail transit CBTC signal system according to one embodiment of the present invention comprises: an upgrade server, which is used as an initiator of the upgrade, and a client system, which is applied to a device to be upgraded;

[0007] The upgrade server comprises:

[0008] The database module is used to store the version of the software currently running on the client, the client's public key, and the software version to be upgraded;

[0009] The encryption package generation module is used to sign and encrypt the original upgrade package imported by the user;

[0010] A first log management module, used to record events and errors occurring in the upgrade server;

[0011] A first interface module, used for being responsible for the interface between the upgrade server operating system;

[0012] The first TFTP module is used to provide a method for the client to download the encrypted software package;

[0013] The client system comprises:

[0014] The second log management module is responsible for recording events and errors occurring in the client system;

[0015] A second interface module, used for interface with the client operating system;

[0016] The second TFTP module is used to provide a method for the client to download the encrypted software package;

[0017] The decryption and signature verification module is responsible for decrypting and verifying the encrypted package;

[0018] The public key module is responsible for storing the public key of the upgrade server, which can be hard-coded.

[0019] Preferably, in the encryption package generation module, the SHA-256 (message digest) algorithm is used to calculate the summary value of the original upgrade package, and the RSA algorithm is used to obtain the digital signature of the summary value of the original upgrade package based on the private key. The original upgrade package and the digital signature are packaged into a signed upgrade package, and the public key of the target device is used to encrypt the signed upgrade package using the RSA (public key encryption) algorithm to obtain an encrypted upgrade package.

[0020] Preferably, the first log management module records events and errors occurring in the upgrade server, including but not limited to changes in client software versions, and import, signing, encryption, and push operations of upgrade packages.

[0021] Preferably, the second log management module records events and errors occurring in the client system, including but not limited to the receipt of upgrade instructions, downloading, decryption, and verification of upgrade packages, and error information occurring during the upgrade process.

[0022] Preferably, in the decryption and signature verification module, the encrypted upgrade package is decrypted using the SHA-256 algorithm based on the private key to obtain a signed upgrade package, the signed upgrade package is split into the original upgrade package and the digital signature, the digital signature is verified using the public key of the upgrade server to obtain the summary value A, the SHA-256 algorithm is used to calculate the summary value A' of the original upgrade package, A and A' are compared, if they are the same, the verification is successful, otherwise the verification fails.

[0023] A second method of updating software of a rail transit CBTC signal system of the present invention includes:

[0024] Step S1, the upgrade server checks the network connection status with the device to be upgraded to determine whether it is normal. If not, the upgrade is terminated;

[0025] Step S2: If the network connection is normal, the upgrade server obtains the software version of the device to be upgraded;

[0026] Step S3, the upgrade server compares the upgrade package with the existing software version to determine whether they are consistent. If they are consistent, the upgrade is terminated;

[0027] Step S4, if the software versions are inconsistent, the upgrade server generates an encrypted upgrade package;

[0028] Step S5, the upgrade server pushes the encrypted upgrade package and upgrade instructions to the device to be upgraded;

[0029] Step S6: the device to be upgraded verifies the received upgrade package to determine whether it passes. If not, the upgrade is terminated.

[0030] Step S7: If the verification is passed, the device to be upgraded starts the upgrade process.

[0031] Preferably, in step S4, the upgrade server generates an encrypted upgrade package, which specifically includes:

[0032] Step S41, using the SHA-256 algorithm to calculate the digest value of the original upgrade package;

[0033] Step S42, using the RSA algorithm to obtain a digital signature on the summary value of the original upgrade package based on the private key;

[0034] Step S43, packaging the original upgrade package and the digital signature into a signed upgrade package;

[0035] Step S44: Use the public key of the target device to encrypt the signed upgrade package using the RSA algorithm to obtain an encrypted upgrade package.

[0036] Preferably, in step S6, the device to be upgraded verifies the received upgrade package, specifically including:

[0037] Step S61, decrypt the encrypted upgrade package using the SHA-256 algorithm based on the private key to obtain a signed upgrade package;

[0038] Step S62, splitting the signed upgrade package into the original upgrade package and the digital signature;

[0039] Step S63, using the public key of the upgrade server to verify the digital signature and obtain the summary value A;

[0040] Step S64, using the SHA-256 algorithm to calculate the digest value A' of the original upgrade package;

[0041] Step S65, compare A and A', if they are the same, the verification is successful, otherwise the verification fails.

[0042] The beneficial effects of the present invention are as follows: the upgrade process of the present invention is automated, without the need to invest huge manpower, material resources and time; there is no need to add too many hardware devices to the traditional system architecture, and it is easy to implement and transform; through the dual protection of digital signature and digital encryption, the confidentiality, integrity and identity authentication of data transmission are guaranteed, and security threats caused by data interception, interruption, tampering and forgery are avoided; the problem that the software update of the rail transit CBTC signal system requires a lot of manpower, material resources and time is solved, and at the same time, data security problems in network transmission are prevented. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 It is a module diagram of a system for updating software of a rail transit CBTC signal system according to the present invention;

[0044] Figure 2 It is a flow chart of a method for updating software of a rail transit CBTC signal system of the present invention;

[0045] Figure 3 It is a specific flow chart of the upgrade server generating an encrypted upgrade package in the present invention;

[0046] Figure 4 It is a specific flow chart of the device to be upgraded in the present invention verifying the received upgrade package. DETAILED DESCRIPTION

[0047] The technical solution of the present invention will be described clearly and completely below in conjunction with the accompanying drawings. In the description of the present invention, it should be noted that the terms "center", "up", "down", "left", "right", "vertical", "horizontal", "inside", "outside" and the like indicate directions or positional relationships based on the directions or positional relationships shown in the accompanying drawings, which are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific direction, be constructed and operated in a specific direction, and therefore cannot be understood as a limitation on the present invention. In addition, the terms "first", "second", and "third" are used for descriptive purposes only and cannot be understood as indicating or implying relative importance.

[0048] The present invention will be further described below in conjunction with the accompanying drawings.

[0049] In order to overcome the problem that the software update of the rail transit CBTC signal system requires a lot of manpower, material resources and time, and to prevent data security issues in network transmission. The present invention provides a system and method for updating the software of the rail transit CBTC signal system; wherein, the software update system is to add an "upgrade server" to the traditional CBTC system architecture: the server is responsible for storing the public keys of each single-point device in each subsystem, storing the software to be upgraded and responsible for software version management, and responsible for the generation and distribution of encrypted upgrade packages, that is:

[0050] like Figure 1 As shown, a system for updating the software of a rail transit CBTC signal system includes: an upgrade server 1, which serves as an initiator of the upgrade, and a client system 2, which is applied to the device to be upgraded.

[0051] The upgrade server 1 comprises: a database module 11 , an encryption package generation module 12 , a first log management module 13 , a first interface module 14 and a first TFTP module 15 .

[0052] The database module 11 is used to store the version of the software currently running on the client, the public key of the client, and the software version to be upgraded.

[0053] The encryption package generation module 12 is used to sign and encrypt the original upgrade package imported by the user.

[0054] In the embodiment, the SHA-256 algorithm is used to calculate the summary value of the original upgrade package, and the RSA algorithm is used to obtain the digital signature of the summary value of the original upgrade package based on the private key. The original upgrade package and the digital signature are packaged into a signed upgrade package, and the public key of the target device is used to encrypt the signed upgrade package using the RSA algorithm to obtain an encrypted upgrade package.

[0055] The first log management module 13 is used to record events and errors that occur when upgrading the server.

[0056] In the embodiment, the events and errors occurring in the upgrade server are recorded, including but not limited to the transformation of the client software version, and the import, signing, encryption, and push operations of the upgrade package.

[0057] The first interface module 14 is responsible for the interface with the upgrade server operating system.

[0058] The first TFTP module 15 is used to provide a method for the client to download the encrypted software package.

[0059] The client system 2 includes: a second log management module 21 , a second interface module 22 , a second TFTP module 23 , a decryption and signature verification module 24 and a public key module 25 .

[0060] The second log management module 21 is responsible for recording events and errors occurring in the client system.

[0061] In the embodiment, events and errors occurring in the client system are recorded, including but not limited to the reception of upgrade instructions, downloading, decryption, and verification of upgrade packages, and error information occurring during the upgrade process.

[0062] The second interface module 22 is responsible for the interface with the client operating system.

[0063] The second TFTP module 23 is used to provide a method for the client to download the encrypted software package.

[0064] The decryption and signature verification module 24 is responsible for decrypting and verifying the encrypted package.

[0065] In the embodiment, the encrypted upgrade package is decrypted using the SHA-256 algorithm based on the private key to obtain a signed upgrade package, the signed upgrade package is split into an original upgrade package and a digital signature, the digital signature is verified using the public key of the upgrade server to obtain a summary value A, the original upgrade package is calculated using the SHA-256 algorithm for the original upgrade package, and A and A' are compared. If they are the same, the verification is successful, otherwise the verification fails.

[0066] The public key module 25 is responsible for storing the public key of the upgrade server, which can be hard-coded.

[0067] like Figure 2 As shown, a method for updating software of a rail transit CBTC signal system includes:

[0068] Step S1, the upgrade server 1 checks the network connection status with the device to be upgraded to determine whether it is normal. If not, the upgrade is terminated.

[0069] Step S2: If the network connection is normal, the upgrade server 1 obtains the software version of the device to be upgraded.

[0070] Step S3, the upgrade server 1 compares the upgrade package with the existing software version to determine whether they are consistent. If they are consistent, the upgrade is terminated.

[0071] Step S4: If the software versions are inconsistent, the upgrade server 1 generates an encrypted upgrade package.

[0072] like Figure 3 As shown, the upgrade server 1 generates an encrypted upgrade package, which specifically includes:

[0073] Step S41, using the SHA-256 algorithm to calculate the digest value of the original upgrade package.

[0074] Step S42: Based on the private key, use the RSA algorithm to obtain a digital signature for the summary value of the original upgrade package.

[0075] Step S43: Pack the original upgrade package and the digital signature into a signed upgrade package.

[0076] Step S44: Use the public key of the target device to encrypt the signed upgrade package using the RSA algorithm to obtain an encrypted upgrade package.

[0077] In the embodiment, the confidentiality, integrity and identity authentication of data transmission are guaranteed by means of digital signature and digital encryption, thereby avoiding security threats caused by data interception, interruption, tampering and forgery.

[0078] Step S5: the upgrade server 1 pushes the encrypted upgrade package and upgrade instructions to the device to be upgraded.

[0079] Step S6: The device to be upgraded verifies the received upgrade package to determine whether it passes. If not, the upgrade is terminated.

[0080] like Figure 4 As shown, the device to be upgraded verifies the received upgrade package, specifically including:

[0081] Step S61, decrypt the encrypted upgrade package using the SHA-256 algorithm based on the private key to obtain a signed upgrade package.

[0082] Step S62, splitting the signed upgrade package into the original upgrade package and the digital signature.

[0083] Step S63: Use the public key of the upgrade server 1 to verify the digital signature and obtain the summary value A.

[0084] Step S64: Calculate the digest value A' of the original upgrade package using the SHA-256 algorithm.

[0085] Step S65, compare A and A', if they are the same, the verification is successful, otherwise the verification fails.

[0086] Step S7: If the verification is passed, the device to be upgraded starts the upgrade process.

[0087] The above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that the technical solutions described in the above embodiments may still be modified, or some or all of the technical features may be replaced by equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A system for updating the software of a rail transit CBTC signal system, characterized in that: include: The upgrade server, as the initiator of the upgrade, and the client system, applied to the device to be upgraded; The upgrade server comprises: The database module is used to store the version of the software currently running on the client, the client's public key, and the software version to be upgraded; The encryption package generation module is used to sign and encrypt the original upgrade package imported by the user; A first log management module, used to record events and errors occurring in the upgrade server; A first interface module, used for being responsible for the interface between the upgrade server operating system; The first TFTP module is used to provide a method for the client to download the encrypted software package; The client system comprises: The second log management module is responsible for recording events and errors occurring in the client system; A second interface module, used for interface with the client operating system; The second TFTP module is used to provide a method for the client to download the encrypted software package; The decryption and signature verification module is responsible for decrypting and verifying the encrypted package; The public key module is responsible for storing the public key of the upgrade server, which can be hard-coded.

2. A system for updating the software of a rail transit CBTC signal system according to claim 1, characterized in that: In the encryption package generation module, the SHA-256 algorithm is used to calculate the summary value of the original upgrade package. Based on the private key, the RSA algorithm is used to obtain the digital signature of the summary value of the original upgrade package. The original upgrade package and the digital signature are packaged into a signed upgrade package. The public key of the target device is used to encrypt the signed upgrade package using the RSA algorithm to obtain an encrypted upgrade package.

3. A system for updating software of a rail transit CBTC signal system according to claim 1, characterized in that: The first log management module records events and errors that occur in the upgrade server, including but not limited to changes in client software versions, import, sign, encrypt, and push operations of upgrade packages.

4. A system for updating software of a rail transit CBTC signal system according to claim 1, characterized in that: The second log management module records events and errors that occur in the client system, including but not limited to the reception of upgrade instructions, downloading, decryption, and verification of upgrade packages, as well as error information that occurs during the upgrade process.

5. A system for updating software of a rail transit CBTC signal system according to claim 1, characterized in that: In the decryption and signature verification module, the encrypted upgrade package is decrypted using the SHA-256 algorithm based on the private key to obtain a signed upgrade package, the signed upgrade package is split into the original upgrade package and the digital signature, the digital signature is verified using the public key of the upgrade server to obtain the summary value A, the SHA-256 algorithm is used to calculate the summary value A' of the original upgrade package, A and A' are compared, if they are the same, the verification is successful, otherwise the verification fails.

6. A method for updating software of a rail transit CBTC signal system, characterized in that: include: Step S1, the upgrade server checks the network connection status with the device to be upgraded to determine whether it is normal. If not, the upgrade is terminated; Step S2: If the network connection is normal, the upgrade server obtains the software version of the device to be upgraded; Step S3, the upgrade server compares the upgrade package with the existing software version to determine whether they are consistent. If they are consistent, the upgrade is terminated; Step S4, if the software versions are inconsistent, the upgrade server generates an encrypted upgrade package; Step S5, the upgrade server pushes the encrypted upgrade package and upgrade instructions to the device to be upgraded; Step S6: the device to be upgraded verifies the received upgrade package to determine whether it passes. If not, the upgrade is terminated. Step S7: If the verification is passed, the device to be upgraded starts the upgrade process.

7. A method for updating the software of a rail transit CBTC signal system according to claim 6, characterized in that: In step S4, the upgrade server generates an encrypted upgrade package, which specifically includes: Step S41, using the SHA-256 algorithm to calculate the digest value of the original upgrade package; Step S42, using the RSA algorithm to obtain a digital signature on the summary value of the original upgrade package based on the private key; Step S43, packaging the original upgrade package and the digital signature into a signed upgrade package; Step S44: Use the public key of the target device to encrypt the signed upgrade package using the RSA algorithm to obtain an encrypted upgrade package.

8. A method for updating software of a rail transit CBTC signal system according to claim 6, characterized in that: In step S6, the device to be upgraded verifies the received upgrade package, which specifically includes: Step S61, decrypt the encrypted upgrade package using the SHA-256 algorithm based on the private key to obtain a signed upgrade package; Step S62, splitting the signed upgrade package into the original upgrade package and the digital signature; Step S63, using the public key of the upgrade server to verify the digital signature and obtain the summary value A; Step S64, using the SHA-256 algorithm to calculate the digest value A' of the original upgrade package; Step S65, compare A and A', if they are the same, the verification is successful, otherwise the verification fails.

Images