Secure computing channel dynamic combination method based on cloud platform, medium and equipment

Abstract

The invention discloses a security computing channel dynamic combination method based on a cloud platform, a medium and equipment. The method is used for generating a cloud computing security platform. Comprising the following steps: constructing an IaaS layer by adopting a plurality of server clusters; setting each processor core of each server in each server cluster as a computing channel, and acquiring physical attributes of all computing channels; according to the physical attributes of all the computing channels, constructing a security cloud channel physical attribute structural body which is composed of the computing channels and comprises a plurality of computing channel sets of different physical attributes; constructing security middleware of the physical attribute structural body of the security cloud channel in the PaaS layer according to requirements, and correspondingly linking computing channels of different physical attributes in the physical attribute structural body of the security cloud channel through the security middleware to generate a final scheme; and generating the cloud computing security platform according to the final scheme. The method has the advantage of ensuring that the channels with different security function levels are simultaneously operated on the security cloud platform.

Description

Technical Field

[0001] The present invention relates to the field of cloud platforms, and in particular to a method, medium and device for dynamically combining secure computing channels based on cloud platforms. Background Art

[0002] High-functional safety applications of rail transit signal systems are usually developed and integrated on the basis of a secure computer platform based on high real-time and high-security embedded dedicated board hardware to improve product reuse and reduce development costs. Traditional embedded safety platforms generally adopt a three-out-of-two or two-by-two-out-of-two fault-safety architecture. Core computing, communication and input / output devices require customized development, with a long R&D cycle and high costs. With the continuous expansion of railway network lines and the application of a new generation of signal control systems based on resource management and data fusion processing, traditional embedded safety platforms are limited by the performance of the central processor and cannot provide large computing power requirements. A safety platform can only run one or two applications at the same time. At the same time, the distributed layout of equipment and the large number of equipment have brought great additional costs to operation and maintenance, which is inconsistent with the concept of green development of railways. Secondly, traditional embedded safety platforms are generally designed for applications with only one SIL (Safety Integrity Level) safety function requirement, and cannot support applications of different SILs while taking into account safety, performance and cost factors. It is also impossible to provide a safe application environment for the simultaneous operation of different SIL applications.

[0003] Cloud computing technology is based on virtualization functions and relies on the powerful processing capabilities of high-performance multi-core central processors in server arrays. It can provide high computing power on demand, achieve rapid expansion and seamless migration. When applied to railway signal systems, it can meet the large computing power and high reliability requirements of rail transit computing platforms. It is the development direction of the next generation of secure computer platforms. How to achieve this kind of cloud computing has become an urgent problem to be solved. Summary of the invention

[0004] The purpose of the present invention is to provide a method, medium and device for dynamically combining secure computing channels based on a cloud platform, which has the advantage of ensuring that channels with different security function levels run simultaneously on a secure cloud platform.

[0005] To achieve the above object, the present invention provides a method for dynamically combining secure computing channels based on a cloud platform, which comprises:

[0006] Use multiple server clusters to build the IaaS layer;

[0007] Setting each processor core of each server in each server cluster as a computing channel, and obtaining physical properties of all computing channels;

[0008] According to the physical properties of all computing channels, a secure cloud channel physical property structure is constructed, which is composed of computing channels, including a set of computing channels with multiple different physical properties;

[0009] Construct the security middleware of the physical property structure of the secure cloud channel at the PaaS layer according to the needs. Use the security middleware to link the calculation channels of different physical properties in the physical property structure of the secure cloud channel to generate the final solution.

[0010] Generate a cloud computing security platform based on the final plan.

[0011] Optionally, each server cluster includes multiple servers, and each server has multiple processor cores.

[0012] Optionally, multiple servers within a single server cluster form a physically independent red and blue redundant network through a 10 Gigabit optical fiber network; multiple server clusters communicate with each other through a signal system business backbone network.

[0013] Optionally, the physical properties include: category attributes, representing the type of computing channel; independence attributes, representing the independent operation performance of the computing channel; performance indicators, representing the operation efficiency of the computing channel.

[0014] Optionally, the security middleware includes: secure coding container middleware, security self-check middleware, two-out-of-two middleware and resource isolation service middleware.

[0015] Optionally, the security middleware is used to link the computing channels of different types of physical properties in the physical property structure of the secure cloud channel accordingly, including: linking the computing channels of different types of physical properties of the same server, linking the computing channels of different types of physical properties belonging to different servers but the same server cluster, and linking the computing channels of different types of physical properties belonging to different servers and not to the same server cluster.

[0016] Optionally, the security middleware of the physical property structure of the secure cloud channel is constructed at the PaaS layer according to the demand, and the calculation channels of different physical properties in the physical property structure of the secure cloud channel are correspondingly linked through the security middleware to generate a final solution, including:

[0017] Construct the security middleware of the physical property structure of the secure cloud channel at the PaaS layer according to the needs. Use the security middleware to link the calculation channels of different physical properties in the physical property structure of the secure cloud channel accordingly to generate multiple final solutions.

[0018] Generate quantitative indicators for all final solutions from three perspectives: THR indicator, RAMS indicator and cost;

[0019] The optimal final solution is selected based on the quantitative indicators of each final solution and in line with user needs.

[0020] Optionally, generating a cloud computing security platform according to the final solution includes:

[0021] According to the final solution, perform data configuration for all computing channels, pair and bind each computing channel with the corresponding processor core at the IaaS layer, set the required security middleware for the relevant computing channels at the PaaS layer as needed, and complete the corresponding data configuration for the security middleware;

[0022] Initialize the initially formed cloud computing security platform, call the security middleware, and perform security compliance checks on the configuration data of each computing channel. After the security compliance check passes, the cloud computing security platform can enter a normal state and run; otherwise, the terminal will shut down and the entire cloud computing security platform will enter a safe state.

[0023] Optionally, generating a final solution also includes: generating multiple final solutions as backup final solutions; during the operation of the cloud computing security platform, when the terminal pressure is too high, giving priority to selecting the final solution of the most used server among the backup final solutions.

[0024] Optionally, after generating the cloud computing security platform, the method further includes:

[0025] Receive a computing channel reallocation command;

[0026] The current operation of the cloud computing security platform is suspended pursuant to the order;

[0027] Detect the number of available computing channels in each server, sort them, select the server with the most available computing channels, and determine the new final solution based on the server;

[0028] Build a cloud computing security platform based on the new final plan;

[0029] Complete the security compliance check of the configuration data of each computing channel. If it passes, synchronize the data of the newly generated cloud computing security platform with the previous cloud computing security platform and end the process.

[0030] On the other hand, the present invention provides a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, it implements any of the cloud platform-based secure computing channel dynamic combination methods.

[0031] On the other hand, the present invention provides an electronic device, including a processor and a memory, wherein the memory stores a computer program, and when the computer program is executed by the processor, any of the cloud platform-based secure computing channel dynamic combination methods is implemented.

[0032] In summary, compared with the prior art, the cloud platform-based secure computing channel dynamic combination method, medium and device provided by the present invention have the following beneficial effects:

[0033] First, the present invention achieves full decoupling of the security channel and hardware through virtualization technology, and builds security services through security middleware without the need for dedicated customized security hardware.

[0034] Second, the present invention realizes the isolation of operating environments with different security levels through the resource isolation service of the SIL4-level virtualization layer and the security middleware, and constructs operating environments with security levels such as SIL4 and SIL2.

[0035] Third, the present invention designs the security middleware as a configurable framework, and forms different final solutions according to different security middleware combinations.

[0036] Fourth, the present invention implements different solutions in a mixed manner on the same platform, and can form different final solutions based on safety SIL requirements, performance, reliability requirements and cost constraints, greatly improving flexibility. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] Figure 1 The figure is a schematic diagram of the structure of a server cluster according to an embodiment of the present invention.

[0038] Figure 2 The present invention is a flowchart of a method for dynamically combining secure computing channels based on a cloud platform according to an embodiment of the present invention.

[0039] Figure 3 A schematic diagram of enumerating the physical attribute structure of a secure cloud channel according to an embodiment of the present invention. DETAILED DESCRIPTION

[0040] The following will be combined with the attached embodiment of the present invention Figure 1 ~Attached Figure 3 , the technical solutions, structural features, objectives achieved and effects in the embodiments of the present invention are described in detail.

[0041] It should be noted that the drawings are in a very simplified form and use non-precise proportions. They are only used to conveniently and clearly assist in explaining the embodiments of the present invention, and are not used to limit the conditions for the implementation of the present invention. Therefore, they have no substantive technical significance. Any structural modification, change in proportional relationship or adjustment of size, without affecting the effects and purposes that can be achieved by the present invention, should still fall within the scope of the technical content disclosed by the present invention.

[0042] It should be noted that, in the present invention, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only the elements explicitly listed, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0043] The present invention provides a method for dynamically combining secure computing channels based on a cloud platform, the purpose of which is to generate a cloud computing security platform. The purpose of the present invention is to overcome the problem that traditional embedded cloud computing security platforms cannot take into account security, performance and cost factors at the same time, and at the same time build an operating environment that meets applications of different SIL (Safety Integrity Level) levels, and designs a method for dynamically combining secure computing channels based on a cloud platform.

[0044] SIL is a discrete level defined in the international standard IEC61508 (Functional safety of electrical / electronic / programmable electronic safety-related systems (E / E / PE, or E / E / PES)). It is used to measure the probability of a safety-related system successfully performing a specified safety function. The higher the probability, the higher the safety integrity level; the safety integrity level is divided into 5 levels, namely BI, SIL1, SIL2, SIL3 and SIL4. Among them, SIL4 is the highest and BI is the lowest.

[0045] Regarding the introduction of cloud computing security platform, the cloud computing security platform has IaaS layer (Infrastructure as a Service), PaaS layer (Platform as a Service) and SaaS layer (Software as a Service).

[0046] The IaaS layer refers to a basic platform that aggregates network basic resources into a resource pool through virtualization and dynamization. The PaaS layer provides the resources required for application development and deployment, including middleware, databases, and development tools. The SaaS layer is a form of cloud computing, a platform that directly provides services to end users. From a formal point of view, the three layers are independent of each other because the services they provide are completely different; but from a technical point of view, the relationship between the three layers is not independent, but has a certain dependency. For example, a SaaS layer product and service not only needs to use the technology of the SaaS layer itself, but also relies on the computing resources of the development and deployment platform provided by the PaaS layer, or for the PaaS layer, its products and services are also likely to be built on the IaaS layer services. Therefore, there is a certain relationship between the IaaS layer, the PaaS layer, and the SaaS layer.

[0047] Based on the foregoing, the core of the present invention focuses on the premise that the products and services of the PaaS layer are built on the IaaS layer services; that is, the present invention does not discuss the relationship between the PaaS layer and the SaaS layer and between the IaaS layer and the SaaS layer.

[0048] The present invention determines the physical properties (such as category properties) of each channel required by the IaaS layer, generates a number of final solutions that can meet different SIL requirements through corresponding resources in the PaaS layer, implements the final solutions, and realizes the construction of a corresponding cloud computing security platform.

[0049] See also Figure 2 , Figure 2 A flowchart of a method for dynamically combining secure computing channels based on a cloud platform is provided in accordance with an embodiment of the present invention. The method includes:

[0050] Step S1, using multiple server clusters to build an IaaS layer;

[0051] Specifically, the server cluster can be a commercial off-the-shelf (COTS) server cluster based on a high-performance multi-core CPU, and the IaaS layer of the cloud computing security platform is formed by multiple commercial off-the-shelf server clusters. Figure 1 Data center A and data center B in the figure represent different server clusters, each server cluster includes multiple servers, and each server has multiple processor cores. In a preferred embodiment, disaster preparedness management is achieved by setting up commercial off-the-shelf server clusters at different locations. In the present invention, multiple servers within a single server cluster form a physically independent red and blue redundant network through a 10G optical fiber network; multiple server clusters communicate with each other through a signal system business backbone network.

[0052] Step S2, setting each processor core of each server in each server cluster as a computing channel, and obtaining physical properties of all computing channels;

[0053] The ultimate goal of the present invention is to generate a cloud computing security platform, which is used for computing services. The computing services are based on the computing channels of each server in the server cluster, so step S2 will obtain the physical properties of the computing channels of all servers.

[0054] Among them, physical attributes refer to important parameters in the computing channel used to generate a cloud computing security platform. Because multiple computing channels in the final generated cloud computing security platform need to be jointly designed, this step S2 needs to call the physical attributes of all computing channels to facilitate subsequent processing. Physical attributes include, but are not limited to, category attributes of computing channels, independence attributes of computing channels, etc. Specifically, the category attributes of computing channels (a kind of physical attribute, representing the type of computing channels) can be determined according to the architecture of the central processing unit, and the independence attributes of computing channels (a kind of physical attribute, representing the independent operation performance of computing channels) can be determined according to the computing core position of the computing channel; the performance indicators of computing channels (a kind of physical attribute, representing the operation efficiency of computing channels) are determined according to the different central processing unit architectures and central processing unit models of the server. Each computing channel will finally generate a main physical attribute. The acquisition of physical attributes can be carried out here according to the actual situation, and no further description will be given here.

[0055] Step S3, constructing a secure cloud channel physical property structure consisting of computing channels, including a set of computing channels with multiple different physical properties, according to the physical properties of all computing channels;

[0056] This step is to aggregate the physical properties of all computing channels obtained above. The principle is as follows: after obtaining the physical properties of all computing channels, computing channels with the same physical properties have a natural connection with each other because of the same properties and because they are in the same IaaS layer; however, the connectivity between computing channels with different physical properties is weak; so step S3 can preliminarily set the computing channels with the same physical properties as a set, and then construct the corresponding secure cloud channel physical property structure.

[0057] However, at this time, the connection between different sets in the secure cloud channel physical property structure is weak, so it is necessary to establish the connection between the calculation channels of different types of physical properties in step S4.

[0058] For example, if the aforementioned category attributes, independence attributes, and performance indicators are used, then the physical attribute structure of the secure cloud channel constructed here is {computation channel (set) of category attributes, calculation channel (set) of independence attributes, calculation channel (set) of performance indicators}. It can be seen that in step S3, only all the aforementioned physical attributes are sorted out, and the physical attributes of the same type are sorted out and summarized, but the calculation channels of different types of physical attributes are not linked.

[0059] Step S4, constructing the security middleware of the physical property structure of the secure cloud channel at the PaaS layer according to the demand, and linking the calculation channels of different types of physical properties in the physical property structure of the secure cloud channel accordingly through the security middleware to generate a final solution; wherein the final solution can be a combination solution or a collection of multiple combination solutions.

[0060] Step S5: Generate a cloud computing security platform according to the final solution.

[0061] The configuration at the PaaS layer in step S4 adopts the existing technology, which will not be described in detail here; the demand generally refers to what kind of SIL, what kind of resource demand, what kind of scale, etc.; the link is made according to the aforementioned demand. Specifically, for example, computing channels with different physical attributes belonging to the same server are linked, computing channels with different physical attributes belonging to different servers but belonging to the same server cluster are linked accordingly, computing channels with different physical attributes belonging to different servers and not belonging to the same server cluster are linked accordingly, etc.

[0062] Among them, in a combination solution, computing channels of different physical properties can be linked through different security middleware to form a combination solution with different characteristics, thereby generating a cloud computing security platform.

[0063] Furthermore, when there is a need for multiple combination schemes to jointly generate a cloud computing security platform; for example, two combination schemes can be constructed in the PaaS layer according to demand, and the computing channels in each combination scheme are correspondingly linked, and then the corresponding computing channels in the two combination schemes are correspondingly linked through the security middleware. As described in step S4, even if more than two combination schemes are generated, they are all born for the same demand and are inseparable; in essence, they are the same as the aforementioned "a combination scheme containing different characteristics"; but in terms of specific logical operations, such as the linking part of the two combination schemes, the ideas of the two are different. The specific implementation of the final solution is not the focus of the present invention, and is a prior art, so it will not be repeated here.

[0064] Specifically, the present invention uses security middleware for linking because the role of the security middleware is to provide secure computing services for data interaction between computing channels of different physical properties, further ensuring the computing security of the generated cloud computing security platform. Specifically, the security middleware includes: secure coding container middleware, security self-checking middleware, two-out-of-two middleware, and resource isolation service middleware; the corresponding functions of the four types of middleware will be described below.

[0065] (1) Secure Coding Container Middleware

[0066] Construct secure coding container middleware to connect multiple computing channels with different physical properties. The principle is to use the secure cloud to perform offline secure coding on the module codes with security functions in the computing channels with different physical properties, and to achieve data interaction security by performing arithmetic coding on the variables, constants, operators and execution order in the code and generating redundant codes. There are three types of redundant code lengths: 16 bits, 32 bits and 64 bits.

[0067] (2) Security Self-checking Middleware

[0068] Construct a security self-checking middleware, and implement self-checking of hardware resources such as CPU and storage in interactive data through offline configuration and online calling. In a specific embodiment, the detection coverage of hardware resources such as CPU and storage in interactive data can be detected to learn the operation and security operation of the security self-checking middleware.

[0069] (3) Two-out-of-two middleware

[0070] Build a two-out-of-two middleware, and use offline configuration and online calling to select two related computing channels with different physical properties for simulation calculation during security calculation, and compare the simulation calculation results. Different comparison frequencies can be configured according to different comparison quality requirements. In subsequent security calculations, real-time monitoring is performed between computing channels with different physical properties to achieve self-checking.

[0071] (IV) Resource Isolation Service Middleware

[0072] Build resource isolation service middleware to provide resource allocation, isolation function and isolation function self-checking services between computing channels with different physical properties that meet different SIL levels according to the physical properties of the channels at the IaaS layer.

[0073] In a preferred embodiment, for example, it is necessary to determine the best final solution based on the qualitative and quantitative requirements of a safety failure architecture in a standard and the user indicator requirements. In this case, it is necessary to generate multiple final solutions, compare all generated final solutions, and select the best final solution as the result; in step S4, the method for determining the best final solution includes:

[0074] Step S41, constructing a security middleware of the physical property structure of the secure cloud channel at the PaaS layer according to the demand, and linking the calculation channels of different physical properties in the physical property structure of the secure cloud channel accordingly through the security middleware to generate multiple final solutions;

[0075] Step S42, generating quantitative indicators for all final solutions from three perspectives: THR (Tolerable Hazard Rate), RAMS (Reliability, Availability, Maintainability, Safety) and cost;

[0076] Step S43, selecting the best final solution based on the quantitative indicators of each final solution and matching the user's needs.

[0077] Specifically, in step S5, after determining the optimal final solution, data configuration of all computing channels is performed according to the final solution, each computing channel is paired and bound with the corresponding central processor at the IaaS layer, and the required security middleware is set for the relevant computing channels at the PaaS layer as needed, and the corresponding data configuration of the security middleware is completed. After completing the aforementioned dependent configurations, at this time, the cloud computing security platform has been initially formed; it is necessary to initialize the initially formed cloud computing security platform, call specific security middleware such as two-out-of-two middleware and security self-checking middleware, and perform security compliance checks on the configuration data of each computing channel. After the security compliance check passes, the cloud computing security platform can enter a normal state and run; otherwise, the terminal (that is, the user end of the cloud computing security platform) goes down, and the entire cloud computing security platform enters a safe state.

[0078] During the operation of the cloud computing security platform, if a situation arises where computing channel migration is required (computing channel switching, or reallocation of resources such as the central processing unit), the final plan can be regenerated according to steps S1 to S4, and a complete final security compliance check can be performed. After the security compliance check passes, the corresponding computing channel can be migrated.

[0079] During the operation of the cloud computing security platform, in order to prevent the final solution used from crashing, etc., multiple final solutions that fit user needs (i.e., under different circumstances) can be generated in advance according to steps S1 to S4 as backup final solutions. During the operation of the cloud computing security platform, when the terminal pressure is too high, the final solution of the most used server among the backup final solutions can be preferentially selected.

[0080] During the operation of the cloud computing security platform, if it is necessary to timely generate a final solution with higher computing power to replace the current final solution, that is, a final solution including more servers, a replacement method of the final solution based on fitting user needs is described as follows:

[0081] Step W1, receiving a computing channel reallocation command;

[0082] Step W2, suspending the current operation of the cloud computing security platform according to the command;

[0083] Step W3, detect the number of available computing channels in each server, sort them, and proceed to step W4; if there are no available computing channels, generate an error report and end;

[0084] Step W4, selecting a server with the most available computing channels, and determining a new final solution based on the server;

[0085] Step W5, building a cloud computing security platform according to the new final solution;

[0086] Step W6, complete the security compliance check of the configuration data of each computing channel. If it passes, proceed to step W7; if it fails, generate an error report and end;

[0087] Step W7, synchronize the data of the newly generated cloud computing security platform with the previous cloud computing security platform, and end the process.

[0088] The following is a specific embodiment of the present invention. The cloud computing security platform to be formed by the present invention is an IaaS layer and a PaaS layer built on a private cloud. The cloud computing security platform adopts Type-I virtualization technology (virtualization technology that can be directly installed on a bare metal system or a physical host), secure coding technology, secure self-checking technology, and secure communication technology.

[0089] like Figure 1As shown, it is a schematic diagram of the IaaS layer channel in the cloud computing security platform of the present invention, and each computing channel corresponds to each processor core of the IaaS layer; after completing the construction of the IaaS layer, the terminal is configured so that each computing channel has a preliminary functional relationship; the binding and configuration here are used as a preset; and then the required security middleware is set at the PaaS layer.

[0090] Specifically, as described above, the physical properties of each computing channel are obtained, and a secure cloud channel physical property structure composed of computing channels including computing channels with multiple different physical properties is constructed; Figure 3 As shown, it is composed of {computation channels of category attributes, calculation channels of independence attributes, and calculation channels of performance indicators}. In this embodiment, the calculation channels of category attributes include: PowerPC (Performance Optimization With Enhanced RISC-Performance Computing, a central processing unit with a reduced instruction set architecture), ARM (Advanced RISC processors, a reduced instruction set processor architecture) and x86 (Complex Instruction Set Computer, complex instruction set computer); the calculation channels of independence attributes include the same server, the same server cluster, and different server clusters; the calculation channels of performance indicators only have the core frequency of the central processing unit corresponding to the calculation channel.

[0091] According to the requirements, the security middleware of the physical attribute structure of the secure cloud channel is constructed at the PaaS layer. Through the security middleware, the calculation channels of different physical attributes in the physical attribute structure of the secure cloud channel are linked, and then the following 11 implementation methods of the final solution can be obtained. In the introduction, if there is no explicit part, it is the default configuration and will not be repeated here.

[0092] (1) Dual combination solution: IaaS: located in different servers, with the same central processing unit architecture (that is, with the same computing channel architecture); PaaS: using two-out-of-two middleware, security self-checking middleware, and resource isolation service middleware; can reach SIL4; achieve high channel performance and low cost.

[0093] (2) Dual combination solution; IaaS: located in different servers with different CPU architectures; PaaS: using two-out-of-two middleware; can achieve SIL4; achieve high channel performance and low cost.

[0094] (3) Dual combination solution; IaaS: located on different servers with the same CPU architecture; PaaS: using secure coding container middleware, but different redundant codes are used inside the two combination solutions; can achieve SIL4, low cost and good compatibility.

[0095] (4) Dual combination solution; IaaS: on the same server with the same CPU architecture; PaaS uses secure coding container middleware and the same redundant code; can reach SIL4, low cost and good compatibility.

[0096] (5) Dual combination solutions; IaaS: on the same server, with the same CPU architecture; PaaS: one combination solution uses secure coding container middleware and resource isolation service middleware, and the other combination solution uses resource isolation service middleware; it can reach SIL4, with low cost and good compatibility.

[0097] (6) Dual combination solution; IaaS: located in different servers with the same central processor architecture; PaaS: using two-out-of-two middleware and resource isolation service middleware; can achieve SIL4, high performance, high cost, and good compatibility.

[0098] (7) Single combination solution; PaaS: secure coding container middleware that can reach SIL2, low cost and good compatibility.

[0099] (8) Dual combination solution; IaaS: located in different servers with different CPU architectures; PaaS: using two-out-of-two middleware and resource isolation service middleware; can achieve SIL2, high efficiency and good compatibility.

[0100] (9) Dual combination solution; IaaS: on the same server, with different central processing unit architectures PaaS: using secure coding container middleware and resource isolation service middleware; can achieve SIL2, low cost and high efficiency.

[0101] (10) Dual combination solution; IaaS: located on different servers with the same central processing unit architecture; PaaS: using secure coding container middleware and resource isolation service middleware; can achieve SIL2 with medium cost and high efficiency.

[0102] (11) Single combination solution; can achieve BI.

[0103] In a specific embodiment, the method for determining the optimal final solution is as follows:

[0104] According to the railway signal system functional safety standard EN500129, which stipulates the system fault safety architecture and channel detection and protection requirements that can be adopted by safety applications of different SILs, combined with the middleware security components provided by the cloud computing security platform, the security detection coverage that can be achieved by the services generated by the cloud computing security platform, and the protection performance of the cloud computing security platform, all reasonable final solutions are obtained.

[0105] Quantitative indicators are generated from the THR indicator and the RAMS indicator. Among them, the THR indicator and the RAMS indicator are calculated by establishing a fault tree model and a reliability model based on the efficiency loss data of the IaaS layer and the detection coverage index of the security self-check middleware of the PaaS layer.

[0106] For example, for the efficiency loss data of the IaaS layer, the negative impact of the two-out-of-two middleware, secure coding container middleware, and secure self-checking middleware on the terminal execution time and efficiency is weighted and integrated to obtain the efficiency loss indicators of each final solution. The specific quantitative values ​​are as follows:

[0107] (1) Secure Coding Container Middleware

[0108] When the redundant code length is 16, the value is 5;

[0109] When the redundant code length is 32, the value is 7;

[0110] When the redundant code length is 64, the value is 15.

[0111] (2) Two-out-of-two middleware

[0112] At low frequency, the value is 1;

[0113] The value is 2 at medium frequency;

[0114] The value is 4 for high frequency.

[0115] (3) Security Self-checking Middleware

[0116] When the coverage is low, the value is 1;

[0117] The value is 2 for medium coverage;

[0118] The value is 4 for high coverage.

[0119] I will not elaborate on the rest. According to the above ideas, after completing the generation of quantitative indicators for each final plan, the cost indicators are estimated based on the maintenance costs, material costs and development costs of similar products of the company. The cost indicators are jointly analyzed with data such as the number of servers, maintenance costs of different architectures, virtualization of different architectures and driver adaptation costs to obtain multiple final plans that meet the requirements.

[0120] Finally, determine the functional safety level of the application based on the SIL under actual requirements; if it is BI, select (11) to generate an error report and end.

[0121] If it is SIL2, select (7) to (10), and for each final solution, determine whether the THR indicator meets the THR indicator requirements of the terminal; if there is a solution that meets the requirements, determine other configurations that meet the RAMS indicators and estimate whether the cost indicators of the safety platform meet the requirements; otherwise, generate an error report.

[0122] If it is SIL4, select (1) to (6) and, for each final solution, determine whether the THR indicator meets the THR indicator requirements of the terminal; if there is a solution that meets the requirements, determine other configurations that meet the RAMS indicators and estimate whether the cost indicators of the safety platform meet the requirements; otherwise, generate an error report.

[0123] According to the final solution, make corresponding configurations, pair and bind each computing channel at the IaaS layer, set corresponding security middleware for related computing channels as needed, complete computing channel data configuration, etc. Initialize the cloud computing security platform. During the initialization process, load the configuration data into each computing channel, call the two-out-of-two middleware and security self-check middleware, and perform a security integrity check on the computing channel configuration data. If the check passes, the entire cloud computing security platform enters a normal working state. If the check fails, the cloud computing security platform shuts down and enters a safe state.

[0124] This embodiment also provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the cloud platform-based secure computing channel dynamic combination method described in any of the above embodiments is implemented.

[0125] The present invention also provides an electronic device, including a processor and a memory, wherein a computer program is stored in the memory, and when the computer program is executed by the processor, the method for dynamically combining secure computing channels based on a cloud platform described in any of the above embodiments is implemented.

[0126] Although the content of the present invention has been described in detail through the above preferred embodiments, it should be appreciated that the above description should not be considered as a limitation of the present invention. After reading the above content, it will be apparent to those skilled in the art that various modifications and substitutions of the present invention will occur. Therefore, the protection scope of the present invention should be limited by the appended claims.

Claims

1. A method for dynamically combining secure computing channels based on a cloud platform, characterized in that: The method is used to generate a cloud computing security platform; the method comprises: Use multiple server clusters to build the IaaS layer; Setting each processor core of each server in each server cluster as a computing channel, and obtaining physical properties of all computing channels; According to the physical properties of all computing channels, a secure cloud channel physical property structure is constructed, which is composed of computing channels, including a set of computing channels with multiple different physical properties; Construct the security middleware of the physical property structure of the secure cloud channel at the PaaS layer according to the needs. Use the security middleware to link the calculation channels of different physical properties in the physical property structure of the secure cloud channel to generate the final solution. Generate a cloud computing security platform based on the final plan.

2. According to claim 1, a cloud platform-based secure computing channel dynamic combination method is characterized in that: Each of the server clusters includes multiple servers, and each server has multiple processor cores.

3. The method for dynamically combining secure computing channels based on a cloud platform according to claim 2, characterized in that: Multiple servers within a single server cluster form a physically independent red and blue redundant network through a 10G fiber optic network; multiple server clusters communicate with each other through the signal system business backbone network.

4. The method for dynamically combining secure computing channels based on a cloud platform according to claim 1, characterized in that: The physical attributes include: category attributes, which represent the type of computing channel; independence attributes, which represent the independent operation performance of the computing channel; and performance indicators, which represent the operation efficiency of the computing channel.

5. The method for dynamically combining secure computing channels based on a cloud platform according to claim 1, characterized in that: The security middleware includes: secure coding container middleware, security self-checking middleware, two-out-of-two middleware and resource isolation service middleware.

6. A method for dynamically combining secure computing channels based on a cloud platform according to claim 5, characterized in that: The security middleware is used to link the computing channels of different types of physical properties in the physical property structure of the secure cloud channel accordingly, including: linking the computing channels of different types of physical properties of the same server, linking the computing channels of different types of physical properties belonging to different servers but the same server cluster, and linking the computing channels of different types of physical properties belonging to different servers and not belonging to the same server cluster.

7. The method for dynamically combining secure computing channels based on a cloud platform according to claim 1, characterized in that: The secure middleware of the secure cloud channel physical property structure is constructed at the PaaS layer according to the requirements, and the calculation channels of different physical properties in the secure cloud channel physical property structure are linked accordingly through the secure middleware to generate a final solution, including: Construct the security middleware of the physical property structure of the secure cloud channel at the PaaS layer according to the needs. Use the security middleware to link the calculation channels of different physical properties in the physical property structure of the secure cloud channel accordingly to generate multiple final solutions. Generate quantitative indicators for all final solutions from three perspectives: THR indicator, RAMS indicator and cost; The optimal final solution is selected based on the quantitative indicators of each final solution and in line with user needs.

8. The method for dynamically combining secure computing channels based on a cloud platform according to claim 1, characterized in that: Generating a cloud computing security platform according to the final solution includes: According to the final solution, perform data configuration for all computing channels, pair and bind each computing channel with the corresponding processor core at the IaaS layer, set the required security middleware for the relevant computing channels at the PaaS layer as needed, and complete the corresponding data configuration for the security middleware; Initialize the initially formed cloud computing security platform, call the security middleware, and perform security compliance checks on the configuration data of each computing channel. After the security compliance check passes, the cloud computing security platform can enter a normal state and run; otherwise, the terminal will shut down and the entire cloud computing security platform will enter a safe state.

9. The method for dynamically combining secure computing channels based on a cloud platform according to claim 1, characterized in that: The generating of the final solution also includes: generating multiple final solutions as backup final solutions; when the terminal pressure is too high during the operation of the cloud computing security platform, the final solution of the server that is used most among the backup final solutions is preferentially selected.

10. The method for dynamically combining secure computing channels based on a cloud platform according to claim 1, characterized in that: After the cloud computing security platform is generated, the following steps are also included: Receive a computing channel reallocation command; The current operation of the cloud computing security platform is suspended pursuant to the order; Detect the number of available computing channels in each server, sort them, select the server with the most available computing channels, and determine the new final solution based on the server; Build a cloud computing security platform based on the new final plan; Complete the security compliance check of the configuration data of each computing channel. If it passes, synchronize the data of the newly generated cloud computing security platform with the previous cloud computing security platform and end the process.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the cloud platform-based secure computing channel dynamic combination method described in any one of claims 1 to 10 is implemented.

12. An electronic device, characterized in that: It comprises a processor and a memory, wherein a computer program is stored in the memory, and when the computer program is executed by the processor, the cloud platform-based secure computing channel dynamic combination method described in any one of claims 1 to 10 is implemented.

Images