Sensing terminal security access system and method

Abstract

The embodiment of the invention relates to the field of train control, and discloses a sensing terminal safety access system and method, and the system comprises a trackside sensing terminal interface which is used for enabling a safety access device to access a trackside sensing terminal, and collecting the data information of the trackside sensing terminal; the train control system ground equipment interface is used for accessing the safety access device to train control system ground equipment and collecting data information of the train control system ground equipment; and the safety access device is respectively accessed to the trackside sensing terminal and the train control system ground equipment through the trackside sensing terminal interface and the train control system ground equipment interface, carries out safety protection on the trackside sensing terminal and the train control system ground equipment, and fuses data information of the trackside sensing terminal and the train control system ground equipment. The problem of information isolation between the multi-dimensional sensing system terminals and between the sensing system and the train control system is solved, and possibility is provided for realizing access of sensing data to the train control system.

Description

Technical Field

[0001] The present disclosure relates to the technical field of train operation control, and in particular to a perception terminal security access system and method for train control. Background Art

[0002] The train control system is a control system that monitors, controls and adjusts the train speed and braking mode according to the train running line conditions and actual conditions. It is the brain to ensure the safe operation of the train. With the gradual shortening of train tracking intervals and the development of unmanned advanced rail transit, the demand for train running environment perception is becoming increasingly prominent, especially in my country's ultra-large-scale railway network with complex geography, terrain, and meteorology. The risks of train running safety are diverse, wide-ranging, and sudden. It is urgent to incorporate the train running line environment perception data information into the train safety protection plan.

[0003] With the continuous development of the Internet and perception technology, the means of automated and intelligent monitoring of the train running line environment are constantly enriched. At present, there are many online monitoring solutions for the train running environment, some focusing on infrastructure health status monitoring, and some focusing on special hazard perception needs such as foreign object intrusion. Each perception monitoring system operates independently and lacks an interface to access the train running control system, resulting in the separation of perception technology and control technology, making it difficult to achieve the advantages of train autonomous operation control technology driven by perception factors.

[0004] In summary, the current means of environmental perception and monitoring of train lines are isolated from each other and have single functions. There is a lack of information exchange between the monitoring systems, and there are no solutions and channels to access the train control system, which limits the development of multi-dimensional perception fusion and integrated perception and control. Summary of the invention

[0005] The embodiments of the present disclosure provide a system and method for secure access of a perception terminal to solve or alleviate one or more of the above technical problems in the prior art.

[0006] According to one aspect of the present disclosure, a system for secure access of a perception terminal is provided, including:

[0007] Trackside sensing terminal interface, used to connect the safety access device to the trackside sensing terminal and collect data information from the trackside sensing terminal;

[0008] Train control system ground equipment interface, used to connect the safety access device to the train control system ground equipment and collect data information of the train control system ground equipment;

[0009] The safety access device is connected to the trackside sensing terminal and the train control system ground equipment through the trackside sensing terminal interface and the train control system ground equipment interface respectively, and provides safety protection for the trackside sensing terminal and the train control system ground equipment, and integrates the data information of the trackside sensing terminal and the train control system ground equipment;

[0010] The control center interface is used to connect the safety access device to the control center and forward the data information of the trackside sensing terminal and the ground equipment of the train control system processed by the safety access device to the control center.

[0011] In a possible implementation, the secure access device includes:

[0012] A network security protection unit, used to identify access devices and screen out access devices; the access devices include trackside sensing terminals and ground equipment of train control systems;

[0013] An identification unit, used to identify the interface and communication protocol corresponding to the access device according to the access device type;

[0014] The parsing unit is used to parse the message data of the access device according to the interface and communication protocol corresponding to the access device, and obtain the parsed data type;

[0015] The interface server is used to classify and store the message data of the access device according to the parsed data type;

[0016] The communication unit is used to classify and forward the message data of the access device to the control center according to the parsed data type.

[0017] In a possible implementation, the secure access device further includes:

[0018] The input and output unit is used to provide a physical interface to the access device, and the physical interface includes an Ethernet port, a serial port, a 4G public network interface, an optical fiber interface and a lightning protection device.

[0019] In a possible implementation, the trackside sensing terminal includes a foreign object intrusion monitoring system, a rail breakage inspection system, and a turnout intelligent diagnosis system.

[0020] In a possible implementation, the ground equipment of the train control system includes central equipment and station equipment. The central equipment includes a temporary speed limit server, a group control center and a centralized dispatching system. The station equipment includes a computer interlocking system and a station data server. The data information of the ground equipment of the train control system includes the status of the ground equipment of the train control system, station yard representation and route plan.

[0021] According to one aspect of the present disclosure, a method for secure access of a perception terminal is provided, including:

[0022] Connect the safety access device to the trackside sensing terminal through the trackside sensing terminal interface and collect data information from the trackside sensing terminal;

[0023] Connect the safety access device to the train control system ground equipment through the train control system ground equipment interface, and collect data information of the train control system ground equipment;

[0024] The safety access device is connected to the trackside sensing terminal and the train control system ground equipment through the trackside sensing terminal interface and the train control system ground equipment interface respectively, and the trackside sensing terminal and the train control system ground equipment are protected by the safety access device, and the data information of the trackside sensing terminal and the train control system ground equipment are integrated;

[0025] The safety access device is connected to the control center through the control center interface, and the data information of the trackside sensing terminal and the ground equipment of the train control system processed by the safety access device is forwarded to the control center.

[0026] In a possible implementation, the trackside sensing terminal and the ground equipment of the train control system are protected by the security access device, and the data information of the trackside sensing terminal and the ground equipment of the train control system are integrated, including:

[0027] Identify the access devices and select the access devices, including the trackside sensing terminals and the ground equipment of the train control system;

[0028] According to the access device type, identify the interface and communication protocol corresponding to the access device;

[0029] According to the interface and communication protocol corresponding to the access device, parse the message data of the access device and obtain the parsed data type;

[0030] According to the parsed data type, the message data entering the device is classified and stored;

[0031] According to the parsed data type, the message data of the access device is classified and forwarded to the control center.

[0032] In a possible implementation, the trackside sensing terminal and the ground equipment of the train control system are protected by the security access device, and the data information of the trackside sensing terminal and the ground equipment of the train control system are integrated, including:

[0033] A physical interface is provided to the access device through an input and output unit, and the physical interface includes an Ethernet port, a serial port, a 4G public network interface, a fiber optic interface and a lightning protection device.

[0034] In a possible implementation, the trackside sensing terminal includes a foreign object intrusion monitoring system, a rail breakage inspection system, and a turnout intelligent diagnosis system.

[0035] In a possible implementation, the ground equipment of the train control system includes central equipment and station equipment. The central equipment includes a temporary speed limit server, a group control center and a centralized dispatching system. The station equipment includes a computer interlocking system and a station data server. The data information of the ground equipment of the train control system includes the status of the ground equipment of the train control system, station yard representation and route plan.

[0036] The present disclosure has the following beneficial effects: the present disclosure provides a secure interface and data channel for realizing data interaction between the trackside perception system and the train control system, solves the problem of information isolation between the terminals of the multi-dimensional perception system and between the perception system and the train control system, and provides the possibility for realizing the access of perception data to the train control system; the present disclosure can realize the environmental perception and monitoring data collection along the train operation line, receive and store alarm information of various perception subsystems, report sudden disasters or situations that endanger driving safety, provide auxiliary information for engineering, electrical and dispatching related departments, and effectively improve the autonomous safety protection capability of the train; the present disclosure can receive and store train control data information provided by signal equipment (including but not limited to CTC, GCC, TSRS, CBI, SDS, etc.), and comprehensively improve the digital level of operation and maintenance of train operation control system equipment.

[0037] The details of one or more embodiments of the present application are presented in the following drawings and descriptions. Other features and advantages of the present application will become apparent from the accompanying drawings. It should be understood that the above general description and the detailed descriptions below are only exemplary and explanatory and cannot limit the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] The accompanying drawings herein are incorporated into the specification and constitute a part of the specification, illustrate embodiments consistent with the present disclosure, and together with the specification are used to explain the principles of the present disclosure. Obviously, the accompanying drawings described below are only some embodiments of the present disclosure, and for ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without creative work.

[0039] Figure 1 is a block diagram of a perception terminal security access system of the present exemplary embodiment;

[0040] Figure 2 is a structural block diagram of a secure access device of this exemplary embodiment;

[0041] Figure 3 is a flow chart of a method for sensing terminal security access of this exemplary embodiment;

[0042] Figure 4 It is a schematic diagram of the main steps of implementing the sensing terminal access to the train control system according to this exemplary embodiment. DETAILED DESCRIPTION

[0043] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in a variety of forms and should not be construed as being limited to the examples set forth herein; on the contrary, these embodiments are provided so that the present disclosure will be more comprehensive and complete, and the concepts of the example embodiments are fully conveyed to those skilled in the art. The described features, structures, or characteristics may be combined in one or more embodiments in any suitable manner. In the following description, many specific details are provided to provide a full understanding of the embodiments of the present disclosure. However, those skilled in the art will appreciate that the technical solutions of the present disclosure may be practiced while omitting one or more of the specific details, or other methods, components, devices, steps, etc. may be adopted. In other cases, known technical solutions are not shown or described in detail to avoid obscuring various aspects of the present disclosure.

[0044] In addition, the accompanying drawings are only schematic illustrations of the present disclosure and are not necessarily drawn to scale. The same reference numerals in the figures represent the same or similar parts, and thus their repeated description will be omitted. Some of the block diagrams shown in the accompanying drawings are functional entities and do not necessarily correspond to physically or logically independent entities. These functional entities can be implemented in software form, or implemented in one or more hardware units or integrated circuits, or implemented in different networks and / or processor devices and / or microcontroller devices.

[0045] The flowcharts shown in the accompanying drawings are only exemplary and do not necessarily include all the steps. For example, some steps may be decomposed, while some steps may be combined or partially combined, so the actual execution order may change according to the actual situation.

[0046] The terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the terms used in this way can be interchanged where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein, for example.

[0047] In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or apparatus comprising a series of steps or sub-modules is not necessarily limited to those steps or sub-modules explicitly listed, but may include other steps or sub-modules not explicitly listed or inherent to these processes, methods, products, or apparatuses.

[0048] Figure 1 is a block diagram of a perception terminal security access system of this exemplary embodiment. Figure 1As shown, an exemplary embodiment of the present disclosure provides a perception terminal security access system, including:

[0049] The trackside sensing terminal interface 10 is used to connect the safety access device to the trackside sensing terminal and collect data information of the trackside sensing terminal;

[0050] The train control system ground equipment interface 20 is used to connect the safety access device to the train control system ground equipment and collect data information of the train control system ground equipment;

[0051] The safety access device 30 is connected to the trackside sensing terminal and the train control system ground equipment through the trackside sensing terminal interface and the train control system ground equipment interface respectively, and performs safety protection on the trackside sensing terminal and the train control system ground equipment, and integrates data information of the trackside sensing terminal and the train control system ground equipment;

[0052] The control center interface 40 is used to connect the safety access device to the control center and forward the data information of the trackside sensing terminal and the ground equipment of the train control system processed by the safety access device to the control center.

[0053] A perception terminal security access system provided in this embodiment is used to access line perception data, alarm information, and train control system signal equipment status information provided by an on-site perception monitoring terminal, and provide a data transmission channel for realizing the data fusion between the train operation environment perception system and the signal system.

[0054] This embodiment provides a secure interface and data channel for realizing data interaction between the train running environment perception system and the signal system. Figure 1 As shown, it specifically includes the following interfaces:

[0055] Category A: Trackside sensing terminal interface, used to collect sensing monitoring data and alarm data, with but not limited to the ability to securely access sensing subsystem terminals such as foreign object intrusion, rail breakage monitoring, and intelligent turnout diagnosis;

[0056] Class B / C: Train control system ground equipment interface, used to receive data information such as train control signal system equipment status, station yard indication, route plan, etc., specifically divided into two categories: central equipment and station equipment. Among them, central equipment includes but is not limited to TSRS (temporary speed limit server), GCC (group control center), CTC (dispatching centralized system); station equipment includes but is not limited to CBI (computer interlocking), SDS (station data server);

[0057] Category D: Central control interface, used to report received information data and issue control commands, to connect the perception center with central equipment such as the data center and CTC, and to realize information interaction between the perception center and central equipment such as the data center and CTC.

[0058] Specifically, the secure access device includes:

[0059] A network security protection unit, used to identify access devices and screen out access devices; the access devices include trackside sensing terminals and ground equipment of train control systems;

[0060] An identification unit, used to identify the interface and communication protocol corresponding to the access device according to the access device type;

[0061] The parsing unit is used to parse the message data of the access device according to the interface and communication protocol corresponding to the access device, and obtain the parsed data type;

[0062] The interface server is used to classify and store the message data of the access device according to the parsed data type;

[0063] The communication unit is used to classify and forward the message data of the access device to the control center according to the parsed data type.

[0064] Since the train control system requires SIL4 safety protection level, in order to ensure that the system safety level is not affected after the introduction of sensor data, Figure 2 As shown, this embodiment provides a sensing terminal security access device for train control, which can perform network security protection on the connected sensing terminal, data center, etc. Exemplarily, the security access device includes:

[0065] The interface server is used to receive data information from storage sensing terminals and train control signal equipment, complete logical calculations, and provide external access services;

[0066] The communication unit is used to process and forward the received data information, provide different data transmission channels for different business data, and complete data integrity and validity verification;

[0067] Network protection units, including but not limited to network security protection devices such as network gatekeepers, VPN gateways, and firewalls, complete the identity recognition, message inspection, and data analysis of access devices to achieve secure access of sensing terminal devices;

[0068] Input and output units, including but not limited to Ethernet ports, serial ports, 4G public network interfaces, optical fiber interfaces, and related lightning protection devices, are used to provide rich and reliable physical interfaces to the outside world.

[0069] Specifically, the secure access device further includes:

[0070] The input and output unit is used to provide a physical interface to the access device, and the physical interface includes an Ethernet port, a serial port, a 4G public network interface, an optical fiber interface and a lightning protection device.

[0071] Specifically, the trackside sensing terminal includes a foreign object intrusion monitoring system, a rail breakage inspection system and a turnout intelligent diagnosis system.

[0072] Specifically, the ground equipment of the train control system includes central equipment and station equipment. The central equipment includes a temporary speed limit server, a group control center and a centralized dispatching system. The station equipment includes a computer interlocking system and a station data server. The data information of the ground equipment of the train control system includes the status of the ground equipment of the train control system, station yard representation and route plan.

[0073] Figure 3 is a flow chart of a method for sensing terminal security access in this exemplary embodiment. Figure 3 As shown, an exemplary embodiment of the present disclosure provides a method for sensing terminal security access, including:

[0074] Connect the safety access device to the trackside sensing terminal through the trackside sensing terminal interface and collect data information from the trackside sensing terminal;

[0075] Connect the safety access device to the train control system ground equipment through the train control system ground equipment interface, and collect data information of the train control system ground equipment;

[0076] The safety access device is connected to the trackside sensing terminal and the train control system ground equipment through the trackside sensing terminal interface and the train control system ground equipment interface respectively, and the trackside sensing terminal and the train control system ground equipment are protected by the safety access device, and the data information of the trackside sensing terminal and the train control system ground equipment are integrated;

[0077] The safety access device is connected to the control center through the control center interface, and the data information of the trackside sensing terminal and the ground equipment of the train control system processed by the safety access device is forwarded to the control center.

[0078] Specifically, the trackside sensing terminal and the ground equipment of the train control system are protected by the security access device, and the data information of the trackside sensing terminal and the ground equipment of the train control system are integrated, including:

[0079] Identify the access devices and select the access devices, including the trackside sensing terminals and the ground equipment of the train control system;

[0080] According to the access device type, identify the interface and communication protocol corresponding to the access device;

[0081] According to the interface and communication protocol corresponding to the access device, parse the message data of the access device and obtain the parsed data type;

[0082] According to the parsed data type, the message data entering the device is classified and stored;

[0083] According to the parsed data type, the message data of the access device is classified and forwarded to the control center.

[0084] Specifically, the trackside sensing terminal and the ground equipment of the train control system are protected by the security access device, and the data information of the trackside sensing terminal and the ground equipment of the train control system are integrated, including:

[0085] A physical interface is provided to the access device through an input and output unit, and the physical interface includes an Ethernet port, a serial port, a 4G public network interface, a fiber optic interface and a lightning protection device.

[0086] Specifically, the trackside sensing terminal includes a foreign object intrusion monitoring system, a rail breakage inspection system and a turnout intelligent diagnosis system.

[0087] Specifically, the ground equipment of the train control system includes central equipment and station equipment. The central equipment includes a temporary speed limit server, a group control center and a centralized dispatching system. The station equipment includes a computer interlocking system and a station data server. The data information of the ground equipment of the train control system includes the status of the ground equipment of the train control system, station yard representation and route plan.

[0088] like Figure 4 As shown, this embodiment provides a method for secure access of a perception terminal to a train control system. The main steps for implementing the access of the perception terminal to the train control system are as follows:

[0089] Step S1: Identify the access device and filter the access device based on IP, port, etc.

[0090] In order to effectively control and reduce network attacks and security threats and protect the security and integrity of network resources, it is necessary to review and verify the network identity of access devices to ensure that only devices that comply with network security policies and regulations can obtain access rights.

[0091] Step S2: Identify and determine the interface and communication protocol according to the access device type.

[0092] The trackside sensing system terminals and ground equipment of the train control system are complicated. Each device must meet the corresponding interface and communication protocol to achieve normal data communication. It is necessary to determine the matching interface and communication protocol according to the type of access equipment. Among them, GCC uses Ethernet port for communication, TSRS uses 422 serial port, station CBI and SDS remote communication are realized by optical fiber link, and trackside sensing terminal communication such as foreign object intrusion limit and broken rail inspection uses 4G public network transmission. It is necessary to identify and determine the corresponding interface specifications and communication protocols for different access devices.

[0093] Step S3: parse the received message data according to the corresponding interface and communication protocol.

[0094] Different sensing terminals and train control signal equipment can provide different data formats and information. The collected data needs to be parsed according to the agreed protocol specifications, and stored and forwarded according to different data types. For example, the trackside sensing terminal data includes various sensing monitoring data, alarm information, etc.; CTC interface data includes host station representation information, group plan, train plan and other data information; TSRS interface data includes temporary speed limit server hardware equipment working status information, alarm information, temporary speed limit status, speed limit error receipt, internal communication interface status and other data; GCC interface data includes lock information, signal information, turnout information, route information, train information, communication status information, group plan information, operation plan information, temporary speed limit information, equipment working status information, alarm information; all kinds of data information need to be sorted out and integrated.

[0095] Step S4: Store or forward to the data center / CTC according to the parsed data types.

[0096] According to the parsed data type, they are stored separately or forwarded to the data center / CTC to achieve the fusion and interaction of multi-dimensional perception data and signal system equipment data.

[0097] The above are only preferred implementations of the present disclosure, and the protection scope of the present disclosure is not limited to the above embodiments. All technical solutions under the concept of the present disclosure belong to the protection scope of the present disclosure. It should be pointed out that for ordinary technicians in this technical field, some improvements and modifications without departing from the principle of the present disclosure should be regarded as the protection scope of the present disclosure.

Claims

1. A perception terminal security access system, characterized in that: include: Trackside sensing terminal interface, used to connect the safety access device to the trackside sensing terminal and collect data information from the trackside sensing terminal; Train control system ground equipment interface, used to connect the safety access device to the train control system ground equipment and collect data information of the train control system ground equipment; The safety access device is connected to the trackside sensing terminal and the train control system ground equipment through the trackside sensing terminal interface and the train control system ground equipment interface respectively, and provides safety protection for the trackside sensing terminal and the train control system ground equipment, and integrates the data information of the trackside sensing terminal and the train control system ground equipment; The control center interface is used to connect the safety access device to the control center and forward the data information of the trackside sensing terminal and the ground equipment of the train control system processed by the safety access device to the control center.

2. The sensing terminal secure access system according to claim 1, characterized in that: The secure access device comprises: A network security protection unit, used to identify access devices and screen out access devices; the access devices include trackside sensing terminals and ground equipment of train control systems; An identification unit, used to identify the interface and communication protocol corresponding to the access device according to the access device type; The parsing unit is used to parse the message data of the access device according to the interface and communication protocol corresponding to the access device, and obtain the parsed data type; The interface server is used to classify and store the message data of the access device according to the parsed data type; The communication unit is used to classify and forward the message data of the access device to the control center according to the parsed data type.

3. The sensing terminal secure access system according to claim 1, characterized in that: The secure access device further comprises: The input and output unit is used to provide a physical interface to the access device, and the physical interface includes an Ethernet port, a serial port, a 4G public network interface, an optical fiber interface and a lightning protection device.

4. The sensing terminal secure access system according to claim 1, characterized in that: The trackside sensing terminal includes a foreign object intrusion monitoring system, a rail breakage inspection system and a turnout intelligent diagnosis system.

5. The sensing terminal secure access system according to claim 1, characterized in that: The ground equipment of the train control system includes central equipment and station equipment. The central equipment includes a temporary speed limit server, a group control center and a dispatching centralized system. The station equipment includes a computer interlocking system and a station data server. The data information of the ground equipment of the train control system includes the status of the ground equipment of the train control system, station yard representation and route plan.

6. A method for secure access of a perception terminal, characterized in that: include: Connect the safety access device to the trackside sensing terminal through the trackside sensing terminal interface and collect data information from the trackside sensing terminal; Connect the safety access device to the train control system ground equipment through the train control system ground equipment interface, and collect data information of the train control system ground equipment; The safety access device is connected to the trackside sensing terminal and the train control system ground equipment through the trackside sensing terminal interface and the train control system ground equipment interface respectively, and the trackside sensing terminal and the train control system ground equipment are protected by the safety access device, and the data information of the trackside sensing terminal and the train control system ground equipment are integrated; The safety access device is connected to the control center through the control center interface, and the data information of the trackside sensing terminal and the ground equipment of the train control system processed by the safety access device is forwarded to the control center.

7. The method for secure access of a perception terminal according to claim 6, characterized in that: The security access device is used to provide security protection for the trackside sensing terminal and the ground equipment of the train control system, and integrates the data information of the trackside sensing terminal and the ground equipment of the train control system, including: Identify the access devices and select the access devices, including the trackside sensing terminals and the ground equipment of the train control system; According to the access device type, identify the interface and communication protocol corresponding to the access device; According to the interface and communication protocol corresponding to the access device, parse the message data of the access device and obtain the parsed data type; According to the parsed data type, the message data entering the device is classified and stored; According to the parsed data type, the message data of the access device is classified and forwarded to the control center.

8. The method for secure access of a perception terminal according to claim 6, characterized in that: The security access device is used to provide security protection for the trackside sensing terminal and the ground equipment of the train control system, and integrates the data information of the trackside sensing terminal and the ground equipment of the train control system, including: A physical interface is provided to the access device through an input and output unit, and the physical interface includes an Ethernet port, a serial port, a 4G public network interface, a fiber optic interface and a lightning protection device.

9. The method for secure access of a perception terminal according to claim 6, characterized in that: The trackside sensing terminal includes a foreign object intrusion monitoring system, a rail breakage inspection system and a turnout intelligent diagnosis system.

10. The method for secure access of a perception terminal according to claim 6, characterized in that: The ground equipment of the train control system includes central equipment and station equipment. The central equipment includes a temporary speed limit server, a group control center and a dispatching centralized system. The station equipment includes a computer interlocking system and a station data server. The data information of the ground equipment of the train control system includes the status of the ground equipment of the train control system, station yard representation and route plan.

Images