A system and method for secure access of a perception terminal

Abstract

The embodiments of the present disclosure relate to the field of train control, and disclose a system and method for secure access of a perception terminal. The system includes: a trackside perception terminal interface, which is used to connect a secure access device to a trackside perception terminal and collect data information from the trackside perception terminal; a train control system ground equipment interface, which is used to connect a secure access device to the train control system ground equipment and collect data information from the train control system ground equipment; a secure access device, which connects to the trackside perception terminal and the train control system ground equipment through the trackside perception terminal interface and the train control system ground equipment interface, respectively, and provides security protection for the trackside perception terminal and the train control system ground equipment, as well as integrates data information from the trackside perception terminal and the train control system ground equipment. The present disclosure solves the problem of information isolation between terminals of a multi-dimensional perception system and between the perception system and the train control system, and provides a possibility for realizing the access of perception data to the train control system.

Description

Technical Field

[0001] The present disclosure relates to the technical field of train operation control, and in particular to a system and method for secure access of a perception terminal for train control. Background Art

[0002] The train control system (TCS) monitors, controls, and adjusts train speeds, braking methods, and other conditions based on the train's route conditions and actual conditions. It serves as the brains behind safe train operation. With the gradual shortening of train tracking intervals and the development of unmanned advanced rail transit, the need for environmental awareness for train operations is becoming increasingly prominent. This is especially true for my country's ultra-large railway network, which features complex geography, topography, and meteorology. These risks are diverse, widespread, and often sudden, leading to the urgent need to incorporate environmental awareness data into train safety protection plans.

[0003] With the continuous development of the internet and sensing technologies, automated and intelligent monitoring methods for train line environments are becoming increasingly diverse. Currently, numerous online monitoring solutions for the train operating environment exist, ranging from infrastructure health monitoring to specific hazard sensing needs such as foreign object intrusion. Each sensing and monitoring system operates independently and lacks interfaces to the train control system. This decouples sensing and control technologies, making it difficult to realize the advantages of sensing-driven autonomous train control technology.

[0004] In summary, the current means of environmental perception and monitoring of train lines are isolated and have single functions. There is a lack of information exchange between monitoring systems, and there are no solutions or channels to access the train control system, which limits the development of multi-dimensional perception fusion and integrated perception and control. Summary of the Invention

[0005] The embodiments of the present disclosure provide a system and method for secure access of a perception terminal to solve or alleviate one or more of the above technical problems in the prior art.

[0006] According to one aspect of the present disclosure, a system for secure access of a perception terminal is provided, comprising:

[0007] Trackside sensing terminal interface, used to connect the safety access device to the trackside sensing terminal and collect data information from the trackside sensing terminal;

[0008] Train control system ground equipment interface, used to connect the safety access device to the train control system ground equipment and collect data information from the train control system ground equipment;

[0009] The safety access device connects to the wayside sensing terminal and the train control system ground equipment through the wayside sensing terminal interface and the train control system ground equipment interface respectively, and provides safety protection for the wayside sensing terminal and the train control system ground equipment, and integrates the data information of the wayside sensing terminal and the train control system ground equipment;

[0010] The control center interface is used to connect the safety access device to the control center and forward the data information processed by the safety access device from the trackside sensing terminal and the ground equipment of the train control system to the control center.

[0011] In a possible implementation, the secure access device includes:

[0012] A network security protection unit is used to identify access devices and screen out access devices; the access devices include trackside sensing terminals and ground equipment of the train control system;

[0013] An identification unit, configured to identify the interface and communication protocol corresponding to the access device according to the access device type;

[0014] The parsing unit is used to parse the message data of the access device according to the interface and communication protocol corresponding to the access device and obtain the parsed data type;

[0015] The interface server is used to classify and store the message data of the access device according to the parsed data type;

[0016] The communication unit is used to classify and forward the message data of the access device to the control center according to the parsed data type.

[0017] In a possible implementation, the secure access device further includes:

[0018] The input and output unit is used to provide a physical interface to the access device, and the physical interface includes an Ethernet port, a serial port, a 4G public network interface, an optical fiber interface and a lightning protection device.

[0019] In one possible implementation, the trackside sensing terminal includes a foreign object intrusion monitoring system, a rail breakage inspection system, and a turnout intelligent diagnosis system.

[0020] In one possible implementation, the ground equipment of the train control system includes central equipment and station equipment. The central equipment includes a temporary speed limit server, a group control center and a centralized dispatching system. The station equipment includes a computer interlocking system and a station data server. The data information of the ground equipment of the train control system includes the status of the ground equipment of the train control system, station yard representation and route plan.

[0021] According to one aspect of the present disclosure, a method for secure access of a perception terminal is provided, comprising:

[0022] Connect the safety access device to the trackside sensing terminal through the trackside sensing terminal interface and collect data information from the trackside sensing terminal;

[0023] Connect the safety access device to the train control system ground equipment through the train control system ground equipment interface and collect data information from the train control system ground equipment;

[0024] The safety access device is connected to the trackside sensing terminal and the train control system ground equipment through the trackside sensing terminal interface and the train control system ground equipment interface respectively, and the safety access device is used to provide safety protection for the trackside sensing terminal and the train control system ground equipment, and to integrate the data information of the trackside sensing terminal and the train control system ground equipment;

[0025] The safety access device is connected to the control center through the control center interface, and the data information of the trackside sensing terminal and the ground equipment of the train control system processed by the safety access device is forwarded to the control center.

[0026] In one possible implementation, the security access device is used to provide security protection for the wayside sensing terminal and the train control system ground equipment, and the data information of the wayside sensing terminal and the train control system ground equipment is integrated, including:

[0027] Identify access devices and select access devices, including trackside sensing terminals and ground equipment of the train control system;

[0028] According to the access device type, identify the corresponding interface and communication protocol of the access device;

[0029] According to the interface and communication protocol corresponding to the access device, parse the message data of the access device and obtain the parsed data type;

[0030] According to the parsed data type, the message data entering the device is classified and stored;

[0031] According to the parsed data type, the message data of the access device is classified and forwarded to the control center.

[0032] In one possible implementation, the security access device is used to provide security protection for the wayside sensing terminal and the train control system ground equipment, and the data information of the wayside sensing terminal and the train control system ground equipment is integrated, including:

[0033] A physical interface is provided to the access device through the input and output unit, and the physical interface includes an Ethernet port, a serial port, a 4G public network interface, a fiber optic interface and a lightning protection device.

[0034] In one possible implementation, the trackside sensing terminal includes a foreign object intrusion monitoring system, a rail breakage inspection system, and a turnout intelligent diagnosis system.

[0035] In one possible implementation, the ground equipment of the train control system includes central equipment and station equipment. The central equipment includes a temporary speed limit server, a group control center and a centralized dispatching system. The station equipment includes a computer interlocking system and a station data server. The data information of the ground equipment of the train control system includes the status of the ground equipment of the train control system, station yard representation and route plan.

[0036] The present disclosure has the following beneficial effects: the present disclosure provides a secure interface and data channel for realizing data interaction between the trackside perception system and the train control system, solves the problem of information isolation between the terminals of the multi-dimensional perception system and between the perception system and the train control system, and provides the possibility for realizing the access of perception data to the train control system; the present disclosure can realize the environmental perception and monitoring data collection along the train operation line, receive and store alarm information of various perception subsystems, report sudden disasters or situations that endanger driving safety, provide auxiliary information to the engineering, electrical and dispatching related departments, and effectively improve the autonomous safety protection capability of the train; the present disclosure can receive and store train control data information provided by signal equipment (including but not limited to CTC, GCC, TSRS, CBI, SDS, etc.), and comprehensively improve the digital level of operation and maintenance of train operation control system equipment.

[0037] The details of one or more embodiments of the present application are set forth in the following drawings and description. Other features and advantages of the present application will become apparent from the accompanying drawings. It should be understood that the above general description and the detailed description that follows are merely exemplary and explanatory and do not limit the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] The accompanying drawings are incorporated into and constitute a part of the specification, illustrate embodiments consistent with the present disclosure, and together with the specification, are used to explain the principles of the present disclosure. Obviously, the drawings described below are only some embodiments of the present disclosure, and those skilled in the art can derive other drawings based on these drawings without inventive effort.

[0039] Figure 1 is a block diagram of a perception terminal secure access system of this exemplary embodiment;

[0040] Figure 2 is a structural block diagram of a secure access device according to this exemplary embodiment;

[0041] Figure 3 is a flow chart of a method for secure access of a perception terminal according to this exemplary embodiment;

[0042] Figure 4 It is a schematic diagram of the main steps of implementing the sensing terminal access to the train control system in this exemplary embodiment. DETAILED DESCRIPTION

[0043] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in a variety of forms and should not be construed as limited to the examples set forth herein; rather, these embodiments are provided so that the present disclosure will be more comprehensive and complete and will fully convey the concepts of the example embodiments to those skilled in the art. The described features, structures, or characteristics may be combined in any suitable manner in one or more embodiments. In the following description, many specific details are provided to provide a full understanding of the embodiments of the present disclosure. However, those skilled in the art will appreciate that the technical solutions of the present disclosure may be practiced while omitting one or more of the specific details, or that other methods, components, devices, steps, etc. may be employed. In other cases, well-known technical solutions are not shown or described in detail to avoid obscuring various aspects of the present disclosure.

[0044] In addition, the accompanying drawings are merely schematic illustrations of the present disclosure and are not necessarily drawn to scale. Identical reference numerals in the figures denote identical or similar parts, and thus repetitive descriptions thereof will be omitted. Some of the block diagrams shown in the accompanying drawings are functional entities that do not necessarily correspond to physically or logically separate entities. These functional entities may be implemented in software, in one or more hardware units or integrated circuits, or in different networks and / or processor devices and / or microcontroller devices.

[0045] The flowcharts shown in the accompanying drawings are merely illustrative and do not necessarily include all steps. For example, some steps may be decomposed, while some steps may be combined or partially combined, so the actual execution order may change according to actual circumstances.

[0046] The terms "first," "second," and the like in the specification and claims of this application and the accompanying drawings are used to distinguish similar objects and are not necessarily used to describe a particular order or precedence. It should be understood that the terms used in this manner are interchangeable where appropriate, such that the embodiments of the application described herein can, for example, be implemented in an order other than that illustrated or described herein.

[0047] In addition, the terms "comprise" and "have" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or apparatus that includes a series of steps or submodules is not necessarily limited to those steps or submodules explicitly listed, but may include other steps or submodules not explicitly listed or inherent to such process, method, product or apparatus.

[0048] Figure 1 This is a block diagram of a perception terminal security access system of this exemplary embodiment. Figure 1As shown, an exemplary embodiment of the present disclosure provides a perception terminal security access system, including:

[0049] The trackside sensing terminal interface 10 is used to connect the security access device to the trackside sensing terminal and collect data information from the trackside sensing terminal;

[0050] Train control system ground equipment interface 20, used to connect the security access device to the train control system ground equipment and collect data information from the train control system ground equipment;

[0051] The safety access device 30 is connected to the wayside sensing terminal and the train control system ground equipment through the wayside sensing terminal interface and the train control system ground equipment interface respectively, and provides safety protection for the wayside sensing terminal and the train control system ground equipment, and integrates data information from the wayside sensing terminal and the train control system ground equipment;

[0052] The control center interface 40 is used to connect the safety access device to the control center and forward the data information of the trackside sensing terminal and the ground equipment of the train control system processed by the safety access device to the control center.

[0053] This embodiment provides a perception terminal security access system for accessing line perception data, alarm information, and train control system signal equipment status information provided by on-site perception monitoring terminals, and provides a data transmission channel for realizing the fusion of train operation environment perception system and signal system data.

[0054] This embodiment provides a secure interface and data channel for realizing data interaction between the train operation environment perception system and the signal system. Figure 1 As shown, it specifically includes the following interfaces:

[0055] Category A: Trackside sensing terminal interface, used to collect sensing monitoring data and alarm data, with the ability to securely access sensing subsystem terminals such as, but not limited to, foreign object intrusion detection, rail breakage monitoring, and intelligent switch diagnosis;

[0056] Class B / C: Train control system ground equipment interface, used to receive data information such as train control signal system equipment status, station indication, route plan, etc., specifically divided into two categories: central equipment and station equipment. Among them, central equipment includes but is not limited to TSRS (Temporary Speed ​​Limit Server), GCC (Group Control Center), CTC (Centralized Dispatching System); station equipment includes but is not limited to CBI (Computerized Interlocking) and SDS (Station Data Server);

[0057] Category D: Central control interface, used to report received information data and issue control commands, to connect the perception center with central equipment such as the data center and CTC, and to realize information interaction between the perception center and central equipment such as the data center and CTC.

[0058] Specifically, the secure access device includes:

[0059] A network security protection unit is used to identify access devices and screen out access devices; the access devices include trackside sensing terminals and ground equipment of the train control system;

[0060] An identification unit, configured to identify the interface and communication protocol corresponding to the access device according to the access device type;

[0061] The parsing unit is used to parse the message data of the access device according to the interface and communication protocol corresponding to the access device and obtain the parsed data type;

[0062] The interface server is used to classify and store the message data of the access device according to the parsed data type;

[0063] The communication unit is used to classify and forward the message data of the access device to the control center according to the parsed data type.

[0064] Since the train control system requires SIL4 safety protection level, in order to ensure that the system safety level is not affected after the introduction of sensor data, Figure 2 As shown, this embodiment provides a secure access device for a sensing terminal for train control, which is used to provide network security protection for connected sensing terminals, data centers, etc. Exemplarily, the secure access device includes:

[0065] The interface server is used to receive data information from storage sensing terminals and train control signal equipment, complete logical calculations, and provide external access services;

[0066] The communication unit is used to process and forward the received data information, provide different data transmission channels for different business data, and complete data integrity and validity verification;

[0067] Network protection units, including but not limited to network security protection devices such as network gatekeepers, VPN gateways, and firewalls, perform identity recognition, message inspection, and data analysis on access devices to achieve secure access to sensing terminal devices;

[0068] Input and output units, including but not limited to Ethernet ports, serial ports, 4G public network interfaces, optical fiber interfaces, and related lightning protection devices, are used to provide a rich and reliable physical interface to the outside world.

[0069] Specifically, the secure access device further includes:

[0070] The input and output unit is used to provide a physical interface to the access device, and the physical interface includes an Ethernet port, a serial port, a 4G public network interface, an optical fiber interface and a lightning protection device.

[0071] Specifically, the trackside sensing terminal includes a foreign object intrusion monitoring system, a rail breakage inspection system and a turnout intelligent diagnosis system.

[0072] Specifically, the ground equipment of the train control system includes central equipment and station equipment. The central equipment includes a temporary speed limit server, a group control center and a dispatching centralized system. The station equipment includes a computer interlocking system and a station data server. The data information of the ground equipment of the train control system includes the status of the ground equipment of the train control system, station yard representation and route plan.

[0073] Figure 3 This is a flow chart of a method for secure access of a perception terminal according to this exemplary embodiment. Figure 3 As shown, an exemplary embodiment of the present disclosure provides a method for secure access of a perception terminal, including:

[0074] Connect the safety access device to the trackside sensing terminal through the trackside sensing terminal interface and collect data information from the trackside sensing terminal;

[0075] Connect the safety access device to the train control system ground equipment through the train control system ground equipment interface and collect data information from the train control system ground equipment;

[0076] The safety access device is connected to the trackside sensing terminal and the train control system ground equipment through the trackside sensing terminal interface and the train control system ground equipment interface respectively, and the safety access device is used to provide safety protection for the trackside sensing terminal and the train control system ground equipment, and to integrate the data information of the trackside sensing terminal and the train control system ground equipment;

[0077] The safety access device is connected to the control center through the control center interface, and the data information of the trackside sensing terminal and the ground equipment of the train control system processed by the safety access device is forwarded to the control center.

[0078] Specifically, the security access device is used to provide security protection for the wayside sensing terminal and the ground equipment of the train control system, and the data information of the wayside sensing terminal and the ground equipment of the train control system are integrated, including:

[0079] Identify access devices and select access devices, including trackside sensing terminals and ground equipment of the train control system;

[0080] According to the access device type, identify the corresponding interface and communication protocol of the access device;

[0081] According to the interface and communication protocol corresponding to the access device, parse the message data of the access device and obtain the parsed data type;

[0082] According to the parsed data type, the message data entering the device is classified and stored;

[0083] According to the parsed data type, the message data of the access device is classified and forwarded to the control center.

[0084] Specifically, the security access device provides security protection for the wayside sensing terminal and the ground equipment of the train control system, and integrates the data information of the wayside sensing terminal and the ground equipment of the train control system, including:

[0085] A physical interface is provided to the access device through the input and output unit, and the physical interface includes an Ethernet port, a serial port, a 4G public network interface, a fiber optic interface and a lightning protection device.

[0086] Specifically, the trackside sensing terminal includes a foreign object intrusion monitoring system, a rail breakage inspection system and a turnout intelligent diagnosis system.

[0087] Specifically, the ground equipment of the train control system includes central equipment and station equipment. The central equipment includes a temporary speed limit server, a group control center and a dispatching centralized system. The station equipment includes a computer interlocking system and a station data server. The data information of the ground equipment of the train control system includes the status of the ground equipment of the train control system, station yard representation and route plan.

[0088] like Figure 4 As shown, this embodiment provides a method for secure access of a perception terminal to a train control system. The main steps for implementing the perception terminal access to the train control system are as follows:

[0089] Step S1: Identify the access device and filter the access device based on IP, port, etc.

[0090] In order to effectively control and reduce network attacks and security threats and protect the security and integrity of network resources, it is necessary to review and verify the network identity of access devices to ensure that only devices that comply with network security policies and regulations can obtain access rights.

[0091] Step S2: Identify and determine the interface and communication protocol based on the access device type.

[0092] The trackside sensing system terminals and train control system ground equipment are complex, and each device must meet corresponding interface and communication protocols to achieve normal data communication. The matching interface and communication protocol must be determined based on the access device type. Specifically, GCC uses Ethernet ports for communication, TSRS uses 422 serial ports, station CBI and SDS remote communications are achieved using fiber optic links, and trackside sensing terminal communications for foreign object intrusion and broken rail inspections use 4G public network transmission. Therefore, it is necessary to identify and determine the corresponding interface specifications and communication protocols for different access devices.

[0093] Step S3: parse the received message data according to the corresponding interface and communication protocol.

[0094] Different sensing terminals and train control signaling equipment can provide different data formats and information. The collected data needs to be parsed according to the agreed protocol specifications and stored and forwarded according to different data types. For example, trackside sensing terminal data includes various sensing monitoring data and alarm information; CTC interface data includes host station information, group plans, train plans, and other data information; TSRS interface data includes temporary speed limit server hardware equipment operating status information, alarm information, temporary speed limit status, speed limit error receipts, internal communication interface status, and other data; GCC interface data includes lock information, signal information, turnout information, route information, train information, communication status information, group plan information, operation plan information, temporary speed limit information, equipment operating status information, and alarm information. All these data types need to be organized and integrated.

[0095] Step S4: Store or forward the parsed data to the data center / CTC according to the data type.

[0096] According to the parsed data type, it is stored separately or forwarded to the data center / CTC to achieve the fusion and interaction of multi-dimensional perception data and signal system equipment data.

[0097] The above are merely preferred embodiments of the present disclosure. The scope of protection of the present disclosure is not limited to the above embodiments. All technical solutions based on the principles of the present disclosure are within the scope of protection of the present disclosure. It should be noted that for those skilled in the art, various improvements and modifications that do not depart from the principles of the present disclosure should be considered within the scope of protection of the present disclosure.

Claims

1. A perception terminal security access system, characterized in that: include: Trackside sensing terminal interface, used to connect the safety access device to the trackside sensing terminal and collect data information from the trackside sensing terminal; Train control system ground equipment interface, used to connect the safety access device to the train control system ground equipment and collect data information from the train control system ground equipment; The safety access device connects to the wayside sensing terminal and the train control system ground equipment through the wayside sensing terminal interface and the train control system ground equipment interface respectively, and provides safety protection for the wayside sensing terminal and the train control system ground equipment, and integrates the data information of the wayside sensing terminal and the train control system ground equipment; The control center interface is used to connect the safety access device to the control center and forward the data information processed by the safety access device from the trackside sensing terminal and the ground equipment of the train control system to the control center; The secure access device comprises: A network security protection unit is used to identify access devices and screen out access devices; the access devices include trackside sensing terminals and ground equipment of the train control system; An identification unit, configured to identify the interface and communication protocol corresponding to the access device according to the access device type; The parsing unit is used to parse the message data of the access device according to the interface and communication protocol corresponding to the access device and obtain the parsed data type; The interface server is used to classify and store the message data of the access device according to the parsed data type; The communication unit is used to classify and forward the message data of the access device to the control center according to the parsed data type.

2. The perception terminal secure access system according to claim 1, characterized in that: The secure access device further comprises: The input and output unit is used to provide a physical interface to the access device, and the physical interface includes an Ethernet port, a serial port, a 4G public network interface, an optical fiber interface and a lightning protection device.

3. The perception terminal secure access system according to claim 1, characterized in that: The trackside sensing terminal includes a foreign object intrusion monitoring system, a rail breakage inspection system and a turnout intelligent diagnosis system.

4. The perception terminal secure access system according to claim 1, characterized in that: The ground equipment of the train control system includes central equipment and station equipment. The central equipment includes a temporary speed limit server, a group control center and a dispatching centralized system. The station equipment includes a computer interlocking system and a station data server. The data information of the ground equipment of the train control system includes the status of the ground equipment of the train control system, station yard representation and route plan.

5. A method for secure access of a perception terminal, characterized in that: include: Connect the safety access device to the trackside sensing terminal through the trackside sensing terminal interface and collect data information from the trackside sensing terminal; Connect the safety access device to the train control system ground equipment through the train control system ground equipment interface and collect data information of the train control system ground equipment; The safety access device is connected to the trackside sensing terminal and the train control system ground equipment through the trackside sensing terminal interface and the train control system ground equipment interface respectively, and the safety access device is used to provide safety protection for the trackside sensing terminal and the train control system ground equipment, and to integrate the data information of the trackside sensing terminal and the train control system ground equipment; Connect the safety access device to the control center through the control center interface, and forward the data information processed by the safety access device from the trackside sensing terminal and the ground equipment of the train control system to the control center; The security access device provides security protection for the wayside sensing terminal and the ground equipment of the train control system, and integrates the data information of the wayside sensing terminal and the ground equipment of the train control system, including: Identify access devices and select access devices, including trackside sensing terminals and ground equipment of the train control system; According to the access device type, identify the corresponding interface and communication protocol of the access device; According to the interface and communication protocol corresponding to the access device, parse the message data of the access device and obtain the parsed data type; According to the parsed data type, the message data entering the device is classified and stored; According to the parsed data type, the message data of the access device is classified and forwarded to the control center.

6. The method for secure access of a perception terminal according to claim 5, wherein: The security access device provides security protection for the wayside sensing terminal and the ground equipment of the train control system, and integrates the data information of the wayside sensing terminal and the ground equipment of the train control system, including: A physical interface is provided to the access device through the input and output unit, and the physical interface includes an Ethernet port, a serial port, a 4G public network interface, a fiber optic interface and a lightning protection device.

7. The method for secure access of a perception terminal according to claim 5, wherein: The trackside sensing terminal includes a foreign object intrusion monitoring system, a rail breakage inspection system and a turnout intelligent diagnosis system.

8. The method for secure access of a perception terminal according to claim 5, wherein: The ground equipment of the train control system includes central equipment and station equipment. The central equipment includes a temporary speed limit server, a group control center and a dispatching centralized system. The station equipment includes a computer interlocking system and a station data server. The data information of the ground equipment of the train control system includes the status of the ground equipment of the train control system, station yard representation and route plan.

Images