Hybrid secure computing cloud platform fusing virtual and entity resources

Abstract

The invention relates to the technical field of rail transit, and particularly discloses a hybrid security computing cloud platform fusing virtual and entity resources, which comprises a security computing resource pool and a security component, and is characterized in that the security computing resource pool comprises a plurality of logic computing units, and the logic computing units are used for processing security logic processing tasks; the logic calculation unit comprises virtual resources and entity resources; the security component comprises a clock signal manager, a security voter, a message distributor, a security gateway and a resource manager. By adopting the hybrid security computing cloud platform in the embodiment of the invention, the requirements of system deployment and operation and maintenance on manpower can be reduced, and centralized deployment and centralized operation and maintenance of station-level applications can be realized; mixed use of virtual resources and entity resources is supported, and the flexibility of computing resources is improved; and meanwhile, the computing resources can be added according to actual requirements, so that the expandability of the platform is improved.

Description

Technical Field

[0001] The present invention relates to the field of rail transit technology, and in particular to a hybrid secure computing cloud platform integrating virtual and physical resources. Background Art

[0002] The safety computing platform is a key technical component designed for functional safety systems. It plays a core role in ensuring railway transportation safety. It is mainly responsible for processing and executing signal control and protection functions that directly affect the safety of train operation. However, the existing railway signal safety computing platform has the following problems: (1) High operation and maintenance costs. The platform adopts a three-out-of-two or two-by-two-out-of-two architecture, which basically corresponds to one hardware system for one station application. The system is scattered in stations along the line and maintenance is decentralized. It has high requirements for the operation and maintenance personnel of each station along the line, which will consume a lot of operation and maintenance costs; (2) Poor scalability and flexibility. The traditional three-out-of-two or two-by-two-out-of-two architecture is bound to a specific hardware platform and is difficult to be compatible with different models or types of computing resources. Summary of the invention

[0003] The present invention provides a hybrid secure computing cloud platform that integrates virtual and physical resources, which can reduce the manpower requirements for system deployment and operation and maintenance, and realize centralized deployment and centralized operation and maintenance of station-level applications; it supports the mixed use of virtual resources and physical resources, and improves the flexibility of computing resources; at the same time, computing resources can be added according to actual needs, which improves the scalability of the platform.

[0004] The present invention provides a hybrid secure computing cloud platform integrating virtual and physical resources, the hybrid secure computing cloud platform comprising a secure computing resource pool and a security component, the secure computing resource pool comprising a plurality of logical computing units, the logical computing units being used to process secure logic processing tasks, the logical computing units comprising virtual resources and physical resources;

[0005] The safety components include a clock signal manager, a safety voter, a message distributor, a safety gateway and a resource manager; wherein the clock signal manager is used to manage the clock synchronization between the logic computing units; the safety voter is used to vote on the calculation results output by the logic computing units; the message distributor is used for message transmission between the logic computing units, between the safety components and between the logic computing units and the safety components; the safety gateway is used for message transmission between the logic computing units and the trackside signal equipment; the resource manager is used for the allocation of safety logic processing tasks and the status monitoring of the logic computing units and the safety components, and for handling faulty equipment.

[0006] In some embodiments, the logic computing unit is configured to:

[0007] Receive and execute security logic processing tasks issued by the resource manager;

[0008] In the process of executing the security logic processing task, the state information of the resource manager is fed back according to the preset state feedback cycle; wherein the state information at least includes the task progress and resource usage.

[0009] In some embodiments, the logic computing unit is further configured to:

[0010] Receive target input data sent by other logical computing units through the message distributor, or send the target intermediate results calculated by itself to other logical computing units through the message distributor.

[0011] In some embodiments, the clock signal manager is configured to:

[0012] According to the preset clock synchronization cycle, the clock synchronization message is sent to each logical computing unit through the message distributor;

[0013] The task processing time of each logical computing unit is obtained, and when the task processing time exceeds a preset clock cycle, the corresponding logical computing unit where the clock timeout occurs is notified to discard the clock timeout data.

[0014] In some embodiments, the safety voter is configured to:

[0015] Receiving calculation results for the same security logic processing task sent by multiple logic computing units through a message distributor;

[0016] Vote on each calculation result according to the preset safety redundancy structure and output the corresponding safety voting result.

[0017] In some embodiments, the message distributor is configured to:

[0018] Acquire a first service message sent by a target sender through a preset message receiving interface;

[0019] Extracting the service data and the identifier of the target recipient from the first service message, and determining the target communication protocol of the target recipient according to the identifier of the target recipient;

[0020] The service data is encapsulated into a corresponding first target service message according to the target communication protocol, and the first target service message is sent to the target recipient through a preset message sending interface corresponding to the target recipient.

[0021] In some embodiments, the message distributor is further configured to:

[0022] Extracting priority information from a business message sent by a target sender;

[0023] Store the business message in a preset message queue of corresponding priority according to the priority information;

[0024] The service messages are scheduled in sequence according to the priorities of the preset message queues and the timestamps of the service messages in the preset message queues.

[0025] In some embodiments, the security gateway is configured to:

[0026] Receiving a second service message sent by the logical computing unit;

[0027] The second service message is processed according to a preset secure communication processing method to obtain a second target service message; wherein the preset secure communication processing method includes: secure communication protocol processing and encryption algorithm processing;

[0028] The second target service message is sent to the target trackside signal device according to the device identifier of the target trackside signal device in the second service message.

[0029] In some embodiments, the resource manager is configured to:

[0030] Receive and parse security logic processing task requests from outside the platform; wherein the security logic processing task request includes at least the following information: the security logic processing task to be executed, the task priority, and the resources required for the task;

[0031] Based on the task priority, the resources required for the task and the preset task allocation strategy, the target logic computing unit corresponding to the security logic processing task is determined, and the security logic processing task is sent to the target logic computing unit.

[0032] In some embodiments, the resource manager is further configured to:

[0033] Obtain business monitoring indicators for each logical computing unit and each security component;

[0034] When the business monitoring indicators do not meet the preset business monitoring conditions, determine the faulty equipment;

[0035] Based on the preset fault handling strategy and the fault type of the faulty device, perform the corresponding fault handling operation.

[0036] The embodiment of the present invention provides a hybrid secure computing cloud platform integrating virtual and physical resources, including a secure computing resource pool and a security component. The secure computing resource pool includes multiple logical computing units, and the logical computing units are used to process secure logic processing tasks. The logical computing units include virtual resources and physical resources. The security components include a clock signal manager, a security voter, a message distributor, a security gateway, and a resource manager. Among them, the clock signal manager is used to manage the clock synchronization between the logical computing units. The security voter is used to vote on the calculation results output by the logical computing unit. The message distributor is used for message transmission between the logical computing units, between the security components, and between the logical computing units and the security components. The security gateway is used for message transmission between the logical computing units and the trackside signal equipment. The resource manager is used for the allocation of secure logic processing tasks and the status monitoring of the logical computing units and the security components, and the processing of faulty equipment. The hybrid secure computing cloud platform in the embodiment of the present invention can reduce the requirements for manpower in system deployment and operation and maintenance, and realize the centralized deployment and centralized operation and maintenance of station-level applications. It supports the mixed use of virtual resources and physical resources, and improves the flexibility of computing resources. At the same time, computing resources can be added according to actual needs, which improves the scalability of the platform.

[0037] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0039] Figure 1 It is a structural diagram of a hybrid secure computing cloud platform integrating virtual and physical resources provided according to an embodiment of the present invention. DETAILED DESCRIPTION

[0040] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0041] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0042] Figure 1 This is a schematic diagram of the structure of a hybrid secure computing cloud platform that integrates virtual and physical resources provided by an embodiment of the present invention. This embodiment can be applied to clouding a secure computing platform, supporting the integrated scheduling of virtual and physical resources, and the coordinated work of various security components, so as to efficiently and securely complete various security logic processing tasks. Figure 1 As shown, the hybrid secure computing cloud platform integrating virtual and physical resources provided by the present embodiment includes a secure computing resource pool 10 and a security component 20, wherein the secure computing resource pool 10 includes a plurality of logical computing units 11; the security component 20 includes a clock signal manager 21, a secure voter 22, a message distributor 23, a security gateway 24 and a resource manager 25. The structural composition of the hybrid secure computing cloud platform of the present embodiment is specifically described below.

[0043] The secure computing resource pool 10 includes a plurality of logic computing units 11. The logic computing units 11 are used to process secure logic processing tasks. The logic computing units 11 include virtual resources and physical resources.

[0044] Among them, virtual resources may include virtual computing resources such as virtual machines and containers, such as OpenStack, KVM (Kernel-based Virtual Machine), Docker, etc. Physical resources may include physical hardware resources such as dedicated computing boards. Safety logic processing tasks may include a series of safety computing tasks related to train operation safety, which is not specifically limited in this embodiment.

[0045] In an embodiment of the present invention, the secure computing resource pool 10 may be composed of a series of virtual computing resources such as virtual machines and containers, and physical hardware resources such as dedicated computing boards. These virtual computing resources and physical hardware resources are independent logical computing units 11, which are responsible for processing secure logic processing tasks.

[0046] The hybrid secure computing resource pool design is the core of this hybrid secure computing cloud platform, which can effectively improve the efficiency of resource utilization. On the one hand, by combining virtual computing resources such as virtual machines and containers with dedicated physical hardware such as dedicated computing boards, this heterogeneous resource integration method can give full play to the flexibility of virtual resources and the high performance and high security advantages of physical hardware. For example, for conventional tasks that do not require high computing performance, virtual machines or containers can be used to process them to save hardware resources; while for critical tasks that require extremely high security and computing performance, dedicated computing boards can be called for processing to ensure efficient execution of tasks. On the other hand, virtual computing resources and dedicated computing boards are both independent logical computing units, which can not only independently undertake computing tasks, but also work together under the unified scheduling of the platform. This method enables the platform to flexibly schedule and allocate tasks without being limited to the type of resources, effectively improving the utilization of resources and the parallel processing capabilities of the platform, and being able to cope with complex and changing computing task requirements.

[0047] The clock signal manager 21 is used to manage the clock synchronization between the logic computing units 11 .

[0048] In the embodiment of the present invention, the clock signal manager 21 is used to provide a unified and accurate clock to each logic computing unit 11 in the platform, ensuring the clock synchronization between the logic computing units 11, thereby avoiding the problem of inconsistent output data.

[0049] The safety voter 22 is used to vote on the calculation results output by the logic calculation unit 11.

[0050] In an embodiment of the present invention, the safety voter 22 can vote on the calculation results output by multiple logical computing units 11, and screen out reliable calculation results as the final output of the platform. The redundant voting mechanism provided by the safety voter 22 enables the platform to output reliable calculation results, greatly reducing the risk of erroneous output of the platform.

[0051] The message distributor 23 is used for message transmission between the logic computing units 11 , between the security components 20 , and between the logic computing units 11 and the security components 20 .

[0052] In the embodiment of the present invention, the message distributor 23 plays a key role in data and message transmission, and is the hub to ensure smooth communication between various parts in the platform. Specifically, the business messages between various logical computing units 11, the business messages between various security components 20, and the business messages between the logical computing units 11 and the security components 20 all need to be forwarded to the corresponding recipients through the message distributor 23, so as to ensure the collaborative work between various parts in the platform.

[0053] The message distributor 23 is used as a bridge for platform message transmission to ensure the rapid and accurate transmission of data and messages between different logical computing units and components, so that the platform can work together efficiently. Whether it is the communication of calculation results between logical computing units or the transmission of status information between components, it can be completed in a timely and effective manner through the message distributor 23.

[0054] The security gateway 24 is used for message transmission between the logic computing unit 11 and the trackside signaling equipment.

[0055] Among them, trackside signal equipment may include but is not limited to signal machines, switches and other railway field equipment, which plays the role of key external signal sources of the platform.

[0056] In an embodiment of the present invention, the security gateway 24 is responsible for message transmission between the logic computing unit 11 and the trackside signal equipment. It can be built-in with multiple security communication protocols and data encryption / decryption algorithms to ensure secure communication between the platform and external key signal sources.

[0057] The resource manager 25 is used to allocate safety logic processing tasks, monitor the status of each logic computing unit 11 and each safety component 20, and handle faulty equipment.

[0058] The faulty device may include a faulty logic computing unit 11 or a safety component 20 (ie, a clock signal manager 21 , a safety voter 22 , a message distributor 23 and a safety gateway 24 ).

[0059] In the embodiment of the present invention, the resource manager 25 can, on the one hand, receive a security logic processing task request initiated from outside the platform, and allocate the most suitable logic computing unit 11 for the security logic processing task in combination with the task requirements of the security logic processing task request and the status of each logic computing unit 11 in the security computing resource pool 10, and record the task allocation information; on the other hand, the resource manager 25 can also monitor the current working status of each logic computing unit 11 and each security component 20 in the platform in real time, for example, it can monitor the resource usage of the logic computing unit 11, the clock synchronization accuracy of the clock signal manager 21, the voting accuracy of the security voter 22, the message delivery success rate of the message distributor 23, the data transmission security of the security gateway 24, etc., and when a fault is detected in the logic computing unit 11 or the security component 20, the corresponding logic computing unit 11 or the security component 20 can be marked as a faulty device, and the corresponding fault handling operation can be performed on the faulty device according to the pre-configured fault handling strategy, for example, the task can be migrated to other normal logic computing units for execution, the backup clock source can be switched, and the task requiring security voting can be suspended until the fault is repaired. The real-time monitoring and fault handling mechanism provided by Resource Manager 25 can effectively ensure the stability and reliability of platform operation.

[0060] The embodiment of the present invention provides a hybrid secure computing cloud platform integrating virtual and physical resources, including a secure computing resource pool and a security component. The secure computing resource pool includes multiple logical computing units, and the logical computing units are used to process secure logic processing tasks. The logical computing units include virtual resources and physical resources. The security components include a clock signal manager, a security voter, a message distributor, a security gateway, and a resource manager. Among them, the clock signal manager is used to manage the clock synchronization between the logical computing units. The security voter is used to vote on the calculation results output by the logical computing unit. The message distributor is used for message transmission between the logical computing units, between the security components, and between the logical computing units and the security components. The security gateway is used for message transmission between the logical computing units and the trackside signal equipment. The resource manager is used for the allocation of secure logic processing tasks and the status monitoring of the logical computing units and the security components, and the processing of faulty equipment. The hybrid secure computing cloud platform in the embodiment of the present invention can reduce the requirements for manpower in system deployment and operation and maintenance, and realize the centralized deployment and centralized operation and maintenance of station-level applications. It supports the mixed use of virtual resources and physical resources, and improves the flexibility of computing resources. At the same time, computing resources can be added according to actual needs, which improves the scalability of the platform.

[0061] Further, based on the above-mentioned embodiments of the invention, the logic computing unit 11 is configured to: receive and execute the security logic processing tasks issued by the resource manager 25; in the process of executing the security logic processing tasks, feedback its own status information to the resource manager 25 according to a preset status feedback cycle; wherein the status information includes at least task progress and resource usage.

[0062] In the embodiment of the present invention, the logic computing unit 11 can receive the security logic processing task issued by the resource manager 25, and use its own computing resources and storage resources to execute the task, for example, it can perform corresponding data reading, computing, storage and other operations according to the task requirements of the security logic processing task, and output the calculation result corresponding to the task. At the same time, in the process of executing the task, the logic computing unit 11 can regularly feedback its own status information to the resource manager 25 according to the preset status feedback cycle, such as the current task progress and resource usage, so that the resource manager 25 can update the status record of the corresponding logic computing unit 11 in real time according to these feedback information.

[0063] Furthermore, based on the above-mentioned embodiments of the invention, the logic computing unit 11 is also configured to: receive target input data sent by other logic computing units 11 through the message distributor 23, or send the target intermediate results calculated by itself to other logic computing units 11 through the message distributor 23.

[0064] In the embodiment of the present invention, the logic computing unit 11 can exchange data with other logic computing units 11 during the execution of tasks to complete complex security logic processing tasks. Specifically, a logic computing unit 11 may need to obtain relevant target input data from other logic computing units 11, or pass the target intermediate results calculated by itself to other logic computing units 11 for further processing. The above data interaction process can be implemented by the message distributor 23.

[0065] Further, based on the above-mentioned embodiments of the invention, the clock signal manager 21 is configured to: send clock synchronization messages to each logical computing unit 11 through the message distributor 23 according to the preset clock synchronization cycle; obtain the task processing time of each logical computing unit 11, and when the task processing time exceeds the preset clock cycle, notify the corresponding logical computing unit 11 where the clock timeout occurs to discard the clock timeout data.

[0066] In the embodiment of the present invention, the clock signal manager 21 can, on the one hand, send clock synchronization messages to each logical computing unit 11 in the secure computing resource pool 10 through the message distributor 23 regularly according to the preset clock synchronization cycle to ensure that their clocks remain synchronized; further, the logical computing unit 11 can perform clock-related operations according to the received clock synchronization message, such as scheduled task execution, data timeliness judgment, etc. On the other hand, the clock signal manager 21 can also obtain the task execution time of each logical computing unit 11. When it is detected that the task execution time exceeds the pre-configured preset clock cycle, it is determined to be a clock timeout, and the corresponding logical computing unit 11 is notified to discard the corresponding calculation result, that is, the clock timeout data. Furthermore, in the case of clock timeout, the clock signal manager 21 can also perform corresponding clock timeout processing operations according to the pre-configured clock timeout processing strategy, such as notifying the logical computing unit 11 to re-execute the clock timeout task, etc.

[0067] The precise clock synchronization mechanism provided by the clock signal manager 21 can provide a unified and precise clock for the logic computing units in the platform, ensuring the time synchronization between the various logic computing units. This is very important for secure logic processing operations, especially in some time-sensitive tasks such as real-time data processing and transaction processing. Precise clock synchronization can ensure the consistency and accuracy of data and avoid errors caused by time asynchrony.

[0068] The clock timeout determination mechanism provided by the clock signal manager 21 discards the clock timeout data, preventing the use of erroneous results that may be caused by long data processing time, thereby maintaining the accuracy and real-time performance of the calculation.

[0069] Further, based on the above-mentioned embodiments of the invention, the safety voter 22 is configured to: receive calculation results for the same safety logic processing task sent by multiple logic computing units 11 through the message distributor 23; vote on each calculation result according to a preset safety redundancy structure, and output the corresponding safety voting result.

[0070] The preset safety redundant structure may refer to a pre-configured safety redundant structure for voting on the calculation results output by the logic calculation unit 11, which may include but is not limited to: a three-out-of-two architecture, a two-by-two-out-of-two architecture, and the like.

[0071] The security voting result is used to characterize the reliability of the calculation result output by the logic computing unit 11. Taking the three-out-of-two architecture as an example, if at least two of the three logic computing units 11 processing the same security logic processing task output the same calculation results, then the security voting result is determined to be a reliable output result; otherwise, the security voting result is determined to be an unreliable output result.

[0072] In the embodiment of the present invention, after completing the safety logic processing operation, the logic calculation unit 11 will send the output calculation result to the safety voter 22, and the safety voter 22 will vote on the calculation results output by multiple logic calculation units 11 that process the same safety logic processing task according to the pre-configured three-out-of-two, two-by-two-out-of-two and other preset safety redundancy structures, and output the corresponding safety voting results. Further, if the safety voting result is that the output result is reliable, the corresponding calculation result will be used as the final output of the platform, and the calculation result will be sent to the corresponding recipient according to the task requirements, such as feedback to the external system, storage in the database or for controlling other devices; if the safety voting result is that the output result is unreliable, it will be processed according to the pre-configured security policy, such as re-executing the corresponding safety logic processing task, alarming the platform or switching to the backup logic calculation unit.

[0073] The redundant voting mechanism provided by the safety voter 22 ensures that only the results verified by the majority can be used as the final output of the platform, which provides a strong guarantee for the reliability of the results of the safety logic processing operation, can greatly reduce the risk of erroneous output, and improve the reliability and security of the platform. Even if some logical calculation units fail or output errors, the correct results can be screened out through voting to ensure the stable operation of the platform.

[0074] Further, based on the above-mentioned embodiments of the invention, the message distributor 23 is configured to: obtain a first business message sent by the target sender through a preset message receiving interface; extract the business data and the identifier of the target recipient in the first business message, and determine the target communication protocol of the target recipient according to the identifier of the target recipient; encapsulate the business data into a corresponding first target business message according to the target communication protocol, and send the first target business message to the target recipient through a preset message sending interface corresponding to the target recipient.

[0075] The target sender and the target receiver may include a logic computing unit 11 and various other security components 20 except the message distributor 23 .

[0076] The first business message may include but is not limited to: a business message containing calculation results sent by the logical computing unit 11 to other logical computing units 11 or the security gateway 24, a clock synchronization message sent by the clock signal manager 21 to the logical computing unit 11, a business message requesting calculation results sent by the safety voter 22 to the logical computing unit 11, a business message from the trackside signal equipment fed back by the security gateway 24 to the logical computing unit 11, and a business message from the resource manager to send a task to the logical computing unit 11.

[0077] In this embodiment, each logical computing unit 11 within the platform and all other types of security components 20 except the message distributor 23 are configured with a preset message sending interface and a preset message receiving interface, wherein the preset message sending interface is used to send business messages to the message distributor 23, and the preset message receiving interface is used to receive business messages forwarded from the message distributor 23.

[0078] The message distributor 23 is configured with multiple preset message sending interfaces and preset message receiving interfaces, and each interface corresponds to the interface of each type of device / component. When a new type of device / component is added to the platform, the message distributor 23 needs to adapt and add corresponding receiving and sending interfaces. At the same time, the message distributor 23 is adapted for each different communication protocol, and the conversion function between different communication protocols is integrated internally. For example, component A uses TCP (Transmission Control Protocol) to communicate, and component B uses UDP (User Datagram Protocol). Component A needs to send a business message to component B, and the business message will be forwarded through the message distributor 23. Then, after receiving the TCP format data packet sent by component A, the message distributor 23 will extract the business data (Payload) by unpacking, and then re-encapsulate the business data according to the UDP protocol data frame format, and send it to component B.

[0079] In an embodiment of the present invention, the message distributor 23 can obtain the first business message sent by the target sender through a preset message receiving interface configured by itself, and then unpack the first business message to extract the business data and the identifier of the target recipient, and use the identifier of the target recipient to determine the target communication protocol adopted by the target recipient. For example, the message distributor 23 can maintain a mapping table that stores the identifier of the device / component and the corresponding communication protocol. The message distributor 23 can quickly find the communication protocol adopted by the corresponding device / component through the identifier of the device / component; then, the message distributor 23 will re-encapsulate the business data into the corresponding first target business message according to the data frame format of the target communication protocol, and send it to the target recipient through the preset message sending interface corresponding to the target recipient.

[0080] The communication protocol adaptation mechanism provided by the message distributor 23 enables the platform to adapt to different communication protocols and interfaces, and realize seamless communication between virtual resources and physical hardware, and between different components. Even if there are differences in the communication protocols and interfaces used by various parts, the message distributor 23 can perform protocol conversion and interface adaptation to ensure smooth transmission of messages.

[0081] Furthermore, based on the above-mentioned embodiments of the invention, the message distributor 23 is also configured to: extract priority information from the business message sent by the target sender; store the business message in a preset message queue of corresponding priority according to the priority information; and schedule each business message in sequence according to the priority of each preset message queue and the timestamp of each business message in the preset message queue.

[0082] Among them, the message distributor 23 can be pre-configured with multiple preset message queues, each preset message queue corresponds to a different priority, and the business messages in the preset message queues with higher priorities need to be forwarded first. The business messages in the same preset message queue will be scheduled and forwarded in sequence according to the order of entry into the queue (that is, the timestamp when the message distributor 23 receives the business message).

[0083] In an embodiment of the present invention, after receiving the business message sent by the target sender, the message distributor 23 will parse out the priority information corresponding to the business message, and then save the business message to the preset message queue of the corresponding priority according to the priority information; within each scheduling cycle of the message distributor 23, each business message will be scheduled and forwarded in sequence according to the priority of the business message and the timestamp when the business message is received.

[0084] The queue management mechanism provided by the message distributor 23 can effectively ensure the timely and efficient scheduling and forwarding of business messages between various parts of the platform.

[0085] Further, based on the above-mentioned embodiment of the invention, the security gateway 24 is configured to: receive a second business message sent by the logic computing unit 11; process the second business message according to a preset security communication processing method to obtain a second target business message; wherein the preset security communication processing method includes: security communication protocol processing and encryption algorithm processing; according to the device identifier of the target trackside signal device in the second business message, send the second target business message to the target trackside signal device.

[0086] The secure communication protocols may include but are not limited to: SSL / TLS (Secure Sockets Layer / Transport Layer Security) communication protocol, IPsec (Internet Protocol Security) communication protocol, SSH (Secure Shell) communication protocol, etc. The encryption algorithms may include but are not limited to symmetric encryption algorithms (such as AES, DES) and asymmetric encryption algorithms (such as RSA), etc.

[0087] In an embodiment of the present invention, when the logic computing unit 11 needs to transfer data with the trackside signal device, it will be forwarded through the security gateway 24. Specifically, after receiving the second business message sent by the logic computing unit 11, the security gateway 24 will securely process the second business message according to the pre-configured preset security communication processing method to obtain the corresponding second target business message, wherein the preset security communication processing method may include: security communication protocol processing and encryption algorithm processing; then, according to the device identification of the target trackside signal device parsed from the second business message, the second target business message is sent to the corresponding target trackside signal device. Furthermore, the business message received from the target trackside signal device will also be securely processed by the security gateway 24 and then passed to the corresponding logic computing unit 11.

[0088] The secure processing mechanism provided by the secure gateway 24 ensures secure communication between the platform and external key signal sources. By adopting technologies such as secure communication protocols and data encryption / decryption algorithms, data can be prevented from being stolen, tampered with or forged during transmission, ensuring the security and integrity of the data.

[0089] Further, based on the above-mentioned embodiments of the invention, the resource manager 25 is configured to: receive and parse security logic processing task requests from outside the platform; wherein the security logic processing task requests include at least the following information: the security logic processing task to be executed, the task priority and the resources required for the task; based on the task priority, the resources required for the task and the preset task allocation strategy, determine the target logic computing unit corresponding to the security logic processing task, and send the security logic processing task to the target logic computing unit.

[0090] Among them, the preset task allocation strategy may include: for tasks with large computing resource requirements and high real-time requirements, priority is given to allocating them to physical resources such as dedicated computing boards; for tasks that are relatively flexible and have low resource requirements, priority is given to allocating them to virtual resources such as virtual machines or containers.

[0091] In an embodiment of the present invention, the resource manager 25 can receive security logic processing task requests from outside the platform, such as external systems, external applications, etc., and by parsing the security logic processing task requests, it can obtain information such as the security logic processing tasks to be executed, task priorities, and resources required for the tasks, and then determine the corresponding target logic computing unit suitable for the security logic processing task according to the task priority and the resources required for the tasks, and in combination with the status information of each logic computing unit 11 in the current security computing resource pool 10, such as load conditions, resource usage, etc., and send the security logic processing task to the corresponding target logic computing unit for processing. Furthermore, after the resource manager 25 completes the task allocation, it will record the corresponding task allocation information to monitor the status of each logic computing unit 11.

[0092] Furthermore, based on the above-mentioned embodiments of the invention, the resource manager 25 is also configured to: obtain business monitoring indicators of each logical computing unit 11 and each security component 20; determine the faulty device when the business monitoring indicators do not meet the preset business monitoring conditions; and perform corresponding fault handling operations based on the preset fault handling strategy and the fault type of the faulty device.

[0093] Among them, the business monitoring indicators may include but are not limited to: the computing load, resource usage and fault conditions of the logical computing unit 11, as well as the clock synchronization accuracy of the clock signal manager 21, the voting accuracy of the security voter 22, the message delivery success rate of the message distributor 23, and the data transmission security of the security gateway 24.

[0094] Fault handling operations may include but are not limited to: in case of temporary overload of resources of the logical computing unit 11, tasks may be reallocated or resource allocation strategies may be adjusted; in case of a fault in the logical computing unit 11, tasks executed by it may be migrated to other normal logical computing units 11 for execution, and the faulty unit may be marked for subsequent fault repair; in case of a fault in the clock signal manager 21, a switch may be made to a backup clock source or a temporary clock synchronization mechanism may be adopted; in case of a fault in the safety voter 22, tasks requiring voting may be suspended until the fault is repaired.

[0095] In an embodiment of the present invention, the resource manager 25 can monitor the business monitoring indicators of various parts within the platform in real time, and when the business monitoring indicators of the device / component do not meet the preset business monitoring conditions, for example, the resource utilization rate of the logical computing unit 11 exceeds the preset threshold, the clock synchronization accuracy of the clock signal manager 21 is lower than the preset threshold, etc., the corresponding device / component is marked as a faulty device, and then try to determine the cause of the fault based on the symptoms of the fault, such as the crash of the logical computing unit 11, excessive resource utilization, communication interruption, etc.; then, according to the preset fault handling strategy and the fault type of the faulty device, the corresponding fault handling operation can be performed, such as switching to a backup device / component, suspending business processing until the fault is repaired, etc.

[0096] The stability of the platform operation can be effectively guaranteed through the real-time monitoring and fault handling mechanism provided by the resource manager 25. The resource manager 25 quickly and effectively handles the faulty logical computing unit without affecting other normal operations, ensuring the continuity and accuracy of the safe logical processing operations. Specifically, it may include fault detection methods, fault isolation strategies and task recovery mechanisms.

[0097] In addition, the hybrid secure computing cloud platform provided by the embodiment of the present invention also has the advantages of strong scalability, including the following two points:

[0098] (1) Resource pool is easy to expand: The hybrid architecture makes the secure computing resource pool easy to expand. As business needs grow, new virtual machines, containers, or dedicated computing boards and other resources can be easily added to meet the growing computing task requirements. At the same time, this expansion method does not require large-scale transformation of the entire platform. It only requires additions and configurations at the resource pool level, which reduces the difficulty of platform expansion and maintenance costs.

[0099] (2) Components can be upgraded independently: Each security component in the platform, such as the clock signal manager, security voter, message distributor, security gateway, and resource manager, can be upgraded and optimized independently. This means that a component can be improved and upgraded independently based on technological development and business needs without affecting the normal operation of other components, thus improving the maintainability and scalability of the platform.

[0100] In one embodiment, the initialization process of the hybrid secure computing cloud platform integrating virtual and physical resources may specifically include:

[0101] (1) Secure computing resource pool startup

[0102] Start virtual resources such as virtual machines and containers started by Openstack, KVM, Docker, etc., load the corresponding operating system and application programs, make them enter an operational state, and prepare to receive security logic processing tasks issued by the resource manager 25.

[0103] Start dedicated hardware boards such as dedicated computing boards, perform hardware self-checks and initialization, and ensure that they work properly.

[0104] (2) Security component startup

[0105] Clock signal manager 21: Start the clock source, start generating clock signals, and perform clock synchronization settings to ensure that all logic computing units 11 in the platform can receive a unified and accurate clock signal. At the same time, start the clock timeout monitoring function and prepare to process the clock timeout data.

[0106] Safety voter 22: Initializes safety redundant structure configuration, such as setting to three-out-of-two, two-by-two-out-of-two, etc., and prepares to receive the calculation result output by the logic operation unit 11 for voting.

[0107] Message distributor 23: Starts the message delivery service, establishes a communication channel, and ensures that data and messages can be delivered between logical computing units 11 and between various security components 20 in the platform.

[0108] Security gateway 24: Start the communication interface with the trackside signal equipment, perform initialization and security authentication, and ensure the security and reliability of the message transmission channel with the trackside signal equipment.

[0109] Resource manager 25: Start the resource monitoring service and begin real-time monitoring of the status of the logical computing unit 11, including indicators such as computing resource utilization, memory utilization, and network bandwidth utilization; at the same time, start monitoring of business monitoring indicators of each security component 20 in the platform.

[0110] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and this document does not limit this.

[0111] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A hybrid secure computing cloud platform integrating virtual and physical resources, characterized in that: The hybrid secure computing cloud platform includes a secure computing resource pool and a security component. The secure computing resource pool includes a plurality of logical computing units. The logical computing units are used to process secure logic processing tasks. The logical computing units include virtual resources and physical resources. The safety component includes a clock signal manager, a safety voter, a message distributor, a safety gateway and a resource manager; wherein the clock signal manager is used to manage the clock synchronization between the logic computing units; the safety voter is used to vote on the calculation results output by the logic computing unit; the message distributor is used for message transmission between the logic computing units, between the safety components, and between the logic computing units and the safety components; the safety gateway is used for message transmission between the logic computing units and the trackside signal equipment; the resource manager is used for the allocation of the safety logic processing tasks and the status monitoring of the logic computing units and the safety components, and for handling faulty equipment.

2. The hybrid secure computing cloud platform according to claim 1, characterized in that: The logic calculation unit is configured as follows: Receive and execute the security logic processing task issued by the resource manager; During the execution of the security logic processing task, the resource manager feeds back its own status information according to a preset status feedback cycle; wherein the status information at least includes task progress and resource usage.

3. The hybrid secure computing cloud platform according to claim 1, characterized in that: The logic calculation unit is further configured to: Receive target input data sent by other logical computing units through the message distributor, or send target intermediate results calculated by itself to other logical computing units through the message distributor.

4. The hybrid secure computing cloud platform according to claim 1, characterized in that: The clock signal manager is configured to: According to a preset clock synchronization cycle, the message distributor sends a clock synchronization message to each of the logical computing units; The task processing time of each of the logic computing units is obtained, and when the task processing time exceeds a preset clock cycle, the corresponding logic computing unit where the clock timeout occurs is notified to discard the clock timeout data.

5. The hybrid secure computing cloud platform according to claim 1, characterized in that: The safety voting device is configured as follows: Receiving calculation results for the same security logic processing task sent by a plurality of the logic calculation units through the message distributor; Voting is performed on each of the calculation results according to a preset safety redundancy structure, and the corresponding safety voting results are output.

6. The hybrid secure computing cloud platform according to claim 1, characterized in that: The message distributor is configured as follows: Acquire a first service message sent by a target sender through a preset message receiving interface; Extracting the service data and the identifier of the target recipient from the first service message, and determining the target communication protocol of the target recipient according to the identifier of the target recipient; The service data is encapsulated into a corresponding first target service message according to the target communication protocol, and the first target service message is sent to the target recipient through a preset message sending interface corresponding to the target recipient.

7. The hybrid secure computing cloud platform according to claim 1, characterized in that: The message distributor is also configured to: Extracting priority information from a business message sent by a target sender; Storing the service message in a preset message queue of corresponding priority according to the priority information; The service messages are scheduled in sequence according to the priorities of the preset message queues and the timestamps of the service messages in the preset message queues.

8. The hybrid secure computing cloud platform according to claim 1, characterized in that: The security gateway is configured as follows: Receiving a second service message sent by the logical computing unit; Processing the second service message according to a preset secure communication processing method to obtain a second target service message; wherein the preset secure communication processing method includes: secure communication protocol processing and encryption algorithm processing; The second target service message is sent to the target trackside signal device according to the device identifier of the target trackside signal device in the second service message.

9. The hybrid secure computing cloud platform according to claim 1, characterized in that: The resource manager is configured to: Receive and parse a security logic processing task request from outside the platform; wherein the security logic processing task request includes at least the following information: the security logic processing task to be executed, the task priority, and the resources required for the task; Based on the task priority, the resources required for the task and the preset task allocation strategy, the target logic computing unit corresponding to the security logic processing task is determined, and the security logic processing task is sent to the target logic computing unit.

10. The hybrid secure computing cloud platform according to claim 1, characterized in that: The resource manager is also configured to: Obtaining business monitoring indicators of each of the logical computing units and each of the security components; When the service monitoring indicator does not meet the preset service monitoring condition, determining the faulty device; Based on the preset fault handling strategy and the fault type of the faulty device, a corresponding fault handling operation is performed.

Images