A secure communication platform capable of dynamically managing IP

Abstract

The present invention discloses a secure communication platform capable of dynamically managing IP, and relates to the technical field of rail transit signal systems. The present invention is mainly based on a 2×2 take 2 system, and proposes a dynamic IP management solution. When a system fails or crashes, the CHB in the normal working system will take over the IP address of the CHA in the faulty system to ensure the continuous execution of network tasks, thereby maintaining network redundancy and reliability. After the faulty system returns to normal, the CHB in the normal system will automatically return the network task to the restored CHA to ensure that the system returns to its initial working state. The solution effectively improves the system's fault tolerance and recovery speed in the face of failures, and optimizes the dynamic scheduling of network resources. The present invention achieves efficient message routing forwarding and network communication management by optimizing the network architecture and automated configuration process, and significantly reduces the costs caused by manual intervention and equipment redundancy.

Description

Technical Field

[0001] The present invention relates to the technical field of rail transit signal systems, and more specifically to a secure communication platform capable of dynamically managing IP. Background Art

[0002] The safety communication platform in rail transit is a key infrastructure to ensure safe train operation and efficient communication. The safety communication platform plays a vital role in rail transit. It is not only responsible for the transmission and exchange of information to ensure that various instructions can be conveyed quickly and accurately, but also directly affects the safety of train operation and the travel experience of passengers. The safety communication platform includes main system equipment and backup system equipment. The main system equipment and the backup system equipment each contain two safety networks. The two safety networks in the redundant network for network communication all use the two safety networks on the main system equipment, or use any one safety network on the main system equipment and any one safety network on the backup system equipment respectively. In the prior art, the patent with publication number CN118300971A discloses a method for external interface of the main and standby control center of a train signal system, aiming to achieve seamless switching and concise network data flow. The solution also briefly describes the use of a floating IP solution.

[0003] The patent with publication number CN117997875A discloses the implementation method, system, device and medium of IPV6 floating IP to solve the problems in the prior art of network oscillation and failure of floating address to take effect when IPv6 floating address takes effect due to the introduction of duplicate address detection mechanism in IPv6 usage scenarios.

[0004] Patent publication number CN118449893A discloses a method and device for testing the floating IP management function of a temporary speed limit server. The present invention relates to the field of testing technology, and its main purpose is to test the management function of the floating IP using a more complete and unified test scenario to obtain more accurate test results and improve test efficiency.

[0005] However, for the safety communication platform in rail transit, the existing technology does not dynamically manage IP, which makes it difficult to maintain the redundancy of the network and the network's fault tolerance and overall reliability are low. Summary of the invention

[0006] In order to overcome the defects in the above-mentioned prior art, the present invention discloses a secure communication platform capable of dynamically managing IP. The present invention can ensure that the redundancy of the network is maintained by dynamically adjusting the allocation of IP addresses when a system fails or crashes, thereby improving the fault tolerance and overall reliability of the network. By implementing this dynamic IP management strategy, even if part of the system fails, the network can still maintain its core functions unaffected, providing users with continuous and stable communication services.

[0007] In order to achieve the above purpose, the technical solution adopted by the present invention is as follows: A secure communication platform capable of dynamically managing IP includes a P machine and an S machine, wherein the P machine is a main device and the S machine is an auxiliary device, and both the P machine and the S machine include two channels, CHA and CHB; The IP address of the CHA channel of the P machine interacting with the external network interface is IP_P, and the IP address of the CHA channel of the S machine interacting with the external network interface is IP_S. Of the P machine and the S machine, one is the primary system and the other is the backup system; When both the main system and the backup system are operating normally, the two CHA channels and the two CHB channels work together to perform the network tasks of inputting safety messages and outputting safety messages; When the main system and the backup system execute the network tasks of inputting safety messages and outputting safety messages and one of the main system and the backup system encounter an abnormality, the CHB in the normal main system or the backup system takes over the IP address of the CHA in the abnormal main system or the backup system and continues to execute the network tasks; after the abnormal main system or the backup system returns to normal, the CHB in the normal main system or the backup system returns the taken-over network tasks to the CHA in the restored main system or the backup system.

[0008] 1. Enter a security message (1) Both the main system and the backup system are normal Preferably, when the P machine is the primary system and the S machine is the backup system, the secure communication platform performs the task of inputting a secure message network including: When both the main system and the backup system are operating normally, the main system CHA receives the security message of the external security communication device from the external network interface with IP_P as the IP address, and transmits the security message to CHB through the internal serial port network; the backup system CHA receives the security message of the external security communication device through the external network interface with IP_S as the IP address, and transmits the security message to CHB through the internal serial port network, and then the backup system CHB transmits the message header to the main system CHB through the internal Ethernet; the main system CHB filters the security messages of the dual networks, and only uses the messages received first, and sends the filtered security messages to the main system CHA through the internal network, and the CHA and CHB of the main system then independently verify and process the security messages.

[0009] (2) Backup system abnormality Preferably, when the P machine is the primary system and the S machine is the backup system, the secure communication platform performs the task of inputting a secure message network including: When the main system finds that the backup system changes from existing to non-existing, the CHA and CHB of the main system respectively receive security messages from external security communication devices through the external network interface; the main system CHA uses IP_P as the IP address, and the main system CHB uses IP_S as the IP address; the main system CHA transmits the security message to the CHB through the internal network interface, and the main system CHB filters the security messages of the dual networks and only uses the first received message, and sends the filtered security message to the main system CHA through the internal network, and the main system CHA and CHB then independently verify and process the security message.

[0010] (3) Abnormality of the main system Preferably, when the P machine is the primary system and the S machine is the backup system, the secure communication platform performs the task of inputting a secure message network including: When the backup system finds that the main system has changed from existing to non-existing, the backup system becomes the new main system; CHA and CHB of the new main system respectively receive security messages from external security communication devices through external network interfaces; the new main system CHA uses IP_S as the IP address, and the new main system CHB uses IP_P as the IP address; CHA transmits security messages to CHB through the internal network interface, and the new main system CHB filters the security messages of the dual networks, only uses the messages received first, and sends the filtered security messages to the new main system CHA through the internal network.

[0011] (4) Backup system abnormal recovery Preferably, when the P machine is the primary system and the S machine is the backup system, the secure communication platform performs the task of inputting a secure message network including: When the primary system finds that the backup system exists from non-existence, the primary system continues to use CHA to receive security messages from external security communication devices from the external network interface, and CHB no longer directly receives security messages from the external network; the backup system CHA receives security messages from external security communication devices through the external network interface and returns to the stage of normal operation of the primary and backup systems.

[0012] 2. Output security message (1) Both the main system and the backup system are normal Preferably, when the P machine is the primary system and the S machine is the backup system, the secure communication platform performs the task of outputting a secure message network including: When the main system and the backup system are operating normally, the main system CHA and CHB exchange security data. If the security data are consistent, CHB packages the security data into a security message and sends the security message to the main system CHA through the internal network interface, and at the same time transparently transmits it to the backup system CHB through the internal Ethernet; the main system CHA sends the security message to the external security communication device through the external network interface via one network with IP_P as the IP address; the backup system CHB sends the security message to the backup system CHA through the internal network interface, and the backup system CHA then sends the security message to the external security communication device through the external network interface via another network with IP_S as the IP address.

[0013] (2) Backup system abnormality Preferably, when the P machine is the primary system and the S machine is the backup system, the secure communication platform performs the task of outputting a secure message network including: When the main system finds that the backup system changes from existing to non-existing, the main systems CHA and CHB exchange security data. If the security data are consistent, CHB packages the security data into a security message and sends the security message to the main system CHA through the internal network interface. At the same time, the security message is sent to the external security communication device through the external network interface via one network with IP_S as the IP address; the main system CHA then sends the security message to the external security communication device through the external network interface via another network with IP_P as the IP address.

[0014] (3) Abnormality of the main system Preferably, when the P machine is the primary system and the S machine is the backup system, the secure communication platform performs the task of outputting a secure message network including: When the backup system finds that the main system has changed from existing to non-existing, the backup system becomes the new main system; the new main systems CHA and CHB exchange security data. If the security data are consistent, CHB packages the security data into a security message and sends the security message to the new main system CHA through the internal network interface. At the same time, it sends the security message to the external security communication device through the external network interface via one network with IP_P as the IP address; the new main system CHA then sends the security message to the external security communication device through the external network interface via another network with IP_S as the IP address.

[0015] (4) Backup system abnormal recovery Preferably, when the P machine is the primary system and the S machine is the backup system, the secure communication platform performs the task of outputting a secure message network including: When the primary system finds that the backup system has changed from non-existent to existing, the primary and backup systems are restored to normal operation.

[0016] 3. CHA channel module Preferably, the CHA channel includes a basic function module I and a routing management module I; The basic function module I is used to maintain the basic functions of normal operation; The routing management module I, when receiving a security message from an external network device, routes and forwards the security message to the CHB of the system; when sending a security message to an external network device, directly sends the security message received from the CHB of the system to the external network device through the external network interface.

[0017] 4. CHB channel module Preferably, the CHB channel of the main system includes a basic function module II, a message processing module, a status monitoring module, an IP management module, and a routing management module II; The basic function module II is used to maintain the basic functions of normal operation; The message processing module is used to receive, parse and process messages in the network; The status monitoring module is used to monitor the operating status and fault conditions of the node in real time; The IP management module is used to dynamically manage and allocate IP addresses; The routing management module II is responsible for maintaining the network routing table and forwarding messages in the network.

[0018] (1) Message processing module Preferably, the message processing module obtains network-related configurations when the channel is initialized, and creates all sockets for receiving messages of this system's CHB, including socket_a2b for interacting with this system's CHA in the internal network interface for secure messages, socket_b2b for interacting with another system's CHB in the internal network interface for secure messages, and socket_b for this system's CHB to interact directly with the external network interface for secure messages.

[0019] Preferably, the message processing module uses the message processing function when the P machine is the main system, including: When receiving a security message from an external network, the message processing module first checks the dynamic IP flag in the IP management module. If the dynamic IP flag is FALSE, the socket_a2b that exchanges security messages with the CHA of this system on the internal network interface and the socket_b2b that exchanges security messages with the CHB of another system on the internal network interface are monitored to see if new security data has been received. If the dynamic IP flag is TRUE, the socket_a2b that exchanges security messages with the CHA of this system on the internal network interface and the socket_b that exchanges security messages with the CHB of this system directly on the external network interface are monitored to see if new security data has been received.

[0020] Preferably, the message processing module uses the message processing function when the P machine is the main system, including: When sending a security message to the external network, the message processing module first checks the dynamic IP flag in the IP management module. If the dynamic IP flag is FALSE, the security message is sent through socket_a2b that exchanges security messages with the CHA of this system on the internal network interface, and socket_b2b that exchanges security messages with the CHB of another system on the internal network interface; if the dynamic IP flag is TRUE, the security message is sent through socket_a2b that exchanges security messages with the CHA of this system on the internal network interface, and socket_b that exchanges security messages between the CHB of this system and the external network interface.

[0021] (2) Condition monitoring module Preferably, during normal operation, the status monitoring module is responsible for sending online frames and monitoring whether the online frames of the peer system can be received; when the online frames of the peer system are not received for X consecutive cycles, it is considered that the peer system does not exist; when it is monitored that the peer system changes from existence to non-existence, the initialization dynamic IP interface provided by the IP management module is called; when it is detected that the peer system changes from non-existence to existence, the deletion dynamic IP interface provided by the IP management module is called.

[0022] (3) IP management module Preferably, the IP management module provides initialization of the dynamic IP interface and sets the dynamic IP flag to TRUE; initialization of the dynamic IP includes selecting the target network port, binding the IP address of the network port to the IP address IP_S of the S machine CHA, binding the MAC address, and sending an ARP packet; the IP management module provides deletion of the dynamic IP interface and sets the dynamic IP flag to FALSE.

[0023] (4) Routing Management Module II Preferably, the routing management module II uses the routing function when the P machine is a backup system, including: when a security message is received from an external network interface, the security message sent by the CHA of this system is routed to the main system CHB; when a security message is sent to an external network device, the security message sent by the main system CHB is routed to the CHA of this system.

[0024] Beneficial effects of the present invention: 1. The present invention is mainly based on the 2×2 take 2 system and proposes a dynamic IP management solution. When the system fails or crashes, the CHB in the normal working system will take over the IP address of the CHA in the faulty system to ensure the continuous execution of network tasks, thereby maintaining network redundancy and reliability. After the faulty system returns to normal, the CHB in the normal system will automatically return the network tasks to the restored CHA to ensure that the system returns to its initial working state. This solution effectively improves the system's fault tolerance and recovery speed in the face of failures, and optimizes the dynamic scheduling of network resources.

[0025] 2. In the present invention, CHA should at least have a basic function module and a routing management module. The basic function module is used to maintain the basic functions of normal operation, and the routing management module is responsible for the planning and maintenance of the network path to ensure that the data packet can be efficiently and accurately transmitted to the target node. For CHB, the present invention requires it to have at least: a basic function module, a message processing module, a status monitoring module, an IP management module and a routing management module. The message processing module is responsible for receiving, parsing, and processing messages in the network; the status monitoring module monitors the operating status and fault conditions of the node in real time; the IP management module is used to dynamically manage and allocate IP addresses to ensure the flexibility and reliability of network communications; the routing management module is responsible for maintaining the network routing table and forwarding messages in the network to ensure that the data flow can be optimized and adjusted according to changes in the network topology. Through the collaborative work of these functional modules, the CHB node can efficiently complete network management tasks and provide redundant backup support.

[0026] 3. The present invention achieves efficient message routing and network communication management by optimizing the network architecture and automated configuration process, significantly reducing the cost of manual intervention and equipment redundancy. Specifically, the invention does not rely on additional hardware expansion or complex network equipment, but initializes and configures all required sockets, combined with the design of message sending and receiving routing and forwarding logic, to ensure the efficiency, reliability and flexibility of network communication. The system can dynamically adjust network resources, optimize data flow paths, reduce cumbersome manual operations and hardware deployment in traditional network architectures, and improve the overall network operation efficiency and resource utilization.

[0027] 4. The present invention ensures network redundancy: In traditional communication networks, when a system fails or goes down, the faulty equipment needs to be replaced manually to restore network redundancy. In this proposal, even when a system fails or goes down, the system can dynamically manage IP addresses, and the CHB in the normal working system will take over the IP address of the CHA in the faulty system to ensure the continuous execution of network tasks, thereby ensuring network redundancy and improving system fault tolerance.

[0028] 5. The present invention achieves rapid recovery: In traditional communication networks, fault recovery requires manual intervention to perform troubleshooting, equipment replacement, and other operations, which takes a long time to recover. The proposed system can automatically detect faulty devices and migrate the IP address on the faulty device to the backup device, thereby achieving rapid fault recovery. This automated fault recovery mechanism reduces the need for manual intervention and shortens the fault recovery time.

[0029] 6. The invention is low-cost: Traditional hardware equipment backup solutions require a large amount of money to purchase spare equipment and to maintain and manage the equipment. This proposal uses software-defined network management technology to improve network redundancy and fault recovery capabilities without adding additional hardware equipment. This reduces the cost of network construction and maintenance and improves the economic benefits of the network. In addition, the dynamic IP management solution can also reduce manual operations, reduce the risk of failures caused by human errors, and further reduce network operating costs. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Figure 1 Receive safety data when the main and standby systems of the present invention are operating normally; Figure 2 When the system of the present invention does not exist, receiving security data; Figure 3 When the main and standby systems of the present invention operate normally, security data is sent; Figure 4 When the system of the present invention does not exist, security data is sent; Figure 5 It is the main system / backup system CHA function module of the present invention; Figure 6 The present invention is equipped with a CHB functional module; Figure 7 It is the main CHB functional module of the present invention. DETAILED DESCRIPTION

[0031] The concept, specific structure and technical effects of the present invention will be clearly and completely described below in conjunction with the embodiments and drawings to fully understand the purpose, characteristics and effects of the present invention.

[0032] When building a high-security communication platform based on 2×2 out of 2 hardware devices, a variety of network architecture design options can be used. One option is to keep the network architecture consistent with the hardware devices and adopt a 2×2 out of 2 architecture, and the other option is to only use a 2× architecture. In the case of a 2×2 architecture, even if one of the systems fails or goes down, the network can still maintain its redundancy to ensure the continuity and reliability of communication. In contrast, if the network only uses a 2× architecture, when facing a failure or downtime of one of the systems, the redundancy of the network will be compromised, thereby affecting the reliability of the entire communication network.

[0033] In order to meet this challenge, the present invention proposes a solution for dynamic IP management. This solution can ensure that the redundancy of the network is maintained by dynamically adjusting the IP address allocation when a system fails or crashes, thereby improving the fault tolerance and overall reliability of the network. By implementing this dynamic IP management strategy, even if part of the system fails, the network can still maintain its core functions unaffected, providing users with continuous and stable communication services.

[0034] The architecture of the secure communication platform is as follows: Figure 1 As shown in the figure, the system includes a P machine (Primary device) and an S machine (Secondary device). The P machine and the S machine contain two channels, CHA and CHB, respectively.

[0035] The IP address of the P machine's CHA interacting with the external network interface is IP_P, and the IP address of the S machine's CHA interacting with the external network interface is IP_S. At any time, the P machine or the S machine can be the active device or the standby device. The following descriptions are based on the example that the P machine becomes the active device first and the S machine becomes the standby device (the principle that the S machine becomes the active device first and the P machine becomes the standby device is similar and will not be repeated here).

[0036] Enter the security message described below.

[0037] like Figure 1 As shown in the figure, when the main system and the backup system are operating normally, the main system CHA receives the safety message of the external safety communication device from the external network interface with IP_P as the IP address, and transmits the safety message to CHB through the internal serial port network. The backup system CHA receives the safety message of the external safety communication device through the external network interface with IP_S as the IP address, and transmits the safety message to CHB through the internal serial port network, and then the backup system CHB transmits the message header to the main system CHB through the internal Ethernet. The main system CHB filters the safety messages of the dual networks, only uses the first received message, and sends the filtered safety message to the main system CHA through the internal network. The main system CHA and CHB then independently verify and process the safety message.

[0038] like Figure 2As shown in the figure, when the main system finds that the backup system has changed from existing to non-existing, the CHA and CHB of the main system should receive the security message of the external security communication device through the external network interface respectively. The main system CHA still uses IP_P as the IP address, and the main system CHB uses the IP address of the backup system CHA to receive the security message, that is, IP_S. CHA transmits the security message to CHB through the internal network interface. The main system CHB filters the security messages of the dual networks and only uses the first received message. The filtered security message is sent to the main system CHA through the internal network. The CHA and CHB of the main system then independently verify and process the security message.

[0039] When the backup system finds that the main system has changed from existing to non-existing, the backup system becomes the new main system. The CHA and CHB of the new main system should receive security messages from external security communication devices through the external network interface respectively. The new main system CHA still uses IP_S as the IP address, and the new main system CHB uses the IP address of the former main system CHA to receive security messages, that is, IP_P. CHA transmits security messages to CHB through the internal network interface. The new main system CHB filters the security messages of the dual networks, only uses the messages received first, and sends the filtered security messages to the new main system CHA through the internal network.

[0040] When the primary system finds that the backup system has changed from non-existent to existing, the primary system continues to use CHA to receive security messages from external security communication devices through the external network interface, and CHB no longer directly receives security messages from the external network. The backup system CHA receives security messages from external security communication devices through the external network interface, which means that the primary and backup systems are restored to normal operation.

[0041] The non-existence of the device may be caused by a serious error in the operation of the device and the device may enter a safe state. It may also happen when the device is directly unplugged during normal operation.

[0042] Output security messages are described below.

[0043] like Figure 3 As shown, when the main system and the backup system are operating normally, the main system CHA and CHB exchange security data. If the security data is consistent, CHB packages the security data into a security message and sends the security message to the main system CHA through the internal network interface, and at the same time transparently transmits it to the backup system CHB through the internal Ethernet. The main system CHA uses IP_P as the IP address to send the security message to the external security communication device through the external network interface through one network. The backup system CHB sends the security message to the backup system CHA through the internal network interface, and the backup system CHA then uses IP_S as the IP address to send the security message to the external security communication device through the external network interface through another network.

[0044] like Figure 4As shown, when the master system finds that the backup system changes from existing to non-existing, the master systems CHA and CHB exchange security data. If the security data are consistent, CHB packages the security data into a security message and sends the security message to the master system CHA through the internal network interface. At the same time, the security message is sent to the external security communication device through the external network interface via one network with IP_S as the IP address. The master system CHA then sends the security message to the external security communication device through the external network interface via another network with IP_P as the IP address.

[0045] When the backup system finds that the main system has changed from existing to non-existing, the backup system becomes the new main system. The new main systems CHA and CHB exchange security data. If the security data is consistent, CHB packages the security data into a security message and sends the security message to the new main system CHA through the internal network interface. At the same time, the security message is sent to the external security communication device through the external network interface via one network with IP_P as the IP address. The new main system CHA then sends the security message to the external security communication device through the external network interface via another network with IP_S as the IP address.

[0046] When the primary system finds that the backup system has changed from non-existent to existing, the primary and backup systems are restored to normal operation.

[0047] 1. CHA channel module In the above scheme, the channel CHA should have the following functional modules: 1. Basic functional modules In the present invention, the basic function module is used to maintain the basic functions of normal operation.

[0048] 2. Routing management module like Figure 5 As shown, when a safety message is received from an external network device, the safety message is routed and forwarded to the CHB of this system.

[0049] When sending a security message to an external network device, the security message received from the CHB of the system is directly sent to the external network device through the external network interface.

[0050] 2. CHB channel module Channel CHB should have the following functional modules, such as Figure 6 As shown, it is the CHB functional module of the standby system; Figure 7 As shown, it is the main system CHB function module, and the main system CHB function module is as follows: 1. Basic functional modules In the present invention, the basic function module is used to maintain the basic functions of normal operation.

[0051] 2. Message processing module The message processing module obtains network-related configurations during channel initialization and creates all sockets for receiving messages from the CHB of this system, including socket_a2b for exchanging security messages with the CHA of this system on the internal network interface, socket_b2b for exchanging security messages with another CHB of another system on the internal network interface, and socket_b for the CHB of this system to directly exchange security messages with the external network interface.

[0052] The message processing function is used only when the P machine is the main system. When receiving security messages from the external network, the message processing module first checks the dynamic IP flag in the IP management module. If the dynamic IP flag is FALSE, only the socket_a2b that exchanges security messages with the CHA of the system in the internal network interface and the socket_b2b that exchanges security messages with the CHB of another system in the internal network interface are monitored to see if new security data has been received. If the dynamic IP flag is TRUE, only the socket_a2b that exchanges security messages with the CHA of the system in the internal network interface and the socket_b that the CHB of the system directly exchanges security messages with the external network interface are monitored to see if new security data has been received.

[0053] When sending a security message to an external network, the message processing module first checks the dynamic IP flag in the IP management module. If the dynamic IP flag is FALSE, the security message is sent through socket_a2b that exchanges security messages with the CHA of the same department on the internal network interface and socket_b2b that exchanges security messages with the CHB of another department on the internal network interface. If the dynamic IP flag is TRUE, the security message is sent through socket_a2b that exchanges security messages with the CHA of the same department on the internal network interface and socket_b that exchanges security messages with the CHB of the same department directly on the external network interface.

[0054] 3. Condition monitoring module During normal operation, the status monitoring module is responsible for sending online frames and monitoring whether the online frames of the peer system can be received. If the online frames of the peer system are not received for X consecutive cycles, it is considered that the peer system does not exist. When it is detected that the peer system changes from existence to non-existence, the initialization dynamic IP interface provided by the IP management module is called. When it is detected that the peer system changes from non-existence to existence, the deletion dynamic IP interface provided by the IP management module is called.

[0055] 4. IP management module Provide initialization of dynamic IP interface and set the dynamic IP flag to TRUE. Initialization of dynamic IP includes selecting the target network port, binding the IP address of the network port to the IP address IP_S of the S machine CHA, binding the MAC address, sending ARP packets, etc.

[0056] Provides the ability to delete a dynamic IP interface and sets the dynamic IP flag to FALSE.

[0057] 5. Routing management module The routing function is used only when the P machine is a backup system. When receiving a security message from an external network interface, the security message sent by the CHA of the system is routed and forwarded to the CHB of the main system. When sending a security message to an external network device, the security message sent by the CHB of the main system is routed and forwarded to the CHA of the system.

[0058] The above is a specific description of the implementation mode of the present invention, but the present invention is not limited to the described embodiments. Those skilled in the art may make various equivalent modifications or substitutions without violating the spirit of the present invention, and these equivalents or substitutions are all included in the scope defined by the claims of the present invention.

Claims

1. A secure communication platform capable of dynamically managing IP, characterized in that: It includes a P machine and an S machine, wherein the P machine is a main device and the S machine is an auxiliary device, and both the P machine and the S machine include two channels, CHA and CHB; The IP address of the CHA channel of the P machine interacting with the external network interface is IP_P, and the IP address of the CHA channel of the S machine interacting with the external network interface is IP_S. Of the P machine and the S machine, one is the primary system and the other is the backup system; When both the main system and the backup system are operating normally, the two CHA channels and the two CHB channels work together to perform the network tasks of inputting safety messages and outputting safety messages; When the main system and the backup system execute the network tasks of inputting safety messages and outputting safety messages and one of the main system and the backup system encounter an abnormality, the CHB in the normal main system or the backup system takes over the IP address of the CHA in the abnormal main system or the backup system and continues to execute the network tasks; after the abnormal main system or the backup system returns to normal, the CHB in the normal main system or the backup system returns the taken-over network tasks to the CHA in the restored main system or the backup system.

2. A secure communication platform capable of dynamically managing IP as claimed in claim 1, characterized in that: When the P machine is the primary system and the S machine is the backup system, the security communication platform performs the following tasks to input security messages to the network: When both the main system and the backup system are operating normally, the main system CHA receives the security message of the external security communication device from the external network interface with IP_P as the IP address, and transmits the security message to CHB through the internal serial port network; the backup system CHA receives the security message of the external security communication device through the external network interface with IP_S as the IP address, and transmits the security message to CHB through the internal serial port network, and then the backup system CHB transmits the message header to the main system CHB through the internal Ethernet; the main system CHB filters the security messages of the dual networks, and only uses the messages received first, and sends the filtered security messages to the main system CHA through the internal network, and the CHA and CHB of the main system then independently verify and process the security messages.

3. A secure communication platform capable of dynamically managing IP as claimed in claim 2, characterized in that: When the P machine is the primary system and the S machine is the backup system, the security communication platform performs the following tasks to input security messages to the network: When the main system finds that the backup system has changed from existing to non-existing, the CHA and CHB of the main system receive the security message of the external security communication device through the external network interface respectively; the main system CHA uses IP_P as the IP address, and the main system CHB uses IP_S as the IP address; the main system CHA transmits the security message to the CHB through the internal network interface, and the main system CHB filters the security messages of the dual networks, and only uses the message received first, and sends the filtered security message to the main system CHA through the internal network, and the main system CHA and CHB then independently verify and process the security message; When the backup system finds that the main system has changed from existing to non-existing, the backup system becomes the new main system; CHA and CHB of the new main system receive security messages from external security communication devices through external network interfaces respectively; the new main system CHA uses IP_S as the IP address, and the new main system CHB uses IP_P as the IP address; CHA transmits security messages to CHB through the internal network interface, and the new main system CHB filters the security messages of the dual networks, only uses the messages received first, and sends the filtered security messages to the new main system CHA through the internal network; When the primary system finds that the backup system exists from non-existence, the primary system continues to use CHA to receive security messages from external security communication devices from the external network interface, and CHB no longer directly receives security messages from the external network; the backup system CHA receives security messages from external security communication devices through the external network interface and returns to the stage of normal operation of the primary and backup systems.

4. A secure communication platform capable of dynamically managing IP as claimed in claim 1, characterized in that: When the P machine is the primary system and the S machine is the backup system, the security communication platform performs the following network tasks to output security messages: When the main system and the backup system are operating normally, the main system CHA and CHB exchange security data. If the security data are consistent, CHB packages the security data into a security message and sends the security message to the main system CHA through the internal network interface, and at the same time transparently transmits it to the backup system CHB through the internal Ethernet; the main system CHA sends the security message to the external security communication device through the external network interface via one network with IP_P as the IP address; the backup system CHB sends the security message to the backup system CHA through the internal network interface, and the backup system CHA then sends the security message to the external security communication device through the external network interface via another network with IP_S as the IP address.

5. A secure communication platform capable of dynamically managing IP as claimed in claim 4, characterized in that: When the P machine is the primary system and the S machine is the backup system, the security communication platform performs the following network tasks to output security messages: When the master system finds that the backup system has changed from existing to non-existing, the master system CHA and CHB exchange security data. If the security data are consistent, CHB packages the security data into a security message and sends the security message to the master system CHA through the internal network interface. At the same time, the security message is sent to the external security communication device through the external network interface via one network with IP_S as the IP address; the master system CHA then sends the security message to the external security communication device through the external network interface via another network with IP_P as the IP address; When the backup system finds that the main system has changed from existing to non-existing, the backup system becomes the new main system; the new main systems CHA and CHB exchange security data. If the security data are consistent, CHB packages the security data into a security message and sends the security message to the new main system CHA through the internal network interface, and at the same time sends the security message to the external security communication device through the external network interface via one network with IP_P as the IP address; the new main system CHA then sends the security message to the external security communication device through the external network interface via another network with IP_S as the IP address; When the primary system finds that the backup system has changed from non-existent to existing, the primary and backup systems are restored to normal operation.

6. A secure communication platform capable of dynamically managing IP as claimed in claim 1, characterized in that: The CHA channel includes basic function module I and routing management module I; The basic function module I is used to maintain the basic functions of normal operation; The routing management module I, when receiving a security message from an external network device, routes and forwards the security message to the CHB of the system; when sending a security message to an external network device, directly sends the security message received from the CHB of the system to the external network device through the external network interface.

7. A secure communication platform capable of dynamically managing IP as claimed in claim 1, characterized in that: The CHB channel of the main system includes basic function module II, message processing module, status monitoring module, IP management module, and routing management module II; The basic function module II is used to maintain the basic functions of normal operation; The message processing module is used to receive, parse and process messages in the network; The status monitoring module is used to monitor the operating status and fault conditions of the node in real time; The IP management module is used to dynamically manage and allocate IP addresses; The routing management module II is responsible for maintaining the network routing table and forwarding messages in the network.

8. A secure communication platform capable of dynamically managing IP as claimed in claim 7, characterized in that: The message processing module obtains network-related configurations when the channel is initialized, and creates all sockets for the CHB of this system to receive messages, including socket_a2b for exchanging security messages with the CHA of this system on the internal network interface, socket_b2b for exchanging security messages with another CHB of another system on the internal network interface, and socket_b for the CHB of this system to directly exchange security messages with the external network interface.

9. A secure communication platform capable of dynamically managing IP as claimed in claim 8, characterized in that: The message processing module uses the message processing function when the P machine is the main system, including: When receiving security messages from the external network, the message processing module first checks the dynamic IP flag in the IP management module. If the dynamic IP flag is FALSE, it monitors socket_a2b that exchanges security messages with the CHA of the same system on the internal network interface and socket_b2b that exchanges security messages with the CHB of another system on the internal network interface to see if new security data has been received. If the dynamic IP flag is TRUE, it monitors socket_a2b that exchanges security messages with the CHA of the same system on the internal network interface and socket_b that exchanges security messages with the CHB of the same system directly on the external network interface to see if new security data has been received. When sending a security message to the external network, the message processing module first checks the dynamic IP flag in the IP management module. If the dynamic IP flag is FALSE, the security message is sent through socket_a2b that exchanges security messages with the CHA of this system on the internal network interface, and socket_b2b that exchanges security messages with the CHB of another system on the internal network interface; if the dynamic IP flag is TRUE, the security message is sent through socket_a2b that exchanges security messages with the CHA of this system on the internal network interface, and socket_b that exchanges security messages between the CHB of this system and the external network interface.

10. A secure communication platform capable of dynamically managing IP as claimed in claim 7, characterized in that: During normal operation, the status monitoring module is responsible for sending online frames and monitoring whether the online frames of the peer system can be received; when the online frames of the peer system cannot be received for X consecutive cycles, it is considered that the peer system does not exist; when it is detected that the peer system changes from existence to non-existence, the initialization dynamic IP interface provided by the IP management module is called; when it is detected that the peer system changes from non-existence to existence, the deletion dynamic IP interface provided by the IP management module is called; The IP management module provides an interface for initializing dynamic IP and sets the dynamic IP flag to TRUE; initializing dynamic IP includes selecting the target network port, binding the IP address of the network port to the IP address IP_S of the S machine CHA, binding the MAC address, and sending an ARP packet; the IP management module provides an interface for deleting dynamic IP and sets the dynamic IP flag to FALSE; The routing management module II uses the routing function when the P machine is a backup system, including: when receiving a security message from the external network interface, routing and forwarding the security message sent by the CHA of this system to the main system CHB; when sending a security message to an external network device, routing and forwarding the security message sent by the main system CHB to the CHA of this system.

Images