Interlocking dual-channel acquisition information safety verification method, system and equipment and medium
Through the interlocking dual-channel information acquisition security verification method, the XOR operation and cache area mechanism are used to solve the problem that the information of the interlocking device is not verified after failure recovery, and the driving safety and information accuracy are improved.
Patent Information
- Application Number
- CN202411911671.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-24
- Publication Date
- 2025-04-15
AI Technical Summary
The existing interlocking equipment fails to effectively verify the validity of the information after the failure is restored, which poses a driving safety hazard.
The interlocking dual-channel information acquisition security verification method is adopted. By receiving the computer's interlocking dual-channel information, the information that needs to be checked is filtered out, and the XOR operation is performed to determine its validity or failure. The fault buffer area and data buffer area are set to ensure that the information can only be used after the failure is restored.
Improve driving safety, avoid safety hazards caused by unchecked information, and ensure information accuracy and reliability.
Smart Images

Figure CN119830361A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of railway signals, and in particular to a method, system, equipment and medium for verifying the security of interlocking dual-channel collected information. Background Art
[0002] When a new line is connected to an existing line, the computer interlocking equipment of the new station needs to collect the relay information of the station connected to the existing line, and at the same time output the information content driven by this station to the adjacent station. Most of the collected information exchanged between the two stations is key information related to driving safety, which is the object of the present invention.
[0003] At present, there are usually two ways for computer interlocking equipment to collect relay information:
[0004] First: For the key information used for interlocking logic, for example, the track relay GJ indicating the track circuit occupancy status needs to collect its front and rear contacts, such as Figure 1 , and perform XOR operation inside the interlocking system (NLCB in the figure is a control unit in the interlocking). XOR, its operation rule is equivalent to binary addition without carry: 1 represents true, 0 represents false, then the XOR operation rule is: 0⊕0=0, 1⊕0=1, 0⊕1=1, 1⊕1=0 (same is 0, different is 1). XOR operation is used to determine whether two variables are different. Figure 1 Middle: The interlocking system collects the front and rear contact information of the track relay GJ. The meanings of these two contact information are mutually exclusive. When 10 is collected, it is valid information, indicating that the front contact of the track relay GJ is collected and the rear contact of GJ is not collected, indicating that the track circuit is idle; when 01 is collected, it is valid information, indicating that the rear contact of the track relay GJ is collected but the front contact of GJ is not collected, indicating that the track circuit is occupied. When 00 or 11 is collected, it is fault information. According to the "fail-safe" principle of railway signals, the track circuit should be output externally to indicate occupation.
[0005] Second: key information for non-interlocking logic. Figure 2 The interlocking system collects the signal machine filament relay information DJ. It only needs to collect its front contact. If 1 is collected, it means that the signal machine filament is intact, and if 0 is collected, it means that the signal machine filament is broken.
[0006] At present, the interlocking device handles two mutually exclusive information (such as the front and rear contacts of GJ) in the following way: if 10 or 01 is collected, it is valid; if 00 or 11 is collected, a fault should be output; after 01 or 10 is collected again, it is directly considered valid and output. However, this method has certain safety risks.
[0007] In view of this, the present invention is proposed. Summary of the invention
[0008] The purpose of the present invention is to provide an interlocking dual-channel information collection security verification method, system, equipment and medium. After the fault is restored, it is necessary to undergo re-verification to determine whether the information is valid, thereby improving driving safety.
[0009] The objective of the present invention is achieved through the following technical solutions:
[0010] An interlocking dual-channel collection information security verification method, comprising:
[0011] Receive computer interlock dual-channel acquisition information and filter out the information that needs to be safety checked;
[0012] Determine whether the information that needs to be security-verified is valid information or fault information, and complete the information security verification based on the determination result;
[0013] If it is valid information, and it has been valid information for multiple consecutive cycles before, then the valid information will be directly output;
[0014] If it is fault information, then output the fault information;
[0015] If it is valid information and the previous cycle was fault information, then the fault information is output; if it is valid information and the previous cycle was valid information received after a fault and the content is different from the information being security-checked this time, then it is output as valid information.
[0016] An interlocking dual-channel information collection safety verification system, comprising:
[0017] Information receiving and screening unit, used to receive computer interlocking dual-channel acquisition information and screen out information that needs to be safety checked;
[0018] An information security verification unit is used to determine whether the information that needs to be security verified is valid information or fault information, and complete the information security verification based on the judgment result; if it is valid information, and it has been valid information for multiple consecutive cycles before, the valid information is directly output; if it is fault information, the fault information is output; if it is valid information, and it was fault information in the previous cycle, the fault information is output; if it is valid information, and the previous cycle was valid information received after the fault, and the content is different from the information that is being security verified this time, it is output as valid information.
[0019] A processing device, comprising: one or more processors; a memory for storing one or more programs;
[0020] When the one or more programs are executed by the one or more processors, the one or more processors implement the aforementioned method.
[0021] A readable storage medium stores a computer program, which implements the above method when the computer program is executed by a processor.
[0022] It can be seen from the technical solution provided by the present invention that when the interlocking output fails, the valid information received again cannot be fully trusted and used immediately, but needs to be verified again and can only be used after the verification is correct, so as to avoid the safety hazards existing in the existing solution. BRIEF DESCRIPTION OF THE DRAWINGS
[0023] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative work.
[0024] Figure 1 A schematic diagram of the interlocking system provided by the background technology of the present invention for collecting GJ information of track relays;
[0025] Figure 2 A schematic diagram of an interlocking system providing the background technology of the present invention for collecting DJ information of a signal light filament relay;
[0026] Figure 3 A schematic diagram of an interlocking dual-channel information collection security verification method provided by an embodiment of the present invention;
[0027] Figure 4 A schematic diagram of dual-channel data acquisition of a photo-check relay provided in an embodiment of the present invention;
[0028] Figure 5 A schematic diagram of a storage area provided by an embodiment of the present invention;
[0029] Figure 6 A schematic diagram of a state change process of a storage area provided in an embodiment of the present invention;
[0030] Figure 7 A flowchart of a security verification process provided by an embodiment of the present invention;
[0031] Figure 8 A schematic diagram of an interlocking dual-channel information collection security verification system provided by an embodiment of the present invention;
[0032] Fig. 9 A schematic diagram of a processing device provided by an embodiment of the present invention. DETAILED DESCRIPTION
[0033] The following is a clear and complete description of the technical solutions in the embodiments of the present invention in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the protection scope of the present invention.
[0034] First, the terms that may be used in this article are explained as follows:
[0035] The terms "include", "comprises", "contains", "has" or other descriptions with similar semantics should be interpreted as non-exclusive inclusion. For example, including certain technical feature elements (such as raw materials, components, ingredients, carriers, dosage forms, materials, dimensions, parts, components, mechanisms, devices, steps, procedures, methods, reaction conditions, processing conditions, parameters, algorithms, signals, data, products or products, etc.) should be interpreted as including not only certain technical feature elements explicitly listed, but also other technical feature elements known in the art that are not explicitly listed.
[0036] The term "consisting of..." means excluding any technical feature elements not explicitly listed. If this term is used in a claim, it will make the claim closed, so that it does not contain technical feature elements other than the technical feature elements explicitly listed, except for the conventional impurities related to them. If this term only appears in a clause of a claim, it only limits the elements explicitly listed in the clause, and the elements recorded in other clauses are not excluded from the overall claim.
[0037] The following is a detailed description of an interlocked dual-channel information collection security verification method, system, device and medium provided by the present invention. The contents not described in detail in the embodiments of the present invention belong to the prior art known to professional and technical personnel in the field. If no specific conditions are specified in the embodiments of the present invention, the conventional conditions in the field or the conditions recommended by the manufacturer are followed. The instruments used in the embodiments of the present invention, if the manufacturer is not specified, are all conventional products that can be purchased commercially.
[0038] Embodiment 1
[0039] The embodiment of the present invention provides a method for verifying the security of information collected through an interlocking dual-channel. Figure 3 As shown, it mainly includes the following steps:
[0040] Step 1: Receive computer interlock dual-channel acquisition information and filter out the information that needs to be safety checked.
[0041] Step 2: Determine whether the information that needs to be security-checked is valid information or fault information, and complete the information security check based on the judgment result.
[0042] The main process is as follows:
[0043] If it is valid information, and it has been valid information for multiple consecutive cycles before, then the valid information will be directly output;
[0044] If it is fault information, then output the fault information;
[0045] If it is valid information and the previous cycle was fault information, the fault information in the fault buffer area will still be output; if it is valid information and the previous cycle was valid information received after the fault, and the content is different from the information being security checked this time, it will be output as valid information this time.
[0046] In the above-mentioned solution provided by the embodiment of the present invention, when the interlock output fails, the valid information received again cannot be fully trusted and used immediately, but needs to be verified again and can only be used after the verification is correct, so as to avoid the safety hazards existing in the existing solution.
[0047] In order to more clearly demonstrate the technical solution and technical effects provided by the present invention, the method provided by the embodiment of the present invention is described in detail with reference to specific embodiments below.
[0048] 1. Introduction to the principles of the plan.
[0049] In the embodiment of the present invention, an XOR operation is performed on the dual-channel collected information to determine whether the two are different. If they are different, it is valid information; if they are the same, it is fault information. The principle flow of the relevant safety verification can be described as follows:
[0050] (1) If valid information is received all the time, it will be output directly.
[0051] (2) When fault information is received, the fault information is output.
[0052] (3) When valid information is received, if the last time was fault information, that is, the current valid information is the first normal reception after the fault information, the fault information in the fault buffer area is still output.
[0053] (4) The valid information received is the valid information received for the second time after the fault information is received, and the valid information is different from the first valid information. If both conditions are met, the valid information received this time can be output. That is, after the system receives the fault information, it receives two consecutive valid information with different values, and then it is considered that the second valid information can be output.
[0054] According to the above working principle, corresponding examples are provided for illustration.
[0055] like Figure 4The figure shows a schematic diagram of dual-channel acquisition of the ZCJ relay. The ZCJ relay is used to indicate the hostile relationship between the routes between two stations. It is a key relay involved in driving safety. The interlocking system will collect the status of its front and rear contacts (i.e., ZCJQ and ZCJH) through its NLCB board. There are two possibilities for each contact of ZCJQ and ZCJH: "Not collected" (status "0") or "Collected" (status "1"). When the status of the ZCJQ and ZCJH contacts collected is 01 or 10, it is valid information and is output normally. When the status of the ZCJQ and ZCJH contacts collected is 00 or 11, it is considered that the front and rear contacts are not collected at the same time or the front and rear contacts are collected at the same time, and both are considered as fault information. After the first fault, when the interlocking system receives valid information of 10 or 01 again, it does not consider that the valid information can be output and used immediately, and the fault information output will be maintained; only when the valid information of 01 or 10 is received for the second time and is different from the valid information for the first time, the 10 or 01 received for the second time will be considered as valid information that can be output again.
[0056] 2. Implementation details of the solution.
[0057] 1. Storage area.
[0058] In the embodiment of the present invention, three storage areas are set, such as Figure 5 As shown, it mainly includes:
[0059] (1) Fault buffer area, used to store fault information 11 or 00, including high and low digits, each digit corresponds to the collection information of a channel. For example, 11 means that the collection information of two channels is 1, and 00 means that the collection information of two channels is 0.
[0060] (2) Data buffer area, used to store valid information, including high and low digits. Each digit corresponds to the acquisition information of a channel. For example, 10 means that the acquisition information of the first channel is 1, and the acquisition information of the second channel is 0; 01 has a similar meaning.
[0061] (3) Status area, including three states, represented by values 0, 1, and 2. The first state is valid information (value is set to 0), the second state is the first time fault information is received (value is set to 1), and the third state is the first time valid information is received after fault information (value is set to 2).
[0062] Based on the aforementioned principle, the state changes of each storage area during the security verification process are as follows:
[0063] (1) If it is valid information, and the previous multiple consecutive cycles have been valid information, then the current valid information is directly output. During this process, the data buffer area stores the corresponding valid information, and the status area is set to 0, indicating the valid information state.
[0064] (2) If it is fault information, the fault information is output. During this process, the fault buffer area stores the fault information and the status area is set to 1.
[0065] (3) If it is valid information and the previous cycle was fault information, the fault information is still output. During this process, the data buffer area stores the corresponding valid information and the status area is set to 2, indicating that the valid information is received for the first time after the fault.
[0066] (4) If it is valid information, and the previous cycle is valid information received after the failure, and the content of the information being safety-checked this time is different from the information in the data storage area, then it is output as valid information this time.
[0067] like Figure 6 As shown, an example of the state change process of the storage area is shown. When 11 is received, it is determined to be fault information, the fault information is output, the state area is set to 1, and 11 is stored in the fault buffer area; after that, valid data (01) is received for the first time, fault information is also output, the state area is set to 2, and 01 is stored in the data buffer area; thereafter, valid data (10) is received for the second time, which is different from the valid data received for the first time, so the valid data is output and the data buffer area is cleared.
[0068] 2. Security data verification example.
[0069] Taking the aforementioned check relay (ZCJ) as an example to introduce the safety verification process, based on the above scheme, a corresponding safety verification program (sfmeschk.c program) can be compiled, and then combined with relevant configuration data, the sfmeschk.c program is called through interlocking each cycle operation to realize cyclic verification of safety information. Figure 7 As shown, the main process includes:
[0070] (1) Data acquisition, corresponding to step ①, the computer interlocking program receives all information data from the outside (i.e., obtains the sharet_g.input[] value).
[0071] (2) Filtering information, corresponding to step ②, select the pre-defined information in the external information data that needs to be security-checked, such as selecting the front and rear contacts of ZCJ.
[0072] (3) Whether the received information is 11, corresponding to step ③, determine whether the ZCJQ and ZCJH safety information is 11. If so, the received information is fault information, and step ⑩ is executed to store the high-order and low-order data in the fault buffer area for subsequent comparison with the received information. At the same time, the status area is set to 1, and the program directly outputs 11. If not, step ④ is executed.
[0073] (4) Whether the received information is 00, corresponding to step ④, execute the judgment whether the ZCJQ and ZCJH information are in the 00 state. If so, execute step Timing is performed. If it is within the time range allowed by the computer program running cycle, the result is directly output. If it exceeds the cycle range, it is regarded as a fault state and the data is placed in the fault buffer area for subsequent comparison with the received information. At the same time, the status area is set to 1, and the program directly outputs 00; if not, execute step ⑤.
[0074] (5) Whether the value in the status area is 0, corresponding to step ⑤. After the previous judgment, it can be determined that the information received this time is valid information (01 or 10). The program then checks whether the fault buffer area is empty and the status area is 0. If so, the valid information 10 or 01 received this time can be directly output; if not, the program checks whether the value in the status area is 1 to continue to determine whether it is the first time to receive valid information after the fault).
[0075] (6) Whether the value in the status area is 1, corresponding to step ⑥. After the program receives 10 or 01, it determines whether this is the first valid information received after the fault by judging whether the status area is 1. If so, this is the first valid information received after the fault, and the information is still unavailable. The valid information needs to be temporarily stored in the data buffer, and the value in the status area is set to 2. The program still outputs the fault information in the fault buffer area to the outside world; if not, continue to judge whether it is state 2 (the first time valid information is received after the fault).
[0076] (7) Determine whether the value in the status area is 2, corresponding to step ⑦. After receiving 10 or 01, the program determines whether the value in the status area is 2. If not, the information is fault information, and the fault information in the fault buffer area is output; if so, execute step ⑧.
[0077] (8) Compare the high and low bit data to see if they are different from those in the data cache, corresponding to step ⑧. Compare the current valid information with the data in the data cache. If they are consistent, they do not meet the requirements and are considered to be faulty. Output the fault information in the fault cache. If they are inconsistent, execute step ⑨.
[0078] (9) Clear: The program outputs the received valid information to the outside. At the same time, the data buffer and fault buffer are cleared, the status area is set to 0, and the counter cycle count is cleared.
[0079] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above embodiments can be implemented by software, or by means of software plus necessary general hardware platforms. Based on such understanding, the technical solutions of the above embodiments can be embodied in the form of software products, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.), including several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in the various embodiments of the present invention.
[0080] Embodiment 2
[0081] The present invention also provides an interlocking dual-channel information collection security verification system, which is mainly used to implement the method provided in the above embodiment, such as Figure 8 As shown, the system mainly includes:
[0082] Information receiving and screening unit, used to receive computer interlocking dual-channel acquisition information and screen out information that needs to be safety checked;
[0083] An information security verification unit is used to determine whether the information that needs to be security verified is valid information or fault information, and complete the information security verification based on the judgment result; if it is valid information, and it has been valid information for multiple consecutive cycles before, the valid information is directly output; if it is fault information, the fault information is output; if it is valid information, and it was fault information in the previous cycle, the fault information is output; if it is valid information, and the previous cycle was valid information received after the fault, and the content is different from the information that is being security verified this time, it is output as valid information this time.
[0084] In the embodiment of the present invention, the determining whether the information requiring security verification is valid information or fault information includes:
[0085] Perform XOR operation on the dual-channel collected information to determine whether the two are different. If they are different, it is valid information; if they are the same, it is fault information.
[0086] In the embodiment of the present invention, the system further comprises: a storage unit, which is provided with three storage areas;
[0087] Fault buffer area, used to store fault information;
[0088] Data buffer area, used to store valid information;
[0089] The status area contains three states. The first is valid information, the second is the first time fault information is received, and the third is the first time valid information is received after a fault.
[0090] In the embodiment of the present invention, it also includes: a state change process of each storage area during the security verification process;
[0091] If it is valid information, and the previous multiple consecutive cycles have been valid information, then the valid information is directly output. During this process, the data buffer area stores the corresponding valid information, and the status area is set to 0, indicating the status of valid information;
[0092] If it is fault information, then the fault information is output. During this process, the fault buffer area stores the corresponding fault information and the status area is set to 1;
[0093] If it is valid information, and the previous cycle is fault information, then the fault information is output. During this process, the data buffer area stores the corresponding valid information, and the status area is set to 2, indicating that the valid information is received for the first time after the fault.
[0094] If it is valid information, and the previous cycle is valid information received after a fault, and the content of the information being safety-checked this time is different from the information in the data storage area, then it is output as valid information this time.
[0095] Technical personnel in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional modules is used as an example. In actual applications, the above-mentioned functions can be assigned to different functional modules as needed, that is, the internal structure of the system can be divided into different functional modules to complete all or part of the functions described above.
[0096] Embodiment 3
[0097] The present invention also provides a processing device, such as Fig. 9 As shown, it mainly includes: one or more processors; a memory for storing one or more programs; wherein, when the one or more programs are executed by the one or more processors, the one or more processors implement the methods provided by the aforementioned embodiments.
[0098] Furthermore, the processing device also includes at least one input device and at least one output device; in the processing device, the processor, memory, input device, and output device are connected via a bus.
[0099] In the embodiment of the present invention, the specific types of the memory, input device and output device are not limited; for example:
[0100] The input device may be a touch screen, an image acquisition device, a physical button or a mouse, etc.;
[0101] The output device may be a display terminal;
[0102] The memory may be a random access memory (RAM) or a non-volatile memory, such as a disk memory.
[0103] Embodiment 4
[0104] The present invention also provides a readable storage medium storing a computer program, which implements the method provided in the above embodiment when the computer program is executed by a processor.
[0105] In the embodiment of the present invention, the readable storage medium is a computer-readable storage medium and can be set in the aforementioned processing device, for example, as a memory in the processing device. In addition, the readable storage medium can also be a U disk, a mobile hard disk, a read-only memory (ROM), a disk or an optical disk, etc., which can store program codes.
[0106] The above is only a preferred specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily thought of by any technician familiar with the technical field within the technical scope disclosed in the present invention should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims. The information disclosed in the background technology section of this article is only intended to deepen the understanding of the overall background technology of the present invention, and should not be regarded as an admission or in any form that the information constitutes prior art known to those skilled in the art.
Claims
1. An interlocking dual-channel information collection security verification method, characterized in that: include: Receive computer interlock dual-channel acquisition information and filter out the information that needs to be safety checked; Determine whether the information that needs to be security-verified is valid information or fault information, and complete the information security verification based on the determination result; If it is valid information, and it has been valid information for multiple consecutive cycles before, then the valid information will be directly output; If it is fault information, then output the fault information; If it is valid information, and the previous cycle is fault information, then the fault information is output; If it is valid information, and the previous cycle is valid information received after a fault, and the content is different from the information being safety-checked this time, it is output as valid information.
2. The interlocking dual-channel information collection security verification method according to claim 1 is characterized in that: The determining whether the information requiring security verification is valid information or fault information includes: Perform XOR operation on the dual-channel collected information to determine whether the two are different. If they are different, it is valid information; if they are the same, it is fault information.
3. The interlocking dual-channel information collection security verification method according to claim 1 is characterized in that: Also includes: Set up three storage areas; Fault buffer area, used to store fault information; Data buffer area, used to store valid information; The status area contains three states. The first is valid information, the second is the first time fault information is received, and the third is the first time valid information is received after a fault.
4. The interlocking dual-channel information collection security verification method according to claim 3 is characterized in that: Also includes: The state change process of each storage area during the security verification process; If it is valid information, and the previous multiple consecutive cycles have been valid information, then the valid information is directly output. During this process, the data buffer area stores the corresponding valid information, and the status area is set to 0, indicating the valid information state; If it is fault information, then the fault information is output. During this process, the fault buffer area stores the corresponding fault information and the status area is set to 1; If it is valid information, and the previous cycle is fault information, then the fault information is output. During this process, the data buffer area stores the corresponding valid information, and the status area is set to 2, indicating that the valid information is received for the first time after the fault. If it is valid information, and the previous cycle is valid information received after a fault, and the content of the information being safety-checked this time is different from the information in the data storage area, then it is output as valid information this time.
5. An interlocking dual-channel information collection security verification system, characterized in that: include: Information receiving and screening unit, used to receive computer interlocking dual-channel acquisition information and screen out information that needs to be safety checked; An information security verification unit, used to determine whether the information that needs to be security verified is valid information or fault information, and complete the information security verification based on the judgment result; if it is valid information, and it has been valid information for multiple consecutive cycles before, the valid information is directly output; If it is fault information, then output the fault information; If it is valid information, and the previous cycle is fault information, then the fault information is output; If it is valid information, and the previous cycle is valid information received after a fault, and the content is different from the information being safety-checked this time, it is output as valid information.
6. The interlocking dual-channel information collection safety verification system according to claim 5 is characterized in that: The determining whether the information requiring security verification is valid information or fault information includes: Perform XOR operation on the dual-channel collected information to determine whether the two are different. If they are different, it is valid information; if they are the same, it is fault information.
7. The interlocking dual-channel information collection safety verification system according to claim 5 is characterized in that: It also includes: a storage unit, which is provided with three storage areas; Fault buffer area, used to store fault information; Data buffer area, used to store valid information; The status area contains three states. The first is valid information, the second is the first time fault information is received, and the third is the first time valid information is received after a fault.
8. The interlocking dual-channel information collection safety verification system according to claim 7 is characterized in that: Also includes: The state change process of each storage area during the security verification process; If it is valid information, and the previous multiple consecutive cycles have been valid information, then the valid information is directly output. During this process, the data buffer area stores the corresponding valid information, and the status area is set to 0, indicating the valid information state; If it is fault information, then the fault information is output. During this process, the fault buffer area stores the corresponding fault information and the status area is set to 1; If it is valid information, and the previous cycle is fault information, then the fault information is output. During this process, the data buffer area stores the corresponding valid information, and the status area is set to 2, indicating that the valid information is received for the first time after the fault. If it is valid information, and the previous cycle is valid information received after a fault, and the content of the information being safety-checked this time is different from the information in the data storage area, then it is output as valid information this time.
9. A processing device, characterized in that: include: one or more processors; A memory for storing one or more programs; When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 4.
10. A readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 4 is implemented.