Virtual board card monitoring method and system

Abstract

The invention provides a virtual board card monitoring method and system, the method is applied to the virtual board card monitoring system, the monitoring system comprises a plurality of virtual board cards, and a plurality of security application programs and a plurality of monitoring programs corresponding to the plurality of virtual board cards; the monitoring method comprises the following steps: for the plurality of virtual board cards, the plurality of security application programs send the current cycle number and the current time to each other; and for any virtual board card in the plurality of virtual board cards, the monitoring program receives the current cycle number and the current time sent by the security application program, and when the current cycle number or the current time is inconsistent, the monitoring program closes the virtual board card. Through the method and the system provided by the invention, pace consistency of a plurality of virtual board cards and real-time performance of a plurality of security application programs can be ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of virtualization, and in particular to a monitoring method and system for a virtual board. Background Art

[0002] In recent years, some new development directions have emerged in the field of urban rail transit based on communication-based train automatic control systems, such as interconnection, fully automatic unmanned driving, train autonomous operation systems, and systems with multiple signal formats. Correspondingly, these new directions require the support of rail transit safety computing platforms, and therefore, new technical requirements are also put forward for safety computing platforms.

[0003] As the requirements for secure computing platforms increase, the security and real-time requirements of virtual boards, as an important part of secure computing platforms, also increase accordingly. Therefore, how to monitor the real-time performance of virtual boards has become an urgent problem to be solved. Summary of the invention

[0004] The embodiments of the present application provide a method and system for monitoring a virtual board, which can ensure the synchronization of multiple virtual boards and the real-time performance of multiple security applications.

[0005] An embodiment of the present application provides a monitoring method for a virtual board, which is applied to a monitoring system for the virtual board, wherein the monitoring system includes multiple virtual boards, and multiple security applications and multiple monitoring programs corresponding to the multiple virtual boards; the monitoring method includes the following steps: for the multiple virtual boards, the multiple security applications send current cycle numbers and current times to each other; for any virtual board among the multiple virtual boards, the monitoring program receives the current cycle number and current time sent by the security application, and when the current cycle number or current time is inconsistent, the monitoring program shuts down the virtual board.

[0006] In one embodiment, the monitoring system further includes a plurality of current cycle number comparators and a plurality of current time comparators corresponding to a plurality of virtual boards; when the current cycle number or the current time is inconsistent, the monitoring program shuts down the virtual board, including: the current cycle number comparator compares whether the current cycle number is consistent, if the current cycle number is inconsistent, the monitoring program shuts down the virtual board; or the current time comparator compares whether the current time is consistent, if the current time is inconsistent, the monitoring program shuts down the virtual board.

[0007] In one embodiment, the monitoring system also includes multiple hardware watchdogs corresponding to multiple virtual boards; the monitoring method also includes: for any virtual board among the multiple virtual boards, the hardware watchdog sends the current cycle running time to the monitoring program, when the current cycle running time is less than or equal to a preset value, the hardware watchdog receives a reset command sent by the monitoring program and restarts the timer of the hardware watchdog.

[0008] In one embodiment, when the current cycle running time is greater than a preset value, the monitoring program shuts down the virtual board.

[0009] In one embodiment, the current cycle running time is the end time of the current cycle running of the security application minus the start time of the running.

[0010] In one embodiment, the plurality of virtual boards are two-out-of-three virtual boards.

[0011] An embodiment of the present application also provides a monitoring system for a virtual board, the monitoring system comprising multiple virtual boards, multiple security applications and multiple monitoring programs; the multiple security applications are respectively built into the multiple virtual boards, corresponding one-to-one to the multiple virtual boards; the multiple monitoring programs correspond one-to-one to the multiple virtual boards; the multiple security applications are used to send the current cycle number and the current time to each other; the monitoring program is used to receive the current cycle number and the current time sent by the security application, and when the current cycle number or the current time is inconsistent, the monitoring program shuts down the virtual board.

[0012] In one embodiment, the monitoring system also includes multiple current cycle number comparators and multiple current time comparators; the multiple current cycle number comparators are respectively built into multiple virtual boards, corresponding one to one with the multiple virtual boards; the multiple current time comparators are respectively built into multiple virtual boards, corresponding one to one with the multiple virtual boards; the current cycle number comparator is used to compare whether the current cycle number is consistent, and when the current cycle number is inconsistent, the monitoring program shuts down the virtual board; the current time comparator is used to compare whether the current time is consistent, and when the current time is inconsistent, the monitoring program shuts down the virtual board.

[0013] In one embodiment, the monitoring system also includes multiple hardware watchdogs, which correspond one-to-one to the multiple virtual boards; the hardware watchdog is used to send the current cycle running time to the monitoring program; when the current cycle running time is less than or equal to a preset value, the hardware watchdog is also used to receive a reset command sent by the monitoring program and restart the timer of the hardware watchdog; when the current cycle running time is greater than a preset value, the monitoring program shuts down the virtual board; wherein the current cycle running time is the end time of the current cycle running of the security application minus the start time of the running.

[0014] In one embodiment, the plurality of virtual boards are two-out-of-three virtual boards.

[0015] The solution provided in the above-mentioned embodiments of the present application ensures the synchronization of the three virtual boards by synchronizing the CPU cycles and times of the virtual boards, monitors the real-time performance of the three virtual boards through a hardware watchdog, and simultaneously records the execution time of multiple security applications for long-term virtualization board performance optimization. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] In order to more clearly illustrate the technical solution of the embodiments of the present application, the drawings required for use in the embodiments of the present application are briefly introduced below.

[0017] Figure 1 It is a flowchart of a method for monitoring a virtual board provided in an embodiment of the present application;

[0018] Figure 2 It is a schematic diagram of a monitoring device for a virtual board provided in an embodiment of the present application. DETAILED DESCRIPTION

[0019] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application.

[0020] Similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in subsequent drawings. At the same time, in the description of this application, the terms "first", "second", etc. are only used to distinguish the description and cannot be understood as indicating or implying relative importance.

[0021] A virtual card is a software card that simulates real hardware interfaces and processors and runs on a server host.

[0022] The three-out-of-two virtual board is a special virtual board. The three-out-of-two virtual board architecture means that there are three independent virtual boards in a system. The three virtual boards can run on the same host server or on three different host servers. Each virtual board runs a secure operating system and a secure application. The calculation result is considered valid only when the calculation results of at least two virtual boards are consistent.

[0023] As mentioned above, the virtual board is an important component of the secure computing platform. Its security and real-time performance are related to the safe operation of urban rail transit. Therefore, how to monitor the real-time performance of the virtual board has become an urgent problem to be solved.

[0024] In order to solve the above problems, the embodiment of the present application proposes a monitoring method for a virtual board, which includes the following steps: for the multiple virtual boards, the multiple security applications send the current cycle number and the current time to each other; for any virtual board in the multiple virtual boards, the monitoring program receives the current cycle number and the current time sent by the security application, and when the current cycle number or the current time is inconsistent, the monitoring program closes the virtual board. At the same time, the embodiment of the present application proposes a monitoring system for a virtual board, which includes multiple virtual boards, multiple security applications and multiple monitoring programs; the multiple security applications are respectively built into multiple virtual boards, corresponding to the multiple virtual boards one by one; the multiple monitoring programs correspond to the multiple virtual boards one by one; the multiple security applications are used to send the current cycle number and the current time to each other; the monitoring program is used to receive the current cycle number and the current time sent by the security application, and when the current cycle number or the current time is inconsistent, the monitoring program closes the virtual board. Through the above method and system, the real-time monitoring of multiple virtual boards can be completed, ensuring the synchronization of multiple virtual boards and the real-time performance of multiple security applications.

[0025] Figure 1 FIG. 1 is a flow chart of a method for monitoring a virtual board in an embodiment of the present application. Figure 1 As shown, the method includes the following steps 110 to 120. The method is applied to the monitoring system of the virtual board, and the monitoring system includes multiple virtual boards, and multiple security applications and multiple monitoring programs corresponding to the multiple virtual boards.

[0026] Step 110: For the multiple virtual boards, the multiple security applications send current cycle numbers and current times to each other.

[0027] The current cycle number may be the counting result of the CPU (Central Processing Unit) cycle counter, which indicates the number of times the virtual board executes the security application. When the virtual board completes a full application, the CPU cycle counter will increase by 1 and enter the next cycle.

[0028] Regarding the current time, it can be a timestamp, that is, the time point when multiple security applications send information to each other.

[0029] The current cycle number and current time are used to determine whether the execution between multiple virtual boards is synchronized. When the current cycle number or current time of a virtual board is inconsistent with that of other virtual boards, it indicates that there is a problem with the virtual board. At this time, the fault handling mechanism will be triggered, usually shutting down the virtual board.

[0030] Step 120: For any virtual board among the multiple virtual boards, the monitoring program receives the current cycle number and the current time sent by the security application. When the current cycle number or the current time is inconsistent, the monitoring program shuts down the virtual board.

[0031] For each virtual board, there is a corresponding monitoring program and a security application, and also has its corresponding current cycle number and current time. In the case where the current cycle number and current time of each virtual board are synchronized to other virtual boards in step 210, the security application of each virtual board has the current cycle number and current time of all virtual boards. Therefore, for a virtual board, when the monitoring program receives the current cycle number and current time sent by the security application, it will receive the current cycle number and current time of all virtual boards.

[0032] The monitoring system also includes multiple current cycle number comparators and multiple current time comparators corresponding to multiple virtual boards. The current cycle number comparators compare whether the current cycle numbers are consistent. When the current cycle numbers are inconsistent, the monitoring program shuts down the virtual boards; or the current time comparators compare whether the current times are consistent. When the current times are inconsistent, the monitoring program shuts down the virtual boards.

[0033] Specifically, for a virtual board, the current cycle number comparator corresponding to it will compare whether the current cycle number of this virtual board is consistent with the current cycle number of other virtual boards, that is, whether the values ​​are the same. If the values ​​are different, the monitoring program will shut down this virtual board. If the values ​​are the same, the current time comparator will compare whether the current time of this virtual board is consistent with the current time of other virtual boards, that is, whether the values ​​are the same. If the values ​​are different, the monitoring program will shut down this virtual board. If the values ​​are the same, then enter the comparison of the next cycle, or continue to judge whether this virtual board needs to be shut down through the hardware watchdog. Of course, here you can also use the current time comparator to make a judgment first, and then use the current cycle number comparator to make a judgment. The specific judgment process is similar to the above.

[0034] The monitoring system further comprises a plurality of hardware watchdogs corresponding to the plurality of virtual boards, and each virtual board has a corresponding hardware watchdog.

[0035] For a virtual board, the corresponding hardware watchdog sends the current cycle running time to the monitoring program. When the current cycle running time is less than or equal to a preset value, the hardware watchdog receives a reset command sent by the monitoring program and restarts the timer of the hardware watchdog. When the current cycle running time is greater than the preset value, the monitoring program shuts down the virtual board.

[0036] Specifically, the current cycle running time is the end time of the current cycle running of the security application minus the start time of the running. It can be seen that the current cycle running time refers to the length of time that the security application corresponding to the virtual board runs in the current cycle. If the length of time is less than or equal to the preset value, it means that the security application of this virtual board is in normal operation. At this time, the hardware watchdog will receive the reset command sent by the monitoring program, commanding the hardware watchdog to restart its timer. In this way, the next cycle running time will be recalculated, and this virtual board will not be shut down. At the same time, this virtual board enters the next cycle.

[0037] In one embodiment, the plurality of virtual boards are two out of three virtual boards. A specific implementation method will be described below for this embodiment, which will not be described here.

[0038] In one embodiment, the above-mentioned virtual board monitoring method is applied to a monitoring system of a virtual board, and the monitoring system includes multiple virtual boards, multiple security applications and multiple monitoring programs; the multiple security applications are respectively built into the multiple virtual boards, corresponding one-to-one to the multiple virtual boards; the multiple monitoring programs correspond one-to-one to the multiple virtual boards; the multiple security applications are used to send the current cycle number and the current time to each other; the monitoring program is used to receive the current cycle number and the current time sent by the security application, and when the current cycle number or the current time is inconsistent, the monitoring program shuts down the virtual board.

[0039] The monitoring system also includes multiple current cycle number comparators and multiple current time comparators; the multiple current cycle number comparators are respectively built into multiple virtual boards, corresponding one to one with the multiple virtual boards; the multiple current time comparators are respectively built into multiple virtual boards, corresponding one to one with the multiple virtual boards; the current cycle number comparator is used to compare whether the current cycle number is consistent. When the current cycle number is inconsistent, the monitoring program shuts down the virtual board; the current time comparator is used to compare whether the current time is consistent. When the current time is inconsistent, the monitoring program shuts down the virtual board.

[0040] The monitoring system also includes multiple hardware watchdogs, which correspond one-to-one to the multiple virtual boards; the hardware watchdog is used to send the current cycle running time to the monitoring program; when the current cycle running time is less than or equal to a preset value, the hardware watchdog is also used to receive a reset command sent by the monitoring program and restart the timer of the hardware watchdog; when the current cycle running time is greater than a preset value, the monitoring program shuts down the virtual board; wherein the current cycle running time is the end time of the current cycle running of the security application minus the start time of the running.

[0041] Figure 2 Schematic diagram of a monitoring device for a virtual board provided in an embodiment of the present application. Figure 2 As shown, the three virtual boards are two-out-of-three virtual boards.

[0042] The monitoring device of the virtual board includes three virtual boards, three safety applications, three monitoring programs, three current cycle number comparators, three current time comparators and three hardware watchdogs. Each virtual board corresponds to a safety application, a monitoring program, a current cycle number comparator, a current time comparator and a hardware watchdog.

[0043] The three virtual boards are VirAQ1, VirAQ2, and VirAQ3, the three security applications are Security Application 1, Security Application 2, and Security Application 3, the three monitoring programs are VirAQ1_RT-Monitoring, VirAQ2_RT–Monitoring, and VirAQ3_RT–Monitoring, the three current cycle comparators are Current Cycle Comparator 1, Current Cycle Comparator 2, and Current Cycle Comparator 3, the three current time comparators are Current Time Comparator 1, Current Time Comparator 2, and Current Time Comparator 3, and the three hardware watchdogs are Hardware Watchdog 1, Hardware Watchdog 2, and Hardware Watchdog 3.

[0044] The safety application 1, safety application 2, and safety application 3 are built into VirAQ1, VirAQ2, and VirAQ3, respectively, and are used to send the current cycle number and the current time to each other. The current cycle number is VirAQ1_CycNum, VirAQ2_CycNum, and VirAQ3_CycNum, respectively. The current time is VirAQ1_Current_Time, VirAQ2_Current_Time, and VirAQ3_Current_Time, respectively.

[0045] The current cycle number comparator 1, the current cycle number comparator 2, and the current cycle number comparator 3 are built in VirAQ1, VirAQ2, and VirAQ3 respectively. Taking the current cycle number comparator 1 as an example, the current cycle number comparator 2 and the current cycle number comparator 3 are similar.

[0046] The current cycle number comparator 1 is used to compare whether VirAQ1_CycNum is the same as VirAQ2_CycNum. If they are not the same, VirAQ1_RT-Monitoring will turn off VirAQ1. If they are the same, the current cycle number comparator 1 is used to compare whether VirAQ1_CycNum is the same as VirAQ3_CycNum. If they are not the same, VirAQ1_RT-Monitoring will turn off VirAQ11. If they are the same, the current time comparison is entered.

[0047] The current time comparator 1, the current time comparator 2, and the current time comparator 3 are built in VirAQ1, VirAQ2, and VirAQ3, respectively. Taking the current time comparator 1 as an example, the current time comparator 2 and the current time comparator 3 are similar.

[0048] The current time comparator 1 is used to compare whether VirAQ1_Current_Time is the same as VirAQ2_Current_Time. If they are not the same, VirAQ1_RT-Monitoring will shut down VirAQ1. If they are the same, the current time comparator 1 is used to compare whether VirAQ1_Current_Time is the same as VirAQ3_Current_Time. If they are not the same, VirAQ1_RT-Monitoring will shut down VirAQ1. If they are the same, the real-time performance of safety application 1, safety application 2, and safety application 3 is judged.

[0049] Taking hardware watchdog 11 as an example, the situations of hardware watchdog 2 and hardware watchdog 3 are similar.

[0050] The hardware watchdog 1 is used to send the current cycle running time to VirAQ1_RT-Monitoring. The current cycle running time is the end time of the current cycle running of the security application 1 minus the start time of the running. When the current cycle running time is less than or equal to the preset value, the hardware watchdog 1 is also used to receive the reset command sent by VirAQ1_RT-Monitoring, and restart the timer of the hardware watchdog 1 to enter the next cycle. When the current cycle running time is greater than the preset value, the VirAQ1_RT-Monitoring turns off the VirAQ1. Since this embodiment is a three-out-of-two virtual board architecture, VirAQ2 and VirAQ3 continue to run. However, when the current cycle running time of two virtual boards is greater than the preset value at the same time, VirAQ1, VirAQ2, and VirAQ3 need to be restarted at the same time to restore the three virtual boards to the two-out-of-three working environment.

[0051] The solution provided in the above-mentioned embodiments of the present application ensures the synchronization of the three virtual boards by synchronizing the CPU cycles and times of the virtual boards, monitors the real-time performance of the three virtual boards through a hardware watchdog, and simultaneously records the execution time of multiple security applications for long-term virtualization board performance optimization.

[0052] In several embodiments provided in the present application, the disclosed apparatus and method may also be implemented in other ways. The apparatus and method embodiments described above are merely schematic, for example, the flowcharts and block diagrams in the accompanying drawings show the possible architecture, functions and operations of the apparatus, method and computer program product according to multiple embodiments of the present application. In this regard, each box in the flowchart or block diagram may represent a module, a program segment or a part of a code, and a module, a program segment or a part of a code contains one or more executable instructions for implementing a specified logical function. In some alternative implementations, the functions marked in the box may also occur in an order different from that marked in the accompanying drawings. For example, two consecutive boxes may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each box in the block diagram and / or the flowchart, and the combination of boxes in the block diagram and / or the flowchart, may be implemented with a dedicated hardware-based system that performs a specified function or action, or may be implemented with a combination of dedicated hardware and computer instructions.

[0053] In addition, the functional modules in the various embodiments of the present application may be integrated together to form an independent part, or each module may exist separately, or two or more modules may be integrated to form an independent part.

[0054] If the function is implemented in the form of a software function module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, and other media that can store program codes.

Claims

1. A method for monitoring a virtual board, characterized in that: A monitoring system applied to the virtual board, the monitoring system comprising a plurality of virtual boards, and a plurality of security applications and a plurality of monitoring programs corresponding to the plurality of virtual boards; The monitoring method comprises the following steps: For the plurality of virtual boards, the plurality of security applications send current cycle numbers and current times to each other; For any virtual board among the multiple virtual boards, the monitoring program receives the current cycle number and the current time sent by the security application program. When the current cycle number or the current time is inconsistent, the monitoring program shuts down the virtual board.

2. The method for monitoring a virtual board according to claim 1, characterized in that: The monitoring system further includes a plurality of current cycle number comparators and a plurality of current time comparators corresponding to the plurality of virtual boards; When the current cycle number or the current time is inconsistent, the monitoring program shuts down the virtual board, including: The current cycle number comparator compares whether the current cycle numbers are consistent, and if the current cycle numbers are inconsistent, the monitoring program shuts down the virtual board; or, The current time comparator compares whether the current time is consistent. If the current time is inconsistent, the monitoring program shuts down the virtual board.

3. The method for monitoring a virtual board according to claim 1, characterized in that: The monitoring system further includes a plurality of hardware watchdogs corresponding to the plurality of virtual boards; The monitoring method further comprises: For any virtual board among the multiple virtual boards, the hardware watchdog sends the current cycle running time to the monitoring program. When the current cycle running time is less than or equal to a preset value, the hardware watchdog receives a reset command sent by the monitoring program and restarts the timer of the hardware watchdog.

4. The method for monitoring a virtual board according to claim 3, characterized in that: When the current cycle running time is greater than a preset value, the monitoring program shuts down the virtual board.

5. The method for monitoring a virtual board according to claim 3 or 4, characterized in that: The current cycle running time is the end time of the current cycle running of the security application minus the start time of the running.

6. The method for monitoring a virtual board according to claim 1, characterized in that: The multiple virtual boards are two out of three virtual boards.

7. A virtual board monitoring system, characterized in that: The monitoring system includes a plurality of virtual boards, a plurality of security applications and a plurality of monitoring programs; The multiple security applications are respectively built into multiple virtual boards and correspond one-to-one with the multiple virtual boards; The plurality of monitoring programs correspond one to one with the plurality of virtual boards; The plurality of security applications are used to send the current cycle number and the current time to each other; The monitoring program is used to receive the current cycle number and the current time sent by the security application program. When the current cycle number or the current time is inconsistent, the monitoring program shuts down the virtual board.

8. The method for monitoring a virtual board according to claim 7, characterized in that: The monitoring system also includes a plurality of current cycle number comparators and a plurality of current time comparators; The multiple current cycle number comparators are respectively built in multiple virtual boards, corresponding to the multiple virtual boards one by one; The multiple current time comparators are respectively built in multiple virtual boards and correspond one to one with the multiple virtual boards; The current cycle number comparator is used to compare whether the current cycle number is consistent. When the current cycle number is inconsistent, the monitoring program shuts down the virtual board; The current time comparator is used to compare whether the current time is consistent. When the current time is inconsistent, the monitoring program shuts down the virtual board.

9. The method for monitoring a virtual board according to claim 7, characterized in that: The monitoring system further comprises a plurality of hardware watchdogs, wherein the plurality of hardware watchdogs correspond one to one with the plurality of virtual boards; The hardware watchdog is used to send the current cycle running time to the monitoring program; When the current cycle running time is less than or equal to a preset value, the hardware watchdog is further used to receive a reset command sent by the monitoring program and restart the timer of the hardware watchdog; When the current cycle running time is greater than a preset value, the monitoring program shuts down the virtual board; The current cycle running time is the end time of the current cycle running of the security application minus the start time of the running.

10. The method for monitoring a virtual board according to claim 7, characterized in that: The multiple virtual boards are two out of three virtual boards.

Images