Rail transit safety access control device and system

Abstract

The embodiment of the invention provides a rail transit safety access control device and system.The device comprises a service interface processing unit, a maintenance interface processing unit, a first processor, a second processor and a failure management unit, safety management is carried out on a service interface and a maintenance interface, and a service interface bypass function supporting fault-oriented safety is achieved; the rail transit safety access control device is provided with a dual-processor cooperative safety guarantee structure, the safety of the rail transit safety access control device is effectively ensured, correct execution of safety protection is ensured, the safety protection problem of a train electronic control system can be effectively solved, the safety protection level of a train is greatly improved, and the maintenance difficulty of rail transit high-end equipment is reduced. And driving safety is ensured, and market prospects are wide.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular, to a rail transit safety access control device and system. Background Art

[0002] During the operation and maintenance of the train, it is necessary to perform regular maintenance on the vehicle and ground-related systems, such as local software upgrades, operating data downloads, etc. Operation and maintenance operators generally use USB flash drives or personal computer data cables to directly connect to vehicle control equipment for operation. If the USB flash drive or personal computer is infected with a virus, it is easy to cause the train's electronic control system to be infected with the virus, affecting the stable operation of the train equipment and affecting driving safety.

[0003] If a train's electronic control system is infected with a virus, it can launch a network attack on other devices through the train control network. At the same time, considering that there may be human malicious attacks during the train's operation that may affect the safe operation of the train, it is necessary to effectively control the business interfaces and maintenance interfaces of network equipment and control equipment, effectively block the attack link, and effectively protect the key electronic control equipment of the train to prevent the train function abnormalities caused by malicious damage from endangering the driving safety.

[0004] Therefore, with the continuous improvement of the safety management level of rail transit, it is necessary to strictly control the access to train electronic control equipment at access links such as business interfaces and maintenance interfaces, prevent the introduction of viruses infected by USB flash drives and personal computers, and prevent malicious attacks on key equipment through train networks, so as to effectively improve the safety management level of rail transit high-end equipment. Summary of the invention

[0005] The embodiments of the present application provide a rail transit safety access control device and system.

[0006] In a first aspect of an embodiment of the present application, a rail transit safety access control device is provided, the device comprising a service interface processing unit, a maintenance interface processing unit, a first processor, a second processor and a failure management unit, wherein:

[0007] The service interface processing unit and the maintenance interface processing unit both include an interface management module and a signal relay. Each interface management module has an enable signal. When the enable signal receives a high-level signal, the interface management module manages the interface connected thereto; when the enable signal receives a low-level signal, the interface management module does not work and outputs a high-impedance state to the interface connected thereto. The first processor is connected to each interface management module through a communication control line, and the first processor is connected to each signal relay through a relay control signal line, and the on-off of the corresponding interface management modules on both sides and the service bus or the maintenance bus is controlled through each signal relay.

[0008] The first processor is connected to the second processor, the first processor sends a periodic heartbeat signal to the second processor, the second processor sends a periodic heartbeat signal to the first processor, the second processor is connected to the failure management unit through the power supply control signal line, the coil power supply of each signal relay is controlled by the failure management unit, the relay coil power supply is connected to the enable signal of the interface management module on both sides at the same time, when the relay coil power supply is output, the corresponding interface management module on both sides works, when the relay coil power supply is not output, the corresponding interface management module on both sides outputs a high impedance state, when the status of the first processor and the second processor is normal, the second processor controls the failure management unit to output the power supply signal, and the signal relay is powered, when the status of the first processor and the second processor is abnormal, the second processor controls the failure management unit to stop outputting the power supply signal, and the signal relay stops working.

[0009] In an optional embodiment of the present application, the business interface processing unit is composed of a first Ethernet interface management module, a second Ethernet interface management module, a first USB interface management module, a second USB interface management module, a first serial port interface management module, a second serial port interface management module, a first MVB interface management module, a second MVB interface management module and a signal relay, wherein the first Ethernet interface management module and the second Ethernet interface management module are connected to the signal relay on both sides of the signal relay, the first USB interface management module and the second USB interface management module are connected to the signal relay on both sides of the signal relay, the first serial port interface management module and the second serial port interface management module are connected to the signal relay on both sides of the signal relay, and the first MVB interface management module and the second MVB interface management module are connected to the signal relay on both sides of the signal relay.

[0010] In an optional embodiment of the present application, the maintenance interface processing unit is composed of a third Ethernet interface management module, a fourth Ethernet interface management module, a third USB interface management module, a fourth USB interface management module, a third serial port interface management module, a fourth serial port interface management module and a signal relay, wherein the third Ethernet interface management module and the fourth Ethernet interface management module are connected to the signal relay on both sides of the signal relay, the third USB interface management module and the fourth USB interface management module are connected to the signal relay on both sides of the signal relay, and the third serial port interface management module and the fourth serial port interface management module are connected to the signal relay on both sides of the signal relay.

[0011] In an optional embodiment of the present application, each Ethernet interface management module is connected to multiple Ethernet interfaces, each USB interface management module is connected to multiple USB interfaces, each serial port interface management module is connected to multiple serial ports, and each MVB interface management module is connected to multiple MVB interfaces.

[0012] In an optional embodiment of the present application, in the business interface processing unit, each signal line of multiple first Ethernet interfaces is connected to each signal line of multiple second Ethernet interfaces via a normally closed node of a signal relay; each signal line of multiple first USB interfaces is connected to each signal line of multiple second USB interfaces via a normally closed node of a signal relay; each signal line of multiple first serial ports is connected to each signal line of multiple second serial ports via a normally closed node of a signal relay; each signal line of multiple first MVB interfaces is connected to each signal line of multiple second MVB interfaces via a normally closed node of a signal relay, wherein the first Ethernet interface and the second Ethernet interface are respectively connected to the first Ethernet interface management module and the second Ethernet interface management module, the first USB interface and the second USB interface are respectively connected to the first USB interface management module and the second USB interface management module, the first serial port and the second serial port are respectively connected to the first serial port interface management module and the second serial port interface management module, and the first MVB interface and the second MVB interface are respectively connected to the first MVB interface management module and the second MVB interface management module.

[0013] In an optional embodiment of the present application, it is maintained that each signal line of multiple third Ethernet interfaces is connected to each signal line of multiple fourth Ethernet interfaces via a normally open node of a signal relay; each signal line of multiple third USB interfaces is connected to each signal line of multiple fourth USB interfaces via a normally open node of a signal relay; each signal line of multiple third serial ports is connected to each signal line of the fourth serial port via a normally open node of a signal relay, wherein the third Ethernet interface and the fourth Ethernet interface are respectively connected to the third Ethernet interface management module and the fourth Ethernet interface management module, the third USB interface and the fourth USB interface are respectively connected to the third USB interface management module and the fourth USB interface management module, and the third serial port and the fourth serial port are respectively connected to the third serial port interface management module and the fourth serial port interface management module.

[0014] In an optional embodiment of the present application, the first processor is connected to each signal relay through a relay state feedback signal line to collect state data of each signal relay in real time.

[0015] In an optional embodiment of the present application, the device further includes a maintenance interface, wherein the maintenance interface is connected to the second processor.

[0016] In an optional embodiment of the present application, the device also includes a display alarm unit, wherein the display alarm unit is connected to the first processor, the first processor sends display data and sound data to the display alarm unit through a display control sound signal line, and the display alarm unit sends touch screen and button status signals to the first processor through a touch screen signal and a button signal line.

[0017] According to a second aspect of an embodiment of the present application, a rail transit safety access control system is provided, comprising a train control network, train electronic control equipment and the above-mentioned rail transit safety access control device, wherein the Ethernet bus, serial port bus, MVB bus and USB bus of the train control network are connected to the rail transit safety access control device, and authorization confirmation is performed through the rail transit safety access control device. If the authorization is passed, the train control network is allowed to connect to the train electronic control equipment. If the authorization is not passed, the train control network is prohibited from connecting to the train electronic equipment.

[0018] The above technical solution provided by the embodiment of the present application has at least some or all of the following advantages compared with the prior art:

[0019] The rail transit safety access control device described in the embodiment of the present application includes a business interface processing unit, a maintenance interface processing unit, a first processor, a second processor and a failure management unit. It performs safety management on the business interface and the maintenance interface respectively, supports a fault-oriented safe business interface bypass function, and has a dual-processor collaborative safety assurance structure. It effectively ensures the safety of the rail transit safety access control device itself and ensures the correct execution of safety protection. It can effectively solve the safety protection problem of the train electronic control system, greatly improve the safety protection level of the train, reduce the maintenance difficulty of high-end equipment in rail transit, ensure driving safety, and has broad market prospects. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0021] Figure 1 A structural diagram of a rail transit safety access control device provided in one embodiment of the present application;

[0022] Figure 2 A flow chart of the bypass function of a rail transit safety access control device provided in one embodiment of the present application;

[0023] Figure 3 A flow chart of the protection of the maintenance interface of a rail transit safety access control device provided in one embodiment of the present application;

[0024] Figure 4 A flow chart of the self-maintenance safety protection of a rail transit safety access control device provided in one embodiment of the present application;

[0025] Figure 5 A structural diagram of a rail transit safety access control system provided in one embodiment of the present application;

[0026] Figure 6 A flow chart of the protection of the service interface of a rail transit safety access control device provided for one embodiment of the present application. DETAILED DESCRIPTION

[0027] In order to make the technical solutions and advantages in the embodiments of the present application more clearly understood, the exemplary embodiments of the present application are further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present application, rather than an exhaustive list of all the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments can be combined with each other without conflict.

[0028] See also Figure 1 The embodiment of the present application provides a rail transit safety access control device, the device comprising a service interface processing unit, a maintenance interface processing unit, a first processor (processor A), a second processor (processor B) and a failure management unit, wherein:

[0029] The service interface processing unit and the maintenance interface processing unit both include an interface management module and a signal relay. Each interface management module has an enable signal. When the enable signal receives a high-level signal, the interface management module manages the interface connected thereto; when the enable signal receives a low-level signal, the interface management module does not work and outputs a high-impedance state to the interface connected thereto. The first processor is connected to each interface management module through a communication control line, and the first processor is connected to each signal relay through a relay control signal line, and the on-off of the corresponding interface management modules on both sides and the service bus or the maintenance bus is controlled through each signal relay.

[0030] The first processor is connected to the second processor, the first processor sends a periodic heartbeat signal to the second processor, the second processor sends a periodic heartbeat signal to the first processor, the second processor is connected to the failure management unit through the power supply control signal line, the coil power supply of each signal relay is controlled by the failure management unit, the relay coil power supply is connected to the enable signal of the interface management module on both sides at the same time, when the relay coil power supply is output, the corresponding interface management module on both sides works, when the relay coil power supply is not output, the corresponding interface management module on both sides outputs a high impedance state, when the status of the first processor and the second processor is normal, the second processor controls the failure management unit to output the power supply signal, and the signal relay is powered, when the status of the first processor and the second processor is abnormal, the second processor controls the failure management unit to stop outputting the power supply signal, and the signal relay stops working.

[0031] In an optional embodiment of the present application, the service interface processing unit is composed of a first Ethernet interface management module (Ethernet interface management module A), a second Ethernet interface management module (Ethernet interface management module B), a first USB interface management module (USB interface management module A), a second USB interface management module (USB interface management module B), a first serial port interface management module (serial port interface management module A), a second serial port interface management module (serial port interface management module B), a first MVB interface management module (MVB interface management module A), a second MVB interface management module (MVB interface management module B) and a signal relay, wherein the first Ethernet interface management module and the second Ethernet interface management module are connected to the signal relay on both sides of the signal relay, the first USB interface management module and the second USB interface management module are connected to the signal relay on both sides of the signal relay, the first serial port interface management module and the second serial port interface management module are connected to the signal relay on both sides of the signal relay, and the first MVB (Multifunction Vehicle Bus Interface) interface management module and the second MVB interface management module are connected to the signal relay on both sides of the signal relay.

[0032] In an optional embodiment of the present application, the maintenance interface processing unit is composed of a third Ethernet interface management module, a fourth Ethernet interface management module, a third USB interface management module, a fourth USB interface management module, a third serial port interface management module, a fourth serial port interface management module and a signal relay, wherein the third Ethernet interface management module and the fourth Ethernet interface management module are connected to the signal relay on both sides of the signal relay, the third USB interface management module and the fourth USB interface management module are connected to the signal relay on both sides of the signal relay, and the third serial port interface management module and the fourth serial port interface management module are connected to the signal relay on both sides of the signal relay.

[0033] In an optional embodiment of the present application, each Ethernet interface management module is connected to multiple Ethernet interfaces, each USB interface management module is connected to multiple USB interfaces, each serial port interface management module is connected to multiple serial ports, and each MVB interface management module is connected to multiple MVB interfaces.

[0034] In the present application, the business interface processing unit can simultaneously perform parallel protection on multiple Ethernets, multiple USBs, multiple serial ports, and multiple MVBs; the maintenance interface processing unit can simultaneously perform parallel protection on multiple Ethernets, multiple USBs, and multiple serial ports. It has good adaptability to various types of buses in the field of rail transit, and improves the interface safety management level of train electronic control systems in different application scenarios such as subways and EMUs.

[0035] In an optional embodiment of the present application, in the business interface processing unit, each signal line of multiple first Ethernet interfaces is connected to each signal line of multiple second Ethernet interfaces via a normally closed node of a signal relay; each signal line of multiple first USB interfaces is connected to each signal line of multiple second USB interfaces via a normally closed node of a signal relay; each signal line of multiple first serial ports is connected to each signal line of multiple second serial ports via a normally closed node of a signal relay; each signal line of multiple first MVB interfaces is connected to each signal line of multiple second MVB interfaces via a normally closed node of a signal relay, wherein the first Ethernet interface and the second Ethernet interface are respectively connected to the first Ethernet interface management module and the second Ethernet interface management module, the first USB interface and the second USB interface are respectively connected to the first USB interface management module and the second USB interface management module, the first serial port and the second serial port are respectively connected to the first serial port interface management module and the second serial port interface management module, and the first MVB interface and the second MVB interface are respectively connected to the first MVB interface management module and the second MVB interface management module.

[0036] In an optional embodiment of the present application, it is maintained that each signal line of multiple third Ethernet interfaces is connected to each signal line of multiple fourth Ethernet interfaces via a normally open node of a signal relay; each signal line of multiple third USB interfaces is connected to each signal line of multiple fourth USB interfaces via a normally open node of a signal relay; each signal line of multiple third serial ports is connected to each signal line of the fourth serial port via a normally open node of a signal relay, wherein the third Ethernet interface and the fourth Ethernet interface are respectively connected to the third Ethernet interface management module and the fourth Ethernet interface management module, the third USB interface and the fourth USB interface are respectively connected to the third USB interface management module and the fourth USB interface management module, and the third serial port and the fourth serial port are respectively connected to the third serial port interface management module and the fourth serial port interface management module.

[0037] See also Figure 1, processor A is connected to Ethernet interface management module A, Ethernet interface management module B, USB interface management module A, USB interface management module B, serial port interface management module A, serial port interface management module B, MVB interface management module A, and MVB interface management module B through communication control lines. Processor A is connected to Ethernet interface management module C, Ethernet interface management module D, USB interface management module C, USB interface management module D, serial port interface management module C, serial port interface management module D, MVB interface management module C, and MVB interface management module D through communication control lines. Each signal line of the Ethernet A1, A2 and other interfaces in the business interface processing unit is connected to each signal line of the Ethernet B1, B2 and other interfaces through the normally closed nodes of the signal relay; each signal line of the USB interface A1, A2 and other interfaces is connected to each signal line of the USB interface B1, B2 and other interfaces through the normally closed nodes of the signal relay; each signal line of the serial port A1, A2 and other interfaces is connected to each signal line of the serial port B1, B2 and other interfaces through the normally closed nodes of the signal relay; each signal line of the MVB interface A1, A2 and other interfaces is connected to each signal line of the MVB interface B1, B2 and other interfaces through the normally closed nodes of the signal relay. Each signal line of the Ethernet C1, C2 and other interfaces in the maintenance interface processing unit is connected to each signal line of the Ethernet D1, D2 and other interfaces through the normally open nodes of the signal relay; each signal line of the USB interface C1, C2 and other interfaces is connected to each signal line of the USB interface D1, D2 and other interfaces through the normally open nodes of the signal relay; each signal line of the serial port C1, C2 and other interfaces is connected to each signal line of the serial port D1, D2 and other interfaces through the normally open nodes of the signal relay. Maintenance interface E is connected to processor B, and processor A is connected to processor B via heartbeat 1 signal line, heartbeat 2 signal line, and internal bus. Processor A sends periodic heartbeat signal to processor B via heartbeat 1 signal line, and processor B sends periodic heartbeat signal to processor A via heartbeat 2 signal line. Processor A and processor B transmit data via internal bus.

[0038] The rail transit safety access control device of the present application has a bypass function. When processor B detects that processor A is malfunctioning through a heartbeat signal, processor B controls the failure management unit through the power supply control signal line to cut off the power supply of the relay coil. At this time, the interfaces on both sides of the business processing unit are directly connected through the normally closed node of the signal relay to ensure that in the event of a failure of the rail transit safety access control device itself, the interconnection between the business interface of the train electronic control equipment and the train control network is not affected. The coil power supply is connected to the enable signal EN of each interface management module of the business interface processing unit. When the power supply of the relay coil stops, the corresponding interface management module can be ensured to quickly output a high-impedance state, thereby ensuring low latency for the bypass function and ensuring business stability.

[0039] See also Figure 1 and Figure 2 ,In the case of a fault in the rail transit safety access control device itself, the interfaces on both sides of the maintenance interface processing unit are connected to the normally open nodes of the signal relay, and the interfaces on both sides are in a disconnected state, preventing external devices from unauthorized access to the train electronic control equipment

[0040] The service interface processing unit of the rail transit safety access control device proposed in this application has a bypass function. When processor A fails, processor B can control the failure management unit to cut off the power supply of the signal relay coil, control the service interface to remain connected, and control the maintenance interface to remain disconnected. This ensures that in the event of a serious failure of the rail transit safety access control device itself, the normal operation of the train electronic control equipment is not affected, and prevents malicious intrusion into the train electronic control equipment through the maintenance interface.

[0041] In the rail transit safety access control device of the present application, the business interface processing unit and the maintenance interface processing unit have an enable signal EN, and the enable signal EN is interconnected with the corresponding relay coil power supply. When the failure management unit cuts off the power supply of the signal relay coil, the corresponding business interface processing unit and the left and right side bus interface processing units corresponding to the maintenance interface processing unit output a high impedance state, ensuring low latency for the bypass function and ensuring business stability.

[0042] The rail transit safety access control device proposed in this application has a dual-processor collaborative safety assurance structure, where processor A is responsible for calculation processing, and processor B is responsible for monitoring the behavior of processor A and relay disconnection control after a fault. Processor B is also responsible for maintaining the program of processor A, and effectively protecting the data accessed to processor A, thereby effectively improving the safety of the rail transit safety access control device itself.

[0043] In an optional embodiment of the present application, the first processor is connected to each signal relay through a relay state feedback signal line to collect state data of each signal relay in real time.

[0044] In an optional embodiment of the present application, the device further includes a maintenance interface, wherein the maintenance interface is connected to the second processor.

[0045] In an optional embodiment of the present application, the maintenance interface processing unit connects the maintenance interface of the operation and maintenance equipment, the U disk and the train electronic control equipment to manage the maintenance access. First, after the operation and maintenance equipment and the U disk are connected to the rail transit safety access control device, the management personnel conducts manual authorization confirmation through the touch screen of the rail transit safety access control device. If the authorization is passed, the operation and maintenance equipment and the U disk are allowed to connect to the maintenance interface of the train electronic control device. If the authorization is not passed, the operation and maintenance equipment and the U disk are prohibited from connecting to the maintenance interface of the train electronic control device. After the operation and maintenance equipment, the U disk are connected to the train electronic equipment, the processor A of the rail transit safety access control device performs a security check on the input data of the operation and maintenance equipment or the transmission data of the U disk. After the data is detected to be safe, it is transmitted to the maintenance interface of the train electronic control system through Ethernet, USB, and serial port interfaces. When it is detected that the data is not safe, stop sending data to the maintenance interface of the train electronic control system, and start an audible and visual alarm. The rail transit safety access control device records the review process and data security status. Taking the maintenance interface 1 Ethernet C1 and the corresponding 1 Ethernet D1 as an example, the workflow is as follows Figure 3 The processing method of the Ethernet interface, USB interface, and serial port interface of the service interface processing unit is as follows Figure 3 same.

[0046] The software update and maintenance of processor A of the rail transit safety access control device of the present application is the responsibility of processor B. The maintenance interface E is first connected to processor B, and it needs to pass manual security review and confirmation first. After passing the review, maintenance interface E transfers the data to processor B, and processor B performs a security check on the data. After passing the test of processor B, processor B transfers the data to processor A through the internal bus. At the same time, the rail transit safety access control device will record the review process and data security status. This can effectively prevent malicious human attacks from affecting the normal operation of processor A. The security protection process maintained by this application itself is as follows: Figure 4 shown.

[0047] In an optional embodiment of the present application, the device also includes a display alarm unit, wherein the display alarm unit is connected to the first processor, the first processor sends display data and sound data to the display alarm unit through a display control sound signal line, and the display alarm unit sends touch screen and button status signals to the first processor through a touch screen signal and a button signal line.

[0048] The rail transit safety access control device of the present application is mainly used for safety protection during train operation and maintenance, to prevent virus infection, malicious attacks, etc. caused by peripherals such as USB flash drives and personal computers accessing the vehicle control system, which may affect the safe operation of the train control system, and avoid personal injury and equipment loss.

[0049] See also Figure 5 An embodiment of the present application provides a rail transit safety access control system, including a train control network, a train electronic control device and the above-mentioned rail transit safety access control device, wherein the Ethernet bus, serial port bus, MVB bus and USB bus of the train control network are connected to the rail transit safety access control device, and authorization confirmation is performed through the rail transit safety access control device. If the authorization is passed, the train control network is allowed to connect to the train electronic control device. If the authorization is not passed, the train control network is prohibited from connecting to the train electronic equipment.

[0050] The working principle of the rail transit safety access control system of the present application is as follows: the business interface processing unit of the rail transit safety access control device connects the business interface of the train control network and the train electronic control equipment. After the Ethernet, serial port, MVB, USB and other buses of the train control network are connected to the rail transit safety access control device, the management personnel conduct manual authorization confirmation through the touch screen of the rail transit safety access control device. If the authorization is passed, the train control network is allowed to connect to the train electronic control equipment. If the authorization is not passed, the train control network is prohibited from connecting to the train electronic equipment. After the train control network is connected to the train electronic equipment, the processor A of the rail transit safety access control device performs a security check on the input data of the train control network. After the data is detected to be safe, it is transmitted to the business interface of the train electronic control system through the Ethernet, USB, serial port, and MVB network interface. When it is detected that the data is not safe, stop sending data to the business interface of the train electronic control system, and start the sound and light alarm. At the same time, the rail transit safety access control device will record the review process and data security. Taking the business interface 1 Ethernet A and the corresponding 1 Ethernet B as an example, the workflow is as follows Figure 6 The processing method of the USB interface, serial port interface, and MVB interface of the business interface processing unit is as follows Figure 6 same.

[0051] The rail transit safety access control system proposed in this application realizes the partitioned security protection of the business data interface and the maintenance data interface, and adopts different protection strategies. The new interface access of the business interface or the maintenance interface is manually authorized. After the authorization is passed, the data accessed by the new interface must pass the security test before it can be transmitted to the train electronic control equipment. At the same time, the rail transit safety access control device will record the review process and data security status, which significantly improves the security protection of the train electronic control equipment.

[0052] In the rail transit safety access control system of the present application, the rail transit safety access control device proposes a new technical solution for separate management of business interfaces and maintenance interfaces, designs a bypass function for the business interface, and adopts a strategy of fault-oriented safety and disconnection of interface connections for the maintenance interface. In the event of a failure of the rail transit safety access control device itself, normal business communications will not be affected. At the same time, the maintenance interface can be effectively protected, and the safety protection of the train electronic control system can be improved in extreme cases, effectively solving the problem of safety protection of the train electronic control system. Compared with the current model that relies entirely on on-site personnel management, the implementation of this application can more standardizedly review the access behaviors of various train buses and greatly improve the standardization of on-site maintenance management of rail transit equipment.

[0053] Although the preferred embodiments of the present application have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications falling within the scope of the present application.

[0054] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A rail transit safety access control device, characterized in that: The device comprises a service interface processing unit, a maintenance interface processing unit, a first processor, a second processor and a failure management unit, wherein: The service interface processing unit and the maintenance interface processing unit both include an interface management module and a signal relay. Each interface management module has an enable signal. When the enable signal receives a high-level signal, the interface management module manages the interface connected thereto; when the enable signal receives a low-level signal, the interface management module does not work and outputs a high-impedance state to the interface connected thereto. The first processor is connected to each interface management module through a communication control line, and the first processor is connected to each signal relay through a relay control signal line, and the on-off of the corresponding interface management modules on both sides and the service bus or the maintenance bus is controlled through each signal relay. The first processor is connected to the second processor, the first processor sends a periodic heartbeat signal to the second processor, the second processor sends a periodic heartbeat signal to the first processor, the second processor is connected to the failure management unit through the power supply control signal line, the coil power supply of each signal relay is controlled by the failure management unit, the relay coil power supply is connected to the enable signal of the interface management module on both sides at the same time, when the relay coil power supply is output, the corresponding interface management module on both sides works, when the relay coil power supply is not output, the corresponding interface management module on both sides outputs a high impedance state, when the status of the first processor and the second processor is normal, the second processor controls the failure management unit to output the power supply signal, and the signal relay is powered, when the status of the first processor and the second processor is abnormal, the second processor controls the failure management unit to stop outputting the power supply signal, and the signal relay stops working.

2. The rail transit safety access control device according to claim 1, characterized in that: The business interface processing unit is composed of a first Ethernet interface management module, a second Ethernet interface management module, a first USB interface management module, a second USB interface management module, a first serial port interface management module, a second serial port interface management module, a first MVB interface management module, a second MVB interface management module and a signal relay, wherein the first Ethernet interface management module and the second Ethernet interface management module are connected to the signal relay on both sides of the signal relay, the first USB interface management module and the second USB interface management module are connected to the signal relay on both sides of the signal relay, the first serial port interface management module and the second serial port interface management module are connected to the signal relay on both sides of the signal relay, and the first MVB interface management module and the second MVB interface management module are connected to the signal relay on both sides of the signal relay.

3. The rail transit safety access control device according to claim 1, characterized in that: The maintenance interface processing unit is composed of a third Ethernet interface management module, a fourth Ethernet interface management module, a third USB interface management module, a fourth USB interface management module, a third serial port interface management module, a fourth serial port interface management module and a signal relay, wherein the third Ethernet interface management module and the fourth Ethernet interface management module are connected to the signal relay on both sides of the signal relay, the third USB interface management module and the fourth USB interface management module are connected to the signal relay on both sides of the signal relay, and the third serial port interface management module and the fourth serial port interface management module are connected to the signal relay on both sides of the signal relay.

4. The rail transit safety access control device according to claim 1, characterized in that: Each Ethernet interface management module is connected to multiple Ethernet interfaces, each USB interface management module is connected to multiple USB interfaces, each serial port interface management module is connected to multiple serial ports, and each MVB interface management module is connected to multiple MVB interfaces.

5. The rail transit safety access control device according to claim 4, characterized in that: In the business interface processing unit, each signal line of multiple first Ethernet interfaces is connected to each signal line of multiple second Ethernet interfaces via a normally closed node of a signal relay; each signal line of multiple first USB interfaces is connected to each signal line of multiple second USB interfaces via a normally closed node of a signal relay; each signal line of multiple first serial ports is connected to each signal line of multiple second serial ports via a normally closed node of a signal relay; each signal line of multiple first MVB interfaces is connected to each signal line of multiple second MVB interfaces via a normally closed node of a signal relay, wherein the first Ethernet interface and the second Ethernet interface are connected to the first Ethernet interface management module and the second Ethernet interface management module respectively, the first USB interface and the second USB interface are connected to the first USB interface management module and the second USB interface management module respectively, the first serial port and the second serial port are connected to the first serial port interface management module and the second serial port interface management module respectively, and the first MVB interface and the second MVB interface are connected to the first MVB interface management module and the second MVB interface management module respectively.

6. The rail transit safety access control device according to claim 4, characterized in that: Maintain that each signal line of the multiple third Ethernet interfaces is connected to each signal line of the multiple fourth Ethernet interfaces via the normally open nodes of the signal relay; each signal line of the multiple third USB interfaces is connected to each signal line of the multiple fourth USB interfaces via the normally open nodes of the signal relay; each signal line of the multiple third serial ports is connected to each signal line of the fourth serial port via the normally open nodes of the signal relay, wherein the third Ethernet interface and the fourth Ethernet interface are connected to the third Ethernet interface management module and the fourth Ethernet interface management module respectively, the third USB interface and the fourth USB interface are connected to the third USB interface management module and the fourth USB interface management module respectively, and the third serial port and the fourth serial port are connected to the third serial port interface management module and the fourth serial port interface management module respectively.

7. The rail transit safety access control device according to claim 1, characterized in that: The first processor is connected to each signal relay through a relay state feedback signal line to collect state data of each signal relay in real time.

8. The rail transit safety access control device according to claim 1, characterized in that: The device further comprises a maintenance interface, wherein the maintenance interface is connected to the second processor.

9. The rail transit safety access control device according to claim 1, characterized in that: The device also includes a display alarm unit, wherein the display alarm unit is connected to the first processor, the first processor sends display data and sound data to the display alarm unit through a display control sound signal line, and the display alarm unit sends touch screen and key status signals to the first processor through a touch screen signal and a key signal line.

10. A rail transit safety access control system, characterized in that: It comprises a train control network, train electronic control equipment and a rail transit safety access control device according to any one of claims 1 to 9, wherein the Ethernet bus, serial bus, MVB bus and USB bus of the train control network are connected to the rail transit safety access control device, and authorization confirmation is performed through the rail transit safety access control device. If the authorization is passed, the train control network is allowed to be connected to the train electronic control equipment. If the authorization is not passed, the train control network is prohibited from being connected to the train electronic equipment.

Images