Data supervision method and device based on line controller and storage medium

Abstract

The invention discloses a data supervision method and device based on a line controller and a storage medium, and the method comprises the steps: obtaining application data sent by each opposite terminal device; judging whether the application data is illegal data or not according to the illegal data judgment condition corresponding to each opposite terminal device; and performing data supervision on the application data according to the judgment result of whether the application data is illegal data or not. Therefore, illegal data judgment is performed on the application data sent by each opposite-end device based on the line controller, and data supervision on the application data of each opposite-end device is realized, so that the legality of the application data is ensured, the communication security between the line controller and the opposite-end device is ensured, and the data reliability and the communication security are improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data supervision, and in particular, to a data supervision method based on a line controller, a computer-readable storage medium, and a data supervision device based on a line controller. Background Art

[0002] In the event of emergencies such as data duplication, loss, insertion, out-of-order, error code, delay, and spoofing on the network, related technologies usually adopt LTE-M devices with air interface encryption measures in cooperation with the railway signal security communication protocol RSSP-I, or directly use the railway signal security communication protocol RSSP-II for protection. However, the problem with related technologies is that if the application layer data itself does not meet the legality requirements, effective and reliable protection cannot be achieved by means of the above measures or communication protocols. Summary of the Invention

[0003] The present invention aims to solve at least one of the technical problems in related technologies to some extent. To this end, the first object of the present invention is to propose a data supervision method based on a line controller, which can ensure the legality of application data, guarantee the communication security between the line controller and the peer device, and improve data reliability and communication security.

[0004] The second object of the present invention is to propose a computer-readable storage medium.

[0005] The third object of the present invention is to propose a data supervision device based on a line controller.

[0006] To achieve the above object, the data supervision method based on a line controller proposed in the first aspect embodiment of the present invention includes: obtaining application data sent by each peer device; judging whether the application data is illegal data according to the illegal data judgment condition corresponding to each peer device; and performing data supervision on the application data according to the judgment result of whether the application data is illegal data.

[0007] According to the data supervision method based on a line controller of the embodiment of the present invention, the application data sent by each peer device is obtained. Furthermore, according to the illegal data judgment condition corresponding to each peer device, it is judged whether the application data is illegal data, and according to the judgment result of whether the application data is illegal data, data supervision is performed on the application data. Thus, based on the line controller, illegal data judgment is performed on the application data sent by each peer device, data supervision of the application data of each peer device is realized, and thereby, the legality of the application data is ensured, the communication security between the line controller and the peer device is guaranteed, and data reliability and communication security are improved.

[0008] In addition, the data supervision method based on the line controller according to the above embodiments of the present invention may further have the following additional technical features:

[0009] According to an embodiment of the present invention, the peer device includes at least one of a computer interlocking, an adjacent line controller, and an on-vehicle ATP.

[0010] According to an embodiment of the present invention, when the peer device is the computer interlocking, determining whether the application data is illegal data includes: if the application communication packet header is not sent as agreed, or the version data used by the computer interlocking and the line controller is inconsistent, or the application data exceeds the maximum data length restricted by the line controller for receiving data from the computer interlocking, then determining the application data as illegal data.

[0011] According to an embodiment of the present invention, when the peer device is the adjacent line controller, determining whether the application data is illegal data includes: if the application communication packet header is not sent as agreed, or the version data used by the adjacent line controller and the line controller is inconsistent, or the application data exceeds the maximum data length restricted by the line controller for receiving data from the adjacent line controller, then determining the application data as illegal data.

[0012] According to an embodiment of the present invention, when the peer device is the on-vehicle ATP, determining whether the application data is illegal data includes: if the application data fails the legality check, or the communication connection status between the on-vehicle ATP and the line controller is abnormal, then determining the application data as illegal data.

[0013] According to an embodiment of the present invention, data supervision of the application data according to the judgment result of whether the application data is illegal data includes: if the application data is determined as illegal data, then prohibiting the transmission of the application data to the application layer and discarding the application data.

[0014] According to an embodiment of the present invention, after discarding the application data, the method further includes: obtaining the discard time of the application data; if the discard time exceeds the message valid time corresponding to the peer device, then judging that the communication state of the peer device is abnormal.

[0015] According to an embodiment of the present invention, after judging that the communication state of the peer device is abnormal, the method further includes: guiding the device state managed by the peer device to a safe state.

[0016] To achieve the above object, a computer-readable storage medium provided by an embodiment of the second aspect of the present invention stores a data supervision program based on a line controller. When the data supervision program based on the line controller is executed by a processor, the data supervision method based on the line controller in the above embodiment of the present invention is implemented.

[0017] According to the computer-readable storage medium of the embodiment of the present invention, by executing the data supervision program based on the line controller stored thereon, the legality of application data can be ensured, the communication security between the line controller and the peer device can be guaranteed, and the data reliability and communication security can be improved.

[0018] To achieve the above object, a data supervision device based on a line controller provided by an embodiment of the third aspect of the present invention includes: an acquisition module for acquiring application data sent by each peer device; a judgment module for judging whether the application data is illegal data according to the illegal data judgment condition corresponding to each peer device; and a supervision module for performing data supervision on the application data according to the judgment result of whether the application data is illegal data.

[0019] According to the data supervision device based on the line controller of the embodiment of the present invention, the acquisition module acquires the application data sent by each peer device. Furthermore, the judgment module judges whether the application data is illegal data according to the illegal data judgment condition corresponding to each peer device, and the supervision module performs data supervision on the application data according to the judgment result of whether the application data is illegal data. Thus, the line controller judges the illegal data of the application data sent by each peer device, realizes the data supervision of the application data of each peer device, and thereby ensures the legality of the application data, guarantees the communication security between the line controller and the peer device, and improves the data reliability and communication security.

[0020] Additional aspects and advantages of the present invention will be given in part in the following description, become apparent in part from the following description, or be learned through the practice of the present invention. Description of the Drawings

[0021] Figure 1 is a schematic flowchart of a data supervision method based on a line controller according to an embodiment of the present invention;

[0022] Figure 2 is a schematic flowchart of a data supervision method based on a line controller according to an embodiment of the present invention;

[0023] Figure 3 is a schematic block diagram of a data supervision device based on a line controller according to an embodiment of the present invention. Detailed Embodiment

[0024] Embodiments of the present invention will be described in detail below. Examples of the embodiments are shown in the accompanying drawings, where the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to explain the present invention and should not be construed as limiting the present invention.

[0025] The data supervision method, computer-readable storage medium, and data supervision device based on a line controller according to embodiments of the present invention will be described below with reference to the accompanying drawings.

[0026] Figure 1 It is a schematic flowchart of the data supervision method based on a line controller according to an embodiment of the present invention.

[0027] Specifically, in some embodiments of the present invention, as Figure 1 shown, the data supervision method based on a line controller includes:

[0028] S101, obtaining the application data sent by each peer device.

[0029] Optionally, in some embodiments of the present invention, the peer device includes at least one of a computer interlocking, an adjacent line controller, and an on-vehicle ATP.

[0030] It can be understood that in this embodiment of the present invention, after the line controller is powered on, the communication status of each peer device (i.e., at least one of a computer interlocking, an adjacent line controller, and an on-vehicle ATP) can be supervised. When the application data sent by the current peer device is not received, it is determined that the communication status of the current peer device is abnormal, and the statuses managed by the peer device are all directed to the safe side.

[0031] S102, judging whether the application data is illegal data according to the illegal data judgment condition corresponding to each peer device.

[0032] It can be understood that in this embodiment of the present invention, different illegal data judgment conditions can be preset according to different types of peer devices, so as to judge whether the application data sent by each peer device is illegal data according to the illegal data judgment condition corresponding to each peer device. Thus, the data supervision of the application data of each peer device is realized by using the judgment result of whether the application data is illegal data.

[0033] S103, performing data supervision on the application data according to the judgment result of whether the application data is illegal data.

[0034] It can be understood that, in this embodiment of the present invention, different processing strategies can be adopted for the application data of each peer device according to the judgment result of whether the application data is illegal data. For example, if the application data is illegal data, an illegal data processing strategy is executed to prohibit the application data from continuing to be transmitted. Conversely, if the application data is not illegal data, an application data processing strategy is executed to allow the application data to continue to be transmitted.

[0035] Thus, in the above embodiment of the present invention, without affecting the communication process between the line controller and the peer device, it is still possible to ensure the legality of the application data, guarantee the communication security between the line controller and the peer device, and improve data reliability and communication security.

[0036] Furthermore, in some embodiments of the present invention, when the peer device is a computer interlocking, determining whether the application data is illegal data includes: if the application communication packet header is not sent as agreed, or the version data used by the computer interlocking and the line controller is inconsistent, or the application data exceeds the maximum data length restricted by the line controller for receiving the computer interlocking, then the application data is determined to be illegal data.

[0037] It can be understood that, in this embodiment of the present invention, within the jurisdiction of the line controller, communication can be carried out with one or more computer interlockings. The line controller separately maintains the communication status of each computer interlocking, and each computer interlocking manages multiple trackside devices. At this time, the line controller can judge whether the application data sent by the computer interlocking is illegal data based on the illegal data judgment conditions corresponding to the computer interlocking:

[0038] a. Whether the application communication packet header is sent as agreed;

[0039] b. Whether the version data used by the computer interlocking and the line controller is consistent;

[0040] c. Whether the application data exceeds the maximum data length restricted by the line controller for receiving the computer interlocking.

[0041] Specifically, in the above embodiment of the present invention, if the application communication packet header is not sent as agreed, or the version data used by the computer interlocking and the line controller is inconsistent, or the application data exceeds the maximum data length restricted by the line controller for receiving the computer interlocking, then it can be judged that the application data sent by the computer interlocking is illegal data.

[0042] Further, in some embodiments of the present invention, when the peer device is an adjacent line controller, determining whether the application data is illegal data includes: if the application communication packet header is not sent as agreed, or the version data used by the adjacent line controller and the line controller is inconsistent, or the application data exceeds the maximum data length restricted by the line controller for receiving data from the adjacent line controller, then the application data is determined to be illegal data.

[0043] It can be understood that in this embodiment of the present invention, within the jurisdiction of the line controller, communication can be carried out with one or more adjacent line controllers. The line controller individually maintains the communication status of each adjacent line controller. To ensure a smooth and seamless handover process of the line controller, the line controller needs to obtain the trackside status within the jurisdiction of the adjacent line controller in the co-administered area, which is provided by the adjacent line controller. At this time, the line controller can determine whether the application data sent by the adjacent line controller is illegal data based on the illegal data judgment conditions corresponding to the adjacent line controller:

[0044] a. Whether the application communication packet header is sent as agreed;

[0045] 1) Consistency check of the message content: including field legality check of the information, field combination legality check, and information integrity check;

[0046] 2) Integrity of the information that the General Application (GAL) information packet message should contain;

[0047] 3) The timeout time defined by the line controller for considering the communication with the adjacent line controller to be interrupted is TLCTimeout (1.5s - 6s, configurable);

[0048] 4) After the communication is established, if the line controller does not receive any message from the adjacent line controller within the TLCTimeout timeout time;

[0049] 5) If the line controller determines that the delay in receiving the GAL packet from the adjacent line controller has reached TLCTimeout;

[0050] b. Whether the version data used by the adjacent line controller and the line controller is consistent;

[0051] c. Whether the application data exceeds the maximum data length restricted by the line controller for receiving data from the adjacent line controller.

[0052] Specifically, in the above embodiments of the present invention, if the application communication header is not sent as agreed, or the version data used by adjacent line controllers and line controllers is inconsistent, or the application data exceeds the maximum data length restricted by the line controller for receiving adjacent line controllers, it can be determined that the application data sent by the adjacent line controller is illegal data.

[0053] It should be noted that the consistency check of the foregoing message content specifically includes the following check items:

[0054] Field legality check: The valid values and default values listed in the interface file are legal values, and other fields are illegal value field combination legality checks:

[0055] 1. Whether the positions of the four points of the maximum safe front position of the train, the minimum safe front position of the train, the maximum safe rear position of the train, and the minimum safe rear position of the train satisfy the front-rear relationship;

[0056] 2. Whether the positions of the four points of the maximum safe front position of the train, the minimum safe front position of the train, the maximum safe rear position of the train, and the minimum safe rear position of the train exceed the maximum length of the link where they are located;

[0057] 3. Whether the train operation level and driving mode meet the requirements shown in Table 1 below

[0058] Table 1

[0059] AM CM RM EUM Interlocking control level × × √ √ Point type √ √ × × CBTC √ √ × ×

[0060] 4. When the parking guarantee response allows parking, the parking guarantee response sequence number needs to be valid and non-default, the track section ID of the corresponding safety protection point for the parking guarantee needs to be valid and non-default, and the offset within the track section of the corresponding safety protection point for the parking guarantee needs to be valid and non-default;

[0061] 5. When the parking guarantee response is the default value, the parking guarantee response sequence number needs to be the default value, the track section ID of the corresponding safety protection point for the parking guarantee needs to be the default value, and the offset within the track section of the corresponding safety protection point for the parking guarantee needs to be the default value;

[0062] 6. When the "Protected section allows unlocking" field allows unlocking, the "Signal machine ID" field should be a valid value.

[0063] Information integrity check: Verify the information packet length.

[0064] Integrity of the information that the General Application (GAL) information packet message should contain: Verify the general packet header fields.

[0065] Further, in some embodiments of the present invention, when the peer device is an on-vehicle ATP, determining whether the application data is illegal data includes: if the application data fails the legality check, or the communication connection status between the on-vehicle ATP and the line controller is abnormal, then the application data is determined to be illegal data.

[0066] It can be understood that in this embodiment of the present invention, within the jurisdiction of the line controller, communication can be carried out with one or more on-vehicle ATPs (Automatic Train Protection). The line controller separately maintains the communication status of each on-vehicle ATP. At this time, the line controller can determine whether the application data sent by the on-vehicle ATP is illegal data based on the illegal data judgment conditions corresponding to the on-vehicle ATP:

[0067] a. Whether the application data passes the legality check;

[0068] 1) Consistency check of the message content: including field legality check of the information, field combination legality check, and information integrity check;

[0069] 2) Integrity of the information that the general application information packet message should contain;

[0070] b. Whether the communication connection status between the on-vehicle ATP and the line controller is abnormal;

[0071] 1) The timeout time defined by the line controller for considering the communication with the on-vehicle ATP to be interrupted is TLCTimeout (3s - 9s, configurable, recommended value: 6s);

[0072] 2) The timeout time defined by the on-vehicle ATP for considering the communication with the line controller to be interrupted is T on-vehicle ATPTimeout (3s - 9s, configurable, recommended value: 6s);

[0073] 3) If the line controller does not receive any message from the on-vehicle ATP within the TLCTimeout timeout time;

[0074] 4) If the line controller determines that the delay in receiving the GAL packet from the on-vehicle ATP has reached TLCTimeout;

[0075] 5) If the on-vehicle ATP does not receive any message from the line controller within the T on-vehicle ATPTimeout timeout time;

[0076] 6) If the on-vehicle ATP determines that the delay in receiving the GAL packet from the line controller has reached T on-vehicle ATPTimeout;

[0077] 7) In the interconnected network, the communication timeout times between the on-vehicle ATPs of each manufacturer and the line controllers on each line shall be the same, and the message validity periods shall be the same;

[0078] 8) After the on-vehicle ATP at the CBTC level determines a communication interruption with the line controller, if the train is not in a stationary state, an emergency brake shall be output. Further, if the train is in a stationary state, an emergency brake may be output.

[0079] Furthermore, in some embodiments of the present invention, data supervision of application data is performed according to the judgment result of whether the application data is illegal data, including: if the application data is determined to be illegal data, the application data is prohibited from being transmitted to the application layer and the application data is discarded.

[0080] It can be understood that in this embodiment of the present invention, when it is determined that the application data sent by the peer device is illegal data, the application data is prohibited from being transmitted to the application layer and the application data is discarded. Thus, the legality of the application data is ensured, the communication security between the line controller and the peer device is guaranteed, and the data reliability and communication security are improved.

[0081] Furthermore, in some embodiments of the present invention, as Figure 2 shown, after discarding the application data, the method further includes:

[0082] S201, obtaining the discard time of the application data.

[0083] It can be understood that in this embodiment of the present invention, timing can be started after the line controller discards the application data (illegal data) to obtain the discard time of the application data.

[0084] S202, if the discard time exceeds the message validity period corresponding to the peer device, it is determined that the communication status of the peer device is abnormal.

[0085] It can be understood that in this embodiment of the present invention, when the discard time exceeds the message validity period corresponding to the peer device, it can be considered that the communication between the line controller and the peer device is interrupted, and the communication status of the peer device is assigned as abnormal.

[0086] It should be noted that when a valid message sent by the peer device is received within the message validity period corresponding to the peer device, the communication relationship between the line controller and the peer device can be restored, and the communication status of the peer device is assigned as normal to facilitate receiving the application data sent by the peer device.

[0087] Furthermore, in some embodiments of the present invention, after determining that the communication status of the peer device is abnormal, the method further includes: guiding the device status managed by the peer device to a safe state.

[0088] It can be understood that in this embodiment of the present invention, after determining that the communication status of the peer device is abnormal, the device status managed by the peer device can also be directed to a safe state, thereby ensuring the safety of each trackside device and avoiding causing safety risks.

[0089] The following describes the data supervision process of different types of peer devices in combination with multiple specific embodiments of the present invention:

[0090] When the application data sent by the computer interlocking to the line controller is illegal data, the line controller shall prohibit the transmission of the application data to the application layer, discard the application data, and, after the discard time of the application data exceeds the message valid time corresponding to the computer interlocking, the line controller shall determine that the communication with the computer interlocking is interrupted. If it is within the message valid time of the computer interlocking, the line controller shall resume communication with the computer interlocking and receive the application data.

[0091] In addition, when the communication between the line controller and the computer interlocking is interrupted, the line controller shall direct the status of the trackside devices within the jurisdiction of the computer interlocking to a safe state. The trackside device status includes but is not limited to the following: signal status, platform screen door status, emergency stop button status, axle counter section occupied / idle status, axle counter section locked status, axle counter section locking direction, switch position status, switch locked status, protected section status, non-stop return button status, route status, floodgate status, SPKS switch status, garage door status, and garage door application status, etc. By directing all the involved safety functions to the safe side, any safety risks can be ensured not to be caused.

[0092] When the application data sent by the adjacent line controller to the line controller is illegal data, the line controller shall prohibit the transmission of the application data to the application layer, discard the application data, and, after the discard time of the application data exceeds the message valid time corresponding to the adjacent line controller, the line controller shall determine that the communication with the adjacent line controller is interrupted. If it is within the message valid time of the adjacent line controller, the line controller shall resume communication with the adjacent line controller and receive the application data.

[0093] In addition, when the communication between the line controller and the adjacent line controller is interrupted, the line controller shall direct the states of the trackside equipment within the jurisdiction of the adjacent line controller to the safe state. The states of the trackside equipment include, but are not limited to, the following: switch state information, switch locking state information, signal state information, signal cross-pressure state information, signal lighting state information, axle counter section state, axle counter section locking state information, axle counter section locking direction information, axle counter section train information, axle counter section train sorting information, route state information, protected section state information, SPKS switch state information, unmanned return light state information, floodgate state information, garage door state information, etc. By directing all relevant safety functions to the safe side, any safety risks can be ensured not to be caused.

[0094] When the application data sent by the on-vehicle ATP to the line controller is illegal data, the line controller shall prohibit the transmission of the application data to the application layer and discard the application data. Moreover, after the discard time of the application data exceeds the message validity time corresponding to the on-vehicle ATP, the line controller shall determine that the communication with the on-vehicle ATP is interrupted. If it is within the message validity time of the on-vehicle ATP, the line controller shall resume communication with the on-vehicle ATP and receive the application data.

[0095] In addition, when the communication between the line controller and the on-vehicle ATP is interrupted, the line controller shall reset the relevant variables within the jurisdiction of the on-vehicle ATP, including but not limited to: the UT identifier of the axle counter section within the vehicle body, the label of the last passing completed tail-screen train in the axle counter section, the sorting of the train in the axle counter section, the train-related state information, etc.

[0096] In summary, according to the data supervision method based on the line controller in the embodiments of the present invention, the application data sent by each peer device is obtained. Furthermore, according to the illegal data judgment conditions corresponding to each peer device, it is judged whether the application data is illegal data. And according to the judgment result of whether the application data is illegal data, data supervision is performed on the application data. Thus, by judging the illegal data of the application data sent by each peer device based on the line controller, data supervision of the application data of each peer device is realized, thereby ensuring the legality of the application data, guaranteeing the communication security between the line controller and the peer device, and improving data reliability and communication security.

[0097] Based on the foregoing computer-readable storage medium in the embodiments of the present invention, the embodiments of the present invention also propose a computer-readable storage medium, on which a data supervision program based on the line controller is stored. When the data supervision program based on the line controller is executed by a processor, the data supervision method based on the line controller in the above embodiments of the present invention is implemented.

[0098] It should be understood that for the specific implementation of the computer-readable storage medium in the embodiments of the present invention, reference may be made to the specific implementation of the data supervision method based on the line controller in the foregoing embodiments of the present invention. To reduce redundancy, it will not be elaborated herein.

[0099] In summary, for the computer-readable storage medium according to the embodiments of the present invention, by executing the data supervision program based on the line controller stored thereon, the legality of the application data can be ensured, the communication security between the line controller and the peer device can be guaranteed, and the data reliability and communication security can be improved.

[0100] Figure 3 It is a block diagram of a data supervision device based on a line controller according to an embodiment of the present invention.

[0101] Specifically, in some embodiments of the present invention, as Figure 3 shown, the data supervision device 100 based on the line controller includes: an acquisition module 10, a judgment module 20, and a supervision module 30.

[0102] Among them, the acquisition module 10 is used to acquire the application data sent by each peer device; the judgment module 20 is used to judge whether the application data is illegal data according to the illegal data judgment conditions corresponding to each peer device; the supervision module 30 is used to perform data supervision on the application data according to the judgment result of whether the application data is illegal data.

[0103] Further, in some embodiments of the present invention, the peer device includes at least one of a computer interlocking, an adjacent line controller, and an on-vehicle ATP.

[0104] Further, in some embodiments of the present invention, when the peer device is a computer interlocking, the judgment module 20 is further used to determine the application data as illegal data if the application communication packet header is not sent as agreed, or the version data used by the computer interlocking and the line controller is inconsistent, or the application data exceeds the maximum data length restricted by the line controller for receiving the computer interlocking.

[0105] Further, in some embodiments of the present invention, when the peer device is an adjacent line controller, the judgment module 20 is further used to determine the application data as illegal data if the application communication packet header is not sent as agreed, or the version data used by the adjacent line controller and the line controller is inconsistent, or the application data exceeds the maximum data length restricted by the line controller for receiving the adjacent line controller.

[0106] Further, in some embodiments of the present invention, when the peer device is an on-vehicle ATP, the judgment module 20 is further used to determine the application data as illegal data if the application data fails the legality check, or the communication connection status between the on-vehicle ATP and the line controller is abnormal.

[0107] Further, in some embodiments of the present invention, the supervision module 30 is further configured to, if the application data is determined to be illegal data, prohibit the transmission of the application data to the application layer and discard the application data.

[0108] Further, in some embodiments of the present invention, the supervision module 30 is further configured to, after discarding the application data, obtain the discard time of the application data; if the discard time exceeds the message valid time corresponding to the peer device, determine that the communication state of the peer device is abnormal.

[0109] Further, in some embodiments of the present invention, the supervision module 30 is further configured to, after determining that the communication state of the peer device is abnormal, direct the device state managed by the peer device to the secure state.

[0110] It should be understood that the specific implementation manners of the data supervision device based on the line controller in the embodiments of the present invention correspond one by one to the specific implementation manners of the data supervision method based on the line controller in the foregoing embodiments of the present invention. To reduce redundancy, they will not be described herein again.

[0111] In summary, for the data supervision device based on the line controller according to the embodiments of the present invention, the acquisition module acquires the application data sent by each peer device. Further, the judgment module judges whether the application data is illegal data according to the illegal data judgment condition corresponding to each peer device, and the supervision module performs data supervision on the application data according to the judgment result of whether the application data is illegal data. Thus, the illegal data judgment is performed on the application data sent by each peer device based on the line controller, realizing the data supervision of the application data of each peer device, thereby ensuring the legality of the application data, guaranteeing the communication security between the line controller and the peer device, and improving the data reliability and communication security.

[0112] It should be noted that the logic and / or steps represented in the flowchart or described otherwise herein, for example, can be considered as a definite sequence list of executable instructions for implementing logical functions, and can be specifically implemented in any computer-readable medium for use by an instruction execution system, apparatus, or device (such as a computer-based system, a system including a processor, or other systems that can fetch and execute instructions from the instruction execution system, apparatus, or device), or in combination with these instruction execution systems, apparatuses, or devices. For the purposes of this specification, a "computer-readable medium" can be any device that can contain, store, communicate, propagate, or transport a program for use by or in combination with an instruction execution system, apparatus, or device. More specific examples (non-exhaustive list) of the computer-readable medium include the following: an electrical connection part with one or more wirings (electronic device), a portable computer diskette case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disc read-only memory (CDROM). Additionally, the computer-readable medium can even be paper or other suitable media on which the program can be printed, because the program can be obtained electronically, for example, by optically scanning the paper or other media, followed by editing, interpreting, or otherwise processing it in a suitable manner if necessary, and then storing it in a computer memory.

[0113] It should be understood that various parts of the present invention can be implemented by hardware, software, firmware, or a combination thereof. In the above-described embodiments, multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, any one or a combination of the following techniques well known in the art can be used: discrete logic circuits with logic gate circuits for implementing logical functions on data signals, application-specific integrated circuits with suitable combinational logic gate circuits, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0114] In the description of this specification, the description with reference to terms such as "one embodiment", "some embodiments", "example", "specific example", or "some examples", etc. means that the specific features, structures, materials, or characteristics described in connection with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials, or characteristics described can be combined in a suitable manner in any one or more embodiments or examples.

[0115] In the description of the present invention, it should be understood that the terms "center", "longitudinal", "transverse", "length", "width", "thickness", "upper", "lower", "front", "rear", "left", "right", "vertical", "horizontal", "top", "bottom", "inner", "outer", "clockwise", "counterclockwise", "axial", "radial", "circumferential", etc. indicate the orientation or positional relationship based on the orientation or positional relationship shown in the drawings. They are only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and thus should not be construed as a limitation to the present invention.

[0116] In addition, the terms "first" and "second" are only used for descriptive purposes and cannot be understood as indicating or implying relative importance or implicitly specifying the quantity of the indicated technical features. Thus, features defined with "first" and "second" may explicitly or implicitly include at least one of such features. In the description of the present invention, the meaning of "a plurality of" is at least two, such as two, three, etc., unless otherwise specifically and clearly defined.

[0117] In the present invention, unless otherwise clearly specified and limited, the terms "mounted", "connected", "connected to", "fixed", etc. should be understood in a broad sense. For example, it may be a fixed connection, a detachable connection, or integrated; it may be a mechanical connection or an electrical connection; it may be directly connected or indirectly connected through an intermediate medium, and it may be the communication inside two elements or the interaction relationship between two elements, unless otherwise clearly limited. For those of ordinary skill in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0118] In the present invention, unless otherwise clearly specified and limited, the first feature being "on" or "under" the second feature may be that the first and second features are in direct contact, or the first and second features are indirectly in contact through an intermediate medium. Moreover, the first feature being "above", "over" and "on top of" the second feature may be that the first feature is directly above or obliquely above the second feature, or merely indicates that the first feature has a higher horizontal height than the second feature. The first feature being "under", "beneath" and "underneath" the second feature may be that the first feature is directly below or obliquely below the second feature, or merely indicates that the first feature has a lower horizontal height than the second feature.

[0119] Although the embodiments of the present invention have been shown and described above, it can be understood that the above embodiments are exemplary and should not be construed as a limitation to the present invention. Those of ordinary skill in the art can make changes, modifications, substitutions and variations to the above embodiments within the scope of the present invention.

Claims

1. A data supervision method based on a line controller, characterized in that The method includes: Obtaining application data sent by each peer device; Judging whether the application data is illegal data according to the illegal data judgment condition corresponding to each peer device; Performing data supervision on the application data according to the judgment result of whether the application data is illegal data.

2. The data supervision method based on a line controller according to claim 1, wherein The peer device includes at least one of a computer interlocking, an adjacent line controller, and an on-vehicle ATP.

3. The data supervision method based on a line controller according to claim 2, wherein, When the peer device is the computer interlocking, judging whether the application data is illegal data includes: If the application communication packet header is not sent as agreed, or the version data used by the computer interlocking and the line controller is inconsistent, or the application data exceeds the maximum data length restricted by the line controller for receiving computer interlocking, then the application data is determined to be illegal data.

4. The data supervision method based on a line controller according to claim 2, wherein When the peer device is the adjacent line controller, judging whether the application data is illegal data includes: If the application communication packet header is not sent as agreed, or the version data used by the adjacent line controller and the line controller is inconsistent, or the application data exceeds the maximum data length restricted by the line controller for receiving the adjacent line controller, then the application data is determined to be illegal data.

5. The data supervision method based on a line controller according to claim 2, characterized in that, When the peer device is the on-vehicle ATP, judging whether the application data is illegal data includes: If the application data fails the legality check, or the communication connection status between the on-vehicle ATP and the line controller is abnormal, then the application data is determined to be illegal data.

6. The data supervision method based on a line controller according to any one of claims 3-5, characterized in that, Performing data supervision on the application data according to the judgment result of whether the application data is illegal data includes: If the application data is determined to be illegal data, then prohibiting the transmission of the application data to the application layer and discarding the application data.

7. The data supervision method based on a line controller according to claim 6, wherein After discarding the application data, the method further includes: Obtaining the discard time of the application data; If the discard time exceeds the message valid time corresponding to the peer device, then judging that the communication state of the peer device is abnormal.

8. The data supervision method based on a line controller according to claim 7, wherein After judging that the communication state of the peer device is abnormal, the method further includes: Directing the device state managed by the peer device to the safe state.

9. A computer-readable storage medium, characterized in that, Stored thereon is a data supervision program based on a line controller, and when the data supervision program based on the line controller is executed by a processor, it implements the data supervision method based on the line controller according to any one of claims 1-8.

10. A data supervision device based on a line controller, characterized in that, The device includes: An obtaining module, configured to obtain application data sent by each peer device; A judging module, configured to judge whether the application data is illegal data according to the illegal data judgment condition corresponding to each peer device; A supervision module, configured to perform data supervision on the application data according to the judgment result of whether the application data is illegal data.

Images