Information processing system and method based on security cloud

Abstract

The invention discloses an information processing system and method based on security cloud. Comprising a cloud management end and at least one special hardware end, the cloud management end is in communication connection with each special hardware end; the special hardware end is configured on track hardware equipment, the special hardware end is configured with a secure cloud operating system, the secure cloud operating system is configured with at least one virtual environment, and the virtual environment is configured with a track traffic application; the cloud management end is used for configuring the special hardware end; and the special hardware end is used for acquiring the communication signal of the rail transit equipment in the rail area received by the rail transit application, determining the control information of the rail transit equipment according to the communication signal, and feeding back the control information to the rail transit equipment. According to the embodiment of the invention, the rail transit information processing efficiency can be improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data processing, and in particular, to an information processing system and method based on a secure cloud. Background Art

[0002] With the rapid development of technology, the rail transit industry has grown and developed. To ensure the safety of the operation of various rail transit equipment, it is necessary to monitor the rail transit equipment in real time.

[0003] Currently, the physical monitoring of rail transit equipment is carried out manually to obtain monitoring information.

[0004] However, the efficiency of manually monitoring the physical rail transit equipment is low, and the efficiency of processing the monitoring data is also low. Summary of the Invention

[0005] The present invention provides an information processing system and method based on a secure cloud to improve the accuracy of information processing.

[0006] In a first aspect, an embodiment of the present invention provides an information processing system based on a secure cloud, including:

[0007] A cloud management end and at least one dedicated hardware end; the cloud management end is communicatively connected to each dedicated hardware end; the dedicated hardware end is configured on the rail hardware device, the dedicated hardware end is configured with a secure cloud operating system, the secure cloud operating system is configured with at least one virtual environment, and the virtual environment is configured with a rail transit application;

[0008] The cloud management end is used to configure the dedicated hardware end;

[0009] The dedicated hardware end is used to obtain the communication signal of the rail transit equipment in the rail area received by the rail transit application, determine the control information of the rail transit equipment according to the communication signal, and feedback it to the rail transit equipment.

[0010] In addition, the rail hardware device is a multi-core hardware device, and the multi-core hardware device includes: at least one multi-core processor unit, wherein the multi-core processor unit is used to configure the virtual environment corresponding to the rail transit application.

[0011] In addition, the virtual environment corresponds to the rail transit application one by one; the configuration information of the virtual environment is determined according to the type of the rail transit application.

[0012] In addition, the communication signal of the rail transit equipment is transmitted to the rail transit application corresponding to the rail transit equipment through a software-defined network.

[0013] In addition, the rail transit application corresponds to the fail-safe voter one by one or the dedicated hardware end corresponds to the fail-safe voter one by one; wherein, the fail-safe voter is in a two-out-of-two voting mode.

[0014] In addition, the secure cloud-based information transmission system further includes: at least one standby hardware terminal; each dedicated hardware terminal corresponds to one of the standby hardware terminals one by one.

[0015] In addition, the virtual environment is a rail transit embedded environment.

[0016] In addition, the cloud management terminal is configured on the cloud server, and the cloud management terminal is further used to configure the communication link configuration information between each dedicated hardware terminal, the communication link configuration information between each rail transit application, and the communication link configuration information between each dedicated hardware terminal and the cloud management terminal.

[0017] In a second aspect, an embodiment of the present invention further provides an information processing method based on a secure cloud, and the method includes:

[0018] Obtain the communication signals of at least one rail transit device within the rail area;

[0019] Process the communication signals of each rail transit device through a rail transit application to obtain a signal processing result;

[0020] According to the signal processing result, screen each rail transit device to determine at least one device to be executed;

[0021] Send the signal processing result to each device to be executed, so that each device to be executed performs corresponding operations according to the signal processing result.

[0022] In addition, processing the communication signals of each rail transit device through a rail transit application to obtain a signal processing result includes:

[0023] Perform a safety vote on the communication signals of each rail transit device to obtain a safety vote result;

[0024] If the safety vote result is safe, process the communication signals of each rail transit device through a rail transit application to obtain a signal processing result;

[0025] If the safety vote result is dangerous, generate a communication signal re-acquisition command and send it to each rail transit device, so that each rail transit device re-sends the communication signal to the rail transit application.

[0026] The technical solution of the embodiment of the present invention includes a cloud management terminal and at least one dedicated hardware terminal; the cloud management terminal is communicatively connected to each dedicated hardware terminal; the dedicated hardware terminal is configured on the track hardware device, and the dedicated hardware terminal is configured with a secure cloud operating system, the secure cloud operating system is configured with at least one virtual environment, and the virtual environment is configured with rail transit applications; the cloud management terminal is used to configure the dedicated hardware terminal; the dedicated hardware terminal is used to obtain the communication signals of the rail transit equipment in the rail area received by the rail transit application, determine the control information of the rail transit equipment according to the communication signals, and feedback it to the rail transit equipment. Through the virtualization technology of the dedicated hardware, the equipment cost is reduced, the refined management of resources is realized, and the efficiency of rail transit information processing is improved.

[0027] It should be understood that the content described in this part is not intended to identify the key or important features of the embodiments of the present invention, nor is it used to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following will briefly introduce the drawings required for the description of the embodiments. Obviously, the drawings in the following description are only some embodiments of the present invention. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.

[0029] Figure 1 is a schematic diagram of an information processing system based on a secure cloud according to an embodiment of the present invention;

[0030] Figure 2 is a flowchart of an information processing method based on a secure cloud according to an embodiment of the present invention;

[0031] Figure 3 is a schematic diagram of an information processing device based on a secure cloud according to an embodiment of the present invention;

[0032] Figure 4 is a flowchart of an information processing device based on a secure cloud according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0033] In order to enable those skilled in the art to better understand the solution of the present invention, the following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0034] It should be noted that the terms "first", "second", etc. in the description, claims and the above-mentioned drawings of the present invention are used to distinguish similar objects, and do not necessarily have to be used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged under appropriate circumstances, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "comprising" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product or device comprising a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products or devices.

[0035] In the technical solution of the embodiment of the present invention, the acquisition, storage and application of communication signals and the like of rail transit equipment all comply with the provisions of relevant laws and regulations and do not violate public order and good customs.

[0036] Embodiment 1

[0037] Figure 1 It is a schematic diagram of an information processing system based on a security cloud provided for Embodiment 1 of the present invention. The embodiment of the present invention is applicable to the situation of information processing based on a security cloud. This system can execute an information processing method based on a security cloud, and this system can be implemented in the form of hardware and / or software.

[0038] See Figure 1 The information processing system 100 based on a security cloud shown, includes: a cloud management terminal 101 and at least one dedicated hardware terminal 102; the cloud management terminal 101 is communicatively connected to each dedicated hardware terminal 102; the dedicated hardware terminal 102 is configured on rail hardware equipment, the dedicated hardware terminal 102 is configured with a security cloud operating system 104, the security cloud operating system 104 is configured with at least one virtual environment, and the virtual environment is configured with a rail transit application 103; the cloud management terminal 101 is used to configure the dedicated hardware terminal 102; the dedicated hardware terminal 102 is used to obtain the communication signals of the rail transit equipment in the rail area received by the rail transit application 103, determine the control information of the rail transit equipment according to the communication signals, and feed it back to the rail transit equipment.

[0039] Specifically, the cloud management terminal 101 and Figure 1It corresponds one-to-one with the cloud management system in []. The cloud management system may correspond to at least one standby server, and the address information of each standby server can be stored in the storage space corresponding to the cloud management system. When the cloud management system corresponding to the cloud management terminal 101 fails, the address information can be selected from the storage space corresponding to the cloud management system. The selection methods include, but are not limited to: sequential search algorithm, block search algorithm, tree table search algorithm, hash search algorithm, etc. The embodiments of the present invention do not limit this. The standby server is determined according to the address information, and the cloud management system is deployed in the standby server to ensure the security and reliability of the operation of the cloud management system.

[0040] The cloud management system corresponding to the cloud management terminal 101 can be communicatively connected to each dedicated hardware terminal 102, can obtain the configuration information of each dedicated hardware terminal 102, and can edit the configuration information of each dedicated hardware terminal 102 to generate new configuration information, so that each dedicated hardware terminal 102 can update its own configuration information after receiving the new configuration information. The cloud management terminal 101 can also add or delete each dedicated hardware terminal 102 according to the hardware terminal deployment information, and the hardware terminal deployment information can be determined according to the type and quantity of the rail transit application 103 to be deployed.

[0041] The dedicated hardware terminal 102 corresponds one-to-one with the rail hardware device. The dedicated hardware terminal 102 corresponds one-to-one with the secure cloud operating system 104. The secure cloud operating system 104 is installed on the rail hardware device to facilitate the configuration of the virtual environment required for the operation of the rail transit application 103 on the rail hardware device.

[0042] The rail area can be a preset geographical location area, and this area may include at least one station area. Each station area includes at least one rail transit device, and the types of each rail transit device can be different. One rail transit application 103 can correspond to at least one rail transit device, and the corresponding relationship can be determined according to the functions of each rail transit application 103 and the association relationship of each rail transit device in actual applications. The rail transit application 103 can receive the communication signals of at least one rail transit device corresponding to it, process each communication signal, and different rail transit applications 103 process the communication signals in different ways, obtain the control information of each rail transit device corresponding to the rail transit application 103 and send it to each rail transit device, so that each rail transit device can execute corresponding operations according to the control information.

[0043] Through a cloud management terminal and at least one dedicated hardware terminal; the cloud management terminal is communicatively connected to each dedicated hardware terminal; the dedicated hardware terminal is configured on the track hardware device, and the dedicated hardware terminal is configured with a secure cloud operating system, the secure cloud operating system is configured with at least one virtual environment, and the virtual environment is configured with rail transit applications; the cloud management terminal is used to configure the dedicated hardware terminal; the dedicated hardware terminal is used to obtain the communication signals of the rail transit equipment in the rail area received by the rail transit application, determine the control information of the rail transit equipment according to the communication signals, and feedback it to the rail transit equipment, and can uniformly manage and schedule the resources of each rail transit equipment, reducing the management cost and improving the accuracy of resource management.

[0044] In addition, the virtual environment is a rail transit embedded environment.

[0045] Specifically, the dedicated embedded system of rail transit is an embedded computer system designed for the specific needs of the rail transit field, with characteristics such as high integration, I / O modularity, low power consumption, and no fan. At the same time, the whole machine has rich functions, high reliability, and small size to adapt to the sealed environment in rail transit and meet the multi-serial port requirements. Among them, the dedicated embedded system of rail transit consists of a hardware system and a software system. The hardware system consists of an embedded processor, a memory, and system peripheral devices. Among them, the embedded processor includes an embedded microcontroller (MCU), an embedded microprocessor (MPU), and an embedded DSP processor, etc., which is the core of the hardware system. The software system can be divided into three parts: an embedded operating system, embedded middleware software, and embedded application software. The embedded operating system is responsible for supporting the allocation of software and hardware resources of the entire embedded system and the scheduling and coordination between multiple tasks; the middleware software is used to assist and support the development of embedded application software; the application software is a user program designed and developed based on the selected system hardware platform according to the specific project requirements. The dedicated hardware terminal 102 is used to describe the virtual environment obtained after virtualizing the operating environment of the dedicated embedded system of rail transit. The cloud management terminal 101 can correspond to at least one dedicated hardware terminal 102, and the configuration information of the dedicated hardware terminal 102 corresponding to different types of dedicated embedded systems of rail transit is different, so that each dedicated hardware terminal 102 can describe the virtual environment of different dedicated embedded systems of rail transit.

[0046] By making the virtual environment a rail transit embedded environment, it is possible to virtualize the operating environment of the dedicated embedded system in the rail transit field, realizing data isolation between each rail transit embedded system and ensuring the security of data processing in each rail transit embedded environment.

[0047] In addition, the track hardware device is a multi-core hardware device, and the multi-core hardware device includes: at least one multi-core processor unit, where the multi-core processor unit is used to configure the virtual environment corresponding to the rail transit application 103.

[0048] Specifically, the track hardware device is a multi-core hardware device, and the multi-core hardware device means that the device uses multi-core processor technology. The multi-core technology integrates multiple processors on the same chip, and each processor has its own cache and control unit, enabling the processors to run multiple threads in parallel, thereby achieving higher performance and faster data processing speed. The multi-core hardware device corresponds to at least one multi-core processing unit, and each multi-core processing unit runs one thread. One multi-core processing unit can correspond to the virtual environment required by one rail transit application 103.

[0049] By making the track hardware device a multi-core hardware device, and the multi-core hardware device includes: at least one multi-core processor unit, where the multi-core processor unit is used to configure the virtual environment corresponding to the rail transit application, multiple rail transit applications can be run simultaneously on the same track hardware device, improving the data processing efficiency.

[0050] In addition, the virtual environment corresponds one-to-one with the rail transit application 103; the configuration information of the virtual environment is determined according to the type of the rail transit application 103.

[0051] Specifically, at least one virtual environment can be configured on the security cloud operating system 104, and the configuration information of each virtual environment is different, so that each virtual environment can meet the operation requirements of different types of rail transit applications 103. The configuration information of each virtual environment is determined according to the type of the rail transit application 103 corresponding to it.

[0052] By making the virtual environment correspond one-to-one with the rail transit application; and the configuration information of the virtual environment is determined according to the type of the rail transit application, different virtual environments can be configured for different types of rail transit applications, ensuring the safe operation of different types of rail transit applications.

[0053] In addition, the communication signals of the rail transit equipment are transmitted to the rail transit application 103 corresponding to the rail transit equipment through the software-defined network.

[0054] Specifically, Software-Defined Networking (SDN) separates the control plane of the network from the data forwarding plane to achieve flexible control of network traffic and dynamic allocation of resources. The communication signals of rail transit equipment can be transmitted to the corresponding rail transit application 103 of the dedicated hardware end 102 through software-defined networking. Data can be transmitted between each dedicated hardware end 102 through software-defined networking. Data can be transmitted between the dedicated hardware end 102 and at least one corresponding rail transit application 103 through software-defined networking. The dedicated hardware end 102 can transmit data to the cloud management system through software-defined networking.

[0055] By transmitting the communication signals of rail transit equipment to the corresponding rail transit application of the rail transit equipment through software-defined networking, the configuration operation of network configuration information can be refined, and the accuracy of network information configuration can be improved.

[0056] In addition, the rail transit application 103 corresponds to the fail-safe voter one-to-one or the dedicated hardware end 102 corresponds to the fail-safe voter one-to-one; among them, the fail-safe voter is in a two-out-of-two voting mode.

[0057] Specifically, the function of the fail-safe voter is to monitor the communication signals of each rail transit equipment to be received by the rail transit application 103, and to monitor the control information generated by the rail transit application 103, ensuring the accuracy of the data, guaranteeing the safe operation of the train, and preventing accidents such as train rear-end collisions and conflicts. One rail transit application 103 can correspond to one fail-safe voter, and multiple rail transit applications 103 of one dedicated hardware end 102 can correspond to one fail-safe voter. The fail-safe voter adopts the "two-out-of-two" mode. It will receive information from two independent signal sources or computing modules at the same time. Only when the two signals or results are consistent will it perform the corresponding operation. This can effectively reduce the risk of system malfunction caused by the failure of a single signal source or computing module, and greatly improve the reliability and safety of the system.

[0058] By corresponding the rail transit application to the fail-safe voter one-to-one or the dedicated hardware end 102 to the fail-safe voter one-to-one; among them, the fail-safe voter is in a two-out-of-two voting mode, which can perform security detection on the information to be transmitted by the rail transit application and guarantee the accuracy of the data to be transmitted.

[0059] In addition, the secure cloud information transmission system further includes: at least one standby hardware end; each dedicated hardware end 102 corresponds to each standby hardware end one-to-one.

[0060] Specifically, each dedicated hardware terminal 102 can correspond to a standby hardware terminal. When a dedicated hardware terminal 102 fails, for example, when the virtual environment corresponding to the rail transit application 103 configured in the dedicated hardware terminal 102 fails, the network of the dedicated hardware terminal 102 fails, or the memory resources corresponding to the dedicated hardware terminal 102 are insufficient, the standby hardware terminal corresponding to the dedicated hardware terminal 102 can be enabled. The virtual environments of the rail transit applications 103 in the dedicated hardware terminal 102 can be pre-configured on the standby hardware terminal corresponding to the dedicated hardware terminal 102, so that when the dedicated hardware terminal 102 fails, it can be promptly switched to the standby hardware terminal, thereby ensuring the safe and reliable operation of the system.

[0061] The secure cloud-based information transmission system further includes: at least one standby hardware terminal; each dedicated hardware terminal corresponds to one standby hardware terminal, so that when a dedicated hardware terminal fails, the standby hardware terminal can be promptly enabled to ensure the security of the dedicated hardware terminal.

[0062] In addition, the cloud management terminal 101 is configured on a cloud server, and the cloud management terminal 101 is also used to configure the communication link configuration information between the dedicated hardware terminals 102, the communication link configuration information between the rail transit applications 103, and the communication link configuration information between the dedicated hardware terminals 102 and the cloud management terminal 101.

[0063] Specifically, the cloud management terminal 101 corresponds to a cloud management system, and the cloud management system is configured on a cloud server. The cloud management system can manage the configuration information of each dedicated hardware and add or delete dedicated hardware terminals 102. In addition, it can manage the communication link configuration information, that is, it can manage the communication link information of the software-defined network between each dedicated hardware terminal 102 and the cloud management terminal 101, the communication link information of the software-defined network between the rail transit applications 103, and the communication link information of the software-defined network between the dedicated hardware terminals 102.

[0064] By configuring the cloud management terminal on a cloud server, the cloud management terminal is also used to configure the communication link configuration information between the dedicated hardware terminals, the communication link configuration information between the rail transit applications, and the communication link configuration information between the dedicated hardware terminals and the cloud management terminal, which can finely manage each communication configuration information and improve the accuracy of the communication configuration information.

[0065] The information processing system based on a secure cloud provided by the embodiments of the present invention can execute the information processing method based on a secure cloud provided by any embodiment of the present invention, and has corresponding functional modules and beneficial effects for executing the information processing method based on a secure cloud.

[0066] Embodiment 2

[0067] Figure 2The flowchart of an information processing method based on a security cloud provided by Embodiment 1 of the present invention. The embodiments of the present invention are applicable to the situation of information processing based on a security cloud. This method can be executed by an information processing system based on a security cloud, and the information processing system based on a security cloud can be implemented in the form of hardware and / or software.

[0068] See Figure 2 The information processing method based on a security cloud shown in the figure includes:

[0069] S101. Obtain the communication signals of at least one rail transit device within the track area.

[0070] Among them, the rail transit area can be used to describe the area where the signal acquisition of rail transit devices is to be performed. The communication signal can be used to describe the train operation information detected or collected by the rail transit device in real time.

[0071] Specifically, the range of the track area can be preset. The track area can include at least one station area. Each rail transit device in each station area can collect train operation information and transmit the train operation information to the rail transit application on its corresponding dedicated hardware end, so that the rail transit application can perform logical operation processing on the received communication signal.

[0072] S102. Process the communication signals of each rail transit device through the rail transit application to obtain a signal processing result.

[0073] Among them, the signal processing result can be used to describe the result after the rail transit application performs logical operation on the communication signals of each rail transit device.

[0074] Specifically, the rail transit application receives the communication signals sent by at least one rail transit device having an associated relationship of mechanical, electrical automatic control, and remote control, and performs logical operation processing to obtain a signal processing result. By way of example, the rail transit application can be: an interlocking or a train control center, etc. In one example, the interlocking obtains communication signals such as the approach direction (departure or arrival direction), approach range (both ends and change points), name of the signal machine protecting the approach, name and quantity of the track circuit sections in the approach, name and required position and quantity of the turnouts in the approach, name of the intrusion insulation track sections involved in the approach and inspection conditions, etc., compares the collected communication signals with the expected state information to obtain a comparison result, and determines that the switch turnout device 1 needs to be released from the locked state according to the comparison result, so as to obtain a signal processing result.

[0075] S103. Screen each rail transit device according to the signal processing result to determine at least one device to be executed.

[0076] Among them, the device to be executed can be used to describe a device that is to receive an operation instruction and execute a specific task according to the operation instruction.

[0077] Specifically, according to the signal processing result, at least one rail transit device and the operations to be executed by each rail transit device are determined. The determination methods include, but are not limited to, neural network recognition, depth-first traversal, breadth-first traversal, etc. The embodiments of the present invention do not limit this, so that at least one device to be received with an operation command for executing a specific task state and the operations to be executed by the device can be determined by screening among each rail transit device according to the obtained information. For example, if the signal processing result is that the switch turnout device 1 needs to release the locked state, then screening is performed among each rail transit device to determine the switch turnout device 1, which is determined as the device to be executed, and the operation to be executed by the switch turnout device 1 is to release the locked state.

[0078] S104. Send the signal processing result to each device to be executed, so that each device to be executed performs corresponding operations according to the signal processing result.

[0079] Specifically, the signal processing result is sent to the device to be executed through a software-defined network, and the device to be executed performs corresponding operations according to the operation information to be executed in the signal processing result. For example, the device to be executed is the switch turnout device 1. The operation of the switch turnout device 1 can change from the to-be-executed state to the executed state or switch conversion, etc., to ensure that the train can safely pass through the corresponding route. The device to be executed is a signal lamp, and the operation of the signal lamp can display corresponding light signals (such as green light, yellow light, etc.) to provide train operation instructions. In addition, the device to be executed can be a turnstile in an automatic fare collection system, and the operation of the turnstile can control the turnstile to open to allow passengers to pass and complete the ticket checking task.

[0080] The technical solution of the embodiments of the present invention obtains the communication signals of at least one rail transit device in the rail area; processes the communication signals of each rail transit device through a rail transit application to obtain a signal processing result; screens each rail transit device according to the signal processing result to determine at least one device to be executed; and sends the signal processing result to each device to be executed, so that each device to be executed performs corresponding operations according to the signal processing result. Through the virtualization technology of dedicated hardware, the device cost is reduced, and the refined management of resources is realized, and the accuracy of information processing is improved.

[0081] Optionally, the communication signals of each rail transit device are processed through rail transit applications to obtain signal processing results, including: performing a safety vote on the communication signals of each rail transit device to obtain a safety vote result; if the safety vote result is safe, the communication signals of each rail transit device are processed through rail transit applications to obtain signal processing results; if the safety vote result is dangerous, a communication signal re-acquisition command is generated and sent to each rail transit device so that each rail transit device re-sends the communication signal to the rail transit application.

[0082] Among them, the safety vote result can be used to describe the result of data verification when the communication signal of the rail transit device is transmitted to the rail transit application. The communication signal re-acquisition command can be used to describe the command to re-acquire the communication signals of each rail transit device corresponding to the rail transit application.

[0083] Specifically, when performing a safety vote on the communication signals of each rail transit device, a two-out-of-two mode is adopted. When the communication signals transmitted by two independent signal sources are compared for consistency, a safety vote result is obtained; if the safety vote result is safe, it indicates that the communication signals transmitted by the two independent signal sources are consistent, and the data to be transmitted to the rail transit application is accurate. Then, the communication signals of each rail transit device are processed through rail transit applications to obtain signal processing results. And before the signal processing results are transmitted to each device to be executed, a safety vote is performed on the signal processing results to obtain a signal evaluation result. If the signal evaluation result is consistent, it indicates that the signal processing results to be transmitted to each rail transit device are accurate, and each rail transit device can perform corresponding operations according to the signal processing results. Otherwise, the rail transit application re-processes the communication signals and re-generates the signal processing results.

[0084] If the safety vote result is dangerous, it indicates that the communication signals transmitted by the two independent signal sources are inconsistent, and the data to be transmitted to the rail transit application is inaccurate. Then, the rail transit application does not need to process the communication signals of the rail transit devices obtained this time. Instead, the rail transit application generates a communication signal re-acquisition command and sends it to each rail transit device so that each rail transit device re-sends the communication signal to the rail transit application.

[0085] By performing a safety vote on the communication signals of each rail transit device to obtain a safety vote result; if the safety vote result is safe, the communication signals of each rail transit device are processed through rail transit applications to obtain signal processing results; if the safety vote result is dangerous, a communication signal re-acquisition command is generated and sent to each rail transit device so that each rail transit device re-sends the communication signal to the rail transit application. By performing a safety vote on the signal processing results, the security of the transmitted data is guaranteed, and the accuracy of information processing is improved.

[0086] Embodiment III

[0087] Figure 3 FIG. 5 is a schematic diagram of an information processing device based on a secure cloud provided by Embodiment III of the present invention. The dedicated hardware can be configured on the information processing device based on the secure cloud. Embodiment of the present invention is applicable to the case of application information processing. The device can execute the information processing method based on the secure cloud, and the device can be implemented in the form of hardware and / or software.

[0088] See Figure 3 the information processing device based on the secure cloud shown in FIG. 5, including: a signal acquisition module 301, a signal processing module 302, a device screening module 303, and a signal sending module 304, where,

[0089] The signal acquisition module 301 is configured to acquire communication signals of at least one rail transit device within the rail area;

[0090] The signal processing module 302 is configured to process the communication signals of each rail transit device through the rail transit application to obtain a signal processing result;

[0091] The device screening module 303 is configured to screen each rail transit device according to the signal processing result to determine at least one device to be executed;

[0092] The signal sending module 304 is configured to send the signal processing result to each device to be executed, so that each device to be executed performs corresponding operations according to the signal processing result.

[0093] The technical solution of the embodiment of the present invention is to acquire communication signals of at least one rail transit device within the rail area; process the communication signals of each rail transit device through the rail transit application to obtain a signal processing result; screen each rail transit device according to the signal processing result to determine at least one device to be executed; send the signal processing result to each device to be executed, so that each device to be executed performs corresponding operations according to the signal processing result. The present invention can realize unified management and scheduling of resources, reduce manual intervention, and reduce management costs.

[0094] Optionally, the signal processing module 302 is specifically configured to:

[0095] Perform a safety vote on the communication signals of each rail transit device to obtain a safety vote result;

[0096] If the safety vote result is safe, process the communication signals of each rail transit device through the rail transit application to obtain a signal processing result;

[0097] If the safety voting result is dangerous, a communication signal re-acquisition command is generated and sent to each rail transit device, so that each rail transit device re-sends a communication signal to the rail transit application.

[0098] The information processing device based on a secure cloud provided by an embodiment of the present invention can execute the information processing method based on a secure cloud provided by any embodiment of the present invention, and has functional modules and beneficial effects corresponding to executing the information processing method based on a secure cloud.

[0099] Embodiment 4

[0100] Figure 4 FIG. shows a schematic structural diagram of an information processing device 400 based on a secure cloud that can be used to implement an embodiment of the present invention. The information processing device based on a secure cloud can be a rail hardware device.

[0101] As Figure 4 shown, the information processing device 400 based on a secure cloud includes at least one processor 401, and a memory communicatively connected to the at least one processor 401, such as a read-only memory (ROM) 402, a random access memory (RAM) 403, etc. Among them, the memory stores a computer program executable by the at least one processor. The processor 401 can execute various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 402 or the computer program loaded from the storage unit 408 into the random access memory (RAM) 403. In the RAM 403, various programs and data required for the operation of the information processing device 400 based on a secure cloud can also be stored. The processor 401, the ROM 402, and the RAM 403 are connected to each other through a bus 404. The input / output (I / O) interface 405 is also connected to the bus 404.

[0102] Multiple components in the information processing device 400 based on a secure cloud are connected to the I / O interface 405, including: an input unit 406, such as a keyboard, a mouse, etc.; an output unit 407, such as various types of displays, speakers, etc.; a storage unit 408, such as a magnetic disk, an optical disc, etc.; and a communication unit 409, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 409 allows the information processing device 400 based on a secure cloud to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0103] The processor 401 can be various general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of the processor 401 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. The processor 401 executes the various methods and processes described above, such as the security cloud-based information processing method.

[0104] In some embodiments, the security cloud-based information processing method can be implemented as a computer program tangibly embodied in a computer-readable storage medium, such as the storage unit 408. In some embodiments, part or all of the computer program can be loaded and / or installed onto the security cloud-based information processing device 400 via the ROM 402 and / or the communication unit 409. When the computer program is loaded into the RAM 403 and executed by the processor 401, one or more steps of the security cloud-based information processing method described above can be executed. Alternatively, in other embodiments, the processor 401 can be configured to execute the security cloud-based information processing method by any other suitable means (e.g., by means of firmware).

[0105] Various embodiments of the systems and techniques described above in this document can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGA), application-specific integrated circuits (ASIC), application-specific standard products (ASSP), system-on-chip systems (SOC), complex programmable logic devices (CPLD), computer hardware, firmware, software, and / or combinations thereof. These various embodiments can include: implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special-purpose or general-purpose programmable processor, and can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit the data and instructions to the storage system, the at least one input device, and the at least one output device.

[0106] The computer program for implementing the method of the present invention can be written in any combination of one or more programming languages. These computer programs can be provided to the processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when the computer program is executed by the processor, the functions / operations specified in the flowchart and / or block diagram are implemented. The computer program can be executed entirely on the machine, partially on the machine, as a stand-alone software package partially on the machine and partially on a remote machine, or entirely on a remote machine or server.

[0107] In the context of the present invention, a computer-readable storage medium can be a tangible medium that can contain or store a computer program for use by or in connection with an instruction execution system, apparatus, or device. The computer-readable storage medium can include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. Alternatively, the computer-readable storage medium can be a machine-readable signal medium. More specific examples of the machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0108] To provide interaction with a user, the systems and techniques described herein can be implemented on a rail hardware device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or a trackball) by which the user can provide input to the rail hardware device. Other kinds of devices can also be used to provide interaction with the user; for example, the feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including acoustic input, voice input, or tactile input).

[0109] The systems and techniques described herein can be implemented in a computing system that includes backend components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes frontend components (e.g., a user computer having a graphical user interface or a web browser through which the user can interact with an implementation of the systems and techniques described herein), or a computing system that includes any combination of such backend components, middleware components, or frontend components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: local area network (LAN), wide area network (WAN), blockchain network, and the Internet.

[0110] A computing system may include a client and a server. The client and the server are generally far from each other and usually interact via a communication network. The relationship between the client and the server is generated by computer programs running on respective computers and having a client-server relationship with each other. The server may be a cloud server, also known as a cloud computing server or a cloud host, which is a host product in the cloud computing service system, solving the defects of difficult management and weak business scalability existing in traditional physical hosts and VPS (Virtual Private Server) services.

[0111] It should be understood that various forms of the processes shown above can be used, steps can be reordered, added or deleted. For example, the steps described in the present invention can be executed in parallel, sequentially or in different orders, as long as the desired results of the technical solution of the present invention can be achieved, and no limitation is made herein.

[0112] The above specific embodiments do not constitute a limitation on the protection scope of the present invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principle of the present invention shall be included within the protection scope of the present invention.

Claims

1. An information processing system based on a secure cloud, comprising: A cloud management terminal and at least one dedicated hardware terminal; The cloud management terminal is communicatively connected to each of the dedicated hardware terminals; The dedicated hardware terminals are configured on track hardware devices, the dedicated hardware terminals are configured with a secure cloud operating system, the secure cloud operating system is configured with at least one virtual environment, and the virtual environment is configured with rail transit applications; The cloud management terminal is used to configure the dedicated hardware terminals; The dedicated hardware terminals are used to obtain the communication signals of rail transit devices in the rail area received by the rail transit applications, determine the control information of the rail transit devices according to the communication signals, and feedback the control information to the rail transit devices.

2. The system according to claim 1, characterized in that, The track hardware device is a multi-core hardware device, and the multi-core hardware device includes: at least one multi-core processor unit, wherein the multi-core processor unit is used to configure the virtual environment corresponding to the rail transit application.

3. The system according to claim 2, wherein The virtual environments correspond to the rail transit applications one by one; the configuration information of the virtual environments is determined according to the types of the rail transit applications.

4. The system according to claim 1, characterized in that, The communication signals of the rail transit devices are transmitted to the rail transit applications corresponding to the rail transit devices through a software-defined network.

5. The system according to claim 1, characterized in that, The rail transit applications and the fail-safe voter correspond one by one or the dedicated hardware terminals and the fail-safe voter correspond one by one; wherein, the fail-safe voter is in a two-out-of-two voting mode.

6. The system according to claim 1, wherein The secure cloud information transmission system further includes: at least one standby hardware terminal; each of the dedicated hardware terminals corresponds to each of the standby hardware terminals one by one.

7. The system according to claim 1, wherein The virtual environment is a rail transit embedded environment.

8. The system according to claim 1, characterized in that, The cloud management terminal is configured on a cloud server, and the cloud management terminal is further used to configure the communication link configuration information between the dedicated hardware terminals, the communication link configuration information between the rail transit applications, and the communication link configuration information between the dedicated hardware terminals and the cloud management terminal.

9. An information processing method based on a secure cloud, characterized in that, The rail transit applications applied to the dedicated hardware terminals include: Obtaining the communication signals of at least one rail transit device in the rail area; Processing the communication signals of the rail transit devices through the rail transit applications to obtain a signal processing result; Screening the rail transit devices according to the signal processing result to determine at least one device to be executed; Sending the signal processing result to each of the devices to be executed, so that each of the devices to be executed performs corresponding operations according to the signal processing result.

10. The method according to claim 9, wherein The processing the communication signals of the rail transit devices through the rail transit applications to obtain a signal processing result includes: Performing a safety vote on the communication signals of the rail transit devices to obtain a safety vote result; If the safety vote result is safe, processing the communication signals of the rail transit devices through the rail transit applications to obtain a signal processing result; If the safety vote result is dangerous, generating a communication signal re-acquisition command and sending it to each of the rail transit devices, so that each of the rail transit devices re-sends the communication signals to the rail transit applications.

Images