Ethernet online monitoring method and equipment for train

Abstract

The invention discloses a train Ethernet online monitoring method. The method comprises the steps of obtaining communication data of a train Ethernet, then synchronously carrying out three monitoring operations of loop connectivity diagnosis, data protocol legality verification and flow abnormality diagnosis based on the obtained communication data, and finally obtaining a corresponding loop connectivity diagnosis result, a corresponding data protocol legality verification result and a corresponding flow abnormality diagnosis result. Multi-dimensional coverage monitoring of the Ethernet operation state of the train is realized through the logic of firstly obtaining communication data and then carrying out three core diagnoses in a targeted manner. Communication faults of network links can be found in time through loop connectivity diagnosis, protocol violation transmission problems can be checked through data protocol legality verification, flow abnormity fluctuation conditions can be captured through flow abnormity diagnosis, and the three diagnoses are synchronously promoted, so that key operation abnormity possibly occurring in the train Ethernet is comprehensively covered, and the reliability of the train Ethernet is improved. And comprehensive technical support is provided for stable operation of the train Ethernet.

Description

Technical Field

[0001] This application relates to the field of train Ethernet monitoring technology, and in particular to a train Ethernet online monitoring method and equipment. Background Technology

[0002] With the rapid development of the rail transit industry towards intelligence and high speed, train Ethernet has become the core data transmission carrier for various onboard core systems (such as braking control systems, safety monitoring systems, and onboard communication systems). Train Ethernet undertakes the real-time interaction of critical data such as train control commands, equipment status data, and operation and maintenance management information. The communication stability and data transmission reliability of train Ethernet are directly related to train driving safety, operational efficiency, and ease of operation and maintenance.

[0003] Currently, train Ethernet monitoring technology is mainly based on traditional network management architecture. It achieves static display of network topology and alarms for obvious anomalies such as link interruptions and port failures by deploying simple monitoring equipment at some key nodes. The overall monitoring method is relatively basic and has not been optimized for the train Ethernet-specific communication protocol and dynamic operating characteristics. Summary of the Invention

[0004] To address the aforementioned issues, this application provides a train Ethernet online monitoring method and device.

[0005] The embodiments of this application disclose the following technical solutions: In a first aspect, embodiments of this application provide a train Ethernet online monitoring method, applied to the central processing unit (CCU) in a train, the method comprising: Acquire communication data; Based on the communication data, loop connectivity diagnosis, data protocol validity verification, and traffic anomaly diagnosis are performed to obtain loop connectivity diagnosis results, data protocol validity verification results, and traffic anomaly diagnosis results.

[0006] In one possible implementation, the step of performing loop connectivity diagnosis, data protocol validity verification, and traffic anomaly diagnosis based on the communication data to obtain loop connectivity diagnosis results, data protocol validity verification results, and traffic anomaly diagnosis results includes: Based on the data type, the communication data is divided into data protocol control commands, switch port on / off status data, and traffic data of each core link. For the data protocol control command, perform data protocol validity verification to obtain the data protocol validity verification result; Based on the on / off status data of the switch ports, perform loop connectivity diagnosis to obtain the loop connectivity diagnosis results; For the traffic data of each core link, perform traffic anomaly diagnosis to obtain the traffic anomaly diagnosis results.

[0007] In one possible implementation, the step of performing data protocol validity verification on the data protocol control command to obtain the data protocol validity verification result specifically includes: The data protocol control command is matched with a preset data protocol control command whitelist; wherein, the whitelist includes the allowed sender permission level, the data protocol control command field format standard, and the command validity duration; the data protocol control command includes the sender device number, field format, and sending time; If all matching conditions are met, the data protocol control instruction is determined to be a valid data protocol control instruction. If any matching condition is not met, the data protocol control instruction is determined to be an illegal data protocol control instruction. The matching conditions include: the sending time is within the effective duration of the instruction; the permission corresponding to the sender's device number belongs to the allowed sender permission level; and the field format conforms to the data protocol control instruction field format standard.

[0008] In one possible implementation, the circuits in the train include a main circuit for transmitting train control commands, a main circuit for transmitting safety monitoring data, and corresponding redundant backup circuits. The step of performing loop connectivity diagnosis based on the switch port connectivity status data to obtain the loop connectivity diagnosis result includes: Based on the on / off status data of the switch ports and the train's Ethernet topology, the conduction status of the main circuit is determined; the main circuit is either the main circuit for transmitting train control commands or the main circuit for transmitting safety monitoring data. If the main circuit is conducting normally, record the result of normal connectivity; If the main circuit is disconnected, the continuity status of the corresponding redundant backup circuit is detected synchronously; if the redundant backup circuit is normally connected, the main circuit fault is recorded and a degradation warning is triggered; if the redundant backup circuit is disconnected, a warning is triggered.

[0009] In one possible implementation, the step of performing traffic anomaly diagnosis on the traffic data of each core link to obtain the traffic anomaly diagnosis result includes: Based on their functions, the core links are divided into control command links, operation and maintenance data links, and multimedia data links. Calculate the traffic per second and traffic growth rate for each type of link separately; The flow rate per second of each type of link is compared with the upper limit of the link bandwidth, and the flow rate growth rate of each type of link is compared with a preset threshold. If the flow rate per second exceeds the upper limit of the link bandwidth or the flow rate growth rate exceeds the preset threshold, it is determined that there is a flow anomaly in the link. The link flow threshold is dynamically configured according to the design bandwidth of the train Ethernet.

[0010] In one possible implementation, before performing loop connectivity diagnosis, data protocol validity verification, and traffic anomaly diagnosis based on the communication data to obtain loop connectivity diagnosis results, data protocol validity verification results, and traffic anomaly diagnosis results, the method further includes: Obtain the current operating conditions of the train; wherein, the operating conditions include starting conditions, high-speed driving conditions, braking conditions, and stopping conditions; The link traffic threshold is dynamically adjusted based on the network load characteristics under different operating conditions; wherein, the upper limit of the link bandwidth and the preset threshold under the high-speed driving condition are higher than those under the docking condition.

[0011] In one possible implementation, the method further includes: The abnormal results are classified according to the loop connectivity diagnosis results, the data protocol legality verification results, and the traffic anomaly diagnosis results; If the circuit connectivity diagnosis result indicates that both the main circuit and the redundant backup circuit corresponding to the main circuit are disconnected, or if the data protocol legality verification result indicates that the data protocol control command is an illegal data protocol control command, then the current situation is determined to be a Level 1 emergency warning. If the data protocol legality verification result indicates that the legality of the data protocol control command is questionable, or if the traffic anomaly diagnosis result indicates that the traffic is abnormal, the current situation is determined to be a Level II emergency warning. If the circuit connectivity diagnosis result indicates that the main circuit is connected and the redundant backup circuit corresponding to the main circuit is disconnected, the current situation is determined to be a Level 3 emergency warning. In one possible implementation, the method further includes: In the event of the first-level emergency warning, an audible and visual alarm prompt command is sent to the train display terminal, and an emergency alarm push is sent to the ground operation and maintenance platform at the same time. In the event of the Level II emergency warning, an instruction is sent to the train display terminal to highlight the abnormal link and its type; In the event of the Level 3 emergency warning, an instruction is sent to the train display terminal to record the abnormal log and synchronize it to the ground operation and maintenance platform.

[0012] In one possible implementation, the method further includes: The communication data, the loop connectivity diagnosis results, the data protocol validity verification results, and the traffic anomaly diagnosis results are synchronized to the train display terminal and the ground operation and maintenance platform.

[0013] In one possible implementation, the communication data is obtained by the monitoring module at the intersection of the switch port, device communication interface, and core link in the train Ethernet.

[0014] Secondly, embodiments of this application disclose a train Ethernet online monitoring device, the device comprising: The acquisition module is used to acquire communication data; The diagnostic module is used to perform loop connectivity diagnosis, data protocol validity verification, and traffic anomaly diagnosis based on the communication data, and to obtain loop connectivity diagnosis results, data protocol validity verification results, and traffic anomaly diagnosis results.

[0015] In one possible implementation, the diagnostic module is specifically used for: Based on the data type, the communication data is divided into data protocol control commands, switch port on / off status data, and traffic data of each core link. For the data protocol control command, perform data protocol validity verification to obtain the data protocol validity verification result; Based on the on / off status data of the switch ports, perform loop connectivity diagnosis to obtain the loop connectivity diagnosis results; For the traffic data of each core link, perform traffic anomaly diagnosis to obtain the traffic anomaly diagnosis results.

[0016] In one possible implementation, the diagnostic module is specifically used for: The data protocol control command is matched with a preset data protocol control command whitelist; wherein, the whitelist includes the allowed sender permission level, the data protocol control command field format standard, and the command validity duration; the data protocol control command includes the sender device number, field format, and sending time; If all matching conditions are met, the data protocol control instruction is determined to be a valid data protocol control instruction. If any matching condition is not met, the data protocol control instruction is determined to be an illegal data protocol control instruction. The matching conditions include: the sending time is within the effective duration of the instruction; the permission corresponding to the sender's device number belongs to the allowed sender permission level; and the field format conforms to the data protocol control instruction field format standard.

[0017] In one possible implementation, the circuits in the train include a main circuit for transmitting train control commands, a main circuit for transmitting safety monitoring data, and corresponding redundant backup circuits. In one possible implementation, the diagnostic module is specifically used for: Based on the on / off status data of the switch ports and the train's Ethernet topology, the conduction status of the main circuit is determined; the main circuit is either the main circuit for transmitting train control commands or the main circuit for transmitting safety monitoring data. If the main circuit is conducting normally, record the result of normal connectivity; If the main circuit is disconnected, the continuity status of the corresponding redundant backup circuit is detected synchronously; if the redundant backup circuit is normally connected, the main circuit fault is recorded and a degradation warning is triggered; if the redundant backup circuit is disconnected, a warning is triggered.

[0018] In one possible implementation, the diagnostic module is specifically used for: Based on their functions, the core links are divided into control command links, operation and maintenance data links, and multimedia data links. Calculate the traffic per second and traffic growth rate for each type of link separately; The flow rate per second of each type of link is compared with the upper limit of the link bandwidth, and the flow rate growth rate of each type of link is compared with a preset threshold. If the flow rate per second exceeds the upper limit of the link bandwidth or the flow rate growth rate exceeds the preset threshold, it is determined that there is a flow anomaly in the link. The link flow threshold is dynamically configured according to the design bandwidth of the train Ethernet.

[0019] In one possible implementation, the acquisition module is further configured to: Obtain the current operating conditions of the train; wherein, the operating conditions include starting conditions, high-speed driving conditions, braking conditions, and stopping conditions; The link traffic threshold is dynamically adjusted based on the network load characteristics under different operating conditions; wherein, the upper limit of the link bandwidth and the preset threshold under the high-speed driving condition are higher than those under the docking condition.

[0020] In one possible implementation, the diagnostic module is further configured to classify abnormal results based on the loop connectivity diagnostic results, the data protocol validity verification results, and the traffic anomaly diagnostic results; If the circuit connectivity diagnosis result indicates that both the main circuit and the redundant backup circuit corresponding to the main circuit are disconnected, or if the data protocol legality verification result indicates that the data protocol control command is an illegal data protocol control command, then the current situation is determined to be a Level 1 emergency warning. If the data protocol legality verification result indicates that the legality of the data protocol control command is questionable, or if the traffic anomaly diagnosis result indicates that the traffic is abnormal, the current situation is determined to be a Level II emergency warning. If the circuit connectivity diagnosis result indicates that the main circuit is connected and the redundant backup circuit corresponding to the main circuit is disconnected, the current situation is determined to be a Level 3 emergency warning. In one possible implementation, the device further includes an early warning module; The early warning module is used to send an audible and visual alarm prompt command to the train display terminal in the event of the first-level emergency early warning, and at the same time send an emergency alarm push to the ground operation and maintenance platform. In the event of the Level II emergency warning, an instruction is sent to the train display terminal to highlight the abnormal link and its type; In the event of the Level 3 emergency warning, an instruction is sent to the train display terminal to record the abnormal log and synchronize it to the ground operation and maintenance platform.

[0021] In one possible implementation, the device further includes a transmitting module; The sending module is used to send communication data, the loop connectivity diagnosis result, the data protocol validity verification result, and the traffic anomaly diagnosis result to the train display terminal and the ground operation and maintenance platform.

[0022] In one possible implementation, the communication data is obtained by the monitoring module at the intersection of the switch port, device communication interface, and core link in the train Ethernet.

[0023] Thirdly, embodiments of this application disclose a control device, including a processor and a memory, wherein the memory is used to store programs, instructions or code, and the processor is used to execute the programs, instructions or code in the memory to complete the train Ethernet online monitoring method as described in any of the first aspects.

[0024] Fourthly, embodiments of this application disclose a computer-readable storage medium, characterized in that it stores a computer program, which is loaded by a processor to execute the train Ethernet online monitoring method as described in any of the first aspects.

[0025] Fifthly, embodiments of this application disclose a train that includes at least a CCU to perform the train Ethernet online monitoring method described in any of the first aspects above.

[0026] This application provides a method for online monitoring of train Ethernet. The method includes: acquiring train Ethernet communication data; then, based on the acquired communication data, simultaneously performing three monitoring operations: loop connectivity diagnosis, data protocol validity verification, and flow anomaly diagnosis; and finally obtaining the corresponding loop connectivity diagnosis results, data protocol validity verification results, and flow anomaly diagnosis results.

[0027] This method achieves multi-dimensional monitoring of the train Ethernet's operational status by first acquiring communication data and then conducting three targeted core diagnostics. Loop connectivity diagnosis can promptly detect network link connectivity failures, data protocol validity verification can identify protocol violations, and traffic anomaly diagnosis can capture abnormal traffic fluctuations. The simultaneous implementation of these three diagnostics comprehensively covers potential critical operational anomalies in the train Ethernet and ensures the authenticity and reliability of the monitoring results through diagnostics based on actual communication data, providing comprehensive technical support for the stable operation of the train Ethernet. Attached Figure Description

[0028] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0029] Figure 1 A flowchart illustrating a train Ethernet online monitoring method provided in this application embodiment; Figure 2 A flowchart illustrating another train Ethernet online monitoring method provided in this application embodiment; Figure 3 A flowchart illustrating another train Ethernet online monitoring method provided in this application embodiment; Figure 4 This is a schematic diagram of the structure of a train Ethernet online monitoring device provided in an embodiment of this application. Detailed Implementation

[0030] To address the technical problems existing in the prior art, this application provides a method for online monitoring of train Ethernet. The method includes: acquiring train Ethernet communication data; then, based on the acquired communication data, simultaneously performing three monitoring operations: loop connectivity diagnosis, data protocol validity verification, and flow anomaly diagnosis; and finally obtaining the corresponding loop connectivity diagnosis results, data protocol validity verification results, and flow anomaly diagnosis results.

[0031] This method achieves multi-dimensional monitoring of the train Ethernet's operational status by first acquiring communication data and then conducting three targeted core diagnostics. Loop connectivity diagnosis can promptly detect network link connectivity failures, data protocol validity verification can identify protocol violations, and traffic anomaly diagnosis can capture abnormal traffic fluctuations. The simultaneous implementation of these three diagnostics comprehensively covers potential critical operational anomalies in the train Ethernet and ensures the authenticity and reliability of the monitoring results through diagnostics based on actual communication data, providing comprehensive technical support for the stable operation of the train Ethernet.

[0032] The application scenario of this application applies to the entire lifecycle operation of a train, with core hardware collaboratively adapting to the dynamic onboard environment. The Central Processing Unit (CCU) in the train, as the core control hardware, is integrated within the onboard control box. It captures various communication data in real time through linkage with the train's Ethernet switch ports, device communication interfaces, and acquisition units at the intersection of core links. The train display terminal is deployed in the driver's cab for immediate viewing by the driver and onboard maintenance personnel, while the ground maintenance platform is deployed at the ground control center of the rail transit operating company. Whether in routine operating conditions such as train start-up, high-speed travel, and braking, or in complex environments such as tunnel travel and strong electromagnetic interference, the CCU can continuously collect key node data based on the environmental adaptability of the onboard hardware. After classification and processing, the communication data and monitoring results are synchronized to the train display terminal and the ground maintenance platform. This not only meets the onboard personnel's need for real-time control of Ethernet communication status but also provides ground maintenance personnel with data source support for remote monitoring and preliminary fault assessment, adapting to the Ethernet monitoring needs of various rail transit vehicles such as conventional trains, high-speed trains, and heavy-haul trains.

[0033] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of the present application.

[0034] See Figure 1 , Figure 1 This is a flowchart illustrating a train Ethernet online monitoring method provided in an embodiment of this application. The execution entity of this method can be a server, desktop computer, or other electronic device capable of computation. The following description uses a CCU as the execution entity, and the method includes: S101: CCU acquires communication data.

[0035] Dedicated monitoring modules are deployed at the core switch ports and key equipment communication interfaces of the train's Ethernet network. These modules connect to the network via mirrored ports or cascaded access, without affecting the normal transmission of the original train Ethernet communication links. The monitoring modules support standard Ethernet protocols and are adaptable to the train's Ethernet transmission rates, ensuring complete capture of communication data at different speeds.

[0036] In one possible implementation, communication data is obtained by the monitoring module at the switch ports, device communication interfaces, and core link junctions in the train Ethernet.

[0037] Train Ethernet refers to a dedicated communication network for trains, used to connect various devices such as onboard braking systems, safety monitoring systems, and display terminals to achieve real-time transmission of critical data and control commands.

[0038] The switch ports are the input and output interfaces of the train's Ethernet switch. They are key nodes for onboard equipment to access the network and are responsible for data forwarding and device interconnection.

[0039] The device communication interface is a dedicated interface for connecting onboard control equipment (such as brake controllers and safety monitoring sensors) to the train's Ethernet network, used for data interaction between the device and the network.

[0040] The core link junction is the junction node of the core communication links that carry out critical data transmission in the train Ethernet, and it is a key node where data traffic is concentrated.

[0041] In this embodiment, the monitoring module establishes a stable communication connection with the train's Ethernet switch port, device communication interface, and core link intersection via a preset hardware interface. The monitoring module works in conjunction with the signal acquisition interfaces of each key node via the onboard Ethernet bus to ensure real-time data transmission and interference resistance. The acquisition process employs a real-time triggered mode, with the monitoring module actively acquiring communication data from each key node according to a preset acquisition frequency. The acquisition scope covers various key information such as Train Real-time Data Protocol (TRDP) protocol interaction messages, switch port on / off status signals, and core link data packet transmission volume, ensuring no data is missed in core communication links. The preset sampling frequency can be synchronized with the train's Ethernet data transmission frequency.

[0042] Meanwhile, considering the high vibration and strong electromagnetic interference environment during train operation, the CCU performs preliminary preprocessing after acquiring communication data. The CCU uses a built-in anti-electromagnetic interference algorithm to reduce noise in the raw communication data and filter out invalid data caused by environmental interference. The CCU adds timestamps and node identifiers to various types of data collected to clarify the source and generation time of the data, providing basic identification information for subsequent classification and processing, and ensuring the integrity and reliability of the collected data.

[0043] This application's embodiments focus on key communication nodes of the train Ethernet network for data acquisition, accurately covering the core communication links of the train Ethernet network. This solves the problems of insufficient targeting and incomplete coverage in existing data acquisition technologies, ensuring that the acquired data can truly reflect the core operating status of the train Ethernet network. Real-time acquisition and preliminary preprocessing via the CCU ensure both the timeliness of the data and improve its quality. This provides a comprehensive and reliable raw data source for data classification and targeted monitoring, laying the foundation for the accuracy of the entire monitoring scheme.

[0044] S102: The CCU performs loop connectivity diagnosis, data protocol validity verification, and traffic anomaly diagnosis based on communication data, and obtains loop connectivity diagnosis results, data protocol validity verification results, and traffic anomaly diagnosis results.

[0045] Loop connectivity diagnosis refers to analyzing the transmission link status of communication data to determine whether the physical / logical links between network nodes in the train Ethernet are in a normal connectivity state, and to diagnose problems such as link interruption or node reachability.

[0046] Data protocol validity verification refers to verifying whether the communication data conforms to the protocol requirements based on the train Ethernet's preset communication protocol specifications, and checking for problems such as incorrect protocol type, missing fields, or format violations.

[0047] Traffic anomaly diagnosis refers to analyzing the transmission rate and data volume change trends of communication data to determine whether there are abnormal situations such as sudden increases / decreases in traffic or sustained high traffic that deviate from the normal range.

[0048] The CCU performs diagnostics simultaneously in three categories based on the communication dataset. All three types of diagnostics rely on structured communication data and ultimately generate corresponding diagnostic results.

[0049] To better understand the train Ethernet online monitoring method provided in the embodiments of this application, the embodiments of this application will be further described in conjunction with the accompanying drawings. Figure 2 As shown, Figure 2 A flowchart illustrating another train Ethernet online monitoring method provided in this application embodiment. The method includes: S201: CCU acquires communication data.

[0050] S202: The CCU breaks down communication data into data protocol control commands, switch port on / off status data, and traffic data of each core link according to the data type.

[0051] Data protocol control commands, such as TRDP commands, will be used as an example for explanation below.

[0052] TRDP commands refer to message data transmitted via TRDP in the train Ethernet network, and are the core carrier of interactive control commands and service data between onboard equipment.

[0053] Switch port connectivity data refers to the data related to the connection or disconnection status of each input / output port of the train's Ethernet switch, reflecting the physical connection and working status of the port.

[0054] Core link traffic data refers to the data related to the amount of data packets transmitted per unit time in the core communication link of the train Ethernet, reflecting the transmission load status of the link.

[0055] After receiving communication data, the CCU initiates the data classification and splitting logic. The CCU extracts key identifying features of each data item through its built-in data analysis module, such as data transmission protocol type, data source node attributes, and data format characteristics, which serve as the basis for data type determination.

[0056] Based on the aforementioned identification characteristics, the CCU accurately segments communication data into three independent data processing channels. Data streams carrying TRDP protocol identifiers and conforming to the TRDP instruction format are identified as TRDP instructions and stored in a dedicated message buffer. Discrete signal data reflecting port connection / disconnection status are identified as switch port connection / disconnection status data, associated with the corresponding port number, and stored. Continuous data recording link packet transmission volume is identified as core link traffic data, bound to the corresponding link identifier, and stored. During the segmentation process, the CCU retains the original timestamp and node identification information of each data entry, ensuring that the classified data can still be traced back to its source and generation sequence, providing a correlation basis for subsequent targeted monitoring and processing.

[0057] This application's embodiments precisely segment communication data according to data type, clarifying the processing direction of different data and avoiding the confusion in monitoring logic caused by the mixing of various types of data. This solves the problem of lack of targeted data processing in existing technologies. Furthermore, allocating data to independent processing channels and associating them with original identification information provides clear data source support for subsequent dedicated monitoring processing for different data types, while also ensuring data traceability. Simultaneously, the categorized storage mode improves the efficiency of subsequent data retrieval and processing by the CCU, ensuring the smooth progress of the monitoring process and providing crucial guarantees for the accuracy and efficiency of the entire solution.

[0058] S203: The CCU performs corresponding data monitoring and processing for each data type to obtain data monitoring results.

[0059] Specifically, the CCU performs data protocol validity verification on TRDP commands, obtaining the data protocol validity verification result. Data protocol validity verification refers to the CCU's compliance check of TRDP commands, verifying whether they conform to the transmission specifications and preset communication requirements of the train Ethernet TRDP protocol. The CCU performs loop connectivity diagnosis on switch port on / off status data, obtaining loop connectivity diagnosis results. Loop connectivity judgment refers to the CCU determining whether a loop has normal conduction capability based on switch port on / off status data and the preset connection logic of key communication loops in the train Ethernet. The CCU performs traffic anomaly diagnosis on the traffic data of each core link, obtaining traffic anomaly diagnosis results. Traffic anomaly diagnosis results refer to the CCU's operation of classifying core link traffic data according to preset rules, statistically analyzing traffic-related parameters, and monitoring link load status in real time.

[0060] The CCU retrieves the three categories of data after classification and storage, and initiates dedicated targeted monitoring logic. For TRDP commands, the CCU uses the TRDP protocol adaptation module to verify the message's protocol format, data field integrity, and transmission compatibility, completing a legality check and determining whether the message conforms to the train Ethernet communication specifications. For switch port connectivity data, the CCU first retrieves the preset connection topology logic of key train Ethernet circuits (such as control command transmission circuits and safety data transmission circuits), then matches and compares the connectivity data of each port with this logic to determine whether the key circuit is in a normal conducting state and identify anomalies such as port failures or circuit interruptions. For traffic data from each core link, the CCU classifies the data according to the link's functional attributes or identification information, statistically analyzes core parameters such as the amount of data packets transmitted per unit time and bandwidth usage, and simultaneously monitors traffic change trends in real time, promptly capturing abnormal states such as sudden traffic increases and continuous overload, completing classification statistics and online monitoring.

[0061] This application's embodiments achieve precise data classification and monitoring by performing dedicated targeted monitoring processing on different types of data. This avoids monitoring bias caused by mixed processing of various types of data and solves the problem of insufficient targeting in existing technologies. Specialized monitoring targeting three core dimensions—TRDP commands, critical loops, and core link traffic—comprehensively covers key operational indicators of the train Ethernet, ensuring that monitoring results accurately and comprehensively reflect the network's operational status. Simultaneously, precise monitoring processing provides reliable and effective core evidence for subsequent data and result synchronization, directly guaranteeing the accuracy of information obtained by onboard personnel and ground maintenance personnel. This is a crucial link in achieving the core objectives of the entire online monitoring solution.

[0062] In one possible implementation, after obtaining the results of loop connectivity diagnosis, data protocol validity verification, and traffic anomaly diagnosis, the results can also be displayed synchronously through the train display terminal and the ground operation and maintenance platform.

[0063] S204: The CCU synchronizes communication data, loop connectivity diagnostic results, data protocol legality verification results, and traffic anomaly diagnostic results to the train display terminal and the ground operation and maintenance platform.

[0064] The train display terminal is an onboard display device deployed in the train driver's cab or onboard maintenance station. It has real-time information display and abnormal alarm prompt functions, allowing the driver and onboard personnel to view the Ethernet operating status in real time.

[0065] The ground operation and maintenance platform is a remote operation and maintenance system deployed in the ground control center of rail transit operating companies. It supports data storage, query, and statistical analysis functions, allowing ground operation and maintenance personnel to remotely monitor the Ethernet status of trains.

[0066] The CCU integrates and processes communication data, loop connectivity diagnostic results, data protocol legality verification results, and traffic anomaly diagnostic results. It establishes mapping relationships based on data type, monitoring results, and associated identifier logic, binding each piece of communication data to its corresponding monitoring result. At the same time, it supplements traceability information such as data generation time and source node to form a structured monitoring data packet, ensuring information integrity and traceability.

[0067] Subsequently, the CCU completes data transmission through a dual-channel synchronization mechanism. For the train display terminal, the CCU achieves real-time synchronization via the onboard local area network, displaying core information from the structured monitoring data packets in a visual interface, such as abnormal alarm types, critical loop status, and abnormal flow link identifiers. If an anomaly is detected, an audible and visual alert is triggered on the terminal. For the ground maintenance platform, the CCU establishes a connection with the ground network through the train's onboard communication module, synchronizing anomaly monitoring results and corresponding raw data in real time. It also periodically synchronizes complete communication data and monitoring result sets, ensuring that ground personnel can respond to anomalies promptly and obtain full data for subsequent analysis. During synchronization, the CCU employs encrypted transmission protocols to ensure data security and prevent data leakage or tampering during transmission.

[0068] This application embodiment integrates communication data and monitoring results and establishes a correlation mapping, ensuring the integrity and logic of synchronized information and solving the problems of disconnected monitoring data and results and difficulty in traceability in existing technologies. The dual-channel synchronization design simultaneously meets the differentiated needs of onboard personnel for real-time control and ground maintenance personnel for remote monitoring, breaking the limitations of a single information transmission channel and improving the timeliness of maintenance response. The design of encrypted transmission and structured data display not only ensures data transmission security but also reduces the information interpretation costs for onboard and ground maintenance personnel, enabling relevant personnel to quickly and accurately grasp the train's Ethernet operating status. This provides direct and reliable data support for on-site anomaly handling and remote fault analysis, ultimately achieving the collaborative monitoring goal of onboard real-time monitoring and ground remote maintenance, ensuring the security and convenience of train Ethernet operation.

[0069] This application embodiment focuses on collecting data from key train Ethernet communication nodes using the CCU, ensuring the relevance and comprehensiveness of the monitoring data and reflecting the operational status of the core train Ethernet communication links. By splitting data according to data type and executing corresponding dedicated monitoring processes, accurate monitoring of the compliance of the train's dedicated Ethernet protocol, the stability of key communication loops, and the transmission load of core links is achieved, avoiding monitoring deviations caused by mixed data processing. By synchronizing communication data and monitoring results to the train display terminal and the ground operation and maintenance platform, both onboard personnel and ground operation and maintenance personnel can obtain monitoring information in a timely manner, providing effective data support for on-site communication status control and remote operation and maintenance support. Overall, it achieves targeted, comprehensive, and efficient online monitoring of the train Ethernet.

[0070] For TRDP commands, switch port connectivity data, and traffic data of each core link, this application's embodiments employ different monitoring and processing methods, which are described below in conjunction with... Figure 3 The introductions will proceed in sequence.

[0071] Based on the legality verification of TRDP commands, this application's embodiments detail the implementation process of TRDP command legality verification to clarify the specific execution standards and operational logic of the verification, improve the accuracy of TRDP command compliance judgment, and prevent illegal messages from intruding into the train's Ethernet and affecting communication security. The embodiments clarify the composition of the whitelist, comparison dimensions, and judgment and handling rules.

[0072] In one possible implementation, the CCU performs data protocol validity verification on TRDP commands. Specifically, the CCU calls a pre-defined TRDP command whitelist, which includes allowed sender permission levels, data protocol control command field format standards, and command validity duration. The CCU extracts the sender device number, field format, and transmission time from the TRDP command and compares them one by one with the corresponding entries in the TRDP command whitelist. If any item does not match, or the transmission time exceeds the command validity duration, the TRDP command is determined to be an illegal TRDP command, and the CCU intercepts the TRDP command and records its characteristic information. If all items match, the TRDP command is determined to be a legal TRDP command.

[0073] In this embodiment, the process of CCU performing TRDP command validity verification has a clear step-by-step logic, and the entire process is completed by CCU as the core execution entity. First, when CCU starts the verification process, it will actively call the TRDP command whitelist stored in the local storage unit. This whitelist is the core basis for ensuring the validity of verification and clearly includes three types of key verification information: the sender's permission level allowed to pass through the train Ethernet, the standardized TRDP command field format, and the effective duration corresponding to each type of command, ensuring that the verification dimensions comprehensively cover sender compliance, format standardization, and timeliness validity.

[0074] Subsequently, the CCU uses its built-in message parsing module to accurately extract three core comparison information items from the TRDP command to be verified: the sender device number, the field format of the message itself, and the message sending time. Then, it performs precise comparisons of these three items with the corresponding items in the TRDP command whitelist one by one to ensure that no verification dimension is missed.

[0075] The CCU performs differentiated judgment and handling based on the comparison results. If any comparison item in the extracted information does not match the whitelist, or if the message's transmission time exceeds the whitelist's preset instruction validity period, the CCU directly determines the TRDP instruction as an illegal TRDP instruction and immediately triggers an interception mechanism to prevent the illegal message from continuing to be transmitted in the train Ethernet, thus avoiding interference with normal communication data interaction. The CCU can also simultaneously record the characteristic information of the illegal message, such as the sender's device number, transmission time, and details of abnormal field formats, providing a basis for subsequent fault tracing. If all extracted comparison items completely match the whitelist, the TRDP instruction is determined to be a legitimate TRDP instruction, allowing it to be transmitted normally in the train Ethernet, ensuring smooth interaction between legitimate control instructions and service data.

[0076] To clarify the specific composition of critical loops and the hierarchical connectivity determination logic, and to enhance the fault redundancy protection capability of the train Ethernet core communication link, this application embodiment refines and supplements the scope definition of critical loops and the execution process of connectivity determination.

[0077] In one possible implementation, the CCU performs loop connectivity judgment, including: the CCU determines the conduction status of the main loop based on the switch port on / off status data and the train Ethernet topology; if the main loop is conducting normally, the connectivity result is recorded; if the main loop is disconnected, the conduction status of the corresponding redundant backup loop is detected synchronously; if the redundant backup loop is conducting normally, the main loop fault is recorded and a degradation warning is triggered; if the redundant backup loop is disconnected, a warning is triggered.

[0078] The critical circuits include the main circuit for transmitting train control commands, the main circuit for transmitting safety monitoring data, and corresponding redundant backup circuits.

[0079] In this embodiment, the critical circuit in the train Ethernet is not a single communication circuit, but includes two types of core main circuits and corresponding redundant backup circuits. Specifically, the critical circuits include a train control command transmission main circuit and a safety monitoring data transmission main circuit, as well as redundant backup circuits corresponding one-to-one with the two types of main circuits. The train control command transmission main circuit is responsible for transmitting core control commands such as train braking and speed adjustment, while the safety monitoring data transmission main circuit is responsible for transmitting safety data such as vehicle operating status and fault alarms collected by onboard sensors. The stable conduction of both types of main circuits is directly related to train operation safety. The redundant backup circuits serve as backup communication channels for the main circuits, used for emergency data transmission in case of main circuit failure, thus constructing a redundant protection architecture with primary and backup dual links.

[0080] When the CCU performs critical loop connectivity checks, it relies on pre-stored train Ethernet topology data. This topology clearly defines the port relationships for each main loop and redundant backup loop, providing a topological basis for loop continuity assessment. Specifically, the CCU first matches the collected switch port connectivity data with the topology to locate all ports corresponding to the main loop for train control command transmission and the main loop for safety monitoring data transmission. Through a combination of port connectivity status checks, the overall continuity status of the main loop is determined.

[0081] Upon receiving the main circuit continuity status, the CCU performs hierarchical judgment and handling operations. If the main circuit is determined to be normally connected, the monitoring result of normal connectivity of the critical circuit is directly recorded and synchronized to the train display terminal and the ground maintenance platform. If the main circuit is determined to be disconnected, the continuity status detection process of the redundant backup circuit is immediately triggered. Based on the port connectivity data and topology relationship, the continuity status of the corresponding redundant backup circuit is determined. If the redundant backup circuit is normally connected, the CCU records detailed information about the main circuit fault and triggers a degradation warning, prompting onboard maintenance personnel to promptly repair the main circuit. At this time, the train Ethernet can maintain core data transmission through the redundant backup circuit, ensuring normal train operation. If a main circuit disconnection is detected and the corresponding redundant backup circuit is also disconnected, the CCU immediately triggers a warning, alerting the driver through an audible and visual alarm on the train display terminal, and simultaneously sending an emergency alarm message to the ground maintenance platform to remind ground personnel to intervene and prevent core data transmission interruption from causing safety hazards.

[0082] To improve the accuracy and targeting of traffic monitoring and adapt to the differentiated monitoring needs of different functional links, this application further refines the processing flow of core link traffic data, and clarifies the link division method, statistical parameters and dynamic threshold determination logic.

[0083] In one possible implementation, the CCU performs traffic anomaly diagnosis on the core link traffic data, including: the CCU divides the core links into control command links, operation and maintenance data links, and multimedia data links according to their functions; the CCU calculates the traffic per second and traffic growth rate for each type of link; the CCU compares the traffic per second of each type of link with the upper limit of the link bandwidth, and compares the traffic growth rate of each type of link with a preset threshold. If the traffic per second exceeds the upper limit of the link bandwidth or the traffic growth rate exceeds the preset threshold, it is determined that there is a traffic anomaly in the link; wherein, the link traffic threshold can be dynamically configured according to the design bandwidth of the train Ethernet.

[0084] In this embodiment, the CCU first precisely divides the core links of the train Ethernet based on their functional attributes, clearly defining them as control command links, maintenance data links, and multimedia data links. The control command link is responsible for transmitting core control commands such as train braking and speed adjustment, and is a critical link for ensuring safe train operation. The maintenance data link is used to transmit maintenance-related data such as onboard equipment status and fault records. The multimedia data link is responsible for transmitting non-core data such as onboard entertainment and passenger information broadcasts. This functional division allows for differentiated monitoring of links with different priorities.

[0085] Subsequently, the CCU performs traffic statistics operations on the three types of links after classification, focusing on the traffic per second and traffic growth rate of each type of link. The traffic per second value can intuitively reflect the real-time transmission load of the link, while the traffic growth rate is used to dynamically capture the changing trend of link traffic and avoid abnormal misjudgments caused by instantaneous traffic fluctuations. During the statistics process, the CCU binds the link identifier and timestamp to the statistical data of each type of link to ensure that the data is traceable and distinguishable.

[0086] Finally, the CCU compares the statistical data of various links with preset link traffic thresholds to perform anomaly detection. If the traffic per second of a certain type of link exceeds the bandwidth limit of that link, or the traffic growth rate exceeds the preset growth rate threshold, then the link is directly determined to have traffic anomalies; if neither indicator exceeds the threshold, then the link traffic is determined to be normal. Meanwhile, this application embodiment supports dynamic configuration of link traffic thresholds. Maintenance personnel can adjust the threshold parameters through the train display terminal or ground maintenance platform according to the design bandwidth of the train Ethernet, changes in actual operating load, etc., so that the traffic anomaly detection standard can flexibly adapt to different operating scenarios, further improving the practicality and adaptability of the monitoring solution.

[0087] To make core link traffic monitoring and other data monitoring and processing more adaptable to the dynamic operation of trains and to avoid misjudgment or omission caused by fixed thresholds under different operating conditions, the embodiments of this application can dynamically adjust the link traffic threshold according to the current operating conditions of the train.

[0088] In one possible implementation, before the CCU performs corresponding data monitoring and processing for each data type, the method further includes: the CCU acquiring the current operating condition of the train and dynamically adjusting the link traffic threshold based on the network load characteristics of different operating conditions.

[0089] In this embodiment, the CCU establishes communication with the train's onboard control system, receiving real-time operating condition identification signals from the onboard control system to determine the train's current operating condition. The operating conditions specifically include four core categories: startup, high-speed travel, braking, and parking. Each category corresponds to different network load characteristics. During startup, onboard equipment undergoes centralized initialization, resulting in a sudden increase in network data interaction. During high-speed travel, core control commands and safety monitoring data are continuously transmitted at high frequencies, resulting in a stable and high-level network load. During braking, braking control commands have the highest priority, requiring extremely high real-time data transmission. During parking, data interaction with non-core onboard equipment (such as multimedia equipment) increases, while the amount of core control data transmission decreases.

[0090] After obtaining the current operating conditions, the CCU dynamically adjusts the monitoring thresholds based on the network load characteristics of various operating conditions. The monitoring thresholds include core monitoring indicators such as link traffic threshold, packet loss rate threshold, and critical loop connectivity determination response time.

[0091] Considering the inherently high network load during high-speed operation, to avoid misjudging normal high loads as abnormalities, the upper limit and preset threshold of link bandwidth under this condition are set higher than those under the stopping condition. During braking, the timeliness of train braking control command transmission directly affects driving safety; therefore, the response time for critical circuit connectivity determination is shortened under this condition to ensure that circuit anomalies can be quickly identified, thus guaranteeing braking safety. This dynamic threshold adjustment, adapted to different operating conditions, makes various monitoring processes more closely aligned with the real-time operating status of the train, making monitoring standards more flexible and targeted.

[0092] To clearly distinguish the severity of different anomalies, avoid disordered operation and maintenance response due to chaotic alarm information, and improve the pertinence and efficiency of anomaly handling, this application embodiment implements graded early warning for anomaly monitoring results, and clarifies the early warning grade standards and the specific handling and push methods for different levels of early warning.

[0093] In one possible implementation, the data monitoring results include normal monitoring results and abnormal monitoring results; After receiving the data monitoring results, the method further includes: classifying and issuing early warnings for abnormal monitoring results. In the case of a Level 1 emergency warning, the CCU provides an audible and visual alarm on the train display terminal and simultaneously sends an emergency alarm push to the ground maintenance platform. In the case of a Level 2 emergency warning, the CCU highlights the abnormal link and type on the train display terminal. In the case of a Level 3 emergency warning, the CCU only records the abnormal log on the train display terminal and synchronizes it to the ground maintenance platform.

[0094] The CCU categorizes and judges the monitoring results, and initiates a graded early warning process for cases judged as abnormal. This application's embodiment adopts a three-level differentiated grading logic, clearly defining the early warning levels corresponding to different anomaly types. Two types of anomalies—those that endanger the core communication security of the train's Ethernet network and may directly affect train operation safety—are classified as Level 1 Emergency Early Warning, such as illegal TRDP commands and the disconnection of both the main circuit and redundant backup circuits. Two types of anomalies—those that affect communication quality but do not currently endanger core security—are classified as Level 2 Ordinary Early Warning, such as doubts about the legality of TRDP commands and abnormal core link traffic. Anomalies that only involve backup link failures and do not affect core communication are classified as Level 3 Indicative Early Warning, such as the redundant backup circuit being disconnected but the main circuit being normal.

[0095] The CCU performs differentiated handling and information push operations based on different warning levels. If a Level 1 emergency warning is detected, the CCU immediately triggers the audible and visual alarm function on the train display terminal, ensuring the driver and onboard personnel notice the high-risk anomaly immediately through both auditory and visual cues. Simultaneously, an emergency alarm push is sent to the ground maintenance platform, urging ground personnel to intervene quickly. If a Level 2 general warning is detected, the CCU does not trigger the audible and visual alarm; it only highlights relevant anomaly information on the train display terminal, including the anomaly link identifier and anomaly type (such as TRDP command verification doubt or control command link traffic anomaly), facilitating accurate problem localization. If a Level 3 warning is detected, the CCU does not issue an active alarm; it only records the anomaly log in the background of the train display terminal and synchronizes the log to the ground maintenance platform for subsequent planned maintenance by maintenance personnel, ensuring no anomaly information is missed while avoiding unnecessary alarm interference.

[0096] Based on the existing acquisition of anomaly monitoring results and hierarchical early warning, in order to solve the problem that it is difficult to accurately locate the root cause of a fault by a single anomaly and improve the fault investigation efficiency of maintenance personnel, in this embodiment of the application, the CCU can also perform correlation analysis on the anomaly monitoring results, lock the fault type by judging the linkage of multiple anomalies, and bind and synchronize the analysis results with the original anomaly information, providing direct support for precise operation and maintenance.

[0097] In one possible implementation, the method further includes: the CCU performing correlation analysis on the anomaly monitoring results. If both traffic anomalies and TRDP command packet loss occur simultaneously on the core link, the CCU determines that there is physical damage to the core link; if multiple switch ports simultaneously exhibit abnormal connectivity and correspond to the same critical circuit, the CCU determines that there is a switch failure. The CCU binds the correlation analysis results with the anomaly monitoring results and synchronizes them to the train display terminal and the ground maintenance platform.

[0098] In this embodiment, the CCU sorts out the identified abnormal monitoring results and filters out abnormal phenomena that may be related. Then, based on the operation logic of the train Ethernet and the relationship between the devices, it performs targeted correlation determination.

[0099] For anomalies related to the core link, the CCU can focus on checking whether there are simultaneous core link traffic anomalies and TRDP command packet loss. Traffic anomalies and packet loss often originate from damage at the physical layer of the link, such as line damage or loose interfaces. If both types of anomalies occur simultaneously on the same core link, combined with the transmission characteristics of train Ethernet, the CCU can directly determine that there is physical damage to the core link, clearly identifying the fault attribute as a link hardware-level problem.

[0100] For switch port-related anomalies, the CCU monitors the distribution characteristics of abnormal port connectivity. Port anomalies within the same circuit often originate from switch-specific faults, such as switch chip failures or power supply malfunctions. If multiple switch ports simultaneously exhibit abnormal connectivity, and these ports all correspond to the same critical circuit, the CCU, based on the critical circuit's topology, determines that a switch fault exists and identifies the core faulty component as the switch associated with the corresponding circuit.

[0101] After completing the correlation analysis, the CCU binds the results with the original anomaly monitoring results, forming a data set linking the anomaly to the root cause of the fault. This set is then synchronized to the train display terminal and the ground maintenance platform. This binding and synchronization design allows onboard and ground maintenance personnel not only to be aware of anomalies but also to directly identify their root causes, significantly reducing the difficulty of troubleshooting and improving the accuracy and efficiency of maintenance procedures.

[0102] This application also provides a train Ethernet online monitoring device, such as... Figure 4 As shown, the device includes: Acquisition module 401 is used to acquire communication data; The diagnostic module 402 is used to perform loop connectivity diagnosis, data protocol validity verification, and traffic anomaly diagnosis based on the communication data, and obtain loop connectivity diagnosis results, data protocol validity verification results, and traffic anomaly diagnosis results.

[0103] In one possible implementation, the diagnostic module 402 is specifically used for: Based on the data type, the communication data is divided into data protocol control commands, switch port on / off status data, and traffic data of each core link. For the data protocol control command, perform data protocol validity verification to obtain the data protocol validity verification result; Based on the on / off status data of the switch ports, perform loop connectivity diagnosis to obtain the loop connectivity diagnosis results; For the traffic data of each core link, perform traffic anomaly diagnosis to obtain the traffic anomaly diagnosis results.

[0104] In one possible implementation, the diagnostic module 402 is specifically used for: The data protocol control command is matched with a preset data protocol control command whitelist; wherein, the whitelist includes the allowed sender permission level, the data protocol control command field format standard, and the command validity duration; the data protocol control command includes the sender device number, field format, and sending time; If all matching conditions are met, the data protocol control instruction is determined to be a valid data protocol control instruction. If any matching condition is not met, the data protocol control instruction is determined to be an illegal data protocol control instruction. The matching conditions include: the sending time is within the effective duration of the instruction; the permission corresponding to the sender's device number belongs to the allowed sender permission level; and the field format conforms to the data protocol control instruction field format standard.

[0105] In one possible implementation, the circuits in the train include a main circuit for transmitting train control commands, a main circuit for transmitting safety monitoring data, and corresponding redundant backup circuits. In one possible implementation, the diagnostic module 402 is specifically used for: Based on the on / off status data of the switch ports and the train's Ethernet topology, the conduction status of the main circuit is determined; the main circuit is either the main circuit for transmitting train control commands or the main circuit for transmitting safety monitoring data. If the main circuit is conducting normally, record the result of normal connectivity; If the main circuit is disconnected, the continuity status of the corresponding redundant backup circuit is detected synchronously; if the redundant backup circuit is normally connected, the main circuit fault is recorded and a degradation warning is triggered; if the redundant backup circuit is disconnected, a warning is triggered.

[0106] In one possible implementation, the diagnostic module 402 is specifically used for: Based on their functions, the core links are divided into control command links, operation and maintenance data links, and multimedia data links. Calculate the traffic per second and traffic growth rate for each type of link separately; The flow rate per second of each type of link is compared with the upper limit of the link bandwidth, and the flow rate growth rate of each type of link is compared with a preset threshold. If the flow rate per second exceeds the upper limit of the link bandwidth or the flow rate growth rate exceeds the preset threshold, it is determined that there is a flow anomaly in the link. The link flow threshold is dynamically configured according to the design bandwidth of the train Ethernet.

[0107] In one possible implementation, the acquisition module 401 is further configured to: Obtain the current operating conditions of the train; wherein, the operating conditions include starting conditions, high-speed driving conditions, braking conditions, and stopping conditions; The link traffic threshold is dynamically adjusted based on the network load characteristics under different operating conditions; wherein, the upper limit of the link bandwidth and the preset threshold under the high-speed driving condition are higher than those under the docking condition.

[0108] In one possible implementation, the diagnostic module is further configured to classify abnormal results based on the loop connectivity diagnostic results, the data protocol validity verification results, and the traffic anomaly diagnostic results; If the circuit connectivity diagnosis result indicates that both the main circuit and the redundant backup circuit corresponding to the main circuit are disconnected, or if the data protocol legality verification result indicates that the data protocol control command is an illegal data protocol control command, then the current situation is determined to be a Level 1 emergency warning. If the data protocol legality verification result indicates that the legality of the data protocol control command is questionable, or if the traffic anomaly diagnosis result indicates that the traffic is abnormal, the current situation is determined to be a Level II emergency warning. If the circuit connectivity diagnosis result indicates that the main circuit is connected and the redundant backup circuit corresponding to the main circuit is disconnected, the current situation is determined to be a Level 3 emergency warning. In one possible implementation, the device further includes an early warning module; The early warning module is used to send an audible and visual alarm prompt command to the train display terminal in the event of the first-level emergency early warning, and at the same time send an emergency alarm push to the ground operation and maintenance platform. In the event of the Level II emergency warning, an instruction is sent to the train display terminal to highlight the abnormal link and its type; In the event of the Level 3 emergency warning, an instruction is sent to the train display terminal to record the abnormal log and synchronize it to the ground operation and maintenance platform.

[0109] In one possible implementation, the device further includes a transmitting module; The sending module is used to send communication data, the loop connectivity diagnosis result, the data protocol validity verification result, and the traffic anomaly diagnosis result to the train display terminal and the ground operation and maintenance platform.

[0110] In one possible implementation, the communication data is obtained by the monitoring module at the intersection of the switch port, device communication interface, and core link in the train Ethernet.

[0111] This application also provides a control device. The control device may include a memory and a processor. The processor is used to execute a train Ethernet online monitoring method described in any of the above embodiments. The memory may be random access memory (RAM), flash memory, read-only memory (ROM), non-volatile read-only memory (EPROM), registers, hard disk, removable disk, etc.

[0112] The memory can store computer instructions. When these instructions are executed by the processor, the processor can use them to perform a train Ethernet online monitoring method. The memory can also store data.

[0113] This application also provides a train that includes at least a CCU to perform the train Ethernet online monitoring method described in any of the above embodiments.

[0114] In one possible implementation, the train also includes a monitoring module, a train display terminal, Ethernet switch ports, device communication interfaces, and core link junctions. Both the monitoring module and the train display terminal are connected to the CCU for communication; the monitoring module is distributed across the Ethernet switch ports, device communication interfaces, and core link junctions.

[0115] In the above embodiments, implementation can be achieved, in whole or in part, through software, hardware, firmware, or any combination thereof. When implemented in software, it can be implemented, in whole or in part, as a computer program product. A computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the flow or function according to the embodiments of this application is generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., coaxial cable, fiber optic, Digital Subscriber Line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that integrates one or more available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape) or a semiconductor medium (e.g., solid-state disk (SSD)).

[0116] This application also provides a readable storage medium for storing the methods provided in the above embodiments. For example, RAM, flash memory, ROM, EPROM, registers, hard disk, removable disk, or any other form of storage medium in the art.

[0117] In the embodiments of this application, the terms "first" and "second" (if they exist) are used only as name identifiers and do not represent the order of first and second.

[0118] It should be noted that the various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. Similar or identical parts between embodiments can be referred to interchangeably. Regarding the methods disclosed in the embodiments, since they correspond to the product embodiments disclosed in the embodiments, the description is relatively simple; relevant parts can be referred to in the description of the product embodiments.

[0119] The above description of the disclosed embodiments enables those skilled in the art to make or use this application. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of this application. Therefore, this application is not to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A train Ethernet online monitoring method, characterized in that, The method includes: Acquire communication data; Based on the communication data, loop connectivity diagnosis, data protocol validity verification, and traffic anomaly diagnosis are performed to obtain loop connectivity diagnosis results, data protocol validity verification results, and traffic anomaly diagnosis results.

2. The method according to claim 1, characterized in that, The process of performing loop connectivity diagnosis, data protocol validity verification, and traffic anomaly diagnosis based on the communication data to obtain loop connectivity diagnosis results, data protocol validity verification results, and traffic anomaly diagnosis results includes: Based on the data type, the communication data is divided into data protocol control commands, switch port on / off status data, and traffic data of each core link. For the data protocol control command, perform data protocol validity verification to obtain the data protocol validity verification result; Based on the on / off status data of the switch ports, perform loop connectivity diagnosis to obtain the loop connectivity diagnosis results; For the traffic data of each core link, perform traffic anomaly diagnosis to obtain the traffic anomaly diagnosis results.

3. The method according to claim 2, characterized in that, The step of performing a data protocol validity check on the data protocol control command to obtain the data protocol validity check result specifically includes: The data protocol control command is matched with a preset data protocol control command whitelist; wherein, the whitelist includes the allowed sender permission level, the data protocol control command field format standard, and the command validity duration; the data protocol control command includes the sender device number, field format, and sending time; If all matching conditions are met, the data protocol control instruction is determined to be a valid data protocol control instruction. If any matching condition is not met, the data protocol control instruction is determined to be an illegal data protocol control instruction. The matching conditions include: the sending time is within the effective duration of the instruction; the permission corresponding to the sender's device number belongs to the allowed sender permission level; and the field format conforms to the data protocol control instruction field format standard.

4. The method according to claim 2, characterized in that, The circuits in the train include the main circuit for transmitting train control commands, the main circuit for transmitting safety monitoring data, and corresponding redundant backup circuits; The step of performing loop connectivity diagnosis based on the switch port connectivity status data to obtain the loop connectivity diagnosis result includes: Based on the on / off status data of the switch ports and the train's Ethernet topology, the conduction status of the main circuit is determined; the main circuit is either the main circuit for transmitting train control commands or the main circuit for transmitting safety monitoring data. If the main circuit is conducting normally, record the result of normal connectivity; If the main circuit is disconnected, the continuity status of the corresponding redundant backup circuit is detected synchronously; if the redundant backup circuit is normally connected, the main circuit fault is recorded and a degradation warning is triggered; if the redundant backup circuit is disconnected, a warning is triggered.

5. The method according to claim 2, characterized in that, The process of performing traffic anomaly diagnosis on the traffic data of each core link to obtain the traffic anomaly diagnosis results includes: Based on their functions, the core links are divided into control command links, operation and maintenance data links, and multimedia data links. Calculate the traffic per second and traffic growth rate for each type of link separately; The flow rate per second of each type of link is compared with the upper limit of the link bandwidth, and the flow rate growth rate of each type of link is compared with a preset threshold. If the flow rate per second exceeds the upper limit of the link bandwidth or the flow rate growth rate exceeds the preset threshold, it is determined that there is a flow anomaly in the link. The link flow threshold is dynamically configured according to the design bandwidth of the train Ethernet.

6. The method according to claim 5, characterized in that, Before performing loop connectivity diagnosis, data protocol validity verification, and traffic anomaly diagnosis based on the communication data, and obtaining the loop connectivity diagnosis result, data protocol validity verification result, and traffic anomaly diagnosis result, the method further includes: Obtain the current operating conditions of the train; wherein, the operating conditions include starting conditions, high-speed driving conditions, braking conditions, and stopping conditions; The link traffic threshold is dynamically adjusted based on the network load characteristics under different operating conditions; wherein, the upper limit of the link bandwidth and the preset threshold under the high-speed driving condition are higher than those under the docking condition.

7. The method according to claim 1, characterized in that, The method further includes: The abnormal results are classified according to the loop connectivity diagnosis results, the data protocol legality verification results, and the traffic anomaly diagnosis results; If the circuit connectivity diagnosis result indicates that both the main circuit and the redundant backup circuit corresponding to the main circuit are disconnected, or if the data protocol legality verification result indicates that the data protocol control command is an illegal data protocol control command, then the current situation is determined to be a Level 1 emergency warning. If the data protocol legality verification result indicates that the legality of the data protocol control command is questionable, or if the traffic anomaly diagnosis result indicates that the traffic is abnormal, the current situation is determined to be a Level II emergency warning. If the circuit connectivity diagnosis result indicates that the main circuit is connected and the redundant backup circuit corresponding to the main circuit is disconnected, the current situation is determined to be a Level 3 emergency warning.

8. The method according to claim 7, characterized in that, The method further includes: In the event of the first-level emergency warning, an audible and visual alarm prompt command is sent to the train display terminal, and an emergency alarm push is sent to the ground operation and maintenance platform at the same time. In the event of the Level II emergency warning, an instruction is sent to the train display terminal to highlight the abnormal link and its type; In the event of the Level 3 emergency warning, an instruction is sent to the train display terminal to record the abnormal log and synchronize it to the ground operation and maintenance platform.

9. The method according to claim 1, characterized in that, The method further includes: The communication data, the loop connectivity diagnosis results, the data protocol validity verification results, and the traffic anomaly diagnosis results are synchronized to the train display terminal and the ground operation and maintenance platform.

10. The method according to claim 1, characterized in that, The communication data is obtained by the monitoring module at the switch ports, device communication interfaces, and core link intersections in the train Ethernet network.

11. A train Ethernet online monitoring device, characterized in that, The device includes: The acquisition module is used to acquire communication data; The diagnostic module is used to perform loop connectivity diagnosis, data protocol validity verification, and traffic anomaly diagnosis based on the communication data, and to obtain loop connectivity diagnosis results, data protocol validity verification results, and traffic anomaly diagnosis results.

12. A control device, characterized in that, It includes a processor and a memory, the memory being used to store programs, instructions, or code, and the processor being used to execute the programs, instructions, or code in the memory to complete the train Ethernet online monitoring method as described in any one of claims 1-10.

13. A computer-readable storage medium, characterized in that, The system contains a computer program that is loaded by a processor to execute the train Ethernet online monitoring method as described in any one of claims 1-10.

14. A train, characterized in that, The train is used to perform the train Ethernet online monitoring method according to any one of claims 1-10.

Images