Method, system, storage medium and device for file transfer between functional safety systems
Patent Information
- Application Number
- CN202611234559.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2026-08-14
- Publication Date
- 2026-11-03
AI Technical Summary
Existing technologies suffer from low efficiency in transferring large files and inability to guarantee file consistency verification during file transfer between functional safety systems. In particular, it is difficult to ensure the correctness and consistency of files when communication links are abnormal or human error occurs.
By generating key information and integrity check codes for the target file in the source functional safety system, transmitting the file body using a non-secure transmission protocol, and then transmitting the key information and check codes to the target system via a secure connection, the target system performs consistency verification to ensure system-level consistency of the file.
It improves file transfer efficiency and system-level consistency verification capabilities without relying on communication link security, overcomes the limitations of data packet size and timing in existing technologies, and enhances engineering applicability and security.
Smart Images
Figure CN123035002A_ABST
Abstract
Description
Technical Field
[0001] This application belongs to the field of file transfer technology, and in particular relates to a method, system, storage medium and device for file transfer between functional safety systems. Background Technology
[0002] Functional safety refers to the ability of a system to maintain or transition to a safe state within an acceptable risk range in the event of random hardware failures or systemic failures. For quantitative assessment, Safety Integrity Levels (SILs) are typically introduced to classify the residual probability of hazardous events occurring in the system. In functional safety systems, the realization of functional safety depends not only on the hardware and software architecture but also heavily on various functional safety-related documents. In the rail transit field, functional safety-related documents include, but are not limited to, interlocking data configuration files, train static parameter files, track description files, electronic maps, safety algorithm parameter and calibration files, and rule files. These documents directly participate in the calculation logic of safety functions, and their correctness, completeness, and version consistency are crucial prerequisites for ensuring the safe operation of the system.
[0003] During system deployment, maintenance, and upgrades, functional safety-related documents often need to be distributed and updated across multiple functional safety systems. Currently, the distribution and updating of functional safety-related documents across different systems primarily employs the following three technical solutions: Option 1: File distribution based on manual operation or offline media: Technicians manually copy security-related files using physical storage media such as USB flash drives and external hard drives. This option suffers from low work efficiency, susceptibility to human error, difficulty in guaranteeing the security of offline media, and difficulty in automatically recording and auditing the operation process.
[0004] Option 2: Online transfer solution based on common file transfer protocols: This method uses common file transfer protocols such as SFTP and HTTPS to transfer functional safety-related files between systems. While these protocols can guarantee link security, they lack the ability to independently determine whether a file can be used for safety function calculations from a functional safety system perspective in the event of random hardware failures or systemic failures. They also cannot guarantee the consistency of calculation results between the source and target systems, making it difficult to meet the functional safety requirements for file-level trusted verification.
[0005] Option 3: Transmission scheme based on functional safety communication protocols: Existing functional safety communication protocols such as RSSP-I and RSSP-II are mainly used for real-time transmission of operational safety data. Their security protocol stacks typically impose strict limitations on data format, timing, redundancy, and verification mechanisms. In this scheme, functional safety communication data packets are usually limited in size and cannot directly carry large-capacity functional safety-related files.
[0006] In summary, existing technologies still have the following problems in file transfer between functional safety systems: 1. When directly using functional safety communication mechanisms to carry out the transmission of functional safety-related files, it is not suitable for large-capacity file transmission due to constraints such as data packet size, timing, and retransmission mechanisms, which limits engineering efficiency and applicability.
[0007] 2. Existing technologies typically rely on the security of communication links or manual control processes to ensure the correctness of files. They lack a system-level consistency verification mechanism that can be completed by the functional safety system itself. Once the link is abnormal, misconfigured, or human error occurs, the target system will find it difficult to detect erroneous or inconsistent files in a timely and independent manner.
[0008] Therefore, there is an urgent need in this field for a file transfer scheme that can enable online file transfer and system-level consistency verification between functionally safe systems without relying on the security of the communication link itself. Summary of the Invention
[0009] To address the aforementioned issues, this application provides an inter-system file transfer method that improves security and applicability.
[0010] This application is achieved through the following technical solution: The source functional safety system calculates and generates key information and integrity check codes of the target file based on the target file to be transmitted. The target file is transmitted to the target functional safety system via a non-secure transmission protocol; A secure connection is established between the source functional safety system and the target functional safety system, and the key information and integrity check code of the target file are transmitted to the target functional safety system through the secure connection. The target functional safety system calculates and generates key information and integrity check codes based on the received target file, and performs consistency verification with the received key information and integrity check codes; based on the verification result, it feeds back to the source functional safety system with a file distribution success status or a file distribution failure status.
[0011] Optional, Establishing a secure connection between the source functional safety system and the target functional safety system includes: A secure connection is established between the source functional safety system and the target functional safety system through a secure transport protocol, and authentication and key exchange are performed in accordance with the requirements of the secure transport protocol.
[0012] Optional, The source functional safety system sends its critical file information format and integrity checksum algorithm suite to the target functional safety system via a secure connection; or, A suite of algorithms for pre-configuring file critical information format and integrity check codes is provided within both the source functional safety system and the target functional safety system.
[0013] Optional, Based on the verification results, the system should report either a successful file distribution status or a failed file distribution status to the source functional safety system, including: If the verification is successful, the target functional safety system confirms receipt of the target file and sends a message to the source functional safety system indicating that the file has been successfully distributed. If the verification fails, the target functional safety system deletes the received target file and sends a file distribution failure status and reason code back to the source functional safety system.
[0014] Optional, The system sends a message to the source functional safety system via a secure connection, indicating whether the file distribution was successful or failed, along with the reason code.
[0015] Optional, The digital signature or blockchain information of the file is generated and sent to the target functional security system for recording and storage via a secure connection.
[0016] This application also provides a functional safety system inter-system file transfer system for implementing the aforementioned method, the system comprising: a source functional safety system, a target functional safety system, a functional safety communication link, and a non-functional safety communication link; The source functional safety system is used to calculate and generate the key information and integrity check code of the target file; The non-functional safety communication link is used to transmit the target file to the target functional safety system; The functional safety communication link is used to transmit the key information and integrity check code of the target file to the target functional safety system; The target functional safety system is used to calculate and generate key information and integrity check codes based on the received target file, and to perform consistency verification with the received key information and integrity check codes; based on the verification result, it feeds back the file distribution success status or file distribution failure status to the source functional safety system.
[0017] This application also provides a computer-readable storage medium storing one or more programs, which, when executed, can implement the aforementioned functional safety inter-system file transfer method.
[0018] This application also provides a device, including a processor, a communication interface, a computer-readable storage medium, and a communication bus; wherein the processor, the communication interface, and the computer-readable storage medium communicate with each other through the communication bus; The processor is used to execute programs stored in a computer-readable storage medium.
[0019] Compared with the prior art, this application has the following advantages: 1. The file transfer method between functional safety systems proposed in this application decouples the "file body transfer" and "verification certificate transfer" on the physical channel by transmitting the target file separately through non-secure transmission protocols and transmitting key information and integrity verification codes through a secure connection. This dual-channel separate transmission method performs consistency verification in the target functional safety system, overcoming the problem in the prior art that, in order to ensure file functional safety, the file transfer channel itself must be constructed using a functional safety transmission protocol (such as RSSP-I or RSSP-II), resulting in low efficiency for large file transfers. This method improves transmission efficiency while ensuring security.
[0020] 2. Compared to online transmission schemes based on ordinary file transfer protocols, it no longer relies solely on communication link security, but instead uses the functional safety system itself to complete file-level consistency verification, which can determine at the system level whether a file can be used for safe functional calculations.
[0021] 3. Compared with the solution of directly using functional safety communication to carry files, it avoids the limitations of functional safety communication in terms of data packet size, timing and transmission efficiency, and significantly improves file distribution efficiency and engineering applicability.
[0022] Other features and advantages of this application will be set forth in the description which follows, and will be apparent in part from the description, or may be learned by practicing the application. The objectives and other advantages of this application may be realized and obtained by means of the structures pointed out in the description, claims and drawings. Attached Figure Description
[0023] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0024] Figure 1 A flowchart illustrating a method for file transfer between functional safety systems is shown. Figure 2 A schematic diagram of the file transfer interaction process according to an embodiment of this application is shown; Figure 3 This illustration shows an extended functionality diagram of functionally safe document distribution according to an embodiment of this application; Figure 4A schematic block diagram of a file transfer system between functional safety systems is shown. Figure 5 This is a schematic diagram of the structure of a device according to an embodiment of this application. Detailed Implementation
[0025] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.
[0026] See appendix Figure 1 The method of this application includes: S1. The source functional safety system calculates and generates key information and integrity check codes of the target file based on the target file to be transmitted.
[0027] In this embodiment, key information can be selected and combined, including but not limited to: file name, file version number, file size, file validity period, file last modification date, etc.; the verification capability of the integrity check code should meet the residual error probability requirements corresponding to the security integrity level.
[0028] In this embodiment, the method for calculating key information and integrity check codes can be hash or HMAC. The specific process is a conventional technique in this field and will not be described in detail here.
[0029] S2. The target file is transmitted to the target functional safety system via a non-secure transmission protocol.
[0030] In this embodiment, transmitting the file body of functional security-related files via a non-secure transmission protocol can improve file transmission efficiency and bandwidth utilization.
[0031] S3. Establish a secure connection between the source functional safety system and the target functional safety system, and transmit the key information and integrity check code of the target file to the target functional safety system through the secure connection.
[0032] Specifically, a secure connection is established between the source functional safety system and the target functional safety system through a secure transmission protocol, and authentication and key exchange are performed in accordance with the requirements of the secure transmission protocol.
[0033] In this embodiment, whether authentication and key exchange are performed can be executed according to the requirements of the secure transmission protocol; through a secure connection, the key information and file integrity check code of the target file generated by the source functional safety system are transmitted to the target functional safety system.
[0034] Specifically, through a secure connection, the source functional safety system sends the file critical information format and integrity check code algorithm suite used by the source functional safety system to the target functional safety system; or, A suite of algorithms for pre-configuring file critical information format and integrity check codes is provided within both the source functional safety system and the target functional safety system.
[0035] S4. The target functional safety system calculates and generates key information and integrity check codes based on the received target file, and performs consistency verification with the received key information and integrity check codes; based on the verification result, it feeds back the file distribution success status or file distribution failure status to the source functional safety system.
[0036] If the verification is successful, the target functional safety system confirms receipt of the target file and reports the file distribution success status to the source functional safety system; if the verification fails, the target functional safety system deletes the received target file and reports the file distribution failure status and reason code to the source functional safety system.
[0037] In this embodiment, the target functional safety system calculates and generates key information and integrity check codes based on the received target file, and performs a consistency check with the key information and integrity check codes received from the source functional safety system. When the two are consistent, the target functional safety system accepts the file, sends a successful file distribution status back to the source functional safety system through a secure connection, and uses the content of the file as one of the bases for the target functional safety system's safety function calculations. If the two are inconsistent, the target functional safety system deletes the file and sends a file distribution failure status and reason code back to the source functional safety system via a secure connection.
[0038] The target functional safety system sends a message to the source functional safety system via a secure connection, indicating whether the file distribution was successful or failed, along with the reason code.
[0039] The present application will now be described in further detail with reference to the accompanying drawings and specific embodiments.
[0040] Figure 2 This is a schematic diagram of the file transfer interaction process according to an embodiment of this application. In this embodiment, the file transfer method between functional safety systems specifically includes the following steps: (1) Based on the functional safety-related files (target files) stored in the source functional safety system (System A), calculate and generate the file key information and file integrity check code of the file using the functional safety software of System A.
[0041] (2) The functional target file is transferred from system A to the target functional safety system (system B) through a non-secure transmission protocol.
[0042] (3) System A and System B establish a secure connection through a secure transmission protocol, verify the legitimate identities of both parties, and complete the key exchange. In a closed transmission system, whether authentication and key exchange are performed can be carried out according to the requirements of the secure transmission protocol.
[0043] (4) Through a secure connection, System A sends the file key information format and integrity check code algorithm suite to System B. Alternatively, they can be pre-configured in System A and System B through prior agreement. (In this embodiment, the transmission of the file key information format and integrity check code algorithm suite is a non-essential step; if it is pre-configured, it does not need to be transmitted.) (5) Transmit the key information and integrity check code of the target file generated by system A to system B through a secure connection. (In this embodiment, the transmissions 2-5 do not need to be executed in sequence.) (6) Calculate the key information and integrity check code of the target file received in System B using functional safety related software, and verify the consistency between the key information and integrity check code calculated by System B and the key information and integrity check code transmitted by System A through a secure connection.
[0044] (7) When the two are consistent, system B accepts the file, sends a message to system A through a secure connection to report the file distribution success status, and uses the content of the file as one of the bases for system B’s security function calculations.
[0045] (8) If the two are inconsistent, system B deletes the file and reports the file distribution failure status and reason code to system A through a secure connection.
[0046] In this embodiment, it may further include, for example, Figure 3 The extended functionality and optional implementations shown are designed to enhance security management capabilities and engineering applicability: To ensure the non-repudiation of distributed files, System A can synchronously generate a digital signature or blockchain information for the file and send it to System B via a secure connection for record-keeping and later file traceability. Considering the revocation of distributed files, System A can generate a list of revoked files (files that need to be revoked within their validity period) and provide an online file status query function, allowing System B to query the current status of distributed files through a secure connection.
[0047] See appendix Figure 4 This application also provides a file transfer system between functional safety systems, including a source functional safety system, a target functional safety system, a functional safety communication link, and a non-functional safety communication link; The source functional safety system is used to calculate and generate the key information and integrity check code of the target file; The non-functional safety communication link is used to transmit the target file to the target functional safety system; The functional safety communication link is used to transmit the key information and integrity check code of the target file to the target functional safety system; The target functional safety system is used to calculate and generate key information and integrity check codes based on the received target file, and to perform consistency verification with the received key information and integrity check codes; based on the verification result, it feeds back the file distribution success status or file distribution failure status to the source functional safety system.
[0048] In this embodiment, the source functional safety system includes a functional safety software module for storing functional safety-related files and calculating and generating key information and integrity check codes for the target file; The target functional safety system includes a functional safety software module, which is used to receive target files, independently calculate the key information and integrity check codes of the received target files, and determine whether to accept the files based on the consistency comparison results. Non-functional safety communication links are established based on non-secure transmission protocols and are used to transmit the file bodies of functional safety-related documents. They can be transmitted via wired or wireless communication, which can improve file transmission efficiency and bandwidth utilization. Functionally safe communication links, established based on secure transmission protocols, are used to transmit critical file information, integrity check codes, and control information, as well as to provide feedback on file distribution results. They can be implemented using wired or wireless communication methods.
[0049] Based on the same concept, this application also provides a computer-readable storage medium storing one or more programs, which, when executed, can realize the aforementioned functional safety inter-system file transfer method.
[0050] like Figure 5 As shown in the illustration, this application also provides a device including a processor, a communication interface, a memory, and a communication bus. The processor, communication interface, and memory communicate with each other via the communication bus.
[0051] The memory is a computer-readable storage medium used to store one or more programs.
[0052] The processor is configured to execute a program stored in a computer-readable storage medium.
[0053] The computer-readable storage medium may be included in the device described in the above embodiments; or it may exist independently and not assembled into the device.
[0054] Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application.
Claims
1. A method for file transfer between functional safety systems, characterized in that, include: The source functional safety system calculates and generates key information and integrity check codes of the target file based on the target file to be transmitted. The target file is transmitted to the target functional safety system via a non-secure transmission protocol; A secure connection is established between the source functional safety system and the target functional safety system, and the key information and integrity check code of the target file are transmitted to the target functional safety system through the secure connection. The target functional safety system calculates and generates key information and integrity check codes based on the received target file, and performs consistency verification with the received key information and integrity check codes; Based on the verification results, the system should report either a successful file distribution status or a failed file distribution status to the source functional safety system.
2. The method according to claim 1, characterized in that, Establishing a secure connection between the source functional safety system and the target functional safety system includes: A secure connection is established between the source functional safety system and the target functional safety system through a secure transport protocol, and authentication and key exchange are performed in accordance with the requirements of the secure transport protocol.
3. The method according to claim 1, characterized in that, The method further includes: The source functional safety system sends its critical file information format and integrity checksum algorithm suite to the target functional safety system via a secure connection; or, A suite of algorithms for pre-configuring file critical information format and integrity check codes is provided within both the source functional safety system and the target functional safety system.
4. The method according to claim 1, characterized in that, Based on the verification results, the system should report either a successful file distribution status or a failed file distribution status to the source functional safety system, including: If the verification is successful, the target functional safety system confirms receipt of the target file and sends a message to the source functional safety system indicating that the file has been successfully distributed. If the verification fails, the target functional safety system deletes the received target file and sends a file distribution failure status and reason code back to the source functional safety system.
5. The method according to claim 4, characterized in that, The system sends a message to the source functional safety system via a secure connection, indicating whether the file distribution was successful or failed, along with the reason code.
6. The method according to any one of claims 1-5, characterized in that, The method further includes: The digital signature or blockchain information of the file is generated and sent to the target functional security system for recording and storage via a secure connection.
7. A functional safety inter-system file transfer system, characterized in that, The system includes: a source functional safety system, a target functional safety system, a functional safety communication link, and a non-functional safety communication link; The source functional safety system is used to calculate and generate the key information and integrity check code of the target file; The non-functional safety communication link is used to transmit the target file to the target functional safety system; The functional safety communication link is used to transmit the key information and integrity check code of the target file to the target functional safety system; The target functional safety system is used to calculate and generate key information and integrity check codes based on the received target file, and to perform consistency verification with the received key information and integrity check codes; based on the verification result, it feeds back the file distribution success status or file distribution failure status to the source functional safety system.
8. The system according to claim 7, characterized in that, The target functional safety system module is also configured to: If the verification is successful, the target functional safety system confirms receipt of the target file and sends a message to the source functional safety system indicating that the file has been successfully distributed. If the verification fails, the target functional safety system deletes the received target file and sends a file distribution failure status and reason code back to the source functional safety system.
9. A computer-readable storage medium storing one or more programs, characterized in that, When one or more programs are executed, the functional safety inter-system file transfer method described in any one of claims 1-6 can be implemented.
10. An electronic device, comprising a processor, a communication interface, a computer-readable storage medium as described in claim 9, and a communication bus; wherein, The processor, communication interface, and computer-readable storage medium communicate electronically with each other via a communication bus; characterized in that, The processor is used to execute programs stored in a computer-readable storage medium.