Rail transit mobile operation and maintenance gateway

By designing a mobile operation and maintenance gateway for rail transit, providing multiple operation and maintenance interfaces and security mechanisms, the problem of difficult deployment and high maintenance costs of traditional bastion hosts in rail transit is solved, achieving flexible, efficient and secure operation and maintenance results.

CN223639273UActive Publication Date: 2025-12-05BEIJING METRO SCI & TECH DEV CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202520039578.1
Authority / Receiving Office
CN · China
Patent Type
Utility models(China)
Current Assignee / Owner
Filing Date
2025-01-08
Publication Date
2025-12-05
Estimated Expiration
2035-01-08

AI Technical Summary

Technical Problem

Traditional bastion hosts are difficult to deploy and costly to maintain in the rail transit industry, and are not suitable for the operation and maintenance needs of distributed scenarios, especially in cases where the network structure is complex, the operation and maintenance areas are scattered, and the business systems are not connected to the Internet, making upgrades inconvenient.

Method used

Design a mobile operation and maintenance gateway for rail transit, including a housing, gateway circuit board and multiple interfaces, supporting multiple operation and maintenance methods such as KVM, USB, network port and serial port, integrating operation and maintenance protocols and guacd components to achieve flexible and efficient operation and maintenance, and solving security issues through strong identity authentication and dynamic security assessment.

Benefits of technology

It enables convenient, flexible and efficient operation and maintenance of rail transit networks, solves the problems of portability and security of operation and maintenance equipment, and ensures that the operation and maintenance process is reliable, controllable and auditable.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN223639273U_ABST
    Figure CN223639273U_ABST
Patent Text Reader

Abstract

The utility model belongs to the technical field of gateways, and particularly relates to a rail transit mobile operation and maintenance gateway which comprises a shell, a gateway circuit board is arranged in the shell, and a mouse USB interface, a keyboard USB interface, a display interface and a power socket are arranged on one side of the shell. The number of the mouse USB interfaces, the number of the keyboard USB interfaces and the number of the displayer interfaces are respectively two so that KVM mode operation and maintenance can be achieved through the mouse USB interfaces, the keyboard USB interfaces and the displayer interfaces, one side of the shell is further provided with a mobile storage medium USB interface so that USB mode operation and maintenance can be achieved through the mobile storage medium USB interface, and one side of the shell is further provided with a network port and a serial port. The number of the network ports and the number of the serial ports are respectively two, so that operation and maintenance in a network port and serial port mode are realized through the network ports and the serial ports, the rail transit mobile operation and maintenance gateway is convenient to carry, different types of operation and maintenance modes can be realized through different interface configurations, and convenient, flexible and efficient operation and maintenance can be carried out on a rail transit network.
Need to check novelty before this filing date? Find Prior Art

Description

TECHNICAL FIELD

[0001] The utility model belongs to gateway technical field, concretely relates to a rail transit mobile operation gateway. BACKGROUND

[0002] Traditional bastion machine is mostly combined with software and hardware, and its control ability is very powerful, and it is the primary option of bank and state-owned large enterprise IT operation team. However, the traditional bastion machine has the following shortcomings: it is relatively difficult to deploy, needs professional team to deploy and maintain, and has high maintenance cost. Meanwhile, in the background of rail transit industry, in the face of the existing network structure complexity, operation and maintenance area is extremely dispersed, and business system is not connected with internet, and software and hardware upgrade is not convenient, and so on, the traditional bastion machine is not very suitable for operation and maintenance demand in distributed scene of rail transit. CONTENT OF UTILITY MODEL

[0003] The utility model aims at providing a rail transit mobile operation gateway, so as to realize flexible, efficient and safe operation and maintenance of rail transit network equipment through the rail transit mobile operation gateway.

[0004] In order to realize the above object, the utility model adopts the following technical scheme:

[0005] Provide a kind of rail transit mobile operation gateway, including shell, gateway circuit board is equipped in the shell, mouse USB interface, keyboard USB interface, display interface and power socket are equipped in the shell side, the mouse USB interface, keyboard USB interface, display interface are electrically connected with the gateway circuit board respectively, the mouse USB interface, keyboard USB interface, display interface are equipped with two respectively, to realize KVM mode operation and maintenance by the mouse USB interface, keyboard USB interface, display interface;Mobile storage medium USB interface is also equipped in the shell side, the mobile storage medium USB interface is electrically connected with the gateway circuit board, to realize USB mode operation and maintenance by the mobile storage medium USB interface;Net port and serial port are also equipped in the shell side, the net port and serial port are electrically connected with the gateway circuit board respectively, the net port and serial port are equipped with two respectively, to realize net port and serial port mode operation and maintenance by the net port and serial port.

[0006] Preferably, the display interface is HDMI port.

[0007] Preferably, the memory on the gateway circuit board stores the integration of various operation and maintenance protocol details, and a storage space for storing operation and maintenance video, log and alarm during operation and maintenance is opened in the memory on the gateway circuit board; the guacd component is also built in the memory on the gateway circuit board, which is used to render the interface corresponding to different protocols through the interface rendering module in the guacd component and various remote protocols integrated by guacd, for calling by the operation and maintenance client.

[0008] Preferably, a power switch is further arranged on one side of the shell.

[0009] Preferably, a touch screen electrically connected with the gateway circuit board is arranged on the shell.

[0010] Compared with the prior art, the rail transit mobile operation and maintenance gateway has the beneficial effects that: the rail transit mobile operation and maintenance gateway includes a shell, a gateway circuit board is arranged in the shell, a mouse USB interface, a keyboard USB interface, a display interface and a power socket are arranged on one side of the shell, two mouse USB interfaces, two keyboard USB interfaces and two display interfaces are arranged respectively, so as to realize KVM mode operation and maintenance through the mouse USB interface, the keyboard USB interface and the display interface, a mobile storage medium USB interface is further arranged on one side of the shell, so as to realize USB mode operation and maintenance through the mobile storage medium USB interface, a network port and a serial port are further arranged on one side of the shell, two network ports and two serial ports are arranged respectively, so as to realize network port mode operation and maintenance and serial port mode operation and maintenance through the network port and the serial port, the rail transit mobile operation and maintenance gateway is convenient to carry, and different kinds of operation and maintenance modes can be realized through different interface configurations, and the network of rail transit can be conveniently, flexibly and efficiently operated and maintained. BRIEF DESCRIPTION OF DRAWINGS

[0011] The accompanying drawings are used to provide a further understanding of the present application, and constitute a part of the specification, and are used to explain the present application together with embodiments of the present application, and do not constitute a limitation on the present application. In the drawings:

[0012] Figure 1 It is a structure schematic view of an embodiment of the rail transit mobile operation and maintenance gateway of the present application.

[0013] Figure 2 It is a touch screen login interface schematic view in an embodiment of the rail transit mobile operation and maintenance gateway of the present application.

[0014] Figure 3 It is an operation and maintenance function architecture view of an embodiment of the rail transit mobile operation and maintenance gateway of the present application.

[0015] Figure 4 It is a schematic view of KVM mode operation and maintenance of an embodiment of the rail transit mobile operation and maintenance gateway of the present application.

[0016] Figure 5 A flow chart for KVM mode operation and maintenance of the embodiment of the rail transit mobile operation and maintenance gateway of the utility model.

[0017] Figure 6 A schematic diagram for USB mode operation and maintenance of the embodiment of the rail transit mobile operation and maintenance gateway of the utility model.

[0018] Figure 7 A flow chart for USB mode operation and maintenance of the embodiment of the rail transit mobile operation and maintenance gateway of the utility model.

[0019] Figure 8 A schematic diagram for network port and serial port mode operation and maintenance of the embodiment of the rail transit mobile operation and maintenance gateway of the utility model.

[0020] Figure 9 A flow chart for network port and serial port mode operation and maintenance of the embodiment of the rail transit mobile operation and maintenance gateway of the utility model.

[0021] In the figure, each number is as follows: shell 1, mouse USB interface 2, keyboard USB interface 3, display interface 4, power interface 5, mobile storage medium USB interface 6, network port 7, serial port 8, power switch 9, touch screen 10. DETAILED DESCRIPTION

[0022] The technical solutions in the embodiments of the utility model will be clearly and completely described below with reference to the drawings in the embodiments of the utility model. Obviously, the described embodiments are only part of the embodiments of the utility model, rather than all the embodiments. Based on the embodiments in the utility model, all other embodiments obtained by those skilled in the art without creative labor fall within the scope of protection of the utility model.

[0023] In one embodiment, a rail transit mobile operation and maintenance gateway is provided, such as Figure 1As shown, the rail transit mobile operation gateway includes a shell 1, a gateway circuit board is arranged in the shell 1, the gateway circuit board is a circuit board capable of running a gateway program, and a processor, a memory, a storage device, a network card, a clock, a power module and the like are arranged on the gateway circuit board, the gateway circuit board is a mature circuit board device at present, and details thereof will not be described herein, a mouse USB interface 2, a keyboard USB interface 3, a display interface 4 and a power supply interface 5 are arranged on the front side of the shell 1, two of the mouse USB interface 2, the keyboard USB interface 3 and the display interface 4 are arranged respectively, the mouse USB interface 2, the keyboard USB interface 3 and the display interface 4 are electrically connected with the gateway circuit board respectively, and the mouse USB interface 2, the keyboard USB interface 3 and the display interface 4 are respectively used for connecting a mouse, a keyboard and a display, so as to realize KVM mode operation and maintenance through the mouse USB interface, the keyboard USB interface and the display interface. A mobile storage medium USB interface 6 is further arranged on one side of the shell 1, the mobile storage medium USB interface 6 is electrically connected with the gateway circuit board, and the mobile storage medium USB interface 6 is used for connecting a mobile storage medium for operation and maintenance, so as to realize USB mode operation and maintenance through the mobile storage medium USB interface; a network port 7 and a serial port 8 are further arranged on one side of the shell 1, the network port and the serial port are electrically connected with the gateway circuit board respectively, and two of the network port and the serial port are arranged respectively, the network port 7 and the serial port 8 can be used for connecting an operation and maintenance terminal and an object to be operated and maintained, so as to realize network port and serial port mode operation and maintenance through the network port 7 and the serial port 8.

[0024] Further, in an embodiment, the display interface 4 of the rail transit mobile operation gateway is an HDMI port, and the HDMI port has the advantages of good compatibility, high-definition picture quality and fast transmission.

[0025] Further, in an embodiment, the rail transit mobile operation gateway further has a power switch 9 arranged on one side of the shell 1, and the power switch 9 is used for controlling gateway startup or shutdown.

[0026] Further, in an embodiment, the rail transit mobile operation gateway has a touch screen 10 electrically connected with the gateway circuit board arranged on the shell 1, and the touch screen 10 can be used for realizing firmware upgrade in the gateway or remote control and the like, and in combination with Figure 2 As shown, the touch screen 10 has a login interface, and an operator can log in through the login interface.

[0027] Further, in one embodiment, the memory on the gateway circuit board in the rail transit mobile operation and maintenance gateway stores various operation and maintenance protocol details, and a storage space for storing operation and maintenance videos, logs, and alarms during operation and maintenance is opened in the memory on the gateway circuit board. The guacd component is also built in the memory on the gateway circuit board, which is used to render interfaces corresponding to different protocols through the interface rendering module in the guacd component and various remote protocols integrated in the guacd, for calling by the operation and maintenance client.

[0028] The rail transit mobile operation and maintenance gateway specifically codes the business functions that the operation and maintenance gateway needs to complete through the java language, generates an integration of various operation and maintenance protocol details, and enables storage of operation and maintenance videos, logs, and alarms during operation and maintenance, and realizes the built-in guacd component in the operation and maintenance gateway.

[0029] In combination Figure 3 As shown in the figure, the functions of the rail transit mobile operation and maintenance gateway itself include operations or views of different functions such as account management, Ukey management, operation instructions, instruction control, high-risk ports, gateway configuration, device logs, operation and maintenance work logs, operation and maintenance management, and device status. After starting the operation and maintenance task, there are two different operation and maintenance modes of regular operation and maintenance and fast operation and maintenance, and operation and maintenance protocols include TCP, UDP, VNC, TELNET, RDP, SSH, XDMC, FTP, and other different protocols to adapt to different functional requirements. Operation and maintenance records include different operation and maintenance record units such as peripheral logs, malicious codes, illegal external connection, video evidence, high-risk blocking, and maintenance logs. The targets of operation and maintenance mainly include network devices, servers, and workstations used in rail transit. Based on the zero-trust security concept, the rail transit mobile operation and maintenance gateway uses strong identity authentication + dynamic security assessment + operation behavior control to solve the security problems in the maintenance process of urban rail transit, realizes the credibility of the operation and maintenance personnel by using security special encryption and fingerprint encryption, realizes the credibility of the environment by dynamic security assessment (virus killing, peripherals, networking), realizes the controllability of behavior through communication control, instruction control, data control, file uplink and downlink transmission control, and whole-process operation video, solves the overall product solution of the problems such as the lack of data transfer mechanism in urban rail transit site, cross-use of mobile storage media, lack of basic network isolation, direct network access of operation and maintenance equipment, lack of security audit and operation logs, difficult to trace the problem, upload of toxic / illegal configuration data, and cause of safety accidents.

[0030] In combination Figure 4 and Figure 5As shown, when KVM mode operation and maintenance is performed based on the rail transit mobile operation and maintenance gateway, the mouse, keyboard, and display are connected to the mouse USB port, keyboard USB port, and HDMI port of the rail transit mobile operation and maintenance gateway device through the mouse USB line, keyboard USB line, and video line, and the object to be operated and maintained is connected to another set of mouse USB port, keyboard USB port, and HDMI port of the operation and maintenance gateway through the USB line and video line, to complete the physical connection of KVM operation and maintenance. In the rail transit mobile operation and maintenance gateway, the operation and maintenance channel is established by starting KVM operation and maintenance, so that the display, keyboard, and mouse are connected to the object to be operated and maintained through the operation and maintenance gateway to achieve the purpose of operation and maintenance.

[0031] In combination Figure 6 and Figure 7 As shown, when USB mode operation and maintenance is performed based on the rail transit mobile operation and maintenance gateway, the mobile storage medium (such as a U disk or a hard disk) is directly connected to the mobile storage medium USB interface 6 of the rail transit mobile operation and maintenance gateway device through the USB line, and the object to be operated and maintained is connected to the other spare USB port of the operation and maintenance gateway through the USB line, to complete the physical connection of USB operation and maintenance. In the rail transit mobile operation and maintenance gateway, the USB device is virtually mapped to the object to be operated and maintained by enabling the USB operation and maintenance mode, so that the operation of the file in the USB device can be realized on the object to be operated and maintained, to achieve the purpose of operation and maintenance.

[0032] In combination Figure 8 and Figure 9 As shown, when network port and serial port mode operation and maintenance is performed based on the rail transit mobile operation and maintenance gateway, the operation and maintenance terminal is connected to the network port and serial port of the rail transit mobile operation and maintenance gateway through the network line or serial line, and the object to be operated and maintained is connected to the network port and serial port of the operation and maintenance gateway through the network line or serial line, to complete the physical connection of network port or serial port operation and maintenance. In the rail transit mobile operation and maintenance gateway, the operation and maintenance task is enabled, and the remote access to the object to be operated and maintained can be realized on the operation and maintenance terminal through the operation and maintenance protocol configured by the operation and maintenance task, to achieve the purpose of operation and maintenance. In the network port and serial port mode operation and maintenance, the operation and maintenance client installed in the rail transit mobile operation and maintenance gateway is programmed by C++, to realize illegal peripheral inspection, network connection inspection, and Trojan killer for the operation and maintenance task. After the operation and maintenance task is started, the operation and maintenance terminal calls the guacd component inside the gateway through the browser engine built in the client, to realize operation and maintenance.

[0033] Based on the above embodiments, the rail transit mobile operation gateway is an operation and maintenance security boundary device, which is connected between the operation and maintenance equipment (mouse, keyboard, display, mobile storage medium or operation and maintenance terminal in three different modes) and the object to be operated and maintained, cooperates with the USB Key, isolates the external elements such as the work team members and operation tools from the internal elements such as the object to be operated and maintained, and supervises and controls the sensitive operation of the work team members, illegal behavior and operation risk of the operation tools in real time to prevent external network attacks, malicious codes, illegal operations and other behaviors from damaging the internal system. At the same time, the operation process is recorded in multiple dimensions such as logs, screen videos and communication messages, and the internal system operation and maintenance work is prevented in advance, supervised in the process and audited after the event.

[0034] The rail transit mobile operation gateway has three different operation modes and can realize multiple remote protocol analysis and application, and multiple protocol operation modes based on guacd. The rail transit mobile operation gateway applied as a mobile bastion host in the operation and maintenance of rail transit can greatly solve the problems of mobile medium use control, operation personnel identity recognition, third-party manufacturer self-provided operation equipment safety, operation personnel on-site operation audit and operation process recording in the operation and maintenance of Beijing subway, so as to make the safe operation and maintenance of Beijing subway controllable and maximize the safety of rail transit business systems and equipment.

[0035] It should be noted that, in this text, relational terms such as first and second are used merely to distinguish one entity or action from another, without necessarily requiring or implying any such actual relationship or order between such entities or actions. Moreover, the terms "comprises", "comprising", or any other variations thereof are intended to cover non-exclusive inclusions, so that a process, method, article or equipment including a series of elements not only includes those elements, but also includes other elements not explicitly listed or inherent to such a process, method, article or equipment.

[0036] Although the embodiments of the present application have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and variations can be made to the embodiments without departing from the principles and spirit of the present application, and the scope of the present application is defined by the appended claims and their equivalents.

Claims

1. A rail transit mobile operation and maintenance gateway, characterized in that: The application relates to a KVM gateway device, which comprises a shell, a gateway circuit board arranged in the shell, a mouse USB interface, a keyboard USB interface, a display interface and a power socket arranged on one side of the shell, the mouse USB interface, the keyboard USB interface and the display interface being electrically connected with the gateway circuit board, the mouse USB interface, the keyboard USB interface and the display interface each being provided with two, so as to realize KVM mode operation and maintenance through the mouse USB interface, the keyboard USB interface and the display interface; a mobile storage medium USB interface is further arranged on one side of the shell, the mobile storage medium USB interface being electrically connected with the gateway circuit board, so as to realize USB mode operation and maintenance through the mobile storage medium USB interface; a network port and a serial port are further arranged on one side of the shell, the network port and the serial port being electrically connected with the gateway circuit board, the network port and the serial port each being provided with two, so as to realize network port and serial port mode operation and maintenance through the network port and the serial port.

2. The rail transit mobile operation and maintenance gateway according to claim 1, characterized in that: The display interface is an HDMI port. 3.The rail transit mobile operation and maintenance gateway of claim 1, wherein: The memory on the gateway circuit board stores integrated various operation and maintenance protocol details, and a storage space for storing operation and maintenance video, logs and alarms during operation and maintenance is opened in the memory on the gateway circuit board; a guacd component is further built in the memory on the gateway circuit board, which is used for rendering interfaces corresponding to different protocols through an interface rendering module in the guacd component and various remote protocols integrated by the guacd, so as to be called by an operation and maintenance client.

4. The rail transit mobile operation and maintenance gateway according to claim 1, characterized in that: A power switch is further arranged on one side of the shell.

5. The rail transit mobile operation and maintenance gateway according to claim 1, characterized in that: A touch screen electrically connected with the gateway circuit board is arranged on the shell.