Distributed blockchain network system for railway signal and safety management

Abstract

The present invention relates to a distributed network system for safety management, and more specifically, to a system composed of a plurality of control units, a communication network, and a system manager. Each control unit independently performs signal control and Automatic Train Protection (ATP) functions, and the invention relates to a distributed network system for safety management capable of verifying the consistency of decisions through a consensus algorithm.

Description

Technology Field

[0001] The present invention relates to a distributed network system for safety management, and more specifically, to a system composed of a plurality of control units, a communication network, and a system manager. Each control unit independently performs signal control and Automatic Train Protection (ATP) functions, and the invention relates to a distributed network system for safety management capable of verifying the consistency of decisions through a consensus algorithm. Background Technology

[0002] As a pivotal transportation infrastructure in modern society, railways play a pivotal role in the rapid and safe transport of large volumes of passengers and cargo. In particular, as urbanization and globalization accelerate, the demand for and reliance on railway transportation are continuously increasing. Consequently, ensuring the safety and efficiency of railway operations has emerged as a more critical task than ever before.

[0003] However, current railway signaling and safety management systems exhibit various limitations and problems in meeting these demands of the times. Above all, the centralized architecture of existing systems carries the risk of a Single Point of Failure. This is because a problem occurring in the central control center or key communication channels can lead to the paralysis of the entire system. Indeed, past incidents in which large-scale train operations were suspended due to fires in central control centers or communication failures clearly demonstrate this risk.

[0004] Furthermore, existing systems are also revealing limitations in terms of scalability and flexibility.

[0005] A centralized structure is rigid, requiring significant cost and time to scale up or change functions. This acts as a factor that makes it difficult to respond quickly and appropriately to the rapidly changing railway operating environment. A more agile and scalable system architecture is required to flexibly adapt to the expansion of routes, changes in train operation patterns, and the introduction of new safety regulations.

[0006] Furthermore, existing systems are exhibiting inefficiencies in terms of data management and utilization. As each subsystem independently collects and stores data, data fragmentation and inconsistencies are prone to occur. This acts as an obstacle to comprehensively understanding the overall system situation and making rapid decisions. Moreover, due to the lack of a framework capable of effectively integrating and analyzing dispersed data, accumulated operational data is currently not being fully utilized to enhance safety and improve efficiency.

[0007] Furthermore, existing systems are pointed out as being vulnerable to cyber security threats. As the digitalization and networking of railway infrastructure advance, the likelihood of exposure to risks such as hacking, malware infection, and data falsification is increasing. In fact, it is reported that attempts at cyber attacks on railway signaling systems are surging overseas. However, current systems lack a security framework capable of proactively responding to these threats.

[0008] Furthermore, existing systems are causing inefficiency due to a lack of interoperability and standardization. Railway operations involve various stakeholders and systems, but the interfaces and data exchange methods between them are not standardized, resulting in poor compatibility and connectivity. This makes close collaboration and information sharing between systems difficult, thereby acting as a factor that degrades the overall system's performance and responsiveness.

[0009] Due to the aforementioned problems, the current railway signaling and safety management system is struggling to effectively respond to the rapidly increasing demand for railway transportation. The reality is that various adverse effects are emerging, including rising operating costs, increased safety risks, and a decline in service quality. In particular, the potential for major accidents is being identified as a serious threat directly linked to public safety.

[0010] Of course, it is not as if there have been no efforts to recognize these problems and improve them. Partial attempts at improvement have been made, such as the redundancy of the central control system, the establishment of a data integration platform, and the introduction of security solutions. However, it is true that this approach reveals fundamental limitations.

[0011] Above all, the problem is pointed out that the measures remain limited to partial and symptomatic solutions, failing to overcome the fundamental limitations of the existing system's centralized architecture. Simply duplicating the central system is insufficient to completely eliminate the risk of a single point of failure. Furthermore, data integration and enhanced security will inevitably face limitations without fundamental structural changes.

[0012] Moreover, most of these improvement attempts are reactive and stopgap in nature, making it difficult to view them as sustainable development measures. A more fundamental and innovative approach is required to respond flexibly to the rapidly changing environment and to advance the system from a long-term perspective.

[0013] Consequently, the industry has begun seeking new technological alternatives to overcome the limitations of railway signaling and safety management systems at a more fundamental level. In particular, there are active attempts to integrate the Internet of Things (IoT), big data, artificial intelligence (AI), and blockchain—which are attracting attention as core technologies of the Fourth Industrial Revolution—into the railway sector.

[0014] In particular, blockchain technology is attracting attention as a core element of next-generation railway signaling and safety management systems due to its characteristics, such as the establishment of distributed systems, assurance of data integrity, and blockchain-based automation. In fact, the practical application of related technologies is progressing rapidly, with pilot projects utilizing blockchain for railway safety management, asset tracking, and supply chain management being promoted overseas.

[0015] However, research and demonstration regarding blockchain-based railway management in Korea remain in the early stages. While awareness of the potential for applying blockchain technology to the railway sector is spreading, research on specific system design and implementation methods is insufficient. Above all, there are difficulties in effectively combining the core characteristics of blockchain, such as distributed ledgers and automated blockchains, with the specific domain requirements of railway signaling and safety management.

[0016] Furthermore, ensuring the performance, scalability, and interoperability of blockchain-based systems to meet the requirements of railway operations remains a challenge. In addition, it is necessary to consider the various tasks associated with blockchain adoption, such as migration from existing systems, institutional reforms, and the establishment of governance.

[0017] Under these circumstances, the present invention is an innovative attempt to overcome the limitations of existing railway signaling and safety management systems by utilizing blockchain technology, and to implement a safer, more efficient, and intelligent next-generation system. Through a distributed blockchain network architecture, it aims to achieve a dramatic improvement in safety and efficiency by eliminating single points of failure and enhancing system resilience, while ensuring data integrity and availability and enabling real-time monitoring and automated response.

[0018] In particular, this invention is significant in that it presents a differentiated system model that effectively combines the technical characteristics of blockchain with the domain specificity of railway signaling and safety management. As a new design example of a distributed system capable of overcoming the limitations of existing centralized systems, it is expected to serve as an important reference point for subsequent research and industrialization in related fields.

[0019] Of course, applying this invention to actual railway operations will require much further research, verification, and institutional and organizational support. However, considering the potential of blockchain technology and the importance of railway safety, this is a direction of innovation that must be pursued. Accordingly, we hope that the technical vision and system model presented by this invention will serve as a milestone leading the paradigm shift in railway safety. The problem to be solved

[0021] The present invention has been devised to improve upon the aforementioned problems, and aims to provide a distributed network system for security management that ensures data integrity and availability by utilizing blockchain technology and redundant communication channels.

[0022] In addition, according to an embodiment of the present invention, the purpose is to provide a distributed network system for safety management that can significantly improve the availability, safety, and reliability of a railway signal and safety management system by realizing the elimination of a single point of failure, enhanced real-time responsiveness, improved maintenance efficiency, and enhanced transparency and security. means of solving the problem

[0023] To achieve the above objectives, one embodiment of the present invention relates to a distributed network system for safety management, wherein

[0024] Multiple control units that ensure the consistency of signal and safety-related decisions through mutual verification, are securely and transparently interconnected through redundant communication channels, and eliminate single points of failure and guarantee security and scalability by utilizing blockchain technology for distributed data storage and management;

[0025] A communication network that provides communication between the above-mentioned control units, ensures data integrity and availability through a blockchain consensus algorithm, transmits decision results and status information received from the control units to the system administrator, and simultaneously propagates management commands received from the system administrator to the corresponding control units; and

[0026] A system manager who periodically collects and analyzes status information of control units through a communication network to detect abnormal signs in real time, ensures the stability of the entire system by transmitting self-diagnosis and recovery commands, and enables efficient resource management and rapid fault response by dynamically reconfiguring areas of responsibility between control units when necessary;

[0027] The above control unit stores track information, train operation information, safety rules, and constraints of its jurisdiction in its own database and performs independent signal and safety control based on this, while maintaining the consistency of the entire system through a process of periodically sharing its decision results with other control units and reaching a consensus.

[0028] The above communication network is composed of physically independent redundant channels to ensure network availability and stability by eliminating a single point of failure, and at the same time, by utilizing blockchain technology, it protects the system from data tampering and unauthorized access.

[0029] The system administrator not only performs preemptive fault detection and response through real-time monitoring and anomaly analysis, but also maximizes the resilience of the entire system by safely isolating the relevant control unit and automatically transferring its functions to an adjacent unit in the event of a failure.

[0030] a) A step in which the plurality of control units each independently perform signal and safety-related decisions;

[0031] b) A step in which each of the above control units stores signal and safety-related information in its own local database;

[0032] c) A step in which each of the above control units shares decision results with other control units and reaches consensus through a blockchain network;

[0033] d) A step in which each of the above control units periodically transmits its status information to a system manager via a communication network;

[0034] e) A step in which the above communication network utilizes blockchain technology to perform secure and transparent data sharing between control units;

[0035] f) a step of transmitting the decision result and status information received by the above communication network from the control unit to the system manager;

[0036] g) A step in which the system manager periodically collects and monitors status information of the control unit through a communication network;

[0037] h) A step in which the system manager detects abnormal signs through status information analysis;

[0038] i) A step in which the system administrator requests self-diagnosis from the corresponding control unit when an anomaly is detected;

[0039] j) A step in which the above control unit performs a self-diagnosis and reports the results to the system administrator;

[0040] k) a step in which the system administrator determines the necessity of dynamic reconfiguration based on the self-diagnosis results; and

[0041] l) If the system administrator determines that dynamic reconfiguration is necessary, the step of instructing the relevant control unit via a communication network to transfer functions and adjust areas of responsibility is included.

[0042] When the above system administrator requests a self-diagnosis from a control unit in which an anomaly has been detected through status information analysis,

[0043] a) A step in which the above control unit performs an internal diagnostic process to analyze the cause of the problem and seek possible solutions;

[0044] b) A step in which the above control unit reports the self-diagnosis results and solutions to the system administrator;

[0045] c) A step in which the system administrator evaluates the reported diagnostic results and solutions to determine the necessity of dynamic reconfiguration;

[0046] d) If it is determined that dynamic reconfiguration is necessary, the system administrator generates a reconfiguration command and propagates it through a communication network;

[0047] e) A step in which adjacent control units that have received the above reconfiguration command take over the functions of the problematic control unit in accordance with the command and expand their area of ​​responsibility;

[0048] f) A step in which the adjacent control units continuously perform signal and safety functions for the extended area;

[0049] g) a step in which the above-mentioned problematic control unit performs its own recovery operation and notifies the system administrator of the result; and

[0050] h) a step in which the system administrator checks the recovery results and, if necessary, directs additional measures; further comprising,

[0051] The above dynamic reconfiguration and recovery process can be repeated until the problem is completely resolved and the system is stabilized, thereby maximizing the system's availability and resilience.

[0052] If the above communication network utilizes blockchain technology to perform secure and transparent data sharing between control units,

[0053] a) A step in which each of the above control units generates a transaction including its decision result, status information, and self-diagnosis and recovery related data;

[0054] b) a step of broadcasting the transactions generated by each of the above control units to the blockchain network;

[0055] c) a step of verifying the validity of a transaction and generating a new block according to the consensus algorithm of the blockchain network;

[0056] d) A step of updating the distributed ledger shared by all control units and system administrators by connecting the new block to the existing blockchain;

[0057] e) A step in which the system administrator monitors and analyzes transaction data recorded on the blockchain in real time to detect abnormal signs and establish countermeasures;

[0058] f) A step in which the above system administrator utilizes blockchain records to track and audit the decision history and state changes of each control unit;

[0059] g) a step in which the system administrator derives long-term performance improvement and optimization measures for the system based on data accumulated in the blockchain; and

[0060] h) a step of implementing an automated collaboration and reward system between control units by utilizing the automated blockchain function of the above-mentioned blockchain network; wherein

[0061] This enhances the data integrity, transparency, availability, and usability of the railway signaling and safety management system, thereby improving the overall safety and efficiency of the system.

[0062] In a method for operating a distributed network system for safety management,

[0063] a) A step in which multiple control units each independently perform decisions related to railway signaling and safety;

[0064] b) A step in which each of the above control units shares decision results with one another through a blockchain network and verifies the consistency of the decision through a consensus algorithm;

[0065] c) A step in which each of the above control units generates a transaction containing its own status information, diagnosis and recovery-related data, and broadcasts it to the blockchain network;

[0066] d) A step in which the blockchain network verifies the validity of a transaction and updates the distributed ledger by creating a new block;

[0067] e) A step in which the system administrator monitors and analyzes transaction data recorded on the blockchain in real time to detect abnormal signs;

[0068] f) A step in which the system administrator requests a self-diagnosis from the corresponding control unit upon detection of an abnormal sign, and instructs dynamic reconfiguration if necessary based on the diagnosis result;

[0069] g) A step in which an adjacent control unit replaces the function of the unit where the problem occurred in accordance with the above dynamic reconfiguration instructions, and continues railway signal and safety control for the extended area of ​​responsibility;

[0070] h) a step in which the above-mentioned problem-causing unit performs self-recovery and reports the result to the system administrator; and

[0071] i) a step of realigning the area of ​​responsibility between the adjacent control unit and the recovered unit and restoring functions according to the instructions of the system administrator after the recovery of the above-mentioned problematic unit is completed; wherein

[0072] The aforementioned series of processes is managed securely and transparently through a blockchain network, thereby ensuring the availability, resilience, and evolutionary potential of the entire railway signaling and safety management system.

[0073] When the above system administrator analyzes transaction data recorded on the blockchain and detects anomalies,

[0074] a) A step in which the system manager extracts from the blockchain the past decision history, state change patterns, and interaction data with surrounding units of the control unit related to abnormal signs;

[0075] b) A step in which the system administrator analyzes the cause of abnormal signs based on the extracted data and predicts potential ripple effects;

[0076] c) A step in which the system administrator establishes a response strategy based on the analysis results, while considering the self-diagnosis and recovery capabilities of the problem unit, the feasibility of transferring functions to surrounding units, and the impact on the stability of the entire system;

[0077] d) A step in which the system administrator broadcasts the established response strategy to the blockchain network and notifies the relevant control unit;

[0078] e) A step in which the problem unit performs self-diagnosis and recovery according to the above response strategy, or a surrounding unit replaces the function through dynamic reconstruction;

[0079] f) a step of recording the results of the above self-diagnosis and recovery, or dynamic reconstruction, on a blockchain and reporting them to a system administrator;

[0080] g) a step in which the system administrator monitors the response results and directs follow-up actions if necessary; and

[0081] h) a step of recording the above series of response processes and their results on a blockchain and utilizing them as reference material for decision-making regarding similar situations in the future; wherein,

[0082] This enables a rapid and effective response to abnormal situations, while also enhancing accountability in system operations and potential for future improvement by transparently recording the entire response process on the blockchain.

[0083] In the case where the above system administrator evaluates the reliability of the control unit based on transaction data recorded on the blockchain and performs differential management according to the result,

[0084] a) A step in which the system administrator extracts the decision history, status information, and records of abnormal sign occurrences and responses of each control unit from the blockchain;

[0085] b) A step in which the system manager calculates the reliability index of individual control units based on the extracted data, while considering the consistency of decision-making, the stability of status information, the frequency of abnormal signs, and the speed of response;

[0086] c) A step in which the system administrator classifies the control units based on the calculated reliability indicators and records the results on the blockchain;

[0087] d) A step in which the system administrator establishes differentiated monitoring and management policies according to reliability grades, while applying stricter monitoring and control to control units of lower grades;

[0088] e) A step of adjusting the status check cycle, the sensitivity of the anomaly detection algorithm, and the dynamic reconstruction threshold for each control unit according to the above-mentioned differential management policy;

[0089] f) A step of continuously recording changes in the reliability of the above control unit and the details of changes in the management policy resulting therefrom on the blockchain;

[0090] g) a step in which the system manager requests performance improvement or replacement as a precautionary measure for control units with significantly low reliability; and

[0091] h) a step of comprehensively analyzing the results of the above reliability evaluation and differential management to derive measures to improve the overall reliability and efficiency of the system; wherein

[0092] This enhances overall system reliability and availability by allocating limited management resources more effectively and proactively responding to potential issues.

[0093] When deploying an automation blockchain to the above-mentioned blockchain network to automate the interaction between control units and the management actions of system administrators,

[0094] a) A step in which each of the above control units and system administrators register predefined interaction rules and management policies in the form of an automation blockchain on a blockchain network;

[0095] b) A step in which the above-mentioned automation blockchain monitors in real time the state changes and management activities of each control unit recorded in the blockchain;

[0096] c) A step in which the above-mentioned automation blockchain compares the monitoring results with predefined rules and policies, and automatically executes the corresponding interaction or management action if the conditions are met;

[0097] d) a step of recording the results of the automatically executed interaction or management act above on the blockchain and notifying the relevant control unit and system administrator;

[0098] e) A step of comprehensively analyzing the execution results of the above-mentioned automated blockchain and the data recorded in the blockchain to derive the effects and areas for improvement of the interaction rules and management policies;

[0099] f) A step of updating the contents of the automated blockchain based on the above analysis results and recording the update history on the blockchain;

[0100] g) a step of redeploying the above-mentioned updated automation blockchain to a blockchain network so that improved interaction rules and management policies are automatically applied; and

[0101] h) a step of periodically repeating the above series of processes to continuously optimize the automated interaction and management system based on an automated blockchain; wherein

[0102] This enhances the efficiency and flexibility of system operations, while guaranteeing the reliability and integrity of interactions and management based on blockchain.

[0103] The present invention relates to a distributed blockchain network system for railway signal and safety management, comprising a plurality of control units, a communication network providing communication between the control units, and a system manager managing the control units and the communication network. The control units store track information, train operation information, safety rules, and constraints of their jurisdictional areas in their own databases, perform independent signal control and Automatic Train Protection (ATP) functions based on the information in the databases, mutually verify the consistency of decisions through a consensus algorithm with other control units, and periodically transmit their status information to the system manager via the communication network. The communication network utilizes blockchain technology to ensure the safety and transparency of data sharing between control units, secures availability and stability by eliminating single points of failure through redundant communication channels, transmits decision results and status information received from the control units to the system manager, and propagates management commands received from the system manager to the corresponding control units. The system manager periodically collects and monitors status information of the control units via the communication network, detects abnormal signs in real time through status information analysis, and, upon detection of an abnormality, transmits self-diagnosis and recovery commands to the corresponding control units to ensure the stability of the entire system. In a distributed network system for safety management, when the system administrator detects anomalies by analyzing transaction data recorded on the blockchain,

[0104] The above system administrator extracts the control unit's past decision history, state change patterns, and interaction data with surrounding units related to abnormal signs from the blockchain, and

[0105] The above system administrator analyzes the cause of abnormal signs based on the extracted data, and

[0106] The above system administrator establishes a response strategy based on the analysis results, while storing the self-diagnosis and recovery possibilities of the problem unit, and

[0107] The above system administrator broadcasts the established response strategy to the blockchain network to notify the relevant control unit, and

[0108] According to the above response strategy, the problem unit performs self-diagnosis and recovery, or surrounding units replace functions through dynamic reconfiguration, and

[0109] The results of the above self-diagnosis and recovery, or dynamic reconstruction, are recorded on the blockchain and reported to the system administrator,

[0110] The above system administrator monitors the response results and directs follow-up actions if necessary,

[0111] The above series of response strategies and their results are recorded on the blockchain and utilized as reference material for decision-making regarding similar situations in the future.

[0112] If the above communication network utilizes blockchain technology to perform secure and transparent data sharing between control units,

[0113] The above control unit generates a transaction including its decision results, status information, self-diagnosis and recovery-related data, and

[0114] Broadcasts the transactions generated by each of the above control units to the blockchain network,

[0115] Verify the validity of transactions and create new blocks according to the consensus algorithm of the aforementioned blockchain network, and

[0116] By connecting the above new block to the existing blockchain, the distributed ledger shared by all control units and system administrators is updated, and

[0117] The above system administrator monitors and analyzes transaction data recorded on the blockchain in real time, detects anomalies, establishes and stores response measures, and

[0118] The above system administrator utilizes blockchain records to track the decision history and status changes of each control unit. Effects of the invention

[0120] According to one embodiment of the present invention, the organic combination of an independent control unit, a redundant communication network, and an active system manager enables the elimination of a single point of failure, real-time control, and rapid response to failures, thereby improving the availability, safety, and resilience of the entire system.

[0121] Furthermore, the integration of distributed architecture and blockchain technology ensures the transparency and integrity of data sharing, and significantly enhances system availability and reliability through active state monitoring and self-recovery.

[0122] In addition, diagnostic support from system administrators enhances the self-diagnosis and recovery efficiency of each control unit, thereby improving the overall system's response capability.

[0123] In addition, active isolation and function transfer in the event of an anomaly ensure the continuity and availability of the entire system, maximizing the stability of railway operations.

[0124] In addition, the use of smart contracts significantly improves the accuracy and consistency of signal control and safety management, and enables the immediate reflection of rule changes. Brief explanation of the drawing

[0125] FIG. 1 is a schematic diagram showing the overall configuration of a distributed network system for safety management according to one embodiment of the present invention. FIG. 2 is a flowchart illustrating the interaction between a control unit and a system manager during normal operation in a distributed network system for safety management according to an embodiment of the present invention. FIG. 3 is a flowchart illustrating the dynamic reconstruction and recovery process when an abnormal situation occurs in a distributed network system for safety management according to one embodiment of the present invention. FIG. 4 is a flowchart illustrating a data management process utilizing blockchain in a distributed network system for safety management according to an embodiment of the present invention. FIG. 5 is a flowchart showing the overall operation process of a distributed network system for safety management according to one embodiment of the present invention. FIG. 6 is a flowchart illustrating in detail a data analysis-based response process when an abnormal sign is detected in a distributed network system for safety management according to one embodiment of the present invention. FIG. 7 is a flowchart illustrating the reliability evaluation of a control unit and the differential management process based thereon in a distributed network system for safety management according to an embodiment of the present invention. FIG. 8 is a flowchart illustrating an interaction and management automation process utilizing an automated blockchain in a distributed network system for safety management according to an embodiment of the present invention. Specific details for implementing the invention

[0126] The present invention as described above will be explained in detail through the attached drawings and embodiments.

[0127] It should be noted that the technical terms used in this invention are used merely to describe specific embodiments and are not intended to limit the invention. Furthermore, unless specifically defined otherwise in this invention, the technical terms used in this invention should be interpreted in the sense generally understood by those skilled in the art to which this invention pertains, and should not be interpreted in an overly broad or overly narrow sense. Additionally, if a technical term used in this invention is an incorrect technical term that fails to accurately express the concept of the invention, it should be replaced with a technical term that can be correctly understood by those skilled in the art. Moreover, general terms used in this invention should be interpreted according to their prior definitions or the context, and should not be interpreted in an overly narrow sense.

[0128] Furthermore, singular expressions used in the present invention include plural expressions unless the context clearly indicates otherwise. In the present invention, terms such as "composed of" or "comprising" should not be interpreted as necessarily including all of the various components or steps described in the invention, and should be interpreted as meaning that some of the components or steps may not be included, or that additional components or steps may be included.

[0129] Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the attached drawings. Identical or similar components are given the same reference number regardless of the drawing symbols, and redundant descriptions thereof will be omitted.

[0130] Furthermore, in describing the present invention, detailed descriptions of related prior art are omitted if it is determined that such descriptions could obscure the essence of the invention. Additionally, it should be noted that the attached drawings are intended only to facilitate an understanding of the concept of the present invention and should not be interpreted as limiting the concept of the present invention.

[0132] As illustrated in FIG. 1, the distributed network system for safety management of the present invention is composed of a plurality of control units (100), a communication network (200), and a system manager (300).

[0133] Each control unit (100) is a computing device equipped with independent computing capabilities and has its own database (110) built in. This database (110) stores track information, train operation information, safety rules, and constraints for the area under the jurisdiction of the control unit (100). The control unit (100) utilizes this information to autonomously make decisions regarding signals and safety and perform control.

[0134] However, despite independent decision-making, mutual verification and consensus processes among control units (100) are essential to maintain the integrity and consistency of the entire system. To this end, each control unit (100) periodically shares its decision results with other units through a blockchain network. At the same time, by receiving the decision results of other units and comparing them with its own results, it detects discrepancies or errors and undergoes adjustment and synchronization processes if necessary.

[0135] Communication between these control units (100) is carried out through a redundant communication network (200). The communication network (200) consists of two physically independent channels (210, 220), each channel having its own communication protocol and infrastructure. This redundant structure ensures the availability and stability of the network by eliminating a single point of failure. This is because even if one channel fails, communication can be maintained through the remaining channel.

[0136] The communication network (200) not only serves the role of simply transmitting data, but also plays a key role in ensuring data integrity and security by utilizing blockchain technology. All messages and transactions exchanged between control units (100) are verified and recorded through a blockchain consensus algorithm. This allows the system to be protected from data tampering or unauthorized access.

[0137] Meanwhile, a system manager (300) who oversees the entire system interacts with each control unit (100) through a communication network (200). The main role of the system manager (300) is real-time monitoring and detection of abnormal signs. To this end, the system manager (300) periodically collects status information from each control unit (100). The collected data is analyzed by a fault detection module (310) and detects abnormal signs according to predefined rules or patterns.

[0138] Once abnormal signs are detected, the system administrator (300) initiates an immediate response. First, the relevant control unit (100) is instructed to perform a self-diagnosis, and necessary measures are taken based on the results. If the unit is unable to resolve the problem on its own, the system administrator (300) dynamically reconfigures the system using a reconfiguration module (320). Specifically, the faulty unit is safely isolated, and the area of ​​responsibility is transferred to an adjacent unit. This prevents the problem from spreading to the entire system and enables rapid recovery.

[0139] This dynamic reconfiguration capability is one of the key advantages of the distributed blockchain network system of the present invention.

[0140] For example, Dynamic Reconfiguration refers to the process in a distributed blockchain network system where, when a specific control unit fails, that unit is safely isolated and its functions are automatically transferred to an adjacent control unit.

[0141] The cases requiring dynamic reconstruction are as follows:

[0142] 1. When a serious error or malfunction is detected in the control unit, making normal operation difficult

[0143] 2. If the control unit determines, based on its self-diagnosis results, that it cannot resolve the problem on its own

[0144] 3. If it is determined that leaving the problematic control unit as is could have a serious impact on the stability and availability of the entire system

[0145] In such situations, the system administrator performs dynamic reconfiguration by isolating the faulty control unit and transferring its functions to a nearby, healthy control unit. This prevents the problem from propagating and maintains the continuity of the entire system.

[0146] Dynamic reconfiguration is one of the key features of the present invention and demonstrates the advantages of a distributed system, which, unlike a centralized system, prevents a problem in some nodes from paralyzing the entire system.

[0147] Therefore, unlike centralized systems, the failure of individual components does not lead to the paralysis of the entire system. Rather, resilience can be secured through autonomous collaboration and organic reconfiguration.

[0148] This is explained in more detail as follows. As shown in FIG. 2, during normal operation, each control unit (100) independently performs a decision (S110). The decision result is recorded in the local database (110) and simultaneously broadcast onto the blockchain network via the communication module (120) (S120). At this time, the decision result received from another unit is compared with its own result to mutually verify consistency and alignment (S130).

[0149] Meanwhile, the system administrator (300) requests status information of each control unit (100) according to a preset cycle (S140). In response to the request, the control unit (100) transmits its status information to the system administrator (300) (S150), and the system administrator (300) comprehensively analyzes this to detect signs of abnormality (S160). If a problem is found in a specific unit, the system administrator requests a self-diagnosis from the unit (S170) and, if necessary, performs dynamic reconfiguration, such as transferring functions to an adjacent unit (S180).

[0150] Here, "its own status" refers to the current operating status and operational information of each control unit.

[0151] For example, it includes 1. Status information of the control unit (whether it is operating normally, whether an error or abnormal situation has occurred, system resource usage (CPU, memory, etc.)), 2. Database information (stored track information, current version of train operation information, whether the database has been updated), 3. Signal control and ATP operation status (status of the signal / ATP system currently under control, control command history), 4. Consensus protocol status with other control units (recent consensus result, progress of the consensus process), and 5. Network communication status (communication connection status with the manager system, amount of transmitted and received data, etc.).

[0152] This series of processes is illustrated more specifically in FIG. 3. For example, if a fault is detected in control unit 2 (100b) (S210), the system manager (300) immediately safely blocks control unit 2 (100b) (S220) and divides and transfers the area of ​​responsibility to adjacent control unit 1 (100a) and control unit 3 (100c) (S230). Subsequently, control unit 1 (100a) and control unit 3 (100c) continue to perform signal and safety functions for the expanded area (S240).

[0153] Through the above configuration and operation method, the railway signal and safety management system of the present invention can be expected to have the following effects.

[0154] First, the distributed deployment of independent control units eliminates single points of failure and enhances the overall availability and stability of the system. The failure of individual units does not lead to the paralysis of the entire system, and overall consistency can be maintained through autonomous decision-making and mutual verification.

[0155] Second, the introduction of a redundant communication network can guarantee the stability and availability of communication channels. A failure in a single channel does not lead to a complete breakdown of communication, and data integrity and security can be ensured by utilizing blockchain technology.

[0156] Third, the introduction of a centralized system manager enables systematic monitoring and anomaly detection. By identifying the status of each control unit in real time and responding quickly, the spread of problems can be prevented at an early stage and damage minimized.

[0157] Fourth, a flexible and highly adaptable system can be implemented through a dynamic reconfiguration mechanism. By rapidly redeploying resources and transferring functions in the event of a failure, the resilience and recovery of the entire system can be enhanced.

[0158] Fifth, the design of a blockchain-based distributed system can enhance transparency and accountability. Since all decisions and transactions are recorded on an immutable blockchain, post-transaction tracking and auditing are facilitated. This can contribute to improving the reliability of system operations.

[0159] The railway signal and safety management system of the present invention can be implemented and applied in various ways. There are various options regarding the specific form of the control unit, communication protocols, and the selection of a blockchain platform. Furthermore, the number of components or their arrangement methods can be appropriately adjusted depending on the scale of the system or the application environment. As the automation and unmanned operation of trains advance in the future, the autonomous distributed system of the present invention is expected to play an even greater role.

[0160] In summary, the distributed network system for safety management according to the present invention overcomes the limitations of existing centralized systems and provides high levels of stability, availability, scalability, and resilience. It is expected to contribute to enhancing the safety and efficiency of railway operations and, furthermore, establish itself as a new standard for future railway systems.

[0161] As an example, the distributed network system for railway signal and safety management of the present invention comprises a plurality of control units (100) that operate independently and can back up each other, a redundant communication network (200) connecting the control units, and a system manager (300).

[0162] Each control unit (100) is equipped with the capability to perform independent signal and safety decisions. This means that, unlike conventional centralized systems, each unit can independently collect and make decisions regarding information. To this end, the control unit (100) is equipped with a local database (110) to store and manage important data. The local database (110) may include track information, train operation information, and safety-related rules and constraints for the area managed by the unit.

[0163] Each control unit (100) is also equipped with a mechanism for mutual verification with other units. This is a means to ensure consistency and safety of the entire system despite independent decisions. Specifically, each unit propagates its decision results to surrounding units and simultaneously receives, compares, and verifies the decision results of other units. This process is carried out through a communication module (120), and messages can be reliably exchanged through a redundant communication network (200).

[0164] The communication network (200) adopts a redundancy structure to ensure reliable data transmission between control units (100). That is, two independent communication channels (210, 220) are connected in parallel so that even if a problem occurs in one channel, communication can be maintained through the remaining channel. This redundancy structure contributes to increasing the availability of the system by eliminating a single point of failure.

[0165] The communication network (200) supports not only data transmission between control units (100) but also communication with the system manager (300). The system manager (300) is a central management system responsible for monitoring and controlling the entire network.

[0166] The system manager (300) can periodically collect status information of each control unit (100) to quickly detect abnormalities or failures in the components. To this end, the system manager (300) includes a failure detection module (310), which evaluates the status of each unit according to predefined rules.

[0167] Another key function of the system manager (300) is to enhance the resilience of the system through dynamic reconfiguration. Based on information received from the fault detection module (310), the reconfiguration module (320) isolates the component where the problem occurred and establishes an alternative path to maintain the function of the system. For example, if a fault occurs in a specific control unit (100), the reconfiguration module (320) can transfer the function to an adjacent unit and reconfigure the network to bypass the communication path. This dynamic reconfiguration capability significantly improves the availability and resilience of the system.

[0168] The distributed network system of the present invention has the following advantages over the existing centralized system. First, the impact of a single point of failure can be minimized by using independent control units (100). Even if a problem occurs in one unit, the stability of the entire system can be ensured by maintaining the function of the remaining units. Second, the reliability and availability of the communication channel can be increased by adopting a redundant communication network (200). Third, the resilience of the system can be improved through active monitoring and dynamic reconfiguration by the system manager (300).

[0169] The railway signal and safety management system of the present invention operates as follows. During normal operation, each control unit (100) independently performs signal and safety-related decisions. To this end, the control unit (100) utilizes information stored in a local database (110) and information received from adjacent units. Each unit periodically broadcasts its decision results through a communication module (120) and simultaneously receives, compares, and verifies the decision results of other units. Through this mutual verification process, the consistency of the entire system can be maintained.

[0170] The system administrator (300) identifies the status of each component through constant monitoring. The fault detection module (310) periodically collects status information from the control unit (100), enabling immediate response when a problem occurs.

[0171] If an abnormal sign is detected in a specific unit, the reconstruction module (320) intervenes to reconstruct the system.

[0172] This includes measures such as bypassing defective units and establishing alternative paths. Through this dynamic reconfiguration, the system can maintain full functionality despite the failure of some components.

[0173] The distributed network system of the present invention can be implemented in various ways. The control unit (100) can be implemented in the form of an industrial computer, a programmable logic controller (PLC), or an embedded system. The communication network (200) can use Ethernet, an industrial fieldbus, or a dedicated communication protocol. The system manager (300) can also be implemented as an industrial server or a cloud-based system.

[0174] In the field of railway signaling and safety management, the distributed network system of the present invention can be expected to have the following effects. First, the use of independent control units minimizes latency and enhances the real-time capability of signal control. Additionally, the stability and availability of the system can be improved by eliminating single points of failure. Furthermore, the system's resilience can be maintained even in unexpected situations through dynamic reconfiguration capabilities.

[0175] In conclusion, the distributed network system for railway signaling and safety management of the present invention overcomes the limitations of existing systems and achieves a high level of stability, availability, and resilience through a combination of independent control units, a redundant communication network, and active system managers. This is expected to contribute to the improvement of safety and efficiency in railway operations.

[0176] As illustrated in FIG. 2, the method of operation of a distributed network system for safety management according to the present invention includes processes such as independent decision-making, mutual verification and agreement of a plurality of control units (100), monitoring and dynamic reconfiguration by a system manager (300).

[0177] First, each control unit (100) autonomously performs signal and safety-related decisions (S110). To this end, each unit stores and manages track information, train operation information, safety rules, and constraints of its jurisdiction in its own local database (110). Based on this information, the control unit (100) makes real-time situational judgments and decisions.

[0178] However, to ensure that independent decision-making does not compromise the integrity of the entire system, each control unit (100) undergoes a process of sharing and verifying its decision results with other units (S120). This is done on a blockchain network through a communication module (120), and all control units (100) adjust and synchronize their decisions according to the agreed-upon results.

[0179] Meanwhile, each control unit (100) periodically reports its status information to the system administrator (300) (S150). At this time, the communication network (200) functions not as a simple data transmission channel, but as a secure and transparent blockchain-based platform. All status information and transactions are recorded on the blockchain, which are used as reliable data for post-audit and analysis.

[0180] The system administrator (300) monitors the operating status of each control unit (100) based on the collected status information (S160). It detects abnormal signs according to predefined rules or patterns, and if it determines that there is a problem, it requests a self-diagnosis from the unit (S170).

[0181] The control unit (100) that is requested to perform a self-diagnosis performs an internal diagnosis process and reports the results to the system administrator (300) (S180). If the problem cannot be resolved through self-diagnosis, the system administrator (300) determines the need for dynamic reconfiguration (S190).

[0182] If it is determined that dynamic reconfiguration is necessary, the system administrator (300) transmits a reconfiguration command to the relevant control unit (100) (S200). This is done via a communication network (200) and includes transferring the function of a failed unit to an adjacent unit or adjusting the area of ​​responsibility.

[0183] The control unit (100) that receives the dynamic reconfiguration command adjusts its role and scope of responsibility according to the instructions (S210). For example, it takes over the function of a failed unit or is responsible for signal and safety management for an extended area. Through this process, the entire system can operate stably despite the malfunction of some components.

[0184] The above series of processes is carried out repeatedly and continuously. Each control unit (100) constantly monitors and judges the situation and adapts to changes. Mutual verification and consensus through the blockchain network become a core mechanism that ensures the integrity and consistency of the system. In addition, continuous monitoring and dynamic reconfiguration by the system administrator (300) contribute to increasing the resilience of the system.

[0185] The operating method of this decentralized blockchain network system represents a fundamentally different approach from existing centralized systems. It aims to achieve the stability and efficiency of the entire system by endowing individual components with autonomy and intelligence, and through their organic interaction. This is expected to become a suitable paradigm for future railway systems operating in complex and dynamic environments.

[0186] In particular, the introduction of blockchain technology is a key feature of this invention. Blockchain ensures data integrity and transparency while minimizing the need for centralized management. This not only enhances the security and reliability of the system but also contributes to reducing operating costs. Furthermore, it is noteworthy that automated decision-making and execution can be implemented by utilizing functions such as automated blockchain (Smart Contract).

[0187] Of course, there will be many challenges in actually building and operating such an innovative system. Consideration is required from various aspects, including technical complexity, regulatory and standardization issues, and compatibility with existing infrastructure. However, this invention presents a solution to these challenges, and its value is expected to increase further with the future advancement of related technologies.

[0188] Railways are one of the essential infrastructures of modern society, and their safety and efficiency are directly linked. Therefore, innovation in railway signaling and safety management systems can have a significant impact on society as a whole, going beyond mere technical dimensions. This invention can be described as an attempt to implement a safer, more efficient, and intelligent railway system by utilizing blockchain, a core technology of the Fourth Industrial Revolution era.

[0189] In the future, the present invention may be implemented and applied in various ways. Detailed design elements, such as the specific hardware and software architecture of the control unit, the selection of a blockchain platform, and the optimization of communication protocols, can be adjusted in various ways to suit the actual application environment. Furthermore, as the automation and unmanned operation of trains advance, the autonomous distributed system of the present invention is expected to play an even greater role.

[0190] Furthermore, the concept and structure of the present invention can be applied not only to the railway sector but also to other industrial areas with similar characteristics. For example, it can be utilized in various fields requiring distributed control and real-time monitoring, such as smart grids, intelligent transportation systems, and smart factories. This can serve as an opportunity to further expand the value and ripple effects of the present invention.

[0191] In conclusion, the method of operation of a distributed network system for safety management according to the present invention is an innovative solution suitable for the era of the Fourth Industrial Revolution. By combining blockchain and distributed control technology, it aims to overcome the limitations of existing systems and create new value.

[0192] This not only suggests a direction for the development of the railway industry but also offers significant implications for other industrial sectors. It is expected that this invention will enable safer and more efficient railway operations, which will ultimately contribute to enhancing the safety and convenience of the public.

[0193] As illustrated in FIG. 3, in the method of operation of a distributed network system for safety management according to the present invention, when a system manager (300) detects an abnormality in a specific control unit and requests a self-diagnosis, the control unit performs an internal diagnosis process to analyze the cause of the problem and seek possible solutions.

[0194] For example, let's assume a situation (S210) where a fault is detected in control unit 2 (100b). The system administrator (300) recognizes this through status monitoring and requests a self-diagnosis from control unit 2 (100b) via the communication network (200) (S220).

[0195] Upon receiving this request, Control Unit 2 (100b) immediately initiates an internal diagnostic process (S230). This includes checking various hardware and software components, analyzing error logs, and identifying the root cause of the problem. Additionally, Control Unit 2 (100b) seeks possible solutions by utilizing past similar cases or prior knowledge.

[0196] When the internal diagnosis is completed, the control unit 2 (100b) reports the results and the proposed solution to the system administrator (300) (S240). This is done via a communication network (200), and the diagnosis result data is securely recorded on the blockchain.

[0197] The system administrator (300) comprehensively evaluates the reported diagnostic results and solutions (S250). Various factors are considered at this time, such as the severity of the problem, the potential for spread, and the effectiveness of the solution. If it is determined that the problem can be solved with the solution proposed by the control unit 2 (100b), the system administrator (300) approves the solution and instructs the control unit 2 (100b) to execute it.

[0198] However, if it is determined that the problem is more complex or serious and difficult to resolve through the efforts of the control unit 2 (100b) itself, the system administrator (300) decides on dynamic reconfiguration (S260). This means transferring the functions of the control unit 2 (100b) to an adjacent unit and safely isolating the control unit 2 (100b).

[0199] When dynamic reconfiguration is determined, the system administrator (300) generates a specific reconfiguration command and propagates it through the communication network (200) (S270). This command includes the designation of an adjacent unit to take over the responsibility of the control unit 2 (100b), a function transfer procedure, and operating rules for the extended area.

[0200] Adjacent units that receive a reconfiguration command, such as control unit 1 (100a) and control unit 3 (100c), take over the functions of control unit 2 (100b) and expand their areas of responsibility in accordance with instructions (S280). This means taking over the signal and safety management of the area previously handled by control unit 2 (100b). During this process, control unit 1 (100a) and control unit 3 (100c) cooperate closely to ensure that no interference occurs in the boundary area.

[0201] Once the adjustment of the responsibility area is complete, control unit 1 (100a) and control unit 3 (100c) continue to perform signaling and safety functions for the expanded area (S290). Although the management of some areas has changed, there is no disruption to train operations. This can be considered key evidence of the resilience of the distributed blockchain network system of the present invention.

[0202] Meanwhile, the isolated control unit 2 (100b) performs intensive recovery operations on its own (S300). This includes activities such as removing the cause of the defect, restoring damaged functions, and establishing measures to prevent recurrence. Although the recovery process is carried out independently, the progress and results are periodically reported to the system administrator (300).

[0203] When the recovery operation is completed, control unit 2 (100b) makes a final report to the system manager (300) and requests approval for restart (S310). The system manager (300) reviews the report and, if necessary, may order additional inspections or test runs (S320). Only when it is determined that all processes have been satisfactorily completed is the return of control unit 2 (100b) permitted.

[0204] When control unit 2 (100b) returns to normal operation, the system administrator (300) orders dynamic reconfiguration once again (S330). This time, the main content is to restore the responsibility areas of control unit 1 (100a) and control unit 3 (100c) to their original state and to restore the functions of control unit 2 (100b). This process is also carried out systematically and safely so as not to compromise the stability of the system.

[0205] When all units return to their original roles, the entire system is restored to a normal state (S340). However, the above series of processes—namely, the cycle of anomaly detection, self-diagnosis, dynamic reconfiguration, and recovery—can be restarted at any time. This means that the system continuously monitors its own state and can respond quickly in the event of a problem.

[0206] In particular, dynamic reconfiguration and recovery processes are key factors determining the availability and resilience of railway signaling and safety management systems. The speed and effectiveness of the response when problems occur, as well as the stability of the system's operation even in the event of failures, are directly linked to the safety of railway operations.

[0207] The decentralized blockchain network system of the present invention presents an innovative solution to these challenges. By detecting problems early through the autonomy of individual control units and blockchain-based mutual verification, and by dynamically reconfiguring resources under the supervision of a centralized system administrator, system continuity can be maintained under any circumstances.

[0208] Of course, for this mechanism to function perfectly, various technical and institutional supports will be required. Above all, the control unit's self-diagnosis and recovery capabilities must be advanced, and clear rules and protocols for dynamic reconfiguration must be established. Furthermore, the construction of a high-performance management platform capable of monitoring and analyzing the overall system status in real time is essential.

[0209] Furthermore, the governance system and human capabilities for effectively operating the aforementioned technical foundation will also be important factors.

[0210] The introduction of autonomous, decentralized systems requires a fundamental shift away from the existing centralized management paradigm; therefore, it must be supported by innovations in organizational culture and business processes. Furthermore, securing and training specialized personnel to operate and maintain the new system is an indispensable task.

[0211] Despite these challenges, the method of operation of a distributed network system for safety management presented in this invention can be considered an innovative solution that envisions the future of the railway industry.

[0212] By integrating blockchain, a core technology of the Fourth Industrial Revolution era, with autonomous distributed control technology, it is possible to realize a safer, more efficient, and highly resilient railway system.

[0213] As illustrated in FIG. 4, in the method of operation of a distributed network system for safety management of the present invention, blockchain technology functions as a key element that enables safe and transparent data sharing between control units.

[0214] Each control unit (100) generates a transaction containing its decision results, status information, and data related to self-diagnosis and recovery (S410). At this time, the transaction is authenticated through the digital signature of the corresponding control unit, which serves as the basis for guaranteeing the source and integrity of the data.

[0215] The generated transaction is broadcast onto the blockchain network via the communication module (120) (S420). This means that all control units and system administrators can share and verify the contents of the transaction.

[0216] The blockchain network verifies the validity of transactions and creates a new block according to a predefined consensus algorithm (S430). During this process, the consistency of transactions, the authenticity of the source, and the double-spending problem are strictly checked. Therefore, the data included in the block has high reliability.

[0217] A new block that passes verification and is generated is connected to the existing blockchain to update the distributed ledger (S440). The blockchain updated in this way is shared among all control units and system administrators, thereby ensuring data transparency and availability.

[0218] Meanwhile, the system administrator (300) monitors and analyzes transaction data recorded on the blockchain in real time (S450). Through this, abnormal signs in individual control units can be detected early, and appropriate response measures can be established. In addition, the system administrator (300) can utilize the blockchain records to track and audit the decision-making history and status changes of each control unit (S460). This can be usefully utilized for post-analysis and identifying responsibility.

[0219] Furthermore, the system administrator (300) can derive long-term performance improvement and optimization measures for the system based on the vast amount of data accumulated in the blockchain (S470). That is, if abnormal signs of a specific pattern occur repeatedly, the system administrator can analyze them to identify the root cause and prepare preventive measures. In addition, by evaluating the performance and reliability of each control unit, the system administrator can establish efficient resource allocation and maintenance strategies.

[0220] For example, a system administrator (300) can derive long-term performance improvement and optimization methods for the system by utilizing the vast amount of operational data accumulated on the blockchain.

[0221] Specifically, the system administrator (300) establishes improvement plans through one or more of the following processes.

[0222] 1. Data Collection and Preprocessing: Status information, decision history, failure and recovery history, etc., of control units distributed and stored on the blockchain are extracted and processed into a format suitable for analysis. During this process, preprocessing tasks are performed, such as removing unnecessary noise, normalizing data, and handling missing values.

[0223] 2. Operational Pattern Analysis: Based on collected data, patterns and anomalies in system operations are analyzed. The decision-making tendencies of individual control units, the frequency and types of failures, and the time required for recovery are statistically identified, and their interrelationships are determined. Through this, inefficiencies or vulnerabilities in system operations can be discovered.

[0224] 3. Analysis of Performance Indicator Trends: Define Key Performance Indicators (KPIs) for the entire system and analyze their trends. Track various performance indicators, such as train punctuality, accident rates, energy efficiency, and maintenance costs, over time to identify areas requiring improvement and priorities.

[0225] 4. Identification of Bottlenecks: Identify bottlenecks or factors that degrade system performance through data analysis. For example, if specific control units frequently experience faults or train delays are repeatedly observed in certain sections, focus the analysis on those points to identify the root cause.

[0226] 5. Design of an Ideal Operational Model: Design an ideal decision-making model that produces optimal operational performance by utilizing accumulated data as training data. Develop an intelligent ATP algorithm that establishes the safest and most efficient train operation plan under given conditions by applying machine learning and optimization techniques.

[0227] 6. Policy Change Simulation: Predicts the impact of changes to data-driven operational policies or rules in advance through simulation. By quantitatively analyzing the effectiveness and risks of policies by assuming various scenarios prior to actual implementation, the reliability of decision-making is enhanced.

[0228] 7. Hardware Capacity Optimization: Optimize the hardware configuration of the control unit based on the analysis of accumulated traffic data and workload patterns. By maintaining an appropriate level of infrastructure, such as reducing over-designed capacity and expanding insufficient resources, energy efficiency and investment efficiency can be maximized.

[0229] 8. Optimization of Maintenance Policy: Optimize preventive maintenance cycles and methods based on failure pattern and MTTF (Mean Time To Failure) analysis. Move beyond simple periodic parts replacement to establish a CBM (Condition-Based Maintenance) policy that proactively allocates maintenance resources to areas with a high probability of failure.

[0230] Through the above analysis process, the system administrator (300) can continuously improve the system by utilizing operational intelligence embedded in the blockchain. The vast amount of operational data has great value in itself and contributes significantly to improving the reliability and efficiency of the system by enabling data-driven decision-making.

[0231] Furthermore, the improvement history accumulated on the blockchain acts as a form of 'collective intelligence' regarding railway system operations. As the process of the system evolving through continuous improvement is recorded and shared as data, it can serve as a foundation for accelerating technological innovation across the entire industry. In this way, the present invention is expected to provide an opportunity to transition the operational paradigm of the railway industry to data-driven intelligent management and promote sustainable development by utilizing blockchain technology.

[0232] Another key feature of a blockchain network is the use of automated blockchain (Smart Contract) (S480).

[0233] An automated blockchain is an autonomous contract that executes automatically when predefined conditions are met, and can automate collaboration and reward systems between control units on the blockchain.

[0234] For example, this is a method that automatically provides incentives based on an automation blockchain if a specific control unit consistently maintains high performance. This can contribute to motivating individual components and improving overall system efficiency.

[0235] As discussed above, blockchain technology is an innovative solution that elevates the data integrity, transparency, availability, and usability of railway signaling and safety management systems to a new level. Through a distributed ledger structure, it ensures data reliability and security while providing powerful tools for real-time monitoring and post-analysis.

[0236] In particular, blockchain holds great significance in that it can guarantee the integrity and resilience of the entire system without relying on the trustworthiness of individual components. This is because even if a problem occurs in some control units, the stability of the system can be maintained through the consensus of the remaining units. This is an advantage that is difficult to obtain in centralized systems and can be considered an inherent strength of distributed systems.

[0237] Furthermore, blockchain-based data management can contribute to the long-term evolution and optimization of the system. Pattern analysis, performance evaluation, and predictive modeling utilizing accumulated data serve as a foundation for the continuous improvement of the system. Moreover, the insights derived from this can be utilized in formulating strategies and making decisions for railway operations.

[0238] However, there are several considerations regarding the adoption of blockchain technology. First, there are issues of scalability and processing speed. To reliably process the massive volume of transactions generated in a large-scale railway network, the selection of an appropriate consensus algorithm and network design are necessary. Additionally, the consumption of computing resources and costs associated with blockchain implementation are factors that must be considered.

[0239] Security and privacy issues are also aspects that cannot be overlooked. While the distributed ledger structure of blockchain guarantees data transparency, it also carries the risk of sensitive information exposure. Therefore, measures must be established to protect data security and the privacy of relevant parties through appropriate encryption, access control, and anonymization techniques.

[0240] Finally, the adoption of blockchain technology entails institutional and organizational changes. It is necessary to establish a governance framework to transition from the existing centralized management system to a decentralized, autonomous organization. Furthermore, securing and educating personnel equipped with an understanding of and expertise in blockchain technology is also a crucial task.

[0241] Given these challenges, it appears that a phased and gradual approach is necessary for introducing blockchain technology into railway signaling and safety management systems. It seems advisable to initially verify the stability and effectiveness of the technology through pilot applications within a limited scope, and then gradually expand the scope of application based on these results.

[0242] Furthermore, the adoption of blockchain technology should not be approached merely as a technical issue, but rather recognized as a holistic innovation initiative encompassing changes in organization, processes, and culture. The full potential of blockchain technology can only be maximized when corresponding institutional and organizational innovations are implemented in parallel.

[0243] From a long-term perspective, the introduction of blockchain technology will serve as a catalyst for a fundamental paradigm shift in railway signaling and safety management systems. This is because it can act as a catalyst to accelerate the transition from centralized management to autonomous, decentralized systems. This signifies a major transformation that goes beyond mere technological dimensions, encompassing organizational culture and operational philosophy.

[0244] Furthermore, a blockchain-based railway safety management system can serve as a model leading innovation across the entire railway industry. In railway operations, where safety and trust are core values, the integrity, transparency, and resilience provided by blockchain will set new standards. This will contribute not only to enhancing the competitiveness of the railway industry but also to securing user trust and improving satisfaction.

[0245] As illustrated in FIG. 5, the present invention includes a process in which a plurality of control units (100) each independently perform signal and safety-related decision-making and mutually verify and reach consensus through a blockchain network in the operation of a distributed network system for safety management.

[0246] Specifically, each control unit (100) performs independent decision-making based on track and train operation information, safety rules and constraints, etc., of the area it manages (S510). At this time, the content of the decision includes matters directly related to the safety of railway operations, such as signal display, route control, and train spacing control of the area.

[0247] Each control unit (100) broadcasts its decision results onto the blockchain network to share with other units (S520). At this time, all units verify the validity and consistency of the received decision according to a consensus algorithm. This ensures that the decision-making of individual units does not compromise the safety and consistency of the entire system.

[0248] Additionally, each control unit (100) includes its own status information, internal diagnosis and recovery-related data, etc., in a transaction and records it on the blockchain (S530). The transaction thus generated is then broadcast back onto the blockchain network and shared with all participants.

[0249] The blockchain network verifies the validity of transactions according to a predefined consensus algorithm, creates a new block, and adds it to the distributed ledger (S540). During this process, the integrity of the transaction and the authenticity of the source are strictly verified, so the data recorded on the blockchain has high reliability.

[0250] The system administrator (300) monitors and analyzes all transactions recorded on the blockchain in real time (S550). This allows for the early detection of changes in the state or abnormal signs of individual control units. If a problem is detected in a specific unit, the system administrator (300) immediately instructs the unit to perform a self-diagnosis.

[0251] The control unit (100) that receives a request for self-diagnosis performs an internal diagnostic process and reports the results to the system administrator (300) (S560). At this time, the diagnostic results include the type of problem, severity, and possible solutions. The system administrator (300) makes a comprehensive judgment based on this and may order dynamic reconfiguration if necessary.

[0252] When dynamic reconfiguration is performed, the function of the control unit (100) where the problem occurred is automatically transferred to an adjacent unit (S570). Therefore, railway signaling and safety control in the area can continue without interruption. This is a key mechanism that ensures the overall availability and resilience of the system.

[0253] Meanwhile, even after the function transfer is completed, the original control unit (100) performs its own recovery operations (S580). This may include analyzing the cause of the defect, replacing or resetting damaged modules, and verifying whether normal operation is occurring. The progress and results of the recovery process are recorded on the blockchain and simultaneously reported to the system administrator (300).

[0254] Once the recovery is complete and normal operation is confirmed, the system administrator (300) orders the restoration of the dynamic reconfiguration (S590). That is, the recovered control unit (100) takes over its original area of ​​responsibility and readjusts the division of roles with surrounding units. This process is also managed securely and transparently through a blockchain network.

[0255] The aforementioned series of processes—namely, the cycle of independent decision-making, mutual verification and consensus, problem detection and response, dynamic reconfiguration, and self-recovery—is continuously repeated. This ensures system-wide availability and resilience while guaranteeing the transparency and traceability of all processes through blockchain-based data management.

[0256] In particular, the introduction of blockchain technology is a key feature of this invention. Blockchain presents a new paradigm for distributed system management through the impossibility of data tampering, system integrity that does not rely on the trustworthiness of individual nodes, and the transparent recording of all transactions.

[0257] Integrating blockchain technology into safety-critical infrastructure, such as railway signaling and safety systems, entails significant technical and institutional challenges. However, this invention can be considered a pioneering attempt to overcome these challenges and realize the innovative potential of blockchain.

[0258] Above all, this invention is significant in that it overcomes the limitations of existing centralized management systems and presents a new distributed autonomous collaboration paradigm. This is because it is possible to simultaneously secure overall system reliability and resilience through the autonomy of individual control units and a blockchain-based consensus mechanism.

[0259] Furthermore, this invention holds significant meaning in terms of the system's potential for evolution. The vast operational data accumulated on the blockchain can become a valuable asset for the long-term development of the system. Pattern analysis, performance prediction, and optimization utilizing this data will serve as the foundation for the continuous improvement and advancement of the system.

[0260] Of course, this will require additional technological development and demonstration, as well as the refinement of institutional and governance frameworks. However, this invention can be evaluated as a leading example in that it presents a direction for such innovation and implements a blockchain-based distributed management system from the initial stages.

[0261] From a long-term perspective, the operation method of the decentralized blockchain network system presented in this invention can serve as a blueprint for the future of the railway industry. This is because it can become a model for a next-generation railway operation paradigm that harmonizes safety and efficiency, autonomy and cooperation, and transparency and reliability.

[0262] Furthermore, the methodology and architecture of the present invention possess the potential for extension not only to railways but also to other infrastructure areas with similar characteristics. It is also expected to have value as a reference model for the distributed management of safety-critical large-scale systems, such as energy, water resources, and telecommunications.

[0263] Of course, much effort is still required to realize this vision. Innovation at various levels must be pursued in parallel, including resolving technical challenges, establishing an institutional foundation, and creating an organizational culture and governance system befitting the new operational paradigm.

[0264] As illustrated in FIG. 6, in the operation of a distributed network system for safety management of the present invention, a system manager (300) detects potential anomalies early by continuously monitoring and analyzing transaction data recorded on the blockchain.

[0265] Specifically, the system administrator (300) analyzes various operational data accumulated in the blockchain in real time, such as the decision history of individual control units (100), state change patterns, and interaction data with surrounding units (S610). In this process, various analysis techniques such as outlier detection, pattern recognition, and machine learning may be utilized.

[0266] If a change in the behavior or state of a specific control unit (100) deviates from the usual pattern or if a factor that may impair system stability is detected, the system administrator (300) determines this as an abnormal sign and initiates an immediate response.

[0267] First, the system administrator (300) extracts past behavioral data of the control unit (100) directly related to the anomaly from the blockchain (S620). This includes the unit's decision history, state change history, and communication content with surrounding units. This data is used to analyze the cause of the anomaly and predict potential impacts.

[0268] The system administrator (300) analyzes the extracted data from various angles to diagnose the root cause of the abnormal signs (S630). What is important here is not merely to look at the superficial phenomenon, but to predict the root cause and the ripple effect. To this end, various techniques such as causal relationship analysis, simulation, and risk assessment may be employed.

[0269] Once the root cause is identified, the system administrator (300) establishes an optimal response strategy based on this (S640). There are three main factors to consider at this stage. First, whether the control unit (100) where the problem occurred can self-diagnose and recover. If self-recovery is possible, this should be given top priority. Second, if self-recovery is difficult, the feasibility of dynamic reconfiguration to transfer functions to a peripheral unit. This must be determined by comprehensively considering the capacity and stability of the target unit, as well as the risks of the transition process. Third, the impact of the response method on the stability and performance of the entire system. This is because solving a localized problem should not lead to instability of the entire system.

[0270] When an optimal response strategy is established through this multidimensional analysis, the system administrator (300) broadcasts it to the blockchain network (S650). Through this, the response policy is notified to all related control units (100), and they are instructed to take necessary actions.

[0271] According to the response strategy, the control unit (100) where the problem occurred initiates self-diagnosis and recovery, or transfers its function to a peripheral unit (S660). In the former case, the unit identifies the cause of the problem through internal diagnosis and performs appropriate recovery operations.

[0272] If serious defects are discovered, measures such as replacing parts or applying software patches may be taken.

[0273] In the latter case, dynamic reconfiguration is triggered, and the function of the problematic unit is rapidly transferred to surrounding units. To minimize temporary instability that may occur during the reconfiguration process, it proceeds according to strict predefined procedures.

[0274] Whether it is self-recovery or dynamic reconstruction, the process and results are all recorded on the blockchain and reported to the system administrator (300) (S670). This ensures transparency of the response process and serves as a basis for post-analysis and auditing.

[0275] The system administrator (300) evaluates the appropriateness and effectiveness of the response based on the reported results (S680). If it is determined that additional measures are necessary, a follow-up response may be ordered. This series of processes is repeated until the problem is completely resolved and the system is stabilized.

[0276] The entire process, from the detection of anomalies to response, evaluation, and conclusion, is recorded in detail on the blockchain (S690). This serves not merely as a historical record but also as a valuable reference for decision-making regarding similar situations in the future. By systematically accumulating and utilizing past experiences and lessons, the long-term evolution and optimization of the system become possible.

[0277] This data-driven response system is a core feature and strength of the present invention. Based on reliable operational data accumulated on the blockchain, it is possible to detect anomalies early and respond rapidly. Furthermore, beyond responding to individual cases, it enables the analysis of system-wide vulnerabilities and the derivation of fundamental improvement measures.

[0278] In traditional centralized management systems, such data-driven management was difficult because it was challenging to collect and analyze operational information from individual nodes in real time. However, by utilizing blockchain technology, it has become possible to ensure data transparency and reliability even in a distributed environment.

[0279] This serves as a foundation that enables not only post-incident response to abnormal signs but also proactive prevention and overall system optimization.

[0280] Of course, this requires a technical foundation capable of effectively analyzing and utilizing massive amounts of blockchain data. Convergence with cutting-edge IT technologies, such as big data analysis and artificial intelligence, is essential. Furthermore, the standardization and quality control of data recorded on the blockchain are also critical tasks. This is because accurate analysis and decision-making are only possible when data reliability is guaranteed.

[0281] Furthermore, close cooperation among relevant stakeholders is essential for this data-driven management system to operate effectively in the field. A framework must be established that enables various stakeholders, including system administrators, individual control units, and maintenance personnel, to share information and collaborate in real time. This is a challenge that goes beyond technical issues and demands innovation in organizational culture and business processes.

[0282] Given these challenges, establishing a data-driven anomaly response system is not something that can be achieved in the short term. Multifaceted efforts, such as the phased expansion of blockchain infrastructure, the advancement of analytical technologies, and the refinement of related institutional and organizational structures, must be pursued in parallel. However, even if the process is not smooth, there is no doubt that the ultimate goal is clear.

[0283] In decentralized network systems for safety management, establishing a data-driven anomaly response system is an inevitable direction of evolution. To achieve both safety and efficiency, the autonomy of individual nodes and the control of the entire system must be harmonized. It is precisely blockchain-based data management and utilization that make this possible.

[0284] As illustrated in FIG. 7, in the operation of a distributed network system for safety management according to the present invention, a system manager (300) evaluates the reliability of each control unit (100) by utilizing vast operational data accumulated in the blockchain and performs differential management based on the results.

[0285] Specifically, the system administrator (300) first extracts past behavioral data of each control unit (100) from the blockchain (S710). This includes the decision history, status information, and records of abnormal occurrences and responses of individual units. This data is used as basic data to evaluate the reliability of the unit.

[0286] Based on the extracted data, the system administrator (300) quantitatively evaluates the reliability of each control unit (100) (S720). For this purpose, various evaluation indicators may be used, for example, consistency of decision-making, stability of status information, frequency of occurrence of abnormal signs, and response speed may be major considerations. By combining these indicators, a reliability score for each unit is calculated.

[0287] Based on the calculated reliability score, the system administrator (300) grades each control unit (100) (S730). The grade is assigned according to a predefined score range, which serves as an indicator that intuitively represents the reliability level of the unit. The assigned reliability grade is recorded on the blockchain and managed transparently.

[0288] The system administrator (300) establishes a differentiated management policy based on reliability grades (S740). Relatively loose monitoring and management are applied to high-reliability units, while stricter and more frequent inspections and controls are applied to low-reliability units. This is a strategic approach to efficiently allocate limited management resources.

[0289] Differentiated management policies are implemented in various aspects (S750). For example, the status check cycle, the sensitivity of the anomaly detection algorithm, and the dynamic reconstruction threshold can be adjusted according to the reliability grade. For units with low reliability, more frequent checks, more sensitive anomaly detection, and a lower reconstruction threshold are applied.

[0290] Changes in the reliability of the control unit (100) and the resulting changes in management policies are continuously recorded on the blockchain (S760). This allows for transparent management of the reliability trends of each unit and clearly records the basis for policy changes. Furthermore, the accumulation of such data becomes a valuable asset for future system improvement.

[0291] Meanwhile, the system administrator (300) may consider more active intervention for units with significantly low reliability (S770). This may not stop at simply strengthening monitoring and control, but may also require performance improvement or even replacement. This is a preventive measure to prevent potential problems caused by the unit in advance.

[0292] From a long-term perspective, the system administrator (300) comprehensively analyzes the results of reliability evaluation and differential management to seek improvement measures for the entire system (S780). By analyzing the reliability patterns of individual units and the effectiveness of differential management from various angles, optimization measures can be derived in terms of system architecture, management policies, and further operational processes.

[0293] This reliability-based differential management is a strategy designed to enhance overall system reliability and availability by effectively utilizing limited resources. Rather than managing all components uniformly, it increases management efficiency by responding flexibly and adaptively according to their importance and reliability levels.

[0294] In particular, blockchain-based data management serves as a core foundation enabling such differentiated management. This is because the actions and status of each control unit are recorded in a transparent and tamper-proof form, thereby establishing an objective and reliable data basis for trustworthiness assessment. Furthermore, since the evaluation and management records themselves are preserved on the blockchain, their transparency and accountability can be guaranteed.

[0295] This is an advantage that is difficult to obtain in existing centralized management systems. This is because it is practically impossible to monitor and meticulously manage the behavior and status of individual nodes in real time. However, with the introduction of blockchain technology, systematic and sophisticated management has become possible even in distributed systems.

[0296] Of course, this presupposes the technical capability to effectively process and analyze vast amounts of blockchain data. Simply accumulating data is insufficient; it must be possible to extract meaningful insights and knowledge from it. This is a task that requires the integration of cutting-edge data technologies, such as big data analysis and machine learning.

[0297] Furthermore, alongside securing this technological foundation, evaluation and management policies must be continuously advanced. Refining reliability evaluation indicators and optimizing differentiated management strategies are not tasks that can be achieved in the short term. These are challenges that require gradual development through trial and error, learning during actual implementation, and adaptation to environmental changes.

[0298] It is also important that this entire process is transparently recorded and managed on the blockchain. This goes beyond mere technical considerations and is crucial for securing the trust and acceptance of stakeholders regarding the trust-based management system. This is because maintaining the entire process of evaluation and management in an explainable and auditable state can dispel doubts regarding fairness and accountability.

[0299] This also offers significant implications regarding the enhancement of social acceptance for technology adoption. No matter how advanced a technology may be, it is difficult to fully enjoy its benefits without gaining social trust and consensus. Blockchain-based data management and transparent operations contribute to building trust in technology, thereby facilitating the smooth social integration of innovation.

[0300] For this trust-based differential management system to be successfully implemented in the field, the competence of system administrators, who are responsible for evaluation and management, is also crucial. Expertise and capabilities are required to comprehensively understand vast blockchain data and complex system environments, as well as to make rational decisions. Therefore, securing and training relevant talent, along with developing tools and processes to support decision-making, must be pursued in parallel.

[0301] As illustrated in FIG. 8, in the operation of a distributed network system for safety management according to the present invention, an automated blockchain deployed in a blockchain network functions as a key mechanism for automating the interaction between control units and the management actions of system administrators.

[0302] For example, a Smart Contract is an autonomous program running on a blockchain platform that performs the function of automatically executing contract terms when predefined conditions are met.

[0303] The primary purpose of utilizing automation blockchain in railway signaling systems is to enhance efficiency and reliability by automating interactions between control units or management actions by system administrators.

[0304] Specifically, in a distributed network system for security management, automation blockchain can be utilized for the following purposes.

[0305] 1. Automation of decision-making among control units: When multiple control units collaborate to control train operations, the rules and procedures that each unit must follow can be defined using an automation blockchain. By automatically executing a defined action when specific conditions are met, decision-making among units can be coordinated quickly and accurately.

[0306] 2. Guarantee of Compliance with Safety Regulations: Rules that must be observed to ensure the safety of train operations, such as minimum safety distances between trains and obligations to comply with signaling systems, can be codified in the form of an automated blockchain. This allows for the automation of penalty imposition for rule violations and transparent management of compliance.

[0307] 3. Performance-based Incentive Payment: To improve the overall performance of the system, an incentive system linked to the contribution of individual control units can be designed using an automated blockchain. By automatically paying rewards upon the achievement of objective performance indicators, active participation and innovation among members can be encouraged.

[0308] 4. Dynamic Role Assignment: It is necessary to flexibly adjust the roles and responsibilities among control units according to changes in the situation, such as fluctuations in traffic volume or the occurrence of accidents. By including these dynamic role assignment rules in the automation blockchain, it is possible to enhance responsiveness to situations and optimize resource allocation.

[0309] 5. Automatic detection and response to anomalies: By analyzing patterns in status information and alarm data generated by each control unit, logic to detect signs of failure early and respond automatically can be embedded in the automation blockchain. This enables the prevention of potential problems in advance and allows for rapid recovery.

[0310] As such, automated blockchain serves as a core medium enabling the automated operation of railway signaling systems, acting as an inherent feature of blockchain platforms.

[0311] As smooth and reliable interactions become possible without direct intervention by a central administrator, the efficiency and resilience of the entire system can be significantly enhanced.

[0312] Above all, by implementing and disclosing all rules and procedures of system operation in the form of transparent code, it will also contribute to enhancing the trust of system participants in the automated decision-making process.

[0313] More specifically, each control unit (100) and system administrator (300) defines pre-agreed interaction rules and management policies in the form of an automation blockchain and registers them in the blockchain network (S810). At this time, the automation blockchain is a type of autonomous execution code that specifies the expected behavior and the resulting outcome in each situation in the form of conditional statements.

[0314] The deployed automation blockchain monitors the state changes and management activities of each control unit (100) recorded in the blockchain in real time (S820). In other words, the blockchain serves as a medium for all interactions between the control unit and the system manager. Through this, the automation blockchain is able to closely track and record the operation of the system.

[0315] The monitoring results are continuously compared with conditional statements embedded in the automation blockchain (S830). If a state change or event matches a predefined condition, the automation blockchain automatically executes an action linked to that condition. For example, if a state variable of a specific control unit exceeds a threshold, a notification is immediately sent to the system administrator.

[0316] The automatically executed actions and their results are recorded back on the blockchain and propagated to the relevant control unit and system administrator (S840). This means that all automation processes are managed transparently and the locus of responsibility is clearly defined. Since the execution history of the automation blockchain is stored on an immutable blockchain, it can also be utilized for post-audits or dispute resolution.

[0317] Meanwhile, the accumulated automated blockchain execution data is also utilized to improve the efficiency and stability of system operations. The system administrator (300) comprehensively analyzes this data to diagnose the effectiveness and problems of the current interaction rules and management policies (S850). Through this, unnecessary or inefficient parts can be identified, and directions for improvement can be sought.

[0318] Based on the analysis results, the system administrator (300) updates the contents of the automation blockchain (S860). This is done by adjusting the conditions and thresholds of the interaction or adding new automation rules. The improved automation blockchain is deployed to the blockchain network and applied immediately (S870). The update history is also transparently recorded on the blockchain, making it possible to track the evolution process of the automation blockchain.

[0319] This series of processes, namely the deployment, execution, analysis, and updating of the automated blockchain, is repeated periodically (S880). The goal is to increase the level of automation and efficiency throughout the system by optimizing the automated blockchain through continuous reflection of environmental changes and operational experience.

[0320] Such blockchain-based automation contributes to system operations in various aspects. Above all, it can enhance efficiency and speed by minimizing human intervention and enabling immediate responses. Furthermore, by relying on blockchain, it can guarantee the reliability, integrity, and transparency of the automation process.

[0321] In particular, in complex and dynamic railway signaling and safety management environments, automation blockchain can be a key tool for effectively automating large-scale interactions and management activities. This is because it consumes too much effort and cost for a centralized manager to control every situation individually. Through automation blockchain, this burden can be drastically reduced, and the possibility of human error can be fundamentally eliminated.

[0322] However, the introduction of automated blockchain is not a panacea. Above all, the accuracy and security of the automated blockchain itself must be guaranteed. This is because an automated blockchain harboring inherent bugs or vulnerabilities can actually undermine the reliability of the entire system. Therefore, rigorous verification and testing of the automated blockchain code, along with continuous security audits, are essential.

[0323] Furthermore, automating all situations using blockchain may be practically impossible or undesirable. Unexpected emergencies or decision-making requiring high-level judgment still necessitate human intervention. Therefore, an appropriate division of roles and mutual complementarity between blockchain automation and human management is required.

[0324] The content of automated blockchains must also not be fixed and immutable, but must continuously evolve. A system must be established to periodically update automated blockchains by reflecting technological advancements, institutional changes, and feedback from the field. The challenge lies in achieving a balance between the immutability of the blockchain and the flexibility of upgrades.

[0325] To achieve this, close collaboration and a consensus-building process among system participants are paramount. Field suitability and acceptance must be enhanced by having various stakeholders, including control units, system administrators, and field operators, participate in the design and improvement of the automated blockchain. This is a challenge that goes beyond mere technical issues and demands innovation in governance and organizational culture.

[0326] From a long-term perspective, blockchain-based automation holds the potential to fundamentally change the operational paradigm of the railway industry. This is because it enables more intelligent and context-aware decision-making, moving beyond the automation of simple, repetitive tasks. By combining data accumulated on the blockchain with the domain knowledge inherent in the automation blockchain, it can evolve into a form of 'distributed autonomous management system.'

[0327] Of course, this may be a vision for the distant future. However, the automation blockchain-based automation system proposed in this invention can serve as an important stepping stone toward such a future. This is because it seeks a paradigm shift in railway operations through the combination of blockchain, automation blockchain, and domain expertise.

[0328] This is not limited solely to the railway industry. Similar possibilities for innovation are open in various industrial sectors, including energy, logistics, and finance. This is because the value of blockchain’s decentralization, automation, and reliability can be universally applied regardless of industry or sector.

[0329] <Example 1>

[0330] In a distributed network system for safety management,

[0331] It includes a plurality of control units, a communication network providing communication between the control units, and a system manager managing the control units and the communication network,

[0332] Each of the above control units is,

[0333] It stores track information, train operation information, safety rules, and constraints of its jurisdiction in its own database, performs independent signal control and Automatic Train Protection (ATP) functions based on said database information, mutually verifies the consistency of decisions through a consensus algorithm with other control units, and periodically transmits its status information to the system administrator via a communication network,

[0334] The above communication network is,

[0335] Utilizing blockchain technology to ensure the safety and transparency of data sharing between control units, secure availability and stability by eliminating single points of failure through redundant communication channels, transmit decision results and status information received from control units to system administrators, and propagate management commands received from system administrators to the corresponding control units,

[0336] The above system administrator,

[0337] It periodically collects and monitors status information of control units via a communication network, detects abnormal signs in real time through status information analysis, and ensures the stability of the entire system by transmitting self-diagnosis and recovery commands to the relevant control units upon detection of an anomaly, and performs efficient resource management and rapid fault response by dynamically reconfiguring areas of responsibility between control units when necessary. Explanation of the symbols

[0338] 100: Control Unit 110: Local database 120: Communication module 200: Communication Network 210: Communication Channel (Redundant Channel 1) 220: Communication Channel (Redundant Channel 2) 300: System Administrator 310: Fault detection module 320: Reconfiguration Module S110: Local data-based signal and safety decisions S120: Broadcast decision result and consensus S140: Periodic status monitoring request S150: Transmit status information S160: Status analysis and anomaly detection S170: Self-diagnosis request S180: Perform and Report Self-Diagnosis S190: Determine the necessity of dynamic reconstruction S200: Dynamic Reconfiguration Instruction S210: Detects Control Unit 2 or higher, performs extended area signal and safety functions, verifies reconfiguration completion status S220: Control Unit 2 Isolation S230: Directive for Control Unit 2 function takeover and area of ​​responsibility expansion, internal diagnosis and solution seeking S240: Transmit diagnosis results and solutions S250: Evaluation of diagnostic results and determination of the need for dynamic reconstruction S260: Determine the necessity of dynamic reconstruction S270: Dynamic Reconfiguration Command Propagation S280: Control Unit 2 Function Assumption and Area of ​​Responsibility Expansion S290: Performs extended area signaling and safety functions S300: Perform self-recovery operation S310: Recovery complete report and restart request S320: Additional Inspection and Approval S330: Responsibility Area Restoration and Function Relocation Command S340: Resumption of original area of ​​responsibility operations, restoration of functions, and normal operation S410: Create a transaction including decision results, status information, diagnostic / recovery data, etc. S420: Broadcast transaction to blockchain network, receive transaction, and verify S430: Transaction verification and new block creation based on consensus algorithm S440: New Block Linking and Blockchain Update Sharing S450: Real-time monitoring and analysis of blockchain transactions, detection of anomalies, and establishment of response measures. S460: Tracking Control Unit Decision History and State Changes, Auditing Using Blockchain Records S470: Derivation of Long-term System Performance Improvement and Optimization Strategies Based on Blockchain-Accumulated Data S480: Implementation of an automated collaboration and reward system between control units utilizing automation blockchain functions S510: Performing independent signal and safety decisions based on jurisdictional information S520: Broadcast decision result to blockchain network, receive decision result, and verify based on consensus algorithm S530: Creation and broadcasting of transactions including status information and diagnostic / recovery data, propagation of transaction data S540: Transaction validation and new block creation, distributed ledger update S550: Real-time monitoring of blockchain transactions and anomaly detection S560: Request self-diagnosis upon detection of anomalies, perform internal diagnosis and record diagnosis results on blockchain, propagate diagnosis result data, evaluate diagnosis results, and determine the need for dynamic reconstruction. S570: Create dynamic reconfiguration request transaction, propagate dynamic reconfiguration request (function substitution and area of ​​responsibility expansion), perform signaling and safety controls for the expanded area of ​​responsibility S580: Performs self-recovery operations and records results on the blockchain, propagating recovery result data. S590: Creation of dynamic reconfiguration restore request transaction after recovery is complete, propagation of dynamic reconfiguration restore request (reassignment of responsibility areas, function restoration) S610: Real-time monitoring and analysis of blockchain transaction data S620: Request for extraction of past behavior data and transmission of extracted data from the anomaly-related control unit. S630: Analysis of Causes of Anomalies and Prediction of Potential Impacts S640: Establishing response strategies based on analysis results (self-diagnosis, dynamic reconstruction, etc.) S650: Broadcast the established response strategy to the blockchain network and notify the control unit and surrounding units regarding the anomaly of the response strategy. S660: Performs self-diagnosis and recovery, and replaces and expands functions based on dynamic reconfiguration S670: Record and transmit self-diagnosis, recovery results, and dynamic reconstruction results to the blockchain S680: Monitoring response results and determining the need for additional action S690: A series of response processes and results recorded on the blockchain S710: Request for behavior data extraction from each control unit and transmission of request data S720: Calculation of reliability indicators for each control unit based on extracted data S730: Control Unit Grading Based on Reliability Indicators and Grading Blockchain Recording S740: Establishing a Reliability-Based Differential Management Policy S750: Monitoring of individual control units based on differential management policies, and setting, transmission, and application of control variables S760: Trust changes and management policy change history continuously recorded on the blockchain S770: Request for performance improvement or replacement of the extremely low reliability control unit and request transmission S780: Comprehensive analysis of reliability evaluation and differential management results, derivation of measures to improve overall system reliability and efficiency S810: Defines interaction rules and management policies as an automated blockchain and deploys them to a blockchain network. S820: Deployed automation blockchain monitors state changes and management activities of the control unit in real time. S830: An automation blockchain determines whether to automatically execute by comparing monitoring results with predefined conditions, and automatically executes interaction and management actions defined in the automation blockchain when specific conditions are met. S840: Recording of automated blockchain execution results on the blockchain and propagating them to relevant entities S850: Analysis of accumulated automated blockchain execution data, identification of rule and policy effectiveness and areas for improvement S860: Automated blockchain updates based on analysis results, update history recorded on the blockchain S870: Updated automation blockchain redeployment to blockchain networks, automatic application of improved rules and policies S880: Continuous optimization through the periodic iteration of automated blockchain deployment, execution, analysis, and updates

Claims

Claim 1 A distributed network system for safety management comprising a plurality of control units, a communication network providing communication between the control units, and a system manager managing the control units and the communication network, wherein the control units store track information, train operation information, safety rules, and constraints of their jurisdictional areas in their own databases, perform independent signal control and Automatic Train Protection (ATP) functions based on the information in the databases, mutually verify the consistency of decisions through a consensus algorithm with other control units, and periodically transmit their status information to the system manager via the communication network; the communication network utilizes blockchain technology to ensure the safety and transparency of data sharing between control units, secures availability and stability by eliminating single points of failure through redundant communication channels, transmits decision results and status information received from the control units to the system manager, and propagates management commands received from the system manager to the corresponding control units; and the system manager periodically collects and monitors status information of the control units via the communication network, detects abnormal signs in real time through status information analysis, and transmits self-diagnosis and recovery commands to the corresponding control units upon detection of an abnormality to ensure the stability of the entire system, wherein the system manager [uses] transaction data recorded in the blockchain When an anomaly is detected through analysis, the system administrator extracts the past decision history, state change patterns, and interaction data with surrounding units of the control unit related to the anomaly from the blockchain, analyzes the cause of the anomaly based on the extracted data, establishes a response strategy based on the analysis results, stores the self-diagnosis and recovery potential of the problematic unit, and broadcasts the established response strategy to the blockchain network to notify the relevant control unit.A distributed network system for safety management characterized by, in accordance with the above response strategy, a problem unit performing self-diagnosis and recovery or a peripheral unit replacing the function through dynamic reconfiguration, recording the results of the self-diagnosis and recovery or dynamic reconfiguration on a blockchain and reporting them to a system administrator, the system administrator monitoring the response results and instructing a control unit on follow-up measures, and recording the response strategy and its results on a blockchain to be used as reference material for decision-making regarding similar situations in the future. Claim 2 A distributed network system for safety management according to claim 1, wherein the communication network utilizes blockchain technology to perform secure and transparent data sharing between control units, wherein the control unit generates a transaction including its decision results, state information, self-diagnosis and recovery-related data, broadcasts the transaction generated by the control unit to a blockchain network, verifies the validity of the transaction according to a consensus algorithm of the blockchain network, generates a new block, connects the new block to an existing blockchain to update a distributed ledger shared by all control units and system administrators, the system administrator monitors and analyzes transaction data recorded in the blockchain in real time to detect anomalies and establish and store response measures, and the system administrator utilizes the blockchain records to track the decision history and state changes of each control unit.

Images