Secure cloud-based information processing system and method

Abstract

A secure cloud-based information processing system and method. The information processing system comprises a cloud management end and at least one dedicated hardware end; the cloud management end is in communication connection with each dedicated hardware end; each dedicated hardware end is configured on a rail transit hardware device, and each dedicated hardware end is configured with a secure cloud operating system, the secure cloud operating system being configured with at least one virtual environment, and the virtual environment being configured with a rail transit application; the cloud management end is used for configuring each dedicated hardware end; each dedicated hardware end is used for acquiring a communication signal of a rail transit device in a rail transit area received by the rail transit application, determining control information of the rail transit device on the basis of the communication signal, and feeding back same to the rail transit device.

Description

Information Processing System and Method Based on Secure Cloud Technical Field

[0001] This application relates to the field of data processing technology, and in particular to an information processing system and method based on a secure cloud. Background Technology

[0002] With the rapid development of technology and the growth of the rail transit industry, real-time monitoring of rail transit equipment is necessary to ensure the safety of its operation.

[0003] Currently, monitoring information is obtained by physically monitoring rail transit equipment.

[0004] However, human monitoring of rail transit equipment is inefficient, and the processing efficiency of monitoring data is also low. Summary of the Invention

[0005] This application provides an information processing system and method based on a secure cloud to improve the accuracy of information processing.

[0006] In a first aspect, embodiments of this application provide an information processing system based on a secure cloud, comprising:

[0007] The cloud management terminal and at least one dedicated hardware terminal are connected in communication with each dedicated hardware terminal. The dedicated hardware terminal is configured on the track hardware equipment, and the dedicated hardware terminal is configured with a secure cloud operating system. The secure cloud operating system is configured with at least one virtual environment, and the virtual environment is configured with rail transit applications.

[0008] The cloud management terminal is used to configure dedicated hardware.

[0009] The dedicated hardware terminal is used to acquire the communication signals of rail transit equipment within the track area received by the rail transit application, determine the control information of the rail transit equipment based on the communication signals, and feed them back to the rail transit equipment.

[0010] In addition, the track hardware device is a multi-core hardware device, which includes at least one multi-core processor unit, wherein the multi-core processor unit is used to configure the virtual environment corresponding to the rail transit application.

[0011] In addition, the virtual environment corresponds one-to-one with the rail transit application; the configuration information of the virtual environment is determined according to the type of rail transit application.

[0012] In addition, the communication signals of rail transit equipment are transmitted to the corresponding rail transit applications through software-defined networks.

[0013] In addition, there is a one-to-one correspondence between rail transit applications and fail-safe voting devices, or a one-to-one correspondence between dedicated hardware terminals and fail-safe voting devices; among them, the fail-safe voting device adopts a two-out-of-two voting mode.

[0014] In addition, the information processing system based on the secure cloud also includes: at least one backup hardware terminal; each dedicated hardware terminal corresponds one-to-one with each backup hardware terminal.

[0015] In addition, the virtual environment is an embedded environment for rail transit.

[0016] In addition, the cloud management terminal is configured on the cloud server. The cloud management terminal is also used to configure the communication link configuration information between each dedicated hardware terminal, the communication link configuration information between each rail transit application, and the communication link configuration information between each dedicated hardware terminal and the cloud management terminal.

[0017] Secondly, embodiments of this application also provide an information processing method based on a secure cloud, the method comprising:

[0018] Acquire communication signals from at least one rail transit device within the track area;

[0019] The communication signals of various rail transit equipment are processed through rail transit applications to obtain signal processing results;

[0020] Based on the signal processing results, each rail transit device is screened to determine at least one device to be executed;

[0021] The signal processing results are sent to each device to be executed, so that each device can perform the corresponding operation according to the signal processing results.

[0022] Furthermore, by processing the communication signals of various rail transit equipment through rail transit applications, signal processing results are obtained, including:

[0023] A safety vote was conducted on the communication signals of each rail transit device to obtain the safety vote results;

[0024] If the safety vote result is safe, the communication signals of each rail transit device are processed through the rail transit application to obtain the signal processing result;

[0025] If the safety vote result is dangerous, a communication signal reacquisition command is generated and sent to each rail transit device so that each rail transit device can resend the communication signal to the rail transit application.

[0026] The technical solution of this application embodiment utilizes a cloud management terminal and at least one dedicated hardware terminal. The cloud management terminal is communicatively connected to each dedicated hardware terminal. The dedicated hardware terminal is configured on the track hardware equipment and is equipped with a secure cloud operating system. The secure cloud operating system is configured with at least one virtual environment, and the virtual environment is configured with a rail transit application. The cloud management terminal is used to configure the dedicated hardware terminal. The dedicated hardware terminal is used to acquire communication signals from rail transit equipment within the track area received by the rail transit application, determine the control information of the rail transit equipment based on the communication signals, and feed it back to the rail transit equipment. Through the virtualization technology of the dedicated hardware, equipment costs are reduced, and refined resource management is achieved, thereby improving the efficiency of rail transit information processing.

[0027] It should be understood that the description in this section is not intended to identify key or essential features of the embodiments of this application, nor is it intended to limit the scope of this application. Other features of this application will become readily apparent from the following description. Attached Figure Description

[0028] To more clearly illustrate the technical solutions in the embodiments of this application, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0029] Figure 1 is a schematic diagram of an information processing system based on a secure cloud according to an embodiment of this application;

[0030] Figure 2 is a flowchart of an information processing method based on a secure cloud according to an embodiment of this application;

[0031] Figure 3 is a schematic diagram of an information processing device based on a secure cloud according to an embodiment of this application;

[0032] Figure 4 is a flowchart of an information processing device based on a secure cloud according to an embodiment of this application. Detailed Implementation

[0033] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative effort should fall within the scope of protection of the present application.

[0034] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0035] The acquisition, storage, and application of communication signals of rail transit equipment involved in the technical solutions of this application comply with the provisions of relevant laws and regulations and do not violate public order and good morals.

[0036] Example 1

[0037] Figure 1 is a schematic diagram of an information processing system based on a secure cloud provided in Embodiment 1 of this application. This embodiment is applicable to information processing based on a secure cloud. The system can execute information processing methods based on a secure cloud, and the system can be implemented in hardware and / or software.

[0038] Referring to Figure 1, the information processing system 100 based on a secure cloud includes: a cloud management terminal 101 and at least one dedicated hardware terminal 102; the cloud management terminal 101 is communicatively connected to each dedicated hardware terminal 102; the dedicated hardware terminal 102 is configured on the track hardware equipment, the dedicated hardware terminal 102 is configured with a secure cloud operating system 104, the secure cloud operating system 104 is configured with at least one virtual environment, and the virtual environment is configured with a rail transit application 103; the cloud management terminal 101 is used to configure the dedicated hardware terminal 102; the dedicated hardware terminal 102 is used to acquire the communication signals of the rail transit equipment in the track area received by the rail transit application 103, determine the control information of the rail transit equipment according to the communication signals, and feed them back to the rail transit equipment.

[0039] Specifically, the cloud management terminal 101 corresponds one-to-one with the cloud management system in Figure 1. The cloud management system may have at least one backup server. The address information of each backup server can be stored in the storage space corresponding to the cloud management system. When the cloud management system corresponding to the cloud management terminal 101 fails, the address information can be selected from the storage space corresponding to the cloud management system. The selection method includes, but is not limited to, sequential search algorithm, block search algorithm, tree table search algorithm, and hash search algorithm. This application embodiment does not limit this. The backup server is determined according to the address information, and the cloud management system is deployed on the backup server to ensure the security and reliability of the cloud management system operation.

[0040] The cloud management system corresponding to the cloud management terminal 101 can communicate with each dedicated hardware terminal 102, obtain the configuration information of each dedicated hardware terminal 102, and edit the configuration information of each dedicated hardware terminal 102 to generate new configuration information, so that each dedicated hardware terminal 102 can update its own configuration information after receiving the new configuration information. The cloud management terminal 101 can also add or delete each dedicated hardware terminal 102 according to the hardware terminal deployment information, which can be determined according to the type and quantity of the rail transit application 103 to be deployed.

[0041] Each dedicated hardware terminal 102 corresponds one-to-one with a track hardware device. Each dedicated hardware terminal 102 also corresponds one-to-one with a secure cloud operating system 104. The secure cloud operating system 104 is installed on the track hardware device to facilitate the configuration of the virtual environment required by the rail transit application 103 during operation.

[0042] The track area can be a preset geographical location area, which may include at least one station area. Each station area includes at least one rail transit device, and the types of rail transit devices may be different. One rail transit application 103 may correspond to at least one rail transit device, and the correspondence can be determined according to the function of each rail transit application 103 and the association relationship of each rail transit device in actual application. The rail transit application 103 can receive communication signals from the at least one rail transit device corresponding to it, and process each communication signal. Different rail transit applications 103 process communication signals in different ways to obtain control information for each rail transit device corresponding to the rail transit application 103 and send it to each rail transit device so that each rail transit device can perform corresponding operations according to the control information.

[0043] The system utilizes a cloud management terminal and at least one dedicated hardware terminal. The cloud management terminal communicates with each dedicated hardware terminal. The dedicated hardware terminal is configured on the track hardware equipment and is equipped with a secure cloud operating system. The secure cloud operating system is configured with at least one virtual environment, and the virtual environment is configured with a rail transit application. The cloud management terminal is used to configure the dedicated hardware terminal. The dedicated hardware terminal is used to acquire communication signals from rail transit equipment within the track area received by the rail transit application, determine the control information of the rail transit equipment based on the communication signals, and feed it back to the rail transit equipment. This enables unified management and scheduling of resources for each rail transit device, reducing management costs and improving the accuracy of resource management.

[0044] In addition, the virtual environment is an embedded environment for rail transit.

[0045] Specifically, the dedicated embedded system for rail transit is an embedded computer system designed for the specific needs of the rail transit field. It features high integration, modular I / O, low power consumption, and fanless operation. It also boasts rich functionality, high reliability, and small size to adapt to the sealed environment of rail transit and meet multiple serial port requirements. The dedicated embedded system for rail transit consists of a hardware system and a software system. The hardware system comprises an embedded processor, memory, and peripheral devices. The embedded processor, including embedded microcontrollers (MCUs), embedded microprocessors (MPUs), and embedded DSP processors, is the core of the hardware system. The software system can be divided into three parts: an embedded operating system, embedded middleware software, and embedded application software. The embedded operating system is responsible for supporting the allocation of hardware and software resources and the scheduling and coordination between multiple tasks; the middleware software assists and supports the development of embedded application software; and the application software is a user program designed and developed based on the selected system hardware platform according to the specific engineering project requirements. The dedicated hardware terminal 102 describes the virtual environment obtained after virtualizing the operating environment of the dedicated embedded system for rail transit. The cloud management terminal 101 can correspond to at least one dedicated hardware terminal 102. The configuration information of the dedicated hardware terminal 102 corresponding to different types of dedicated embedded systems for rail transit is different, so that each dedicated hardware terminal 102 can describe the virtual environment of different dedicated embedded systems for rail transit.

[0046] By using a virtual environment for the rail transit embedded environment, the operating environment of the dedicated embedded system in the rail transit field can be virtualized, realizing data isolation between various rail transit embedded systems and ensuring the security of data processing in each rail transit embedded environment.

[0047] In addition, the track hardware device is a multi-core hardware device, which includes at least one multi-core processor unit, wherein the multi-core processor unit is used to configure the virtual environment corresponding to the rail transit application 103.

[0048] Specifically, the track hardware equipment is multi-core hardware equipment, meaning it utilizes multi-core processor technology. Multi-core technology integrates multiple processors onto a single chip, each with its own cache and control unit, enabling the processor to run multiple threads in parallel, thus achieving higher performance and faster data processing speeds. A multi-core hardware equipment corresponds to at least one multi-core processing unit, with each multi-core processing unit running one thread. One multi-core processing unit can correspond to the virtual environment required for one rail transit application 103.

[0049] By using multi-core hardware devices for rail transit applications, the multi-core hardware devices include at least one multi-core processor unit, which is used to configure the virtual environment corresponding to the rail transit applications. This enables multiple rail transit applications to run simultaneously on the same rail transit hardware device, thereby improving data processing efficiency.

[0050] In addition, the virtual environment corresponds one-to-one with the rail transit application 103; the configuration information of the virtual environment is determined according to the type of rail transit application 103.

[0051] Specifically, at least one virtual environment can be configured on the secure cloud operating system 104. Each virtual environment has different configuration information to ensure that each virtual environment meets the operational requirements of different types of rail transit applications 103. The configuration information of each virtual environment is determined according to the type of its corresponding rail transit application 103.

[0052] The virtual environment is mapped one-to-one with rail transit applications; the configuration information of the virtual environment is determined according to the type of rail transit application, and different virtual environments can be configured for different types of rail transit applications, ensuring the safe operation of different types of rail transit applications.

[0053] In addition, the communication signals of the rail transit equipment are transmitted to the corresponding rail transit application 103 via a software-defined network.

[0054] Specifically, Software-Defined Networking (SDN) separates the network's control plane from its data forwarding plane, enabling flexible control of network traffic and dynamic allocation of resources. Communication signals from rail transit equipment can be transmitted via SDN to the rail transit application 103 corresponding to the dedicated hardware terminal 102. Data transmission can occur between the dedicated hardware terminals 102, between the dedicated hardware terminal 102 and at least one corresponding rail transit application 103, and between the dedicated hardware terminal 102 and the cloud management system via SDN.

[0055] By transmitting the communication signals of rail transit equipment to the corresponding rail transit applications through a software-defined network, the configuration operations of network configuration information can be refined, thereby improving the accuracy of network information configuration.

[0056] In addition, the rail transit application 103 and the fail-safe voting device are in one-to-one correspondence or the dedicated hardware terminal 102 is in one-to-one correspondence with the fail-safe voting device; among them, the fail-safe voting device is a two-out-of-two voting mode.

[0057] Specifically, the fail-safe voting device monitors the communication signals received by the rail transit application 103 from various rail transit devices, as well as the control information generated by the rail transit application 103, ensuring data accuracy, guaranteeing safe train operation, and preventing accidents such as rear-end collisions and conflicts. One rail transit application 103 can correspond to one fail-safe voting device, and multiple rail transit applications 103 on a dedicated hardware terminal 102 can correspond to one fail-safe voting device. The fail-safe voting device adopts a "two-out-of-two" mode, simultaneously receiving information from two independent signal sources or calculation modules. Only when the two signals or results agree will the corresponding operation be executed. This effectively reduces the risk of system malfunction due to the failure of a single signal source or calculation module, greatly improving the system's reliability and safety.

[0058] The rail transit application and the fail-safe voting device are matched one-to-one, or the dedicated hardware terminal 102 is matched one-to-one with the fail-safe voting device. The fail-safe voting device is a two-out-of-two voting mode, which can perform security detection on the information to be transmitted by the rail transit application to ensure the accuracy of the data to be transmitted.

[0059] In addition, the information processing system based on the secure cloud also includes: at least one backup hardware terminal; each dedicated hardware terminal 102 corresponds one-to-one with each backup hardware terminal.

[0060] Specifically, each dedicated hardware terminal 102 can correspond to a backup hardware terminal. When a dedicated hardware terminal 102 fails, for example, if the virtual environment corresponding to the rail transit application 103 configured in the dedicated hardware terminal 102 fails, or if the dedicated hardware terminal 102 experiences a network failure or insufficient memory resources, the backup hardware terminal corresponding to the dedicated hardware terminal 102 can be activated. The virtual environment of each rail transit application 103 in the dedicated hardware terminal 102 can be pre-configured on the backup hardware terminal corresponding to the dedicated hardware terminal 102 so that when the dedicated hardware terminal 102 fails, it can be switched to the backup hardware terminal in a timely manner, thereby ensuring the safe and reliable operation of the system.

[0061] The information processing system based on the secure cloud also includes: at least one backup hardware terminal; each dedicated hardware terminal corresponds one-to-one with each backup hardware terminal, so that when a dedicated hardware terminal fails, the backup hardware terminal can be activated in a timely manner to ensure the security of the dedicated hardware terminal.

[0062] In addition, the cloud management terminal 101 is configured on the cloud server. The cloud management terminal 101 is also used to configure the communication link configuration information between each dedicated hardware terminal 102, the communication link configuration information between each rail transit application 103, and the communication link configuration information between each dedicated hardware terminal 102 and the cloud management terminal 101.

[0063] Specifically, each cloud management terminal 101 corresponds one-to-one with a cloud management system, which is configured on a cloud server. The cloud management system can manage the configuration information of each dedicated hardware terminal 102 and add or delete dedicated hardware terminals 102. It can also manage communication link configuration information, including the communication link information between each dedicated hardware terminal 102 and the cloud management terminal 101, the communication link information between each rail transit application 103, and the communication link information between each dedicated hardware terminal 102.

[0064] Configured on the cloud server via the cloud management terminal, the cloud management terminal is also used to configure communication link configuration information between various dedicated hardware terminals, communication link configuration information between various rail transit applications, and communication link configuration information between various dedicated hardware terminals and the cloud management terminal. It can manage each communication configuration information in a refined manner and improve the accuracy of the communication configuration information.

[0065] The information processing system based on secure cloud provided in this application can execute the information processing method based on secure cloud provided in any embodiment of this application, and has the corresponding functional modules and beneficial effects for executing the information processing method based on secure cloud.

[0066] Example 2

[0067] Figure 2 is a flowchart of an information processing method based on a secure cloud provided in Embodiment 1 of this application. This embodiment is applicable to information processing based on a secure cloud. The method can be executed by a secure cloud-based information processing system, which can be implemented in hardware and / or software.

[0068] The information processing method based on a secure cloud, as shown in Figure 2, includes:

[0069] S101. Obtain the communication signal of at least one rail transit device within the track area.

[0070] The rail transit area can be used to describe the area where signal acquisition by rail transit equipment is to be performed. Communication signals can be used to describe the train operation information detected or acquired by the rail transit equipment in real time.

[0071] Specifically, the scope of the track area can be pre-defined. The track area may include at least one station area. Each rail transit device in each station area can collect train operation information and transmit it to the rail transit application on its corresponding dedicated hardware terminal, so that the rail transit application can perform logical operations on the received communication signals.

[0072] S102. The communication signals of various rail transit equipment are processed through rail transit applications to obtain signal processing results.

[0073] Among them, the signal processing results can be used to describe the results of logical operations performed on the communication signals of various rail transit equipment in rail transit applications.

[0074] Specifically, the rail transit application receives communication signals from at least one rail transit device with mechanical, electrical automatic control, and remote control relationships, performs logical operations, and obtains the signal processing result. For example, the rail transit application could be an interlocking system or a train control center. In one example, the interlocking system acquires communication signals such as the route direction (departure or arrival direction), route range (both ends and change points), the name of the signal protecting the route, the name and number of track circuit sections in the route, the name, location, and number of turnouts in the route, and the name and inspection conditions of the intruding insulated track sections involved in the route. It then compares the acquired communication signals with the expected state information to obtain a comparison result. Based on the comparison result, it determines that the turnout switching device 1 needs to be released from its locked state, thus obtaining the signal processing result.

[0075] S103. Based on the signal processing results, screen each rail transit device and determine at least one device to be executed.

[0076] The device to be executed can be used to describe the device that will receive operation instructions and perform a specific task according to the operation instructions.

[0077] Specifically, based on the signal processing results, at least one rail transit device and the operation to be performed on each rail transit device are determined. The determination methods include, but are not limited to, neural network recognition, depth-first traversal, or breadth-first traversal. This application embodiment does not limit these methods. Based on the obtained information, at least one device to receive an operation command and perform a specific task state, and the operation to be performed on that device, can be selected from among the rail transit devices. For example, if the signal processing result is that turnout switching device 1 needs to be unlocked, then turnout switching device 1 is selected from among the rail transit devices and determined as the device to be executed. The operation to be performed on turnout switching device 1 is to unlock the device.

[0078] S104. Send the signal processing results to each device to be executed, so that each device to be executed can perform the corresponding operation according to the signal processing results.

[0079] Specifically, the signal processing results are sent to the device to be executed via a software-defined network. The device then performs the corresponding operation based on the operation information in the signal processing results. For example, the device to be executed is a turnout switching device 1. The operation of turnout switching device 1 can change from a pending state to an executed state or perform a turnout switch, ensuring that trains can safely pass through the corresponding route. Another device to be executed is a signal, whose operation can display corresponding light signals (such as green light, yellow light, etc.) to provide train operation instructions. Furthermore, the device to be executed can be a turnstile in an automatic fare collection system; the operation of the turnstile can control its opening, allowing passengers to pass and completing the ticket inspection task.

[0080] The technical solution of this application embodiment obtains the communication signals of at least one rail transit device within the track area; processes the communication signals of each rail transit device through a rail transit application to obtain signal processing results; filters each rail transit device based on the signal processing results to determine at least one device to be executed; and sends the signal processing results to each device to be executed so that each device to be executed can perform corresponding operations according to the signal processing results. By using virtualization technology of dedicated hardware, the equipment cost is reduced, and refined resource management is achieved, thereby improving the accuracy of information processing.

[0081] Optionally, the communication signals of each rail transit device are processed through a rail transit application to obtain signal processing results, including: performing a safety vote on the communication signals of each rail transit device to obtain a safety vote result; if the safety vote result is safe, the communication signals of each rail transit device are processed through the rail transit application to obtain a signal processing result; if the safety vote result is dangerous, a communication signal reacquisition command is generated and sent to each rail transit device so that each rail transit device resends the communication signal to the rail transit application.

[0082] The security voting result can be used to describe the data verification result when the communication signals of rail transit equipment are transmitted to rail transit applications. The communication signal reacquisition command can be used to describe the command to reacquire the communication signals of each rail transit device corresponding to the rail transit application.

[0083] Specifically, a safety vote is performed on the communication signals of each rail transit device using a two-out-of-two mode. When the communication signals transmitted by two independent signal sources are compared for consistency, a safety vote result is obtained. If the safety vote result is safe, it indicates that the communication signals transmitted by the two independent signal sources are consistent, and the data to be transmitted to the rail transit application is accurate. Then, the rail transit application processes the communication signals of each rail transit device to obtain a signal processing result, and transmits the signal processing result to each device to be executed. The signal processing result is then subjected to a safety vote to obtain a signal evaluation result. If the signal evaluation result is consistent, it indicates that the signal processing result to be transmitted to each rail transit device is accurate, and each rail transit device can perform corresponding operations based on the signal processing result. Otherwise, the rail transit application reprocesses the communication signals and regenerates the signal processing result.

[0084] If the safety vote result is dangerous, it indicates that the communication signals transmitted by the two independent signal sources are inconsistent and the data to be transmitted to the rail transit application is inaccurate. In this case, the rail transit application does not need to process the communication signals of the rail transit equipment acquired this time. Instead, the rail transit application generates a communication signal reacquisition command and sends it to each rail transit device so that each rail transit device can resend the communication signal to the rail transit application.

[0085] By conducting a safety vote on the communication signals of each rail transit device, a safety vote result is obtained. If the safety vote result is safe, the rail transit application processes the communication signals of each rail transit device to obtain a signal processing result. If the safety vote result is dangerous, a communication signal reacquisition command is generated and sent to each rail transit device, so that each rail transit device resends the communication signal to the rail transit application. By conducting a safety vote on the signal processing result, the security of the transmitted data is ensured and the accuracy of information processing is improved.

[0086] Example 3

[0087] Figure 3 is a schematic diagram of an information processing device based on a secure cloud according to Embodiment 3 of this application. Dedicated hardware can be configured on the information processing device based on the secure cloud. This embodiment of the application is applicable to the application of information processing. The device can execute information processing methods based on the secure cloud, and the device can be implemented in hardware and / or software.

[0088] Referring to Figure 3, the information processing device based on a secure cloud includes: a signal acquisition module 301, a signal processing module 302, a device screening module 303, and a signal transmission module 304, wherein...

[0089] The signal acquisition module 301 is used to acquire the communication signal of at least one rail transit device within the track area;

[0090] The signal processing module 302 is used to process the communication signals of various rail transit equipment through rail transit applications to obtain signal processing results;

[0091] The equipment screening module 303 is used to screen various rail transit equipment based on the signal processing results and determine at least one device to be executed.

[0092] The signal sending module 304 is used to send the signal processing results to each device to be executed, so that each device to be executed can perform the corresponding operation according to the signal processing results.

[0093] The technical solution of this application embodiment obtains the communication signal of at least one rail transit device in the track area; processes the communication signal of each rail transit device through a rail transit application to obtain the signal processing result; filters each rail transit device according to the signal processing result to determine at least one device to be executed; and sends the signal processing result to each device to be executed so that each device to be executed can perform the corresponding operation according to the signal processing result. This application can realize unified management and scheduling of resources, reduce manual intervention, and reduce management costs.

[0094] Optionally, the signal processing module 302 is specifically used for:

[0095] A safety vote was conducted on the communication signals of each rail transit device to obtain the safety vote results;

[0096] If the safety vote result is safe, the communication signals of each rail transit device are processed through the rail transit application to obtain the signal processing result;

[0097] If the safety vote result is dangerous, a communication signal reacquisition command is generated and sent to each rail transit device so that each rail transit device can resend the communication signal to the rail transit application.

[0098] The information processing device based on secure cloud provided in this application can execute the information processing method based on secure cloud provided in any embodiment of this application, and has the corresponding functional modules and beneficial effects for executing the information processing method based on secure cloud.

[0099] Example 4

[0100] Figure 4 shows a schematic diagram of the structure of a secure cloud-based information processing device 400 that can be used to implement an embodiment of this application. The secure cloud-based information processing device can be a track hardware device.

[0101] As shown in Figure 4, the secure cloud-based information processing device 400 includes at least one processor 401 and a memory, such as a read-only memory (ROM) 402 and a random access memory (RAM) 403, communicatively connected to the at least one processor 401. The memory stores computer programs executable by the at least one processor. The processor 401 can perform various appropriate actions and processes based on the computer program stored in the ROM 402 or loaded into the RAM 403 from storage unit 408. The RAM 403 can also store various programs and data required for the operation of the secure cloud-based information processing device 400. The processor 401, ROM 402, and RAM 403 are interconnected via a bus 404. An input / output (I / O) interface 405 is also connected to the bus 404.

[0102] Multiple components in the secure cloud-based information processing device 400 are connected to the I / O interface 405, including: an input unit 406, such as a keyboard and mouse; an output unit 407, such as various types of displays and speakers; a storage unit 408, such as a hard disk and optical disk; and a communication unit 409, such as a network interface card (NIC), a modem, or a wireless transceiver. The communication unit 409 allows the secure cloud-based information processing device 400 to exchange information / data with other devices through computer networks such as the Internet and / or various telecommunications networks.

[0103] Processor 401 can be a variety of general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of processor 401 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any suitable processor, controller, microcontroller, etc. Processor 401 performs the various methods and processes described above, such as information processing methods based on a secure cloud.

[0104] In some embodiments, the secure cloud-based information processing method may be implemented as a computer program tangibly contained in a computer-readable storage medium, such as storage unit 408. In some embodiments, part or all of the computer program may be loaded and / or installed on the secure cloud-based information processing device 400 via ROM 402 and / or communication unit 409. When the computer program is loaded into RAM 403 and executed by processor 401, one or more steps of the secure cloud-based information processing method described above may be performed. Alternatively, in other embodiments, processor 401 may be configured to execute the secure cloud-based information processing method by any other suitable means (e.g., by means of firmware).

[0105] Various embodiments of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field-programmable gate arrays (FPGAs), application-specific integrated circuits (ASICs), application-specific standard products (ASSPs), systems-on-a-chip (SoCs), complex programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments may include implementations in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which may be a dedicated or general-purpose programmable processor, capable of receiving data and instructions from a storage system, at least one input device, and at least one output device, and transmitting data and instructions to the storage system, the at least one input device, and the at least one output device.

[0106] Computer programs used to implement the methods of this application may be written in any combination of one or more programming languages. These computer programs may be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, such that when executed by the processor, the computer programs cause the functions / operations specified in the flowcharts and / or block diagrams to be performed. The computer programs may be executed entirely on a machine, partially on a machine, or as a standalone software package, partially on a machine and partially on a remote machine, or entirely on a remote machine or server.

[0107] In the context of this application, a computer-readable storage medium can be a tangible medium that may contain or store a computer program for use by or in conjunction with an instruction execution system, apparatus, or device. A computer-readable storage medium can be, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium can be a machine-readable signal medium. More specific examples of machine-readable storage media include electrical connections based on one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the foregoing.

[0108] To provide interaction with the user, the systems and techniques described herein can be implemented on orbital hardware equipment having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user provides input to the orbital hardware equipment. Other types of devices can also be used to provide interaction with the user; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including sound input, voice input, or tactile input).

[0109] The systems and technologies described herein can be implemented in computing systems that include backend components (e.g., as data servers), or computing systems that include middleware components (e.g., application servers), or computing systems that include frontend components (e.g., user computers with graphical user interfaces or web browsers through which users can interact with implementations of the systems and technologies described herein), or any combination of such backend, middleware, or frontend components. The components of the system can be interconnected via digital data communication of any form or medium (e.g., communication networks). Examples of communication networks include local area networks (LANs), wide area networks (WANs), blockchain networks, and the Internet.

[0110] A computing system can include clients and servers. Clients and servers are generally geographically separated and typically interact via communication networks. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a hosting product within the cloud computing service system. It addresses the shortcomings of traditional physical hosts and VPS (Virtual Private Server) services, such as high management difficulty and weak business scalability.

[0111] It should be understood that the various forms of processes shown above can be used to rearrange, add, or delete steps. For example, the steps described in this application can be executed in parallel, sequentially, or in different orders, as long as the desired result of the technical solution of this application can be achieved, and this is not limited herein.

[0112] The specific embodiments described above do not constitute a limitation on the scope of protection of this application. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this application should be included within the scope of protection of this application.

Claims

1. An information processing system based on a secure cloud, comprising: Cloud management terminal and at least one dedicated hardware terminal; The cloud management terminal is communicatively connected to each of the dedicated hardware terminals; The dedicated hardware terminal is configured on the track hardware equipment. The dedicated hardware terminal is configured with a secure cloud operating system. The secure cloud operating system is configured with at least one virtual environment. The virtual environment is configured with rail transit applications. The cloud management terminal is used to configure dedicated hardware. The dedicated hardware terminal is used to acquire communication signals of rail transit equipment within the track area received by the rail transit application, determine the control information of the rail transit equipment based on the communication signals, and feed them back to the rail transit equipment.

2. The system according to claim 1, wherein, The track hardware device is a multi-core hardware device, which includes at least one multi-core processor unit, wherein the multi-core processor unit is used to configure the virtual environment corresponding to the rail transit application.

3. The system according to claim 2, wherein, The virtual environment corresponds one-to-one with the rail transit application; the configuration information of the virtual environment is determined according to the type of the rail transit application.

4. The system according to claim 1, wherein, The communication signals of the rail transit equipment are transmitted to the corresponding rail transit application via a software-defined network.

5. The system according to claim 1, wherein, The rail transit application and the fail-safe voting device are in one-to-one correspondence, or the dedicated hardware terminal and the fail-safe voting device are in one-to-one correspondence; wherein, the fail-safe voting device is a two-out-of-two voting mode.

6. The system according to claim 1, wherein, The information processing system based on the secure cloud further includes: at least one backup hardware terminal; each of the dedicated hardware terminals corresponds one-to-one with each of the backup hardware terminals.

7. The system according to claim 1, wherein, The virtual environment is a rail transit embedded environment.

8. The system according to claim 1, wherein, The cloud management terminal is configured on a cloud server. The cloud management terminal is also used to configure the communication link configuration information between each of the dedicated hardware terminals, the communication link configuration information between each of the rail transit applications, and the communication link configuration information between each of the dedicated hardware terminals and the cloud management terminal.

9. An information processing method based on a secure cloud, applied to rail transit applications on dedicated hardware, comprising: Acquire communication signals from at least one rail transit device within the track area; The communication signals of each rail transit device are processed by the rail transit application to obtain signal processing results; Based on the signal processing results, each of the rail transit devices is screened to determine at least one device to be executed; The signal processing result is sent to each of the devices to be executed, so that each device to be executed performs the corresponding operation according to the signal processing result.

10. The method according to claim 9, wherein, The process of processing the communication signals of each rail transit device through the rail transit application to obtain signal processing results includes: A security vote is conducted on the communication signals of each of the aforementioned rail transit devices to obtain the security vote result; If the safety voting result is safe, then the communication signals of each of the rail transit devices are processed through the rail transit application to obtain the signal processing result; If the safety voting result is dangerous, a communication signal reacquisition command is generated and sent to each of the rail transit devices, so that each of the rail transit devices resends the communication signal to the rail transit application.

Images