Rail Telegram Encoding With Mixed Encryption for Data Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication methods between track-bound vehicles and trackside facilities lack sufficient security measures, particularly in high-speed environments like rail systems, making them vulnerable to unauthorized access and manipulation of data transmitted via balises.
Innovation Solution
Implement a mixed transmission method where some telegrams are transmitted unencrypted and encoded, while others are encrypted and encoded, allowing both equipped and unequipped vehicles to verify data integrity by comparing encrypted and unencrypted versions, without altering the existing transmission standard.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If telegrams are transmitted unencrypted to ensure fast transmission, then transmission speed is improved, but security and data integrity are worsened
Solution Approach 1:
The transmission system is segmented into two parallel channels: one for unencrypted telegrams (maintaining fast transmission) and one for encrypted telegrams (ensuring security). The receiver processes both channels independently and compares results to detect tampering, thus resolving the contradiction between speed and security.
Solution Approach 2:
The same data is transmitted twice: once in unencrypted form for speed and once in encrypted form for security. The receiver compares the unencrypted copy with the decrypted encrypted copy to verify integrity, allowing fast transmission while maintaining security verification.
2Reliability
If encryption is implemented to enhance security, then data security is improved, but transmission time increases
Solution Approach 1:
The system periodically transmits both encrypted and unencrypted telegrams in an alternating or mixed sequence. This periodic dual-mode transmission allows the system to maintain security through encryption while minimizing overall transmission time by utilizing the faster unencrypted channel for non-critical data.
Solution Approach 2:
The system dynamically changes transmission parameters by selecting whether to encrypt based on data priority, vehicle type, and track conditions. High-priority or sensitive data receives encryption while less critical data is transmitted unencrypted, optimizing the balance between security and transmission time.
3Reliability
If only encrypted telegrams are transmitted to ensure security, then data security is improved, but compatibility with existing systems is worsened
Solution Approach 1:
The transmission system is designed to serve multiple functions simultaneously: it transmits both encrypted and unencrypted telegrams to support both modern secure systems and legacy unencrypted systems. This multi-functionality ensures backward compatibility while enabling forward security.
Solution Approach 2:
The unencrypted telegram acts as an intermediary for legacy systems that cannot process encrypted data, while the encrypted telegram serves as the secure channel for modern systems. The receiver acts as a mediator that can process both types and select the appropriate one based on system capabilities.
4Reliability
If both encrypted and unencrypted telegrams are transmitted to enable verification, then data integrity is improved, but device complexity increases
Solution Approach 1:
The system uses itself to verify integrity: the unencrypted telegram serves as its own reference for verification against the decrypted encrypted telegram. This self-service approach eliminates the need for external verification mechanisms, reducing overall system complexity while maintaining integrity checks.
Data Source
Figure 1~2
Figure 3~4
Figure 5
AI summary
The invention relates to a method for coded communication between a track-bound vehicle (FZ) and a trackside device (SE1 ... SE6), in which several telegrams (T1, T2) are transmitted between the trackside device (SE1 ... SE6) and the track-bound vehicle (FZ). The telegrams (T1, T2) each have a data area for filling with user data and a code area for encoding the user data. At least one of the telegrams (T1, T2) is transmitted unencrypted such that the data area is filled with the unencrypted user data, which is then encoded using the code area. The telegram (T1, T2) containing the unencrypted user data is then transmitted in coded form, and the unencrypted user data is decoded after transmission using the code area.At least one of the telegrams (T1, T2) is transmitted in encrypted and encoded form such that the unencrypted user data is encrypted before the user data area is filled, and the user data area is filled with the encrypted user data, which is additionally encoded using the code area. Furthermore, the telegram (T1, T2) containing the encrypted user data is transmitted in encoded form. After transmission of the telegram (T1, T2), the encrypted user data is decoded using the code area, and then the encrypted user data is decrypted. The invention further comprises a track-bound vehicle (FZ), a trackside device (SE1 ... SE6), a computer program product, and a delivery device for the computer program product.