Railway Smart Object Controller With Local Logic and Cybersecurity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing railway architectures require a high number of components and complexity due to centralized control logic in the remote station, necessitating external security measures for open network communication, making the system cumbersome and inefficient.
Innovation Solution
A decentralized Smart Object Controller with integrated cybersecurity and local logic modules, including a cybersecurity management module, safety data processing, boolean equation module, and maintenance processing, enabling direct interaction with open networks and managing trackside equipment autonomously.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If centralized control logic is implemented in the remote station, then security management is simplified, but device complexity and response time increase
Solution Approach 1:
The patent divides the control system into distributed Smart Object Controllers (SOCs) along the railway track, each capable of autonomous operation. This segmentation reduces the centralized remote station's processing burden while maintaining security through individual SOC encryption modules, thereby reducing overall system complexity and improving response time.
Solution Approach 2:
Each Smart Object Controller is equipped with an integrated cybersecurity management module that performs self-protection functions. The SOC autonomously encrypts/decrypts communications and manages its own security credentials, eliminating the need for external security components and reducing system complexity while maintaining security.
2Reliability
If centralized control logic is implemented in the remote station, then security management is simplified, but response time increases
Solution Approach 1:
By distributing control logic to individual SOCs along the track, commands can be executed locally without waiting for remote station processing, significantly reducing response time while each SOC maintains its own security management capabilities.
Solution Approach 2:
Security credentials and encryption parameters are pre-loaded into each SOC's memory during manufacturing or initial configuration. This preliminary preparation eliminates the need for real-time security authentication delays, allowing immediate secure operation and reducing response time.
3Reliability
If additional external security equipment is added, then communication security is improved, but device complexity and costs increase
Solution Approach 1:
The patent merges cybersecurity functions directly into the Smart Object Controller architecture, combining the control logic and security management in a single integrated device. This eliminates the need for separate external security equipment, reducing component count and system complexity while maintaining robust communication security through built-in encryption modules.
4Reliability
If additional external security equipment is added, then communication security is improved, but the number of components increases
Solution Approach 1:
The Smart Object Controller is designed as a universal device that performs multiple functions: trackside equipment control, data acquisition, and integrated cybersecurity management. This multi-functionality eliminates the need for separate dedicated security components, reducing the total number of components while maintaining comprehensive security capabilities.
Data Source
Figure 1
Figure 2
AI summary
A Smart Object Controller for mounting along a railway track comprising: - a cybersecurity management module (10) arranged to receive and transmit, from or to a remote station (108), route control data representing a configuration of the railway track, and to decrypt or encrypt said route control data into safety data; - a safety data processing module (12) arranged to receive and transmit, from or to the cybersecurity management module (10), said safety data and to convert the safety data into boolean variables and vice versa; -a boolean equation module (14) arranged to receive, from the safety data processing module (12), the boolean variables, and to execute boolean equations based on said boolean variables, thus obtaining command data to be sent to trackside equipment (4) of the railway track to get said configuration.