Movatterモバイル変換


[0]ホーム

URL:


CN108449159A - Safety guarantee method for temporary speed limit in railway signal based on one-way hash coding - Google Patents

Safety guarantee method for temporary speed limit in railway signal based on one-way hash coding
Download PDF

Info

Publication number
CN108449159A
CN108449159ACN201710083635.6ACN201710083635ACN108449159ACN 108449159 ACN108449159 ACN 108449159ACN 201710083635 ACN201710083635 ACN 201710083635ACN 108449159 ACN108449159 ACN 108449159A
Authority
CN
China
Prior art keywords
speed limit
command
temporary speed
data
temporary
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201710083635.6A
Other languages
Chinese (zh)
Other versions
CN108449159B (en
Inventor
冯雷
徐先良
蒋红军
王福友
路飞
李晓光
庞彦知
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Casco Signal Ltd
Original Assignee
Casco Signal Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Casco Signal LtdfiledCriticalCasco Signal Ltd
Priority to CN201710083635.6ApriorityCriticalpatent/CN108449159B/en
Publication of CN108449159ApublicationCriticalpatent/CN108449159A/en
Application grantedgrantedCritical
Publication of CN108449159BpublicationCriticalpatent/CN108449159B/en
Activelegal-statusCriticalCurrent
Anticipated expirationlegal-statusCritical

Links

Classifications

Landscapes

Abstract

Translated fromChinese

本发明涉及基于单向散列编码的铁路信号中临时限速的安全保障方法,包括以下步骤:步骤1,TSRS从CTC收到闭塞分区归档方案中临时限速命令对应的执行命令;步骤2,进行操作顺序、受令方通信状态、限速区域重叠检查、应答器报文容量检查;步骤3,如果检查失败,则保持限速命令原状态;如果检查通过,则更新临时限速命令的状态为“下达中”;步骤4,遍历各个内存区中各个受令设备被保护的临时限速输出数据,当状态为“下达中”状态,通过散列值校核数据没有被破坏后,根据里面的输出数据输出限速命令至各个TCC、RBC、邻接TSRS对应的安全通信接口。与现有技术相比,本发明具有避免了不必要的资源消耗,提高了系统的稳定性等优点。

The present invention relates to the security guarantee method of the temporary speed limit in the railway signal based on one-way hash coding, comprising the following steps: Step 1, TSRS receives from CTC the execution command corresponding to the temporary speed limit command in the blocking partition filing scheme; Step 2, Carry out the operation sequence, the communication status of the commandee, the overlapping check of the speed limit area, and the check of the transponder message capacity; step 3, if the check fails, keep the original state of the speed limit command; if the check passes, update the status of the temporary speed limit command is "Delivering"; step 4, traverse the temporary speed limit output data of each commanded device in each memory area, and when the status is "Delivering", after checking that the data has not been damaged through the hash value, according to the inside The output data output speed limit command to the safety communication interface corresponding to each TCC, RBC, and adjacent TSRS. Compared with the prior art, the present invention has the advantages of avoiding unnecessary resource consumption, improving system stability and the like.

Description

Translated fromChinese
基于单向散列编码的铁路信号中临时限速的安全保障方法Safety guarantee method for temporary speed limit in railway signal based on one-way hash coding

技术领域technical field

本发明涉及一种铁路信号中临时限速的安全保障方法,尤其是涉及一种基于单向散列编码的面向铁路信号领域中临时限速的安全保障方法。The invention relates to a safety guarantee method for temporary speed limit in railway signals, in particular to a safety guarantee method for temporary speed limit in the railway signal field based on one-way hash coding.

背景技术Background technique

临时限速是轨道交通中重要的概念,当遇到风雨雪、施工等临时情况,需要临时限制列车运行速度。在C2/C3体系中,临时限速命令由调度员人员通过CTC或者TDCS设备产生,下发至临时限速服务器设备(以下简称TSRS),再由TSRS分发至对应的列控中心(简称TCC)、无线闭塞中心(简称RBC)等设备。临时限速命令一旦执行错误,则可能会导致车毁人亡的严重后果。因此,需要对临时限速相关处理进行安全防护。Temporary speed limit is an important concept in rail transit. When encountering temporary conditions such as wind, rain, snow, construction, etc., it is necessary to temporarily limit the speed of trains. In the C2/C3 system, the temporary speed limit command is generated by the dispatcher through the CTC or TDCS equipment, and sent to the temporary speed limit server device (hereinafter referred to as TSRS), and then distributed by the TSRS to the corresponding train control center (abbreviated as TCC) , Radio Blocking Center (RBC for short) and other equipment. Once the temporary speed limit order is executed incorrectly, it may lead to serious consequences of car crashes and fatalities. Therefore, it is necessary to carry out security protection for the processing related to the temporary speed limit.

为了防止随机失效,在铁路信号领域的SIL4级安全系统中,在系统架构层面,EN50129给出了3种故障-安全系统架构来实现安全目标,包括反应故障安全、组合故障安全、固有故障安全。对于单套系统而言,在软件层面,目前已经有的算法包括了编码的方法,通过把计算中用到的安全参数进行编码,对计算过程进行编码,来达到安全的目前,当编码出现问题时,进行相应的倒向安全侧的处理。已有的方法还包括了BIT的方法,通过对硬件进行检测,使得随机失效被检测出,进而进入导向安全侧的处理。In order to prevent random failures, in the SIL4 safety system in the field of railway signaling, at the system architecture level, EN50129 gives three kinds of fail-safe system architectures to achieve safety goals, including reactive failsafe, combined failsafe, and inherent failsafe. For a single system, at the software level, the existing algorithms include encoding methods. By encoding the security parameters used in the calculation, the calculation process is encoded to achieve security. When there is a problem with the encoding , carry out the corresponding processing of turning to the safe side. The existing method also includes the BIT method, by detecting the hardware, the random failure is detected, and then enters the processing directed to the safety side.

这些做法的特点是易于实现平台化,具有更强的通用性。但是会消耗过多的资源,提高开发和维护成本。These practices are characterized by easy platformization and greater versatility. But it will consume too many resources and increase development and maintenance costs.

发明内容Contents of the invention

本发明的目的就是为了克服上述现有技术存在的缺陷而提供一种基于单向散列编码的铁路信号中临时限速的安全保障方法,针对临时限速提出安全保障方法,避免了不必要的资源消耗,提高了系统的稳定性。The purpose of the present invention is exactly to provide a kind of security guarantee method of temporary speed limit in the railway signal based on one-way hash coding in order to overcome the defective that above-mentioned prior art exists, proposes security guarantee method for temporary speed limit, has avoided unnecessary Resource consumption, improved system stability.

本发明的目的可以通过以下技术方案来实现:The purpose of the present invention can be achieved through the following technical solutions:

一种基于单向散列编码的铁路信号中临时限速的安全保障方法,包括以下步骤:A security guarantee method based on one-way hash code temporary speed limit in railway signal, comprising the following steps:

步骤1,临时限速服务器设备TSRS从列车调度集中指挥控制系统CTC收到闭塞分区归档方案中临时限速命令对应的执行命令,在内存中查找对应的临时限速所在区域,找到后,利用散列值对内存中限速命令进行校核,校核通过后,则认定该输入的限速命令参数合法;Step 1. The temporary speed limit server device TSRS receives the execution command corresponding to the temporary speed limit command in the blocked partition archiving scheme from the train dispatching centralized command and control system CTC, and searches the corresponding temporary speed limit area in the memory. The column value checks the speed limit command in the memory. After the check is passed, it is determined that the input speed limit command parameter is legal;

步骤2,进行操作顺序、受令方通信状态、限速区域重叠检查、应答器报文容量检查;Step 2, check the operation sequence, the communication status of the orderee, the overlapping check of the speed limit area, and the check of the message capacity of the transponder;

步骤3,如果检查失败,则保持限速命令原状态,同时,向CTC报告错误;如果检查通过,则更新临时限速命令的状态为“下达中”,更新各个设备的限速命令状态也更新为“下达中”;Step 3, if the check fails, keep the original state of the speed limit command, and at the same time, report an error to the CTC; if the check passes, update the status of the temporary speed limit command to "is in progress", and update the speed limit command status of each device is also updated is "Delivering";

步骤4,遍历各个内存区中各个受令设备被保护的临时限速输出数据,当状态为“下达中”的状态,通过散列值校核数据没有被破坏后,根据里面的输出数据输出限速命令至各个列控中心TCC、无线闭塞中心RBC、邻接TSRS对应的安全通信接口,由安全通信模块对数据加密后,发送至各个接收设备。Step 4. Traverse the protected temporary speed limit output data of each commanded device in each memory area. When the status is "downloading", after checking that the data is not damaged through the hash value, output the limit speed according to the output data inside. The high-speed command is sent to the secure communication interface corresponding to each train control center TCC, radio block center RBC, and adjacent TSRS. After the data is encrypted by the secure communication module, it is sent to each receiving device.

所述的临时限速命令提取包括:The extraction of the temporary speed limit command includes:

方案一:从RSSP-I或RSSP-II安全协议中直接取出的临时限速命令,取出后丢弃原安全数据包;Option 1: Take out the temporary speed limit command directly from the RSSP-I or RSSP-II security protocol, and discard the original security data packet after taking it out;

或者方案二:利用RSSP-II安全协议中的MAC值以及RSSP-I协议中的CRCM作为临时限速命令对应的散列值。Or scheme two: use the MAC value in the RSSP-II security protocol and the CRCM in the RSSP-I protocol as the hash value corresponding to the temporary speed limit command.

对于方案一:对取出来的临时限速命令增加对应的散列值,采用不同的生成多项式为临时限速命令分别生成CRC1和CRC2,或者采用MD5码的形式作为散列校验值。For scheme one: add the corresponding hash value to the retrieved temporary speed limit command, use different generator polynomials to generate CRC1 and CRC2 for the temporary speed limit command respectively, or use the form of MD5 code as the hash check value.

在每个计算周期或者根据设定,在每次读取临时限速命令前,重新校核临时限速命令与其对应的散列数值是否对应,如果对应,则按正常步骤处理临时限速,如果不对应,则认为临时限速被破坏,进行宕机处理;根据设定,向限速命令下达方报告限速命令为失败状态。In each calculation cycle or according to the setting, before reading the temporary speed limit command each time, re-check whether the temporary speed limit command corresponds to the corresponding hash value. If so, process the temporary speed limit according to normal steps. If If it does not correspond, it is considered that the temporary speed limit has been violated, and shutdown processing is performed; according to the setting, the speed limit command is reported to the party that issued the speed limit command as a failed state.

所述的步骤4)中的散列值生成过程如下:The hash value generation process in the described step 4) is as follows:

遍历各个“被保护数据”,根据Data_Protected公式找到与当前临时限速命令对应的“被保护数据”,根据输入数据修改“被保护数据”的状态值,然后,根据最新结果,生成“被保护数据”对应散列值Traverse each "protected data", find the "protected data" corresponding to the current temporary speed limit command according to the Data_Protected formula, modify the state value of the "protected data" according to the input data, and then generate the "protected data" according to the latest results " corresponds to the hash value

所述的Data_Protected公式具体为:The Data_Protected formula is specifically:

Data_Protected=(((TSR_Command*2M+(TSR_Output))^TimeStamp)*2N+OutputStatusData_Protected=(((TSR_Command*2M +(TSR_Output))^TimeStamp)*2N +OutputStatus

其中,Data_Protected:被保护数据;Among them, Data_Protected: protected data;

TSR_Command:限速命令本身;TSR_Command: the speed limit command itself;

M:输出数据的实际长度;M: the actual length of the output data;

TimeStamp:时间戳;TimeStamp: timestamp;

TSR_Output:针对不同的受令设备有不同的含义,其中,在TSRS里,TSR_Output表示向一个具体的TCC/RBC/邻接TSRS的输出的限速命令;在TCC设备中,表示一个具体的应答器输出的报文数据;TSR_Output: It has different meanings for different ordered devices. Among them, in TSRS, TSR_Output represents the speed limit command output to a specific TCC/RBC/adjacent TSRS; in TCC equipment, it represents a specific transponder output message data;

OutputStatus:为根据当前输入所设置的临时限速所处的状态,收到执行命令后,该限速命令变为待下发状态,由N字节表示。OutputStatus: It is the state of the temporary speed limit set according to the current input. After receiving the execution command, the speed limit command becomes the state to be issued, represented by N bytes.

与现有技术相比,本发明具有以下优点:Compared with the prior art, the present invention has the following advantages:

1、通过采用本技术,可以发现内存失效对临时限速关键参数的破坏,从而提高系统整体安全性和可靠性。1. By adopting this technology, it can be found that memory failure has damaged the key parameters of the temporary speed limit, thereby improving the overall security and reliability of the system.

2、可以发现程序bug所引起的内存越界对临时限速关键参数所造成的意外破坏,从而提高系统整体安全性和可靠性。2. It can find out the accidental damage caused by the memory crossing caused by the program bug to the key parameters of the temporary speed limit, so as to improve the overall security and reliability of the system.

3、与硬件检测技术比,不需要挂起整个程序系统以及中断,对系统的影响更小。本算法直接检查被测对象,而不是通过检测硬件间接证明,更加直接有效,检测周期可以大幅度缩短。而且,硬件检测技术无法发现由程序意外越界所引起的对关键参数的破坏。3. Compared with the hardware detection technology, there is no need to suspend the entire program system and interrupt, and the impact on the system is smaller. This algorithm directly checks the object under test, instead of indirect proof through testing hardware, which is more direct and effective, and the detection cycle can be greatly shortened. Moreover, hardware detection techniques cannot detect damage to key parameters caused by program accidental out-of-bounds.

4、与通用的安全编码(比如,VCP编码)相比,不需要将整个程序转换成安全编码,本技术充分利用闭塞分区归档后临时限速的可穷举性,把编码与查表相结合,避免了算法的复杂度,提高了系统的运行效率。4. Compared with general safety codes (for example, VCP codes), it is not necessary to convert the entire program into safety codes. This technology makes full use of the exhaustiveness of temporary speed limits after filing in blocked partitions, and combines codes with look-up tables , avoiding the complexity of the algorithm and improving the operating efficiency of the system.

附图说明Description of drawings

图1为本发明的总体流程图。Fig. 1 is the general flowchart of the present invention.

具体实施方式Detailed ways

下面将结合本发明实施例中的附图,对本发明实施例中的技术方案进行清楚、完整地描述,显然,所描述的实施例是本发明的一部分实施例,而不是全部实施例。基于本发明中的实施例,本领域普通技术人员在没有做出创造性劳动的前提下所获得的所有其他实施例,都应属于本发明保护的范围。The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts shall fall within the protection scope of the present invention.

本发明针对中国铁路运营的特点,针对临时限速提出安全保障方法,避免了不必要的资源消耗,提高了系统的稳定性。Aiming at the characteristics of Chinese railway operation, the invention proposes a safety guarantee method for temporary speed limit, avoids unnecessary resource consumption, and improves system stability.

针对目前铁路领域临时限速处理可能出现的随机失效场景包括Random failure scenarios that may occur in the current temporary speed limit processing in the railway field include

(1)传输过程中出现干扰,导致被传输数据出现偏差。(1) Interference occurs during the transmission process, resulting in deviation of the transmitted data.

(2)临时限速命令在系统内部运行时被破坏。(2) The temporary speed limit command is destroyed while running inside the system.

针对场景1,由于已有安全通信协议保护,不在本方案范围内。For Scenario 1, it is not within the scope of this solution due to the existing security communication protocol protection.

本方案只针对场景2提出解决方案,提出了提出提高安全度和安全信心的算法,如果要达到特定系统的安全目标,还可进一步通过组合故障安全、反应故障安全和固有故障安全等机制来解决。This solution only proposes a solution for Scenario 2, and proposes an algorithm to improve security and security confidence. If the security goal of a specific system is to be achieved, it can be further solved by combining fail-safe, reactive fail-safe, and inherent fail-safe mechanisms. .

本发明提出一个针对临时限速的安全方法,该方法不依赖硬件架构,可以被不同应用有临时限速的铁路信号相关系统复用,以提高系统的安全指数。The present invention proposes a safety method for temporary speed limit, which does not depend on hardware architecture, and can be multiplexed by railway signal-related systems with temporary speed limit for different applications, so as to improve the safety index of the system.

本发明的具体技术内容如下:Concrete technical content of the present invention is as follows:

一,闭塞分区归档前,临时限速以“米”为单位下发,临时限速相关参数只能依赖于实时计算,提出了如下方法:1. Before archiving the block partition, the temporary speed limit is issued in the unit of "meter". The parameters related to the temporary speed limit can only rely on real-time calculation. The following method is proposed:

(1)提取临时限速命令。(1) Extract the temporary speed limit command.

针对不同的系统和场景,我们提出了两种解决方案For different systems and scenarios, we propose two solutions

方案一:从安全协议(中国铁路为RSSP-II安全协议和RSSP-I安全协议)直接取出的临时限速命令,取出后丢弃原安全数据包,考虑到临时限速命令的下达可以实现闭环控制,所以,当内存中第一次收到该限速时,如果提取过程即出现失效导致限速参数出现错误,可以被原下发限速的设备或者人员发现,故本方案中暂不考虑这种失效。此种方案占用空间小,缺点是临时限速提取需要借助于应用级的安全分析或者其他安全保障算法。Option 1: The temporary speed limit command is directly extracted from the security protocol (RSSP-II security protocol and RSSP-I security protocol for Chinese railways), and the original security data packet is discarded after taking it out. Considering that the temporary speed limit command can achieve closed-loop control , so, when the speed limit is received in the memory for the first time, if the extraction process fails and the speed limit parameter is wrong, it can be discovered by the device or person who originally issued the speed limit, so this solution is not considered for the time being. kind of failure. This solution occupies a small space, but the disadvantage is that the extraction of temporary speed limit needs to rely on application-level security analysis or other security guarantee algorithms.

方案二:不将临时限速命令从RSSP-II或者RSSP-I数据包中取出,利用RSSP-II安全协议中的MAC值以及RSSP-I协议中的CRCM作为临时限速命令对应的散列值。这种做法的缺点是需要增加额外的空间存储临时限速所在的整个数据包,且MAC校验和CRCM的算法都有比较高的时间复杂度,需要增加额外的运算开销。Solution 2: Do not extract the temporary speed limit command from the RSSP-II or RSSP-I data packet, use the MAC value in the RSSP-II security protocol and the CRCM in the RSSP-I protocol as the hash value corresponding to the temporary speed limit command . The disadvantage of this method is that it needs to add additional space to store the entire data packet where the temporary rate limit is located, and the algorithms of MAC check and CRCM have relatively high time complexity, which requires additional computing overhead.

(2)为取出来的限速命令增加对应的散列值。针对步骤1中的方案二,不需要再增加额外的散列数值,针对步骤1中的方案一,可增加临时限速命令对应的CRC数值,为进一步提高安全性,可采用不同的生成多项式为临时限速命令分别生成CRC1和CRC2。同理,也可采用MD5码的形式作为散列校验值。(2) Add the corresponding hash value for the fetched speed limit command. For solution 2 in step 1, there is no need to add additional hash values. For solution 1 in step 1, the CRC value corresponding to the temporary speed limit command can be increased. In order to further improve security, different generator polynomials can be used as Temporary speed limit commands generate CRC1 and CRC2 respectively. Similarly, an MD5 code may also be used as the hash check value.

(3)在每个计算周期,或者,根据需要,在每次读取临时临时限速命令前,重新校核临时限速命令与其对应的散列数值是否对应,如果对应,则按正常步骤处理临时限速,如果不对应,则认为临时限速被破坏,此时,需进一步采用导向安全侧的处理措施,我们建议进行宕机处理;根据需要,可向限速命令下达方报告限速命令为失败状态。(3) In each calculation cycle, or, according to needs, before reading the temporary temporary speed limit command each time, re-check whether the temporary speed limit command corresponds to the corresponding hash value, and if so, proceed according to the normal steps Temporary speed limit, if it does not correspond, it is considered that the temporary speed limit has been violated. At this time, it is necessary to take further processing measures directed to the safety side. We recommend processing downtime; if necessary, the speed limit command can be reported to the party that issued the speed limit command is in failure state.

二,采用闭塞分区归档方案后,临时限速范围由闭塞分区界定,由于一条线路中的闭塞分区数量是可穷举的,则可执行的临时限速命令只有可穷举的数量,2. After adopting the blocking partition archiving scheme, the temporary speed limit range is defined by the blocking partitions. Since the number of blocking partitions in a line is exhaustive, there are only exhaustive temporary speed limit commands that can be executed.

图1为算法总体说明,其中粗实线表示本算法的实际流程,细虚表示不采用本算法时临时限速处理所走的流程。Figure 1 is an overall description of the algorithm, where the thick solid line represents the actual process of the algorithm, and the thin dashed line represents the process of temporary speed limit processing when the algorithm is not used.

图中的被保护数据除时间戳、输出数据、散列值当前状态外,均由离线时决定,由工具生成,生成算法为Except for the timestamp, output data, and the current state of the hash value, the protected data in the figure is determined offline and generated by the tool. The generation algorithm is

所述的Data_Protected公式具体为:The Data_Protected formula is specifically:

Data_Protected=(((TSR_Command*2M+(TSR_Output))^TimeStamp)*2N+OutputStatusData_Protected=(((TSR_Command*2M +(TSR_Output))^TimeStamp)*2N +OutputStatus

其中,Data_Protected:被保护数据;Among them, Data_Protected: protected data;

TSR_Command:限速命令本身;TSR_Command: the speed limit command itself;

M:输出数据的实际长度;M: the actual length of the output data;

HASH(TSR_Command):TSR_CommandTSR命令的单向散列数值,HASH表示散列函数,可以为MD5或者CRC计算函数。HASH(TSR_Command): One-way hash value of TSR_CommandTSR command, HASH means hash function, which can be MD5 or CRC calculation function.

TimeStamp:时间戳;TimeStamp: timestamp;

TSR_Output:针对不同的受令设备有不同的含义,其中,在TSRS里,TSR_Output表示向一个具体的TCC/RBC/邻接TSRS的输出的限速命令;在TCC设备中,表示一个具体的应答器输出的报文数据;TSR_Output: It has different meanings for different ordered devices. Among them, in TSRS, TSR_Output represents the speed limit command output to a specific TCC/RBC/adjacent TSRS; in TCC equipment, it represents a specific transponder output message data;

OutputStatus:为根据当前输入所设置的临时限速所处的状态,收到执行命令后,该限速命令变为待下发状态,由N字节表示。OutputStatus: It is the state of the temporary speed limit set according to the current input. After receiving the execution command, the speed limit command becomes the state to be issued, represented by N bytes.

图1中“输入”的箭头表示环节的具体处理如下述:The arrow of "input" in Figure 1 indicates that the specific processing of the link is as follows:

遍历各个“被保护数据”,根据Data_Protected的公式找到与当前临时限速命令对应的“被保护数据”,根据输入数据修改“被保护数据”的状态值,然后,根据最新结果,生成“被保护数据”对应散列值。Traverse each "protected data", find the "protected data" corresponding to the current temporary speed limit command according to the formula of Data_Protected, modify the state value of the "protected data" according to the input data, and then generate the "protected data" according to the latest result data" corresponds to the hash value.

图1中“输出”的箭头表示的环节的具体处理如下述:The specific processing of the link indicated by the arrow of "output" in Figure 1 is as follows:

遍历各个“被保护数据”,通过散列值检查“被保护数据”是否被破坏,如果被破坏,则导向安全侧,这里的安全侧可由设备根据自身情况进行自定义。如果数据没有被破坏,则根据当前状态,从“被保护数据”中取出当前的输出数据,输出该输出数据至安全通信模块。Traverse each "protected data" and check whether the "protected data" is damaged through the hash value. If it is damaged, it will lead to the safe side. The safe side here can be customized by the device according to its own situation. If the data is not destroyed, then according to the current state, take out the current output data from the "protected data", and output the output data to the safety communication module.

为了防止出现过时数据,在时间戳和被保护数据上全部异或了时间戳数据,每个周期更新该时间戳。In order to prevent outdated data, the timestamp data is XORed on the timestamp and the protected data, and the timestamp is updated every cycle.

通过上文,我们也可以看到根据输入信息修改状态和根据状态选取输出信息的过程并没有被保护,针对这一点,可以通过差异化算法、编码技术等其他手段来解决。Through the above, we can also see that the process of modifying the state according to the input information and selecting the output information according to the state is not protected. In view of this, it can be solved by other means such as differentiation algorithm and coding technology.

如图1所示,本发明基于单向散列编码的铁路信号中临时限速的安全保障方法,包括以下步骤:As shown in Figure 1, the present invention is based on the safety guarantee method of temporary speed limit in the railway signal of one-way hash code, comprises the following steps:

步骤001,TSRS从CTC收到闭塞分区归档方案中限速设置命令对应的执行命令,在内存中查找对应的临时限速所在区域,找到后,利用散列值对内存中限速命令进行校核,校核通过后,即可认为该输入的限速命令参数合法。Step 001, TSRS receives from CTC the execution command corresponding to the speed limit setting command in the blocking partition archiving plan, searches the memory for the area where the corresponding temporary speed limit is located, and uses the hash value to verify the speed limit command in the memory , after the verification is passed, the input speed limit command parameters can be considered legal.

步骤002,进行操作顺序、受令方通信状态、限速区域重叠检查、应答器报文容量检查,考虑到这些检查的失效不会对临时限速的安全性造成影响,所以,可以不采取额外的安全冗余措施。Step 002, check the operation sequence, the communication status of the commandee, the overlapping check of the speed limit area, and the check of the message capacity of the responder. Considering that the failure of these checks will not affect the safety of the temporary speed limit, it is not necessary to take additional measures. safety redundancy measures.

步骤003,如果检查失败,则保持限速命令原状态,同时,向CTC报告错误;如果检查通过,则更新临时限速命令的状态为“下达中”,更新各个设备的限速命令状态也更新为“下达中”。Step 003, if the check fails, keep the original state of the speed limit command, and at the same time, report an error to the CTC; if the check is passed, update the status of the temporary speed limit command to "is in progress", and update the status of the speed limit command of each device is "Delivering".

步骤004,输出程序遍历各个内存区中各个受令设备被保护的临时限速输出数据,当状态为“下达中”的状态,通过散列值校核数据没有被破坏后,根据里面的输出数据输出限速命令至各个TCC、RBC、邻接TSRS对应的安全通信接口,由安全通信模块对数据加密后,发送至各个接收设备。Step 004, the output program traverses the protected temporary speed limit output data of each commanded device in each memory area. When the status is "downloading", after checking that the data is not damaged through the hash value, according to the output data inside Output the speed limit command to the secure communication interface corresponding to each TCC, RBC, and adjacent TSRS, and the secure communication module encrypts the data and sends it to each receiving device.

以上所述,仅为本发明的具体实施方式,但本发明的保护范围并不局限于此,任何熟悉本技术领域的技术人员在本发明揭露的技术范围内,可轻易想到各种等效的修改或替换,这些修改或替换都应涵盖在本发明的保护范围之内。因此,本发明的保护范围应以权利要求的保护范围为准。The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person familiar with the technical field can easily think of various equivalents within the technical scope disclosed in the present invention. Modifications or replacements shall all fall within the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims (6)

Translated fromChinese
1.一种基于单向散列编码的铁路信号中临时限速的安全保障方法,其特征在于,包括以下步骤:1. a kind of security guarantee method based on temporary speed limit in the railway signal of one-way hash coding, it is characterized in that, comprises the following steps:步骤1,临时限速服务器设备TSRS从列车调度集中指挥控制系统CTC收到闭塞分区归档方案中临时限速命令对应的执行命令,在内存中查找对应的临时限速所在区域,找到后,利用散列值对内存中限速命令进行校核,校核通过后,则认定该输入的限速命令参数合法;Step 1. The temporary speed limit server device TSRS receives the execution command corresponding to the temporary speed limit command in the blocked partition archiving scheme from the train dispatching centralized command and control system CTC, and searches the corresponding temporary speed limit area in the memory. The column value checks the speed limit command in the memory. After the check is passed, it is determined that the input speed limit command parameter is legal;步骤2,进行操作顺序、受令方通信状态、限速区域重叠检查、应答器报文容量检查;Step 2, check the operation sequence, the communication status of the orderee, the overlapping check of the speed limit area, and the check of the message capacity of the transponder;步骤3,如果检查失败,则保持限速命令原状态,同时,向CTC报告错误;如果检查通过,则更新临时限速命令的状态为“下达中”,更新各个设备的限速命令状态也更新为“下达中”;Step 3, if the check fails, keep the original state of the speed limit command, and at the same time, report an error to the CTC; if the check passes, update the status of the temporary speed limit command to "is in progress", and update the speed limit command status of each device is also updated is "Delivering";步骤4,遍历各个内存区中各个受令设备被保护的临时限速输出数据,当状态为“下达中”的状态,通过散列值校核数据没有被破坏后,根据里面的输出数据输出限速命令至各个列控中心TCC、无线闭塞中心RBC、邻接TSRS对应的安全通信接口,由安全通信模块对数据加密后,发送至各个接收设备。Step 4. Traverse the protected temporary speed limit output data of each commanded device in each memory area. When the status is "downloading", after checking that the data is not damaged through the hash value, output the limit speed according to the output data inside. The high-speed command is sent to the secure communication interface corresponding to each train control center TCC, radio block center RBC, and adjacent TSRS. After the data is encrypted by the secure communication module, it is sent to each receiving device.2.根据权利要求1所述的一种基于单向散列编码的铁路信号中临时限速的安全保障方法,其特征在于,所述的临时限速命令提取包括:2. a kind of security guarantee method based on the temporary speed limit in the railway signal of one-way hash code according to claim 1, it is characterized in that, described temporary speed limit order extracts and comprises:方案一:从RSSP-I或RSSP-II安全协议中直接取出的临时限速命令,取出后丢弃原安全数据包;Option 1: Take out the temporary speed limit command directly from the RSSP-I or RSSP-II security protocol, and discard the original security data packet after taking it out;或者方案二:利用RSSP-II安全协议中的MAC值以及RSSP-I协议中的CRCM作为临时限速命令对应的散列值。Or scheme two: use the MAC value in the RSSP-II security protocol and the CRCM in the RSSP-I protocol as the hash value corresponding to the temporary speed limit command.3.根据权利要求2所述的一种基于单向散列编码的铁路信号中临时限速的安全保障方法,其特征在于,对于方案一:对取出来的临时限速命令增加对应的散列值,采用不同的生成多项式为临时限速命令分别生成CRC1和CRC2,或者采用MD5码的形式作为散列校验值。3. a kind of security guarantee method based on the temporary speed limit in the railway signal of one-way hash code according to claim 2, it is characterized in that, for scheme one: the temporary speed limit command that takes out increases corresponding hash Values, use different generator polynomials to generate CRC1 and CRC2 for the temporary speed limit command, or use the form of MD5 code as the hash check value.4.根据权利要求1所述的一种基于单向散列编码的铁路信号中临时限速的安全保障方法,其特征在于,在每个计算周期或者根据设定,在每次读取临时限速命令前,重新校核临时限速命令与其对应的散列数值是否对应,如果对应,则按正常步骤处理临时限速,如果不对应,则认为临时限速被破坏,进行宕机处理;根据设定,向限速命令下达方报告限速命令为失败状态。4. a kind of security guarantee method based on the temporary speed limit in the railway signal of one-way hash coding according to claim 1, it is characterized in that, in each calculation cycle or according to setting, read the temporary limit every time Before the speed command, re-check whether the temporary speed limit command corresponds to the corresponding hash value. If it is, the temporary speed limit will be processed according to the normal steps. Set, report the speed limit order to the party that issued the speed limit order as a failure state.5.根据权利要求1所述的一种基于单向散列编码的铁路信号中临时限速的安全保障方法,其特征在于,所述的步骤4)中的散列值生成过程如下:5. a kind of security guarantee method based on temporary speed limit in the railway signal of one-way hash coding according to claim 1, it is characterized in that, described step 4) in the hash value generating process as follows:遍历各个“被保护数据”,根据Data_Protected公式找到与当前临时限速命令对应的“被保护数据”,根据输入数据修改“被保护数据”的状态值,然后,根据最新结果,生成“被保护数据”对应散列值。Traverse each "protected data", find the "protected data" corresponding to the current temporary speed limit command according to the Data_Protected formula, modify the state value of the "protected data" according to the input data, and then generate the "protected data" according to the latest results " corresponds to the hash value.6.根据权利要求5所述的一种基于单向散列编码的铁路信号中临时限速的安全保障方法,其特征在于,所述的Data_Protected公式具体为:6. a kind of security guarantee method based on temporary speed limit in the railway signal of one-way hash coding according to claim 5, it is characterized in that, described Data_Protected formula is specifically:Data_Protected=(((TSR_Command*2M+(TSR_Output))^TimeStamp)*2N+OutputStatusData_Protected=(((TSR_Command*2M +(TSR_Output))^TimeStamp)*2N +OutputStatus其中,Data_Protected:被保护数据;Among them, Data_Protected: protected data;TSR_Command:限速命令本身;TSR_Command: the speed limit command itself;M:输出数据的实际长度;M: the actual length of the output data;TimeStamp:时间戳;TimeStamp: timestamp;TSR_Output:针对不同的受令设备有不同的含义,其中,在TSRS里,TSR_Output表示向一个具体的TCC/RBC/邻接TSRS的输出的限速命令;在TCC设备中,表示一个具体的应答器输出的报文数据;TSR_Output: It has different meanings for different ordered devices. Among them, in TSRS, TSR_Output represents the speed limit command output to a specific TCC/RBC/adjacent TSRS; in TCC equipment, it represents a specific transponder output message data;OutputStatus:为根据当前输入所设置的临时限速所处的状态,收到执行命令后,该限速命令变为待下发状态,由N字节表示。OutputStatus: It is the state of the temporary speed limit set according to the current input. After receiving the execution command, the speed limit command becomes the state to be issued, represented by N bytes.
CN201710083635.6A2017-02-162017-02-16One-way hash coding-based safety guarantee method for temporary speed limit in railway signalActiveCN108449159B (en)

Priority Applications (1)

Application NumberPriority DateFiling DateTitle
CN201710083635.6ACN108449159B (en)2017-02-162017-02-16One-way hash coding-based safety guarantee method for temporary speed limit in railway signal

Applications Claiming Priority (1)

Application NumberPriority DateFiling DateTitle
CN201710083635.6ACN108449159B (en)2017-02-162017-02-16One-way hash coding-based safety guarantee method for temporary speed limit in railway signal

Publications (2)

Publication NumberPublication Date
CN108449159Atrue CN108449159A (en)2018-08-24
CN108449159B CN108449159B (en)2020-09-18

Family

ID=63190630

Family Applications (1)

Application NumberTitlePriority DateFiling Date
CN201710083635.6AActiveCN108449159B (en)2017-02-162017-02-16One-way hash coding-based safety guarantee method for temporary speed limit in railway signal

Country Status (1)

CountryLink
CN (1)CN108449159B (en)

Cited By (6)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN111124418A (en)*2019-12-102020-05-08卡斯柯信号有限公司 A Method for Judging Communication Data Timeout Based on VCP Redundancy Code
CN113830142A (en)*2021-11-262021-12-24卡斯柯信号(北京)有限公司 A method and system for inverse solution verification of temporary speed limit of transponder message of train control software
CN113859328A (en)*2021-12-022021-12-31卡斯柯信号(北京)有限公司Method and system for filing position precision of speed limit area of passenger dedicated line train control system
CN114329103A (en)*2021-12-222022-04-12郑州畅想高科股份有限公司Operation disclosure and LKJ temporary data inter-segment comparison method
CN115801183A (en)*2022-10-192023-03-14卡斯柯信号有限公司 A safety coding transmission device for track signal system
CN118722798A (en)*2024-05-162024-10-01中国铁道科学研究院集团有限公司 A command and control system for a radio block center of a high-speed railway

Citations (5)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN102238087A (en)*2011-05-162011-11-09北京全路通信信号研究设计院有限公司Responder message transmission method, device and system
CN102616259A (en)*2011-01-272012-08-01铁道部运输局Method and system for column control temporary speed limit
CN102941866A (en)*2012-10-222013-02-27上海富欣智能交通控制有限公司Automatic train supervisor (ATS) system and method
US8509971B1 (en)*2012-08-142013-08-13Siemens Industry, Inc.Railway braking and throttle guidance user interface
CN104691580A (en)*2015-01-062015-06-10卡斯柯信号有限公司Method based on CTC (centralized traffic control) station yard graph graphic elements and used for setting temporary speed restriction of high-speed railway

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN102616259A (en)*2011-01-272012-08-01铁道部运输局Method and system for column control temporary speed limit
CN102238087A (en)*2011-05-162011-11-09北京全路通信信号研究设计院有限公司Responder message transmission method, device and system
US8509971B1 (en)*2012-08-142013-08-13Siemens Industry, Inc.Railway braking and throttle guidance user interface
CN102941866A (en)*2012-10-222013-02-27上海富欣智能交通控制有限公司Automatic train supervisor (ATS) system and method
CN104691580A (en)*2015-01-062015-06-10卡斯柯信号有限公司Method based on CTC (centralized traffic control) station yard graph graphic elements and used for setting temporary speed restriction of high-speed railway

Cited By (8)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN111124418A (en)*2019-12-102020-05-08卡斯柯信号有限公司 A Method for Judging Communication Data Timeout Based on VCP Redundancy Code
CN113830142A (en)*2021-11-262021-12-24卡斯柯信号(北京)有限公司 A method and system for inverse solution verification of temporary speed limit of transponder message of train control software
CN113830142B (en)*2021-11-262022-02-22卡斯柯信号(北京)有限公司Transponder message temporary speed limit reverse-resolution verification method and system of train control software
CN113859328A (en)*2021-12-022021-12-31卡斯柯信号(北京)有限公司Method and system for filing position precision of speed limit area of passenger dedicated line train control system
CN114329103A (en)*2021-12-222022-04-12郑州畅想高科股份有限公司Operation disclosure and LKJ temporary data inter-segment comparison method
CN114329103B (en)*2021-12-222023-10-24郑州畅想高科股份有限公司Method for comparing operation revealing and LKJ temporary data segments
CN115801183A (en)*2022-10-192023-03-14卡斯柯信号有限公司 A safety coding transmission device for track signal system
CN118722798A (en)*2024-05-162024-10-01中国铁道科学研究院集团有限公司 A command and control system for a radio block center of a high-speed railway

Also Published As

Publication numberPublication date
CN108449159B (en)2020-09-18

Similar Documents

PublicationPublication DateTitle
CN108449159A (en) Safety guarantee method for temporary speed limit in railway signal based on one-way hash coding
US11420662B2 (en)Device and method for the safe management of vital communications in the railway environment
CN108599896B (en) A CRC check system and method based on redundant coding system
CN108572638B (en)Stopping of FPGA mismatched data packets for a security system
CN109274636B (en) Data safe transmission method and device, system and train
CN112953897A (en)Train control system edge security node implementation method based on cloud computing equipment
CN103513646B (en)Information processing system, output-controlling device and data generating device
US8090486B2 (en)Message protocol for efficient transmission of vital directives on a guideway
CN112398711B (en)CAN bus communication method for safety computer
WO2019095647A1 (en)Method and apparatus for hot backup of master control unit, and computer storage medium
CN115801183B (en)Safety code transmission device for track signal system
Lu et al.A Resilience‐Based Security Assessment Approach for CBTC Systems
JP2009086938A (en) High safety control device
CN112445803B (en)IP matching method and system for dynamic column head and column tail
CN107844384A (en)A kind of generation method of interlock safety data
CN102858614B (en)Relay control method, relay control device and train operation control system
CN103514062B (en)Be applied to the dynamic coding method of computer interlock system
JP5161158B2 (en) ATC transmitter
CN105095039B (en)The hot-line self-checking up method and device of I/O plug-in units
CN108429720A (en) A Security Guarantee Method for Railway Security Communication Protocol Based on Digital Signature
CN116319105B (en)High-reliability data transmission management system based on multipath secure tunnel
CN118977755B (en) Switchable train operation control method, device, equipment and storage medium
CN113472572A (en)Network recovery method and device based on rail transit signal system
Takamatsu et al.Reliability and Safety Evaluation of COTS Based Cloud Railway Signalling Systems
US20200287845A1 (en)Method and system for a geographical hot redundancy

Legal Events

DateCodeTitleDescription
PB01Publication
PB01Publication
SE01Entry into force of request for substantive examination
SE01Entry into force of request for substantive examination
GR01Patent grant
GR01Patent grant

[8]ページ先頭

©2009-2025 Movatter.jp