Protocol security isolation system oriented to railway signal control network

Abstract

The invention discloses a protocol security isolation system oriented to a railway signal control network. The protocol security isolation system is composed of a first communication interface 101, a second communication interface 203, a first processor 102, a second processor 202, a high-speed dual-port RAM communication buffer memory 302, a memory RAM, a power-failure memory FLASH, a human-computer interaction platform 105 and a power module 301. The first communication interface and the second communication interface intercept and capture data, corresponding the network, from a link layer, the data are sent to the first processer to be analyzed, an analysis result and communication content are sent to the human-computer interaction platform 105 to be displayed and are written into a data base, safe network data information is sent to the second processor through the high-speed dual-port RAM communication buffer memory 302 in a ferry mode at the same time, and the safe network information is sent to a target terminal or a target network through the second communication interface 203 driven by the second processor. According to the protocol security isolation system oriented to the railway signal control network, multiple network technologies are combined and real-time monitoring and security isolation are carried out on the existing railway signal control network.

Description

technical field [0001] The invention relates to the fields of embedded product design, railway communication, network information security and rail transit. Through the comprehensive analysis of the data, the real-time monitoring and filtering of the control network data is realized. Background technique [0002] With the rapid development of China's railways, the network security of railway signal control network is very important. It is imperative to establish a safety analysis and evaluation system and certification system for China's railway communication signal system by studying foreign railway safety standards, safety assessment and certification systems, and combining with the actual situation of China's railway communication signal development. [0003] Although it is an inevitable trend for railway communications to develop towards digitization, intelligence, networking and integration; however, due to the characteristics of openness, interconnection and sharing o...

AI Technical Summary

Problems solved by technology

[0003] Although it is an inevitable trend for railway communications to develop towards digitization, intelligence, networking and integration; however, due to the characteristics of openness, interconnection and sharing of computer networks, there are inherent deficiencies in online information security. Coupled with the security loopholes in the system software and the lack of strict management, the network is extremely vulnerable to damage

At the same time, my country's industrial control market is overly open (for example, the market share of PLC domestic products is less than 1%, and 95% of satellite navigation system chips rely on imports). The core control modules of most control systems are imported from abroad, while foreign industrial control chips , the design and configuration of industrial control system products have loopholes or backdoors to a certain extent, which seriously threatens the security of my country's industrial control network (including railway control network)

In addition, the information transmission channel of the high-speed rail and intercity railway signaling system - the signal security data network, currently adopts an internal closed operation, and only the equipment connected to the network exchanges information with each other, and there is no network and information security equipment inside. This has buried a great security risk for the railway signal control network.

Images