系列化中国标准地铁列车信息安全组件设计  

Design of information security components for serialized China standard metro trains

作　　者：于人生 黄涛 YU Rensheng;HUANG Tao(CRRC Dalian R&D Co.,Ltd.,Dalian Liaoning 116000,China;CRRC Nanjing Puzhen Co.,Ltd.,Nanjing Jiangsu 210031,China)

机构地区：[1]中车大连电力牵引研发中心有限公司,辽宁大连116000 [2]中车南京浦镇车辆有限公司,江苏南京210031

出　　处：《现代城市轨道交通》2024年第11期32-36,共5页Modern Urban Transit

基　　金：中国中车股份有限公司科技研究开发计划项目——系列化中国标准地铁列车研制及试验项目(2019CCA027)。

摘　　要：系列化中国标准地铁列车的列车控制与管理系统采用以太网作为通信网络,这一举措在提升车辆车载系统的集成度和智能化的同时,也带来潜在的信息安全风险。为应对这一挑战,文章提出通过部署专用的车载信息安全组件降低安全风险。具体而言,首先,与通用信息安全组件及工业控制系统信息安全组件进行对比分析,有针对性地提出列车车载信息安全组件的功能需求。其次,给出1种机箱板卡式的硬件,并配套开发基于“快速数据路径”技术的软件方案。最后,详细介绍该车载信息安全组件在系列化标准地铁列车样车上的应用实例,由此证明该车载信息安全组件在系列化中国标准地铁列车中部署的可行性。Ethernet is applied as the train communication network in the train control and management system of the serialized China standard metro trains,a move that enhances the integration and intelligence of the vehicle on-board systems while also posing potential information security risks.To address this challenge,this article proposes a risk mitigation approach by deploying a dedicated on-board information security component.Specifically,firstly,it compares and analyzes with general information security components and industrial control system information security components,and puts forward the functional requirements of train onboard information security component in a targeted way.Subsequently,it presents a hardware scheme in the form of a chassis-based board card,and a supportive software scheme leveraging XDP(eXpress Data Path)technology is developed.Finally,a detailed application example of this on-board information security component on the prototype of the serialized standard metro train is introduced,which proves the feasibility of deploying this on-board information security component on the serialized China standard metro train.

关 键 词：地铁 列车控制与管理系统 车载信息安全组件 车载以太网 

分 类 号：U270.1[机械工程—车辆工程]