Design And Implementation Of Security Enhancement Platform For Control Networks

With the rapid development of network information technology, computer control network are widely required in railway industry. The network makes the scattered train control system together and is used to share kinds of resources such as programs, data, and documents etc. It is no exaggeration to say that computer network brings huge work efficiency and great convenience on railway signal control system. However, due to openness, connectivity and sharing of the computer network, there are lots of embedded safety problems in current railway signal control network. Railway signal control network belonging to the railway transportation network is an industrial control private network based on ordinary computer network, which has the large network geographical span, relatively complex subnet and structure, high real-time requirements. Once the viruses or attacks invade railway network, it may cause immeasurable loss or catastrophic results. Therefore, railway signal safety control network needs higher security.In the paper, the situation and security problems of railway signal control network in our country are firstly analyzed. At the same time, the severity of security threats and the limitation of current network security technologies are also pointed out. According to the characteristics of the railway signal control system, a practical scheme for network security protection is proposed, and a protocol isolation platform based on μC/OS-II for the security of control networks is designed. It includes the hardware design of security isolation platform and the transplantation of embedded μC/OS-II operation system. Finally, the overall performance and testing methods of security isolation platform are introduced.Therefore, the platform applies Dual-MCU(LPC3250)+Dual-Port Static RAM architecture and integrates various protocols such as Ethernet, CAN, PROFIBUS,422,232etc. It helps to enhance terminal reinforcement and border protection for the railway signal safety control network. A large number of simulation test and experiment results indicate that the platform not only has a good real-time performance for railway communication, also has a higher system throughput. In general, it has achieved our design purpose which provides several references for improving the railway signal control network security.