基于业务解耦的高速铁路列控系统安全认证关键技术研究

The railway train control system has been acting as the central nervous system of high-speed railway to control the train’s safe running. With the evolution of the railway wireless communication system from narrow-band GSM-R to broadband LTE-R and with the disruptive changes of next generation railway control system’s architecture, the high-speed railway train control system is facing more serious security risks and challenges. To satisfy the specific and real-time requirements of the advanced services such as train to ground wireless communications, moving blocks, transfer-lines interconnections, train to train communications and comprehensive business hosting in trail control system, this project will research on the key theories and technologies of security authentication for next generation high-speed train control system, including the following aspects: (1) unified security control schemes based on SDN; (2) secure authentication and key agreement (AKA) schemes, including secure and real-time AKA schemes for railway control information tranmission, fast group based AKA schemes for additional services and seamless handover AKA scheme for cross heterogeneous domain interconnection ; (4) Security verification platform for next generation train control system. The research results will provide key theory and technology support for the saft operation of the next generation high-speed railway control system and radiate to urban rail transportation control system.

列车控制系统已成为轨道交通的“中枢神经系统”，控制和指挥列车安全运行。随着铁路专用无线通信技术从窄带GSM-R向宽带LTE-R的演进和新一代列控体系结构的颠覆性变革，轨道交通列控系统面临着更加严峻的安全风险和挑战。本项目面向基于宽带无线通信的下一代高速铁路列控系统，针对车-地通信、移动闭塞、转线互联、车-车通信和综合业务承载等先进功能及其高安全实时性要求，开展列控系统认证关键理论和技术研究，主要包括：（1）基于SDN和功能解耦的统一认证和集中管控网络模型；（2）面向列控复杂业务场景的认证密钥协商(AKA)协议，包括：针对列控关键业务传输的安全实时AKA、面向扩展业务的高效群认证AKA和转线互联下跨异构域无缝切换AKA协议；（3）列控系统安全防护验证平台。项目研究成果能够为下一代高速铁路列控系统安全运维提供关键理论和技术支撑，对城市轨道交通列控系统安全也有较好的借鉴和辐射作用。

列车控制系统已成为轨道交通的“中枢神经系统”，控制和指挥列车安全运行。随着铁路专用无线通信技术从窄带GSM-R向宽带LTE-R的演进和新一代列控体系结构的颠覆性变革，轨道交通列控系统面临着更加严峻的安全风险和挑战。本项目面向基于宽带无线通信的下一代高速铁路列控系统，针对车-地通信、移动闭塞、转线互联、车-车通信和综合业务承载等先进功能及其高安全实时性要求，开展列控系统认证关键理论和技术研究，主要包括：（1）基于SDN和功能解耦的统一认证和集中管控网络模型；（2）面向列控复杂业务场景的认证密钥协商(AKA)协议，包括：针对列控关键业务传输的安全实时AKA、面向扩展业务的高效群认证AKA和转线互联下跨异构域无缝切换AKA协议；（3）列控系统安全防护验证平台。针对上述研究内容，本项目在国内外高水平期刊和学术会议上发表论文22篇，申请发明专利27项（其中，已授权16项，已转化11项），培养博士研究生3人，硕士研究生19人。本项目取得的项目研究成果能够为下一代高速铁路列控系统安全运维提供关键理论和技术支撑，对城市轨道交通列控系统安全也有较好的借鉴和辐射作用，并在国防领域具有良好的应用前景。