高速铁路信号系统安全数据网承载着我国高速铁路列控系统核心业务,对网络和设备的可靠性和实时性具有极高要求,目前的网络安全防护技术手段尚不能很好地适用于信号系统安全数据网。采用软件定义网络架构,从网络统一管控的角度出发进行...高速铁路信号系统安全数据网承载着我国高速铁路列控系统核心业务,对网络和设备的可靠性和实时性具有极高要求,目前的网络安全防护技术手段尚不能很好地适用于信号系统安全数据网。采用软件定义网络架构,从网络统一管控的角度出发进行探索性研究,提出并设计实现了针对我国高速铁路信号系统安全数据网的安全防护方案SD-SSDN(Software-defined Signal Safety Data Network)。实验结果表明:该防护方案可以有效阻断黑客攻击,提高信号安全数据网的安全性;同时,为了保障高实时性和可靠性,还提出基于SDN多级流表的冗余流表映射技术和自适应链路聚合技术;在10个交换机组成的环网中,链路失效恢复时间约为8ms,可以满足列控系统业务需求。展开更多
In this paper, a multiple parameters weighted fractional Fourier transform(MPWFRFT) and constellation scrambling(CS) method based physical layer(PHY) security system is proposed. The proposed scheme is executed by two...In this paper, a multiple parameters weighted fractional Fourier transform(MPWFRFT) and constellation scrambling(CS) method based physical layer(PHY) security system is proposed. The proposed scheme is executed by two steps. In the first step, MPWFRFT, implemented as the constellation beguiling(CB) method, is applied to change the signal's identity. In the second step the additional pseudo random phase information, regarded as the encryption key, is attached to the original signal to enhance the security. Typically, the pseudo random phase information can be removed effectively by the legitimate receiver. In contrast to the cryptography based encryption algorithms and the conventional PHY secrecy techniques, the main contribution of the proposed scheme is concentrated on the variation in signal's characteristics. Simulation results show that the proposed scheme can prevent the exchanging signal from eavesdroppers' classifi cation or inception. Moreover, the proposed scheme can guarantee the BER performance at a tolerate increasing in computational complexity for the legitimate receivers.展开更多
文摘高速铁路信号系统安全数据网承载着我国高速铁路列控系统核心业务,对网络和设备的可靠性和实时性具有极高要求,目前的网络安全防护技术手段尚不能很好地适用于信号系统安全数据网。采用软件定义网络架构,从网络统一管控的角度出发进行探索性研究,提出并设计实现了针对我国高速铁路信号系统安全数据网的安全防护方案SD-SSDN(Software-defined Signal Safety Data Network)。实验结果表明:该防护方案可以有效阻断黑客攻击,提高信号安全数据网的安全性;同时,为了保障高实时性和可靠性,还提出基于SDN多级流表的冗余流表映射技术和自适应链路聚合技术;在10个交换机组成的环网中,链路失效恢复时间约为8ms,可以满足列控系统业务需求。
基金supported by the National Basic Research Program of China under Grant 2013CB329003in part by the National Natural Science Foundation General Program of China under Grant 61171110
文摘In this paper, a multiple parameters weighted fractional Fourier transform(MPWFRFT) and constellation scrambling(CS) method based physical layer(PHY) security system is proposed. The proposed scheme is executed by two steps. In the first step, MPWFRFT, implemented as the constellation beguiling(CB) method, is applied to change the signal's identity. In the second step the additional pseudo random phase information, regarded as the encryption key, is attached to the original signal to enhance the security. Typically, the pseudo random phase information can be removed effectively by the legitimate receiver. In contrast to the cryptography based encryption algorithms and the conventional PHY secrecy techniques, the main contribution of the proposed scheme is concentrated on the variation in signal's characteristics. Simulation results show that the proposed scheme can prevent the exchanging signal from eavesdroppers' classifi cation or inception. Moreover, the proposed scheme can guarantee the BER performance at a tolerate increasing in computational complexity for the legitimate receivers.
