Architecture of Train Onboard Trusted Network System Based on Endogenous Security

On basis of studying passive defense technology, carried out research on active security technology to achieve the transformation from passive defense to active security, aiming at the information security problem of rail vehicle on-board network. Based on the design of autonomous security operating system and hardware system, a dual architecture of on-board trusted network system for rail vehicles based on endogenous security is proposed. This architecture is based on cryptographic technology and achieves a trusted and actively controlled computing platform at the source by constructing trusted roots of physical chips and using trusted software as the core, which having four major features: dual endogeneity, trustworthiness and robustness, active immunity, and fault tolerance and self-consistency. The on-board trusted network system of rail vehicles is designed, and its trusted transfer mechanism is analyzed and designed the on-board network system test experiment. By injecting “safety genes” into train network system, through genes control security and computation, and have the function of parallel operation of computation and protection, which can achieve active immunity.