调度集中系统静态数据安全封装方案研究

Research on Security Encapsulation Scheme of Static Data in Centralized Traffic Control System

为消除现有调度集中系统存在静态数据以明文未加密方式进行网络传输和终端存储,极易受通信质量波动影响产生数据异变,以及数据使用中易被攻击篡改等安全隐患,以分层多级树型模型重构静态数据组织模型,研究数据封装协议及方法;结合数据的加密、压缩及校验方法,生成高密度的安全数据文件,形成静态数据安全封装方案。通过开发辅助封装工具,进一步保证工程实践中方案的易用性。该方案实现了调度集中系统静态数据的数据隔离、权限控制、版本管理等功能,提高了数据的安全性、可靠性、一致性和可审计性,能够保证工程项目的高质量开展。

To eliminate the hidden hazards of network transmission and terminal storage of static data in existing CTC system using plain text unencrypted methods,which are highly susceptible to communication quality fluctuations and data changes,as well as attacks and tampering during data usage,a hierarchical multi-level tree model is designed to reconstruct the static data organization model to study the data encapsulation protocols and methods.Combining data encryption,compression,and verification methods,high-density secure data files are generated to form a static data security encapsulation scheme.By developing auxiliary encapsulation tool,the usability of solutions in the engineering practice is further ensured.The scheme implements functions such as data isolation,authority control,version management and other functions of static data in CTC system,improves the data security,reliability,consistency,and auditability,and ensures the high-quality implementation of engineering projects.