Research on Multi-Level Monitoring Architecture Pattern of Cloud-Based Safety Computing Platform

As rail transit systems advance toward greater automation and intelligence, cloud computing technology, with its remarkable scalability and robust data processing capabilities, has been steadily expanding its footprint in this domain. However, the adoption of cloud computing also introduces new safety challenges for train control systems. Traditional safety computers in train control systems rely on heterogeneous redundancy with symmetry to enhance safety. Nevertheless, the software in cloud computing environments, even if heterogeneous, may share the same source code, thereby triggering the risk of common-cause failures in the software. To address these issues, this study proposes a multi-level monitoring architecture system tailored to the characteristics of cloud-based safety computing platforms. This architecture innovatively integrates the three-level monitoring architecture pattern from the automotive field, the secure channel pattern, and the distributed safety mechanism architecture. It monitors the levels of common-cause software failures that cannot be eliminated through heterogeneity. The introduction of multi-level active monitoring for risk control has reduced the impact of common-cause software failures on system security. By constructing a formal security model, quantitative evaluations are conducted separately on the single-channel L2 and L3, the dual-channel L4 without degradation or monitoring, and the dual-channel L4 monitoring architecture with complete functions. This verifies the effectiveness of the proposed monitoring architecture in reducing the risk of common-cause software failures in the virtualization layer. This study provides a robust theoretical foundation and technical support for the security-oriented design and development of the next-generation intelligent rail transit systems.