Abstract: The vehicle-ground communication technology of the train control system for heavy-haul railways based on public network is implemented by combing the virtual private network technology with the network protection technology. This not only avoids the complexity and high cost of building a private network, and significantly shortens the project cycle, but also maintains the efficiency of data transmission, thus becoming the preferred strategy for vehicle-ground communication of the train control system for heavy-haul railways. However, there are inherent security risks in the public network environment. In order to ensure the reliability and security of vehicle-ground communication, this paper proposes a targeted and comprehensive solution for secure vehicle-ground communication on the basis of a detailed and comprehensive analysis of existing network security technologies. The proposed solution features comprehensive utilization of multiple security technologies, to ensure the security and confidentiality of vehicle-ground data during public network transmission, and provide important guarantee for the stable operation of the train control system. It enables the train control system for heavy-haul railways to resist external threats, which effectively maintains information security and integrity, and provides strong technical support for the operational safety and efficiency of heavy-haul railways.

Key words: train control system for heavy-haul railway, vehicle-ground communication system, public network, VPN, network security

摘要： 基于公网的重载铁路列控系统车-地通信技术采用虚拟专用网络技术结合网络防护技术来实现，不但避免了建设专网的复杂性与高昂成本，显著缩短项目周期，还维持数据传输的高效性，因而成为当前重载铁路列控系统车-地通信领域的优选之策。但鉴于公共网络环境本身存在的安全风险，为保障车-地之间通信的可靠与安全，在详尽而全面分析既有网络安全技术的基础上针对性地提出一套完善的车-地安全通信解决方案。该方案综合运用多种安全技术手段，旨在全方位守护车地数据在公网传输过程中的安全性与保密性，为列控系统的稳定运行提供重要保障。通过实施此方案，重载铁路列控系统能够有效抵御外部威胁，维护信息的安全性和完整性，为重载铁路运营的安全与高效提供强有力的技术支撑。

关键词: 重载铁路列控系统, 车-地通信系统, 公网, 虚拟专用网络, 网络安全