为实现与CTCS-3级列控系统相关的安全信息在GSM-R系统中安全、可靠地传输,提出车-地无线通信端到端通信安全增强解决方案。该方案改进CTCS-3级列控系统的数据通信安全功能,可根据用户安全需求的不同等级,实现通信系统双向认证,或通过可信任认证中心使车载移动终端和地面无线闭塞中心(RBC)之间实现端到端认证。通过收发方的数字签名以及签名验证来提供信令完整性保护机制,防止信令被有效破坏。给出灵活的端到端信息加密解决方案,防止信息泄露、窃听,并阻止恶意入侵和干扰,使整个通信通道都得到安全保护。 In order to realize the safe and reliable transmission of the safety information related to CTCS-3 train control system in GSM-R system, a solution of end-to-end communication security enhancement of vehicle-to-ground wireless communication is proposed. This scheme improves the data communication security function of CTCS-3 train control system. According to different levels of user security requirements, the scheme can achieve bi-directional authentication of the communication system or make the vehicle mobile terminal and the ground radio block center (RBC) Between end to end certification. The signaling integrity protection mechanism is provided through the digital signature and signature verification of the sender and the receiver to prevent the signaling from being effectively destroyed. Provide flexible end-to-end information encryption solutions to prevent information leakage, eavesdropping, and prevent malicious intrusion and interference, so that the entire communication channel are secure.