Design of a CANFD to SOME/IP Gateway Considering Security for In-Vehicle Networks

In recent years, Ethernet has been introduced into vehicular networks to cope with the increasing demand for bandwidth and complexity in communication networks. To exchange data between controller area network (CAN) and Ethernet, a gateway system is required to provide a communication interface. Additionally, the existence of networked devices exposes automobiles to cyber security threats. Against this background, a gateway for CAN/CAN with flexible data-rate (CANFD) to scalable service-oriented middleware over IP (SOME/IP) protocol conversion is designed, and security schemes are implemented in the routing process to provide integrity and confidentiality protections. Based on NXP-S32G, the designed gateway is implemented and evaluated. Under most operating conditions, the CPU and the RAM usage are less than 5% and 20 MB, respectively. Devices running a Linux operating system can easily bear such a system resource overhead. The latency caused by the security scheme accounts for about 25% of the entire protocol conversion latency. Considering the security protection provided by the security scheme, this overhead is worthwhile. The results show that the designed gateway can ensure a CAN/CANFD to SOME/IP protocol conversion with a low system resource overhead and a low latency while effectively resisting hacker attacks such as frame forgery, tampering, and sniffing.

A HIGH-CURRENCY GEO-SPATIAL SERVICE GATEWAY FOR NATIONAL GEO-INFORMATION SERVICE PLATFORM

Today, more and more geospatial services are provided by the governments and enterprises to share various geographic information data and functions, and services-based application integration has become a trend. However, many problems existed in the geo-platform for Geographic information sharing while providing services in the form of API, such as the coexistence of different versions of the same service, similar service routes of different APIs, cluttered service protocols, and complex authority management, that makes the integration among different geographic information services difficult and reduces the development efficiency. There are already some API gateway technologies to solve the problem, but the characteristics of geospatial services are not considered in the existing product. To address these problems, this paper proposed a high-currency geospatial service gateway system for National Geo-Information Service Platform based on the opensource framework of Kong for realizing the unified management and authorized open. The system provides the whole lifecycle management and fine-grained control for the service, and the functions such as unified geospatial service access, protocol conversion, service management, authorization verification, rate limiting, and security protection are also equipped. The system has been released and integrated in the National Geo-Information Service Platform, supporting hundreds of millions of service invocation every day. The result proves it simplifies geospatial services management, deployment, and application, and benefits the exchanging and sharing of geographic information.

THE DIGITALIZATION OF SUBSTATIONS BY CREATING A 6-35 kV SWITCHING DEVICESCONTROL SYSTEM FROM THE AUTOMATED WORKPLACE

The control system of high-voltage switches at one of the substations of the branch of JSC «Grid Company» Buinskie Power Networks is presented in the work. The block control circuit of switching devices from the automated workplace is described. Its specific blocks with the help of which the whole process of switching of high-voltage switches in the switchgear – 10, 35 kV is performed are provided. An explanation of the collection and transfer of information from intelligent electronic devices to the switchgear drive, transmission of control commands, protocol conversion and data exchange with higher levels of automated systems is given. Advantages of the remote control system for 6-35 kV electrical apparatus are shown on the example of the 110/35/10 kV «Verkhny Uslon» substation of the Tatenergo system. The system of remote control of switchgear during its repair and in case of other emergency situations is opened on the example of one of the substations 110/35/10 kV of the Republic of Tatarstan. There are schemes KRUN-10, KRUN-35 kV with an illustration of the positions of electrical apparatus, combined with video surveillance of the state of the switch of a certain cell and the position of the earthing switch of a separate switching device.

Design and Implementation of an Anti–Factor Xa Heparin Monitoring Protocol

Background: The VA Northeast Ohio Healthcare System introduced a new nurse-driven anti–factor Xa (anti-Xa) protocol for monitoring unfractionated heparin to replace the previous activated partial thromboplastin time protocol. Objective: To design, implement, and evaluate the efficacy of the anti-Xa monitoring protocol. Methods: An interdisciplinary team of providers collaborated to develop and implement a nurse-driven, facility-wide anti–factor Xa protocol for monitoring unfractionated heparin therapy. The effectiveness of this protocol was evaluated by retrospective analysis. Results: We reviewed 100 medical records for compliance with the new anti-Xa monitoring protocol. We then evaluated 178 patients whose anticoagulation was monitored with the anti-Xa assay to determine the time to therapeutic range. We found that 80% of patients receiving the anti-Xa protocol achieved therapeutic anticoagulation within 24 hours, as compared with 54% of patients receiving the activated partial thromboplastin time protocol (P < .001). Protocol conversion also yielded a decrease in blood draws, dose adjustments, and potential calculation errors. Conclusions: Monitoring intravenous heparin therapy with the anti-Xa assay rather than activated partial thromboplastin time resulted in a shorter time to therapeutic anticoagulation, longer maintenance of therapeutic levels, and fewer laboratory tests and heparin dosage changes. We believe the current practice of monitoring heparin treatment with activated partial thromboplastin time assays should be reexamined.

SEMANTIC PACKET CONVERSION MODEL FOR INDUSTRIAL INTERNET OF THINGS HETEROGENEOUS GATEWAY

Рассматриваются вопросы семантического межпротокольного преобразования пакетов, поступающих на гетерогенный шлюз промышленного интернета вещей (ПИВ). Проведены эксперименты по измерению времени обслуживания сетевых пакетов при их приеме и конвертации в промежуточный формат гетерогенного шлюза, а также при обратном преобразовании и дальнейшей отправке из промежуточного формата в выбранный формат пакета. Исследованы следующие протоколы передачи данных: CoAP, MQTT, Modbus TCP, STOMP, OPC UA и HTTP. Получены аналитические модели семантического межпротокольного преобразования, использованные для разработки имитационной модели работы семантического шлюза ПИВ и протестированные на примере преобразований CoAP-MQTT и MQTT-CoAP. В ходе компьютерного моделирования разработанная модель была сопоставлена с моделью, описывающей работу шлюза, выполняющего инкапсуляцию заголовков и полезных данных прикладных протоколов в другие прикладные протоколы. The issues of semantic protocol conversion of incoming packets coming to the heterogeneous gateway of the Industrial Internet of Things are considered. A series of experiments were carried out to measure the processing time of network packets when they were received and converted to the IIoT conversion format on the heterogeneous gateway, as well as when they were converted back and then sent from the intermediate format to the selected packet format. The following data transfer protocols were studied: CoAP, MQTT, Modbus TCP, STOMP, OPC UA, and HTTP. Analytical models of semantic protocol conversion were obtained. These models were used to develop a simulation model of the IIoT semantic gateway, which was tested on the example of CoAP-MQTT and MQTT-CoAP transformations. During computer simulation, the developed model was compared with a model thatdescribes the operation of the gateway that encapsulates the headers and useful data of application protocols in other application protocols.