[0032] In order to make the objects, technical solutions, and advantages of the present invention, the technical solutions in the present invention will be apparent from the drawings of the present invention, and it will be described in connection with the drawings of the present invention. , Not all of the embodiments. Based on the embodiments in the present invention, all other embodiments obtained without creative labor are not made in the premise of creative labor.
[0033] By below figure 1 A remote restart device of the present invention, including a power module, a relay module, a first CPU (Central Processing unit, central processor) module, and a second CPU module; the first CPU module and the second CPU module Communication, the first CPU module is connected to the relay module signal, the second CPU module connected to the relay module signal, the power module, and the relay module electrically connected, the relay module and the device to be restarted Electrical connection;
[0034] Alternatively, the remote restart device is based on the TMS570 circuit module, which can be used for daily restarts and the restart of the fault.
[0035] Alternatively, between the two CPU modules communicate with the SPI bus of electromagnetically isolated, the data of the peer is obtained. The two CPU modules communicate directly or indirectly between the relay modules.
[0036] The power cord of the power module connects the normally closed contact of the relay module, and the output terminal of the relay module is electrically connected to the device. The relay module is one or more, each relay module is electrically connected to a restart device to achieve simultaneous restarting one or more restart devices.
[0037] Wherein, the first CPU module is configured to receive the first weight instructions issued by the monitoring server to be restarted, and processes the first weight instruction to obtain a second heavy instruction while receiving the second CPU module transmission. The second CPU module processes the second weight instruction to which the first heavy instructions are processed; the second heavy instructions corresponding to the first CPU module and the second reconstruction instruction corresponding to the second CPU module. In case, the second heavy instructions are transmitted to the relay module; the second CPU module and the first CPU module are the same;
[0038] Alternatively, in the case where the device is restarted is a CI cabinet device, the monitoring server is an ATOMATICTRAIN SuperVision, a train automatic monitoring system.
[0039] The monitoring server issues the first recaller to the two CPU modules in the event of a failure of the device to be restarted. Alternatively, the monitoring server communicates with two CPU modules via UDP (User DataGram Protocol, User Data News Protocol).
[0040] The two CPU modules receive the first heavy instructions and processes the first heavy instructions, and transmit the second heavy instructions obtained after the process to another CPU module.
[0041] Alternatively, the processing of the first heavy instruction includes parsing the first heavy instruction, acquires the port number of the relay module to which the first weight instruction to be issued, and the first heavy instruction is reassembled.
[0042] Since the two CPU module functions are the same, the second heavy instructions obtained after the two CPU modules are processed in normal conditions. However, since one of the CPU modules may fail, or if the hacker attack, or the received first heavy instruction is empty, the two CPU modules are inconsistent with the second heavy instructions obtained after the first heavy instruction processing. The second weight instruction in this case may result in the operation of the device to be restarted, resulting in the operation of the entire line.
[0043] In order to ensure the security and reliability of the restart, each CPU module uses two-piece secondary security logic design, ie, only the second heavy instructions obtained after the first heavy instructions are processed in the two CPU modules, the relay The module sends a second heavy instruction.
[0044] The relay module is configured to operate under the control of the second restart instruction to control the to be restarted.
[0045] Alternatively, the relay module does not operate when the second recipient transmitted by the CPU module; when the second heavy instruction transmitted by the two CPU modules, the normally closed contact of the relay module is in the second key instruction. Under the control, turn on and then turn it on, so that the power module is disconnected to supply power to the power supply to be restarted, and the restart of the device to be restarted.
[0046] In this case, the restart instruction is transmitted to the relay module to the relay module in the case where the two CPU modules processes the restart command to be restarted by the two CPU modules. It is guaranteed the reliability of processing logic security and output within the CPU, which can remotely control the restart of the device to restart, improve the timeliness and efficiency of the device restart, and improve the reliability and security when the device is restarted.
[0047] On the basis of the above embodiment, the first CPU module is further configured to receive the first weight instruction transmitted by the second CPU module, which is empty at the first weight instruction sent by the second CPU module. In the case, the first reconfree received by the first CPU module is transmitted to the second CPU module for processing.
[0048] Two CPU modules also send the first heavy instructions received to another CPU module. When it is judged that the first reconvection received by the other CPU module is empty, the first heavy instructions received to another CPU module are sent to another CPU module to process the first heavy instructions. Two logic to ensure the reliability of processing logical security and output within the CPU.
[0049] On the basis of the above embodiment, each CPU module is further configured to receive the clock signal of the second CPU module transmitted by the second CPU module, the clock signal and the second of the CPU module and the second When the clock signal of the CPU module is consistent and the second heavy instructions are consistent, the second heavy instructions are transmitted to the relay module.
[0050] Since the two CPU modules are the same, the clock signal is the same. Two CPU modules transmit the clock signal of the CPU module to the second CPU module, detect whether the clock signal of the CPU module and the second CPU module is consistent.
[0051] If the same, it is known that the two CPU modules run normally; if it is inconsistent, it is known to run at least one CPU is not working properly. Only the second heavy instructions are sent to the relay module in the case where the two CPUs are consistent and the second heavy instructions are actually transmitted to the relay module to ensure the security and reliability of the device restart to be restarted.
[0052] On the basis of the above embodiments, such as figure 2 As shown, the present embodiment further includes an output control module, the output control module electrically connected to the first CPU module, electrically connected to the second CPU module, and is connected to the relay module; the first The CPU module is configured to transmit the second heavy instruction to the output control module when the second heavy instruction corresponding to the first CPU module and the second recalled instruction corresponding to the second CPU module;
[0053] Each CPU module transmits the second heavy instructions to the relay module by the output control module, and the second recalled instruction is transmitted to the output control module in the case where the second heavy instructions corresponding to the other CPU module are consistent.
[0054] The output control module is configured to transmit the second heavy instructions to the relay module when the first CPU module and the second recalled instruction transmitted by the second CPU module.
[0055] Under normal circumstances, the second heavy instructions transmitted by the two CPU modules received by the output control module are consistent. In the case where the CPU module fails or occurs, the second weight instruction transmitted by the two CPU modules may not be consistent.
[0056] The output control module in this embodiment is only consistent with the second heavy instruction sent by the two CPU modules transmitted to the relay module to control the restart of the device to be restarted, and the restart is guaranteed. The security and reliability of control.
[0057] On the basis of the above embodiment, the relay module is used to feed back the received second heavy instruction to the output control module; the output control module is configured to transmit to the relay module. In the case where the second heavy instructions are inconsistent with the second heavy instructions feedback of the relay module, the second heavy instructions are no longer transmitted to the relay module.
[0058] The output control module in this embodiment can also perform self-test therefor. In the case where the second heavy instruction to the relay module and the second reconstruction of the relay module feedback are inconsistent, there is a problem with the output circuit, no longer send the second heavy instruction to the relay module, and can also issue an output circuit alarm message, thus Guaranteed the security and reliability of the second restart instruction.
[0059] On the basis of the above embodiments, such as image 3 As shown, the embodiment further includes an input acquisition module, the input acquisition module electrically connected to the first CPU module, electrically connected to the first CPU module, connected to the relay module; the input acquisition module The actual state used to collect the normally closed contacts of the relay module; the state includes an on state and an open state;
[0060] Alternatively, the normally closed contact of the relay module is connected to the input acquisition module. The input acquisition module acquires the actual state of the normally closed contact of the relay module to the two CPU modules.
[0061] Each CPU module is configured to transmit the second key instruction to the relay module without consistent in the preset state and the actual state of the stand-off contacts of the relay module in the restart instruction.
[0062] The two CPU modules compare the actual status and preset state of the normally closed contact of the relay module, and determine if the normally closed contact of the relay module is normal or normally. If the actual state and the preset state are inconsistent, the relay module has failed or there is a problem with the output of the CPU module, and the second reciprocal instruction is not sent to the relay module to avoid errors, resulting in a system-level failure, ensuring output instructions. reliability.
[0063] On the basis of the above embodiments, the first CPU module is used to return a confirmation command to the monitoring server after receiving the first replete instruction issued by the monitoring server; The first heavy instruction is processed after the first reconfiguration of the monitoring server.
[0064] Alternatively, each CPU module communicates with the monitoring server via Ethernet. After receiving the first heavy instructions issued by the monitoring server, each CPU module returns a confirmation instruction to the monitoring server, and the monitoring server needs to be confirmed whether the restart operation needs to be executed. When the first recipient issued again is received, the device to be restarted is controlled to restart, thereby avoiding false restart instructions to ensure the security and reliability of the restart.
[0065] Based on the above embodiments, the power module is used in the present embodiment to perform EMC (Electro Magnetic Compatibility, Electromagnetic Compatibility), and convert the power supply after EMC protection and filtering. , Use the converted power to power the first CPU module and the second CPU module.
[0066] Alternatively, the voltage of the power module is 24V. After the power of the input power module is EMC protection and filtering, the converted to the secondary power supply available for the CPU module, so that the remote restart device is simplified without additional power modules.
[0067] This embodiment provides a remote restart system including a plurality of remote restart devices such as any of the above embodiments.
[0068] Specifically, when the number of restart devices is longer, multiple remote restart devices can be used to restart control to provide restart control.
[0069] On the basis of the above embodiment, one or more remote restart devices in the plurality of the remote restart devices are used as the main device in the present embodiment, and the multiple of the remote restart devices except for remote devices. The restart device is used as a slave device; the master device is used to receive the first heavy instructions issued by the monitoring server to the slave device.
[0070] Alternatively, the master device receives the first reconciliation issued by the monitor server through the Ethernet. Communication between master devices and slave devices, the main device transmits the received first key to transmit the serial port to the slave device, the complete structure is shown. Figure 4 Indicated.
[0071] The present embodiment is used by a plurality of remote restart of the device level, while controlling multiple standby devices to restart, improve the efficiency of restart control.
[0072] It will be noted in that the above embodiment is intended to illustrate the technical solutions of the present invention, not to limit the invention; The technical solutions described in the foregoing examples are modified, or part of the technical features in which these modifications or replacements do not allow the nature of the corresponding technical solutions from the spirit and scope of the technical solutions of the present invention.
