A command and control system for a radio block center of a high-speed railway

Abstract

The present invention discloses a command control system for a radio block center of a high-speed railway. The command control system of the radio block center is constructed by using an operation display terminal HMI-T, a processor HMI-P and a data server HMI-S. The command control system is suitable for the European high-speed railway train control system architecture, and ensures the rationality and safety of the operation and management functions of commands such as temporary speed limit and emergency stop. At the same time, the impact on the existing equipment of the radio block center is effectively reduced, and the effective management of the safe and reliable operation of trains within its jurisdiction by the radio block center under the new system architecture is ensured.

Description

Technical Field

[0001] The invention belongs to the technical field of high-speed railway train operation control, and in particular relates to a radio block center command control system for a high-speed railway. Background Art

[0002] The train operation control system (referred to as "train control system") is a technical equipment that monitors, controls and adjusts the train's running speed, braking mode and other conditions according to the objective conditions and actual conditions of the train's operation on the line. It is a core technical equipment to ensure the safety of high-speed railway operations and improve operational efficiency. The Radio Block Center (RBC) is a signal control system based on a fail-safe computer platform. Based on the information provided by external ground equipment and the information interacting with the on-board equipment, combined with line parameter information, it generates control information such as train driving permits, and sends it to the on-board equipment through train-to-ground wireless communication, so that the train can run safely on the line within the jurisdiction of the RBC. As the ground core equipment of the CTCS-3 level train control system, the Radio Block Center plays a vital role in the efficient, safe and stable operation of high-speed railways.

[0003] CTCS-3 level train control system composition and data flow Figure 1 As shown in the figure, the interface equipment of the wireless block center includes: on-board equipment, interlocking, temporary speed limit server, dispatching centralized system and adjacent wireless block center. However, there is no temporary speed limit server in the European train control system. The management of temporary speed limit needs to be completed by the wireless block center; the issuance and cancellation of temporary speed limit, emergency stop, text message and other operation commands also need to be implemented by the wireless block center, and the setting requirements of each command are more complicated. Among them, the temporary speed limit function and driving command both involve driving safety and are indispensable functions. Summary of the invention

[0004] In view of this, the present invention provides a command and control system for a radio block center of a high-speed railway, which realizes the conformity design of the radio block center independently developed by my country to European standards.

[0005] The present invention provides a high-speed railway radio block center command control system, comprising an operation display terminal HMI-T, a processor HMI-P and a data server HMI-S, to achieve management of one or more radio block center operation commands;

[0006] HMI-T is a human-machine interface device for operators to interact with the RBC. It has the functions of setting and issuing commands, displaying command information, line status, station route object command status, train operation status and RBC operation status, and log query.

[0007] HMI-P is a logic processing unit that realizes command management and information forwarding. It verifies the operation commands sent by HMI-T, and sends the verified operation commands to the radio block center, and sends the operation commands to HMI-S for storage; it sends the received operation status information of each radio block center and the train operation information within its jurisdiction to HMI-T, and sends the command execution results, the operation status information of each radio block center and the train operation information within its jurisdiction to HMI-S for storage;

[0008] HMI-S is a data storage server used to store operation records, HMI-T system operation logs and HMI-P system operation logs; two independent HMI-S are set up, using dual machines and redundant mode to ensure redundant backup of data records.

[0009] Furthermore, the HMI-T only supports one user to log in at the same time. The operation range and display range of the HMI-T for the wireless block center are consistent. The same user can only log in to the same HMI-T. After the communication between the HMI-T and the interface device is interrupted and reconnected, the user needs to log in again.

[0010] Furthermore, the HMI-P adopts a two-by-two-out-of-two safety redundant structure, that is, the HMI-P consists of two systems, A and B, and the communication method between the two systems is a dual-channel two-out-of-two method; and compares the data packets related to driving safety received from the two channels. If the data are consistent, the data is considered valid, otherwise the data packet is discarded.

[0011] Furthermore, the A and B systems are each equipped with two Ethernet communication boards, and the network port division methods of the Ethernet communication boards of the two systems are completely consistent.

[0012] Furthermore, the HMI-P adopts a hardware platform that has passed SIL4 level safety certification.

[0013] Furthermore, the HMI-T uses a neural network algorithm to calculate the station route object command state in the following manner:

[0014] Step 1: Determine the station route object sample set and link condition function, and establish the station route object link relationship model, which is expressed as:

[0015]

[0016] Among them, t i is the station route object, x i is the link status information of the station route object, f j is a conditional function; when the state of the search object satisfies f j The condition x i The value of is 1, otherwise the value is 0;

[0017] Step 2: Establish a station route object command state model based on the station route object link relationship model. The station route object command state model includes an input layer and an output layer, which is expressed as:

[0018]

[0019] Among them, z k is the command status of the station route object that meets the command conditions, v ki is the weighted value between object link relations, and the output transfer function is set to f1(·);

[0020] Step 3: In actual use, the manual operation commands are monitored in real time. When the command start triggering conditions are met, the station route object command status is calculated based on the station route object link relationship obtained in step 1 and the station route object command status model established in step 2.

[0021] Furthermore, the t i is the station turnout, f j The condition is that the position coordinates of the nodes in any direction of the turnout are consistent with the position coordinates of the nodes of the selected objects that are not connected to other objects; if the station turnout t i Meet f j The value is 1 if the condition is described, otherwise it is 0.

[0022] Beneficial effects:

[0023] 1. The present invention adopts the operation display terminal HMI-T, the processor HMI-P and the data server HMI-S to construct the command control system of the radio block center, which is not only suitable for the European high-speed railway train control system architecture, but also ensures the rationality and safety of the operation and management functions of temporary speed limit, emergency stop and other commands, and effectively reduces the impact on the existing equipment of the radio block center, ensuring the effective management of the safe and reliable operation of the trains under its jurisdiction by the radio block center under the new system architecture.

[0024] 2. The HMI system constructed by the present invention uses a SIL4-level safety comparison unit to perform safety comparison and verification on data. In addition, it is designed to ensure data security by completing a 2-comparison of key data through two heterogeneous servers to ensure guidance to the safety side after a failure occurs. At the same time, the safety comparison unit feeds back the system status information, alarm information, and data information to maintenance personnel to monitor the system status, thereby effectively ensuring the safety, stability, and reliability of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 This is a schematic diagram of the composition and data flow of my country's CTCS-3 level train control system.

[0026] Figure 2 A schematic diagram of the system architecture of a radio block center command control system for a high-speed railway provided by the present invention.

[0027] Figure 3 A schematic diagram of the safety principle of an HMI system of a radio block center command control system for a high-speed railway provided by the present invention.

[0028] Figure 4 A schematic diagram of the reliability design principle of an HMI system of a radio block center command control system for a high-speed railway provided by the present invention.

[0029] Figure 5 A data flow diagram of a radio block center command control system for a high-speed railway provided by the present invention.

[0030] Figure 6 A schematic diagram of a two-out-of-two dual-channel configuration between an HMI-P and an RBC of a radio block center command control system for a high-speed railway provided by the present invention.

[0031] Figure 7 A schematic diagram of the network structure of a radio block center command control system for a high-speed railway provided by the present invention.

[0032] Figure 8 The present invention is a schematic diagram of an HMI system for establishing a high-speed railway radio block center command control system. DETAILED DESCRIPTION

[0033] The present invention is described in detail with reference to the following embodiments.

[0034] The present invention provides a command control system for a high-speed railway radio block center, referred to as an HMI (Human Machine Interface) system, which is a command operation and display system of the radio block center. The HMI system displays the train running status and line status within the jurisdiction of the RBC. The operator sends a variety of operation commands such as temporary speed limit, RBC initialization, text information, emergency stop, etc. to the RBC through the HMI system. These commands are inseparable from driving safety.

[0035] The present invention provides a high-speed railway radio block center command control system, the system architecture is as follows Figure 2 As shown, it includes: an operation display terminal HMI-T, a processor HMI-P and a data server HMI-S. The radio block center command control system can manage the operation commands of one or more RBCs.

[0036] Among them, the operation display terminal HMI-T is a human-machine interface device for the operator to issue operation commands and interact with RBC. It has the functions of manually setting commands, issuing commands, displaying command information, line status, station route object command status, train operation status and RBC operation status, and log query. Command setting is the core function of HMI-T. To ensure the correctness of the command, the system will perform logic verification and cyclic redundancy check to avoid errors caused by manual operation and data transmission; at the same time, considering the intelligence and timeliness of the operation, according to the topological link relationship of the data, the present invention adopts a neural network algorithm to accelerate node search and data output. The specific implementation method is:

[0037] Step 1: Determine the sample set of station route objects and the link condition function. Define the station route object link relationship model as:

[0038]

[0039] Among them, t i is the station route object, x i is the link status information of the station route object, f j is a conditional function; when the state of the search object satisfies f j The conditions described are x i The value of is 1, otherwise it is 0. For example: t i is the station turnout, f j The condition is that the position coordinates of the nodes in any direction of the turnout are consistent with the position coordinates of the nodes of the selected objects that are not connected to other objects; if the corresponding turnout t i Meet f j The value is 1 if the condition is described, otherwise it is 0.

[0040] Step 2: Based on the link relationship of the station route object, the command state model of the station route object is established as follows:

[0041]

[0042] Among them, z k v is the status information of the route object node that meets the command conditions, ki is the weighted value between the object link relationships, and the output transfer function is set to f1(·). The command state model includes an input layer and an output layer. In actual operation, the manual operation commands are monitored in real time. When the command start trigger condition is met, the output model algorithm is started. According to the station route object link relationship obtained in step 1, the command state information of the route object is calculated.

[0043] Considering the diversity of operation commands and the complexity of lines, multiple HMI-Ts can also be set up according to user needs to meet the needs of multiple operators responsible for issuing and managing commands. To ensure the rationality and traceability of manually issued operation commands, the operator's management scope and operation authority should meet the following conditions: each HMI-T operation terminal only supports one user login at the same time, each HMI-T's RBC operation scope and display scope are consistent, the same user can only log in to one HMI-T operation terminal, the operating user needs to log in again after the HMI-T and the interface device are disconnected and reconnected, and the HMI-T sends the commands it issues and the feedback information of the commands to the HMI-S for storage.

[0044] The processor HMI-P is the logical processing unit of the HMI system, which is used to realize functions such as command management and information forwarding. Command management refers to the unified and centralized management of all commands issued to RBC through the HMI system, including command verification, issuance and storage. Specifically, HMI-P performs logical verification on the commands issued by HMI-T according to the command management rules before issuing them to the corresponding RBC, and sends the commands to HMI-S for storage; receives the execution results obtained after the RBC executes the command, and feeds the execution results back to HMI-T. Information forwarding refers to sending the operating status information from each RBC and the train operation information within its jurisdiction to HMI-T for display, and sending the command execution results as command feedback information, as well as the operating status information of each RBC and the train operation information within its jurisdiction to HMI-S for storage. HMI-P is a key device that affects command safety. At the same time, as an interface device of the RBC logic host, HMI-P needs to operate stably to avoid causing the RBC logic host to be unstable. In order to ensure the reliability of commands and the stability of system operation, HMI-P adopts a two-by-two safety redundant structure, that is, it consists of two systems, A and B. The two systems can operate independently and both adopt a two-out-of-two synchronous operation and voting structure. The safety computing function of the system is implemented by the safety computing unit SCU (Safety Compute Unit) board. The SCU board is a dual-CPU board that provides synchronous operation function. The two CPUs perform periodic independent operations and perform timing synchronization at the key steps of the operation. The SCU board also has input and output comparison functions. The data output synchronously by the two branches is compared bit by bit according to the window length to ensure the consistency and correctness of the results. The consistent results are output, and the inconsistent results are handled according to the fault handling measures. The synchronous operation function and comparison function of the SCU board work together to complete the two-out-of-two voting function of the system. Each system of HMI-P is equipped with two Ethernet communication boards. The network port division method of the Ethernet communication boards of the two systems is exactly the same. The interface between the two systems adopts a dual-channel method with dual network redundancy. The failure of any channel will not affect the synchronous operation of the two systems. The safety principle and reliability design of the HMI system are as follows. Figure 3 and Figure 4 shown.

[0045] HMI-S is the data storage server of the HMI system, which stores operator operation records, records the system operation logs of HMI-T and HMI-P, and provides a data basis for HMI system personnel to determine the operation specifications and system fault diagnosis. One HMI system is equipped with two independent HMI-S, which adopts dual-machine redundancy to ensure redundant backup of data records. HMI-S only records received data and does not send information to HMI-T and HMI-P. Its failure does not affect the operation of HMI-T and HMI-P.

[0046] For the communication connection established between HMIS and peripherals, each communication connection IP and port can be flexibly configured. Each HMIS can be connected to at least 8 HMITs and at least 2 HMIPs at the same time.

[0047] The data flow between HMI-T, HMI-P and HMI-S in the HMI system is as follows: Figure 5 shown.

[0048] The command control of the HMI system on the RBC is inseparable from the driving safety. To ensure the security of command transmission and reception, the RSSP-II security protocol is adopted between HMI-T and HMI-P, and between HMI-P and RBC. The RSSP-II security protocol is a security communication protocol defined according to the security communication protocol specification of the European Train Control System (ETCS). By adopting the security protocol, it effectively avoids problems such as duplication, deletion, insertion, reordering, damage, delay and camouflage in the data transmission process. The RSSP-II security protocol is divided into three layers: the adaptation layer (ALE layer), the message authentication security layer (MASL layer) and the security application intermediate sublayer (SAI layer).

[0049] Among them, the ALE layer is mainly used to maintain the connection between communication devices. The connection uses redundancy to increase the reliability of communication. Only one valid copy of the data uploaded by the two connections is taken. When sending data, the same data is sent from the two connections. As long as one of the two connections can communicate normally, the protocol stack can work normally. The main function of the MASL layer is to ensure the correctness and security of the message. The implementation of this function relies on encrypting the data using the 3DES algorithm and verifying the direction of data transmission. The SAI layer provides two delay defense technologies: triple timestamp technology and EC technology. Only EC technology is used in this invention.

[0050] HMI-T and HMI-P communicate with each other, and HMI-P communicates with each RBC. At the same time, the HMI system uses a dual-network redundant structure for internal and external data exchange, and the dual networks use independent network devices, such as switches and routers, to ensure that the normal operation of the system is not affected when a network fails. The two-out-of-two dual-channel configuration is used between HMI-P and RBC, such as Figure 6 As shown in the figure, in terms of network settings, the HMI system needs to add switches and firewalls at each internal and external network port to avoid exposure of the RBC internal network and ensure network security. Figure 7 shown.

[0051] The present invention provides a high-speed railway radio block center command control system to construct a radio block center device composition and interface suitable for European high-speed railways, such as Figure 8 As shown in the figure, the control process is: the operator sends ETCS related commands to the RBC control unit through the HMI system (RBC command control system), and the RBC generates a driving permit based on the information from the on-board automatic train protection equipment (Automatic Train Protection, ATP), interlocking (Computer Based Inter Locking, CBI) and the adjacent radio block center to monitor the safe operation of the train.

[0052] Finally, it should be noted that it is obvious that those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include these modifications and variations.

[0053] The above is only an example of implementation of the present invention, but it cannot be used to limit the scope of the present invention. Any structural changes made according to the present invention, as long as they do not lose the essence of the present invention, should be regarded as falling within the scope of protection of the present invention and being restricted. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working process and related instructions of the method described above can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here.

[0054] The term "comprise" or any other similar term is intended to cover a non-exclusive inclusion such that a process, method, article, or apparatus / method that comprises a list of elements includes not only those elements but also other elements not expressly listed or inherent to such process, method, article, or apparatus / method.

[0055] So far, the technical solutions of the present invention have been described in conjunction with the further embodiments shown in the accompanying drawings, but it is easy for those skilled in the art to understand that the protection scope of the present invention is obviously not limited to these specific embodiments. Without departing from the principle of the present invention, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after these changes or substitutions will fall within the protection scope of the present invention.

[0056] In summary, the above are only preferred embodiments of the present invention and are not intended to limit the protection scope of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the protection scope of the present invention.

Claims

1. A high-speed railway radio block center command control system, characterized in that: It includes the operation display terminal HMI-T, the processor HMI-P and the data server HMI-S, which can manage the operation commands of one or more radio block centers; HMI-T is a human-machine interface device for operators to interact with the RBC. It has the functions of setting and issuing commands, displaying command information, line status, station route object command status, train operation status and RBC operation status, and log query. HMI-P is a logic processing unit that realizes command management and information forwarding. It verifies the operation commands sent by HMI-T, and sends the verified operation commands to the radio block center, and sends the operation commands to HMI-S for storage; it sends the received operation status information of each radio block center and the train operation information within its jurisdiction to HMI-T, and sends the command execution results, the operation status information of each radio block center and the train operation information within its jurisdiction to HMI-S for storage; HMI-S is a data storage server used to store operation records, HMI-T system operation logs, and HMI-P system operation logs. Two independent HMI-Ss are set up, using dual machines and redundant methods to ensure redundant backup of data records. The HMI-T uses the neural network algorithm to calculate the station route object command status in the following way: Step 1: Determine the station route object sample set and link condition function, and establish the station route object link relationship model, which is expressed as: Among them, t i is the station route object, x i is the link status information of the station route object, f j is a conditional function; when the state of the search object satisfies f j The condition x i The value of is 1, otherwise the value is 0; Step 2: Establish a station route object command state model based on the station route object link relationship model. The station route object command state model includes an input layer and an output layer, which is expressed as: Among them, z k v is the status information of the route object node that meets the command conditions, ki is the weighted value between object link relations, and the output transfer function is set to f1(·); Step 3: In actual use, the manual operation commands are monitored in real time. When the command start triggering condition is met, the station route object command state is calculated based on the station route object link relationship obtained in step 1 and the station route object command state model established in step 2; The i is the station turnout, f j The condition is that the position coordinates of the nodes in any direction of the turnout are consistent with the position coordinates of the nodes of the selected objects that are not connected to other objects; if the station turnout t i Meet f j The value is 1 if the condition is described, otherwise it is 0.

2. The radio block center command control system according to claim 1, characterized in that: The HMI-T only supports one user to log in at the same time. The operation range and display range of the HMI-T for the wireless block center are consistent. The same user can only log in to the same HMI-T. After the communication between the HMI-T and the interface device is interrupted and reconnected, the user needs to log in again.

3. The radio block center command control system according to claim 1, characterized in that: The HMI-P adopts a two-by-two-out-of-two safety redundant structure, that is, the HMI-P consists of two systems, A and B, and the communication method between the two systems is a dual-channel two-out-of-two method; and compares the data packets related to driving safety received from the two channels. If the data are consistent, the data is considered valid, otherwise the data packet is discarded.

4. The radio block center command control system according to claim 3, characterized in that: The A and B systems are both equipped with two Ethernet communication boards, and the network port division methods of the Ethernet communication boards of the two systems are completely consistent.

5. The radio block center command control system according to claim 1, characterized in that: The HMI-P adopts a hardware platform that has passed SIL4 level safety certification.

Images