Safety display method and system for realizing 2oo2 by single industrial computer

Abstract

The application discloses a kind of single industrial computer and realizes the safety display method and system of 2oo2, the method includes: the return code is sent to industrial computer;CPU and GPU in the industrial computer respectively process the return code, obtain two calculation results;Two calculation results are differentially displayed on the display interface of the industrial computer;According to the two calculation results of differential display, the return code is judged.The two calculation result information of the present application is displayed on the display interface of the same industrial computer, and the display mode is similar to the existing information display mode, without special or complicated steps;By using the different design method, the common-mode failure in the calculation and display of command execution result of industrial computer is greatly protected, and the safety of system is improved;Compared with prior art, the system technology meets the standard requirements better, and improves the safety and reliability of equipment.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of rail transit, in particular to a safety display method and system for realizing 2oo2 by a single industrial personal computer. BACKGROUND

[0002] Automatic Train Supervision (ATS) is an important part of the subway signal control module (U500), and cooperates with the trackside resource manager (WSIC), the trackside train manager (WSTC) and the on-board controller (CTC) to realize the state acquisition and centralized monitoring of the signal equipment, and controls the train to run automatically on the main line and the vehicle depot / parking lot according to the plan. The ATS sends control commands to the WSIC / WSTC / CTC and the like, and the WSIC / WSTC / CTC and the like feed back the command execution results to the ATS after receiving and processing the control commands, and the ATS displays the results on the interface after processing. The operator reads the execution results displayed on the ATS interface to judge the device state and perform subsequent operations.

[0003] The existing safety display method generally improves the safety of information display through data configuration or communication protection, such as ensuring the credibility of information through a special configuration data construction method, ensuring that the source information and the display information are consistent through direct communication and fixed safety display addresses, and ensuring that the communication information errors can be found in time through the detection and feedback of the predefined fault events. The above methods are beneficial to prevent errors and faults in the transmission process of the information, but cannot improve the correctness and safety of the information display. SUMMARY

[0004] The present application aims to provide a safety display method and system for realizing 2oo2 by a single industrial personal computer. The purpose is to solve the problem that the existing safety display method cannot improve the correctness and safety of information display.

[0005] To achieve the above purpose, the present application realizes the following technical scheme:

[0006] On the one hand, the present application provides a safety display method for realizing 2oo2 by a single industrial personal computer, which is applied to a subway signal control system, and the method comprises:

[0007] obtaining a return code from a HILC (High Integrity level control) command in the system, and sending the return code to the industrial personal computer;

[0008] the CPU and the GPU in the industrial personal computer process the return code respectively to obtain two calculation results;

[0009] The two calculation results are displayed differentially on the industrial computer display interface.

[0010] According to the two calculation results displayed differentially, the return code is determined.

[0011] Preferably, the step of determining the return code comprises:

[0012] Determining whether the two calculation results both indicate that the control command execution is successful or both indicate that the control command execution fails, if yes, the return code is adopted, if no, the return code is not adopted.

[0013] Preferably, the HILC command comprises interaction of four messages, the four messages are respectively: a request message, a receipt message, a confirmation message and a return code, wherein the request message, the receipt message and the confirmation message are downlink messages of a security operation, and the return code is a message of a security operation execution result.

[0014] Preferably, the step of the HILC command comprises:

[0015] Selecting an operation device and an operation command on the industrial computer to obtain a preparation dialog box;

[0016] The HILC preparation module in the system obtains a plurality of random items and a plurality of true values according to system data in the industrial computer, and fills the plurality of random items and the plurality of true values into an operation device drop-down list of the preparation dialog box;

[0017] According to actual needs, an operation device ID (Identity document, identity number) is selected in the operation device drop-down list of the preparation dialog box;

[0018] The HILC preparation module sends the request message to a control module in the system;

[0019] The control module sends the receipt message to a HILC confirmation module in the system, and an operation confirmation dialog box is displayed on the industrial computer interface;

[0020] According to actual needs, an operation command is selected in the operation confirmation dialog box, and the operation device ID is filled in an operation device box;

[0021] The HILC confirmation module sends the confirmation message to the control module;

[0022] The control module determines the consistency of the request message and the confirmation message;

[0023] The control module sends the return code to a HILC result module in the system;

[0024] The HILC result module processes the return code and sends the result to the industrial computer display interface for display.

[0025] Preferably, the several random items and the several true values are four random items and one true value.

[0026] Preferably, the control module is any one of a trackside resource manager, a trackside train manager and a vehicle-mounted controller.

[0027] Preferably, the industrial computer comprises the CPU, the GPU, a memory and a hard disk.

[0028] Preferably, the steps of processing the return code by the CPU and the GPU in the industrial computer respectively comprise:

[0029] When the HILC result module is working, the CPU reads a configuration file from the hard disk to obtain configuration data, part of the configuration data is used for parsing by the CPU, another part of the configuration data is transmitted by the CPU to the GPU, and the other part of the configuration data is used for parsing by the GPU;

[0030] After the CPU receives the return code, the CPU transmits a copy of the return code to the GPU, and the GPU performs data storage and processing;

[0031] A calculation check is performed to confirm the integrity and correctness of the return code;

[0032] The CPU and the GPU respectively obtain an operation ID and a configuration corresponding to the operation ID;

[0033] The CPU and the GPU respectively perform byte sequence conversion;

[0034] The CPU and the GPU respectively check data;

[0035] Two calculation results of the CPU and the GPU are obtained respectively;

[0036] Two calculation results of the CPU and the GPU are read and displayed respectively.

[0037] Preferably, the CPU uses a dynamic table for calculation check, and the GPU uses a static table for calculation check.

[0038] Preferably, the state table is generated only when the calculation check is performed, and the static table exists in the global space of the GPU after the GPU program is started.

[0039] Preferably, the CPU and the GPU respectively acquire the operation ID and the configuration corresponding to the operation ID, and the steps of acquiring the operation ID and the configuration corresponding to the operation ID respectively include:

[0040] The step of acquiring the operation ID and the configuration corresponding to the operation ID by the CPU includes that the CPU has only one calculation unit, and the configuration is searched and judged one by one by using a loop statement until the configuration matching the operation ID is found.

[0041] The step of acquiring the operation ID and the configuration corresponding to the operation ID by the GPU includes that the GPU has multiple calculation units, and the configuration matching the operation ID is directly calculated, that is, the matching configuration is directly located.

[0042] Preferably, the network byte sequence adopted by the return code is big-endian byte sequence, and the CPU and the GPU convert the received big-endian byte sequence into the byte sequence of the industrial computer.

[0043] Preferably, the step of converting the received big-endian byte sequence into the byte sequence of the industrial computer by the CPU and the GPU includes that the CPU converts the byte sequence of the loop statement field by field by using a QT conversion function, and the GPU simultaneously converts the byte sequence of each field corresponding to each calculation unit.

[0044] Preferably, the calculation result in the CPU is a string, and the calculation result in the GPU is a character array.

[0045] Preferably, the reading and displaying of the calculation result specifically include:

[0046] The CPU displays the calculation result by using QT, and renders the text by using the CPU; the GPU displays the calculation result by using OpenGL, and renders the text by using the GPU; the calculation result of the CPU and the calculation result of the GPU are respectively displayed in two parts of the display interface of the industrial computer.

[0047] Preferably, the CPU stores data by using the CPU cache or the memory, and the GPU stores data by using its own storage space.

[0048] In another aspect, the application further provides a single-industrial-computer safety display system for realizing 2oo2, which includes:

[0049] An HILC preparation module connected with an external control module, and sending a request message to the external control module;

[0050] HILC confirmation module, which is connected with the external control module, receives the return message sent by the external control module, and sends a confirmation message to the external control module;

[0051] HILC result module, which is connected with the external control module;

[0052] Industrial computer, which includes CPU, GPU, memory, hard disk and display interface, the industrial computer is connected with the HILC preparation module, HILC confirmation module and HILC result module respectively,

[0053] The external control module judges the consistency of the request message and the confirmation message, and sends a return code to the HILC result module, the HILC result module receives the return code and sends it to the industrial computer, the CPU and the GPU process the return code respectively to obtain two calculation results, and the two calculation results are displayed differently on the display interface.

[0054] Preferably, the external control module is any one of a wayside resource manager, a wayside train manager and a vehicle-mounted controller.

[0055] Preferably, according to the two calculation results displayed differently, the return code is judged, and the judging steps include:

[0056] If both of the two calculation results represent that the control command execution is successful or both represent that the control command execution fails, the return code is accepted, otherwise, the return code is not accepted.

[0057] Compared with the prior art, the present application has the following beneficial effects:

[0058] 1. The two calculation results are displayed on the display interface of the same industrial computer, and the display method is similar to the existing information display method, without special or complicated steps.

[0059] 2. The design method is different, which greatly protects the common mode failure of the industrial computer in the calculation and display of command execution results, and improves the safety of the system.

[0060] 3. Compared with the prior art, the system meets the standard requirements better, and improves the safety and reliability of the equipment. BRIEF DESCRIPTION OF DRAWINGS

[0061] In order to more clearly illustrate the technical solutions of the present application, the following will briefly introduce the drawings needed to be used in the description, and obviously, the drawings in the following description are an embodiment of the present application, and for those skilled in the art, other drawings can also be obtained without creative labor:

[0062] Figure 1 HILC interaction flowchart provided by an embodiment of the present application;

[0063] Figure 2 Flowchart of CPU and GPU double-chain processing of HILC command operation results provided by an embodiment of the present application. DETAILED DESCRIPTION

[0064] The following description will be made in conjunction with the drawings Figure 1 and Figure 2 The safety display method and system for realizing 2oo2 by a single industrial computer are further described in detail in the specific embodiments of the present application. The advantages and features of the present application will be clearer according to the following description. It should be noted that the drawings are greatly simplified and all use non-precise proportions, only for the purpose of facilitating and clarifying the description of the embodiments of the present application. In order to make the purpose, features and advantages of the present application more obvious and easy to understand, please refer to the drawings. It should be noted that the structure, proportion, size, etc. shown in the drawings attached to the present specification are only used to cooperate with the content disclosed in the specification, so that those skilled in the art can understand and read, and are not used to limit the conditions for implementing the present application, so they do not have technical significance. Any modification of structure, change of proportion relationship or adjustment of size, without affecting the effect and purpose that can be achieved by the present application, should still fall within the scope of the technical content disclosed by the present application.

[0065] In view of the current status of railway signal system and the shortcomings of existing protection methods, a safety display method and system for realizing 2oo2 by a single industrial computer are proposed to improve the correctness and safety of information display.

[0066] In one aspect, the present embodiment provides a safety display method for realizing 2oo2 (2 by 2 out of 2 platform, 2 by 2 by 2 safety platform) by a single industrial computer, which is applied to a subway signal control system, and the method comprises:

[0067] Step S1: obtaining four messages (1 th Return code) from a HILC command in the system. th Returncode) to the industrial computer.

[0068] The HILC command includes the interaction of four messages, which are respectively: a request message (1 st Request), an acknowledgement message (2 nd Acknowledgment), a confirmation message (3 rd Confirm) and a return code (4 th Return code), all of which are numbered 1st Request 2 nd Acknowledgment, 3 rd Confirm and 4 th The return code indicates the four messages included in the HILC command. Among them, the 1... st Request, the 2 nd Acknowledgment and the 3 rd Confirm is a message sent for safe operation, the 4 th The return code is a message indicating the result of the safe operation.

[0069] like Figure 1 As shown, the steps of the HILC command include:

[0070] Step S11: On the industrial control computer interface (GPC module in the ATS system), right-click to select the operating device and operation command. At this time, the command preparation dialog box will appear.

[0071] Step S12: The HILC preparation module generates 4 random items and 1 true value based on the system data and fills them into the operation device drop-down list in the preparation dialog box. The selected operation command is displayed in the status bar.

[0072] Step S13: The operator selects the operating device that matches their true intention from the operating device drop-down list in the preparation dialog box, and clicks the confirmation button to complete the first confirmation operation.

[0073] Step S14: HILC preparation module issued 1 st Request the WSIC / WSTC / CTC control module.

[0074] Step S15: The WSTC / WSIC / CTC control module sends 2 nd The Acknowledgment is sent to the HILC confirmation module, and the industrial control computer displays an operation confirmation dialog box.

[0075] Step S16: Within the specified time, the operator selects the operation command that matches their true intention from the operation command drop-down list in the operation confirmation dialog box, enters the operation device ID in the operation device box via keyboard, and clicks the confirmation button to complete the second confirmation operation.

[0076] Step S17: HILC confirmation module issues 3 rd Confirm to the WSIC / WSTC / CTC control module.

[0077] Step S18: Control module check 1st Request and 3 rd Confirm whether consistent, and according to the inspection results to determine whether the operation will be executed.

[0078] Step S19: WSIC / WSTC / CTC control module will operate the results 4 th Return Code sent to the HILC results module (HILC Result module in Figure 1), which contains the operation command execution success or failure state, and the operation execution failure reason.

[0079] Step S110: HILC results module receives processing operation execution results 4 th Return Code and sent to the industrial computer for display.

[0080] Step S2: the CPU and GPU in the industrial computer to the 4 th Return code is processed respectively, get two calculation results;

[0081] The industrial computer comprises the CPU, the GPU, the memory and the hard disk.

[0082] As Figure 2 shown, step S21: HILC Result module work, CPU will read the configuration file from the hard disk. Read the configuration data part for CPU parsing use; another part is by CPU to the GPU, for GPU parsing use. Because the format of the configuration data of CPU and GPU is different, so even if the CPU failure will be tampered with data, it is impossible to get consistent results after CPU and GPU processing.

[0083] Step S22: after receiving 4 th Return code message, CPU can directly read the original data of the message, CPU will also be transmitted a copy of 4 th Return code to the GPU for data storage and processing; thereafter GPU and CPU will be processed respectively 4 th Return code.

[0084] Step S23: calculate the CRC (Cyclic Redundancy Check) to confirm the integrity and correctness of 4 th Return code. CPU uses dynamic table to calculate the check, GPU uses static table to calculate the check; CPU used dynamic table only when calculating CRC will be generated, usually in the memory is not; GPU used static table is the GPU program after the start of the global space in the GPU.

[0085] Step S24: Obtain the operation ID and the corresponding configuration. The CPU has only one computing unit, which will find and judge one by one with a loop statement until it finds the configuration matching the operation ID; the GPU has 100 computing units, which will directly calculate the configuration matching the operation ID, that is, directly locate the matching configuration.

[0086] Step S25: Byte sequence conversion. The HILC result module receives the 4 th The network byte sequence of the return code is big-endian byte sequence, while the local device generally uses little-endian byte sequence, so the received message needs to be converted into the byte sequence of the local device to avoid the possibility that the message cannot be correctly parsed. In this step, the CPU has only one computing unit, which will convert the byte sequence field by field using a loop statement (using the QT conversion function); the GPU has 32 computing units, which will simultaneously convert the field corresponding to each computing unit (using a custom conversion function).

[0087] Step S26: Verify the data. The CPU has only one computing unit, which will verify the field by field using a loop statement; the GPU has 32 computing units, which will simultaneously verify the field corresponding to each computing unit;

[0088] Step S27: Obtain the result. The CPU has only one computing unit, which will judge whether it is a result field field by field using a loop statement (this process is carried out at the same time as verifying the data); the GPU has 32 computing units, which will simultaneously judge whether the field corresponding to each computing unit is a result field.

[0089] Step S28: Read and display the calculation result. The calculation result in the CPU is a QString string, and the calculation result in the GPU is a Char

[256] array; the CPU displays the result using QT (an application development framework), and the CPU renders the text; the GPU displays the result using OpenGL (an open image library), and the GPU renders the text; the CPU and the GPU provide differentiated display in two parts of the interface, respectively.

[0090] Step S3: Differentiate and display the two calculation results on the display interface of the industrial computer.

[0091] Step S4: Determine the 4 th Return code according to the two differentiated and displayed calculation results. The step of determining the 4 th Return code includes: judging whether the two calculation results represent consistent results, that is, both represent successful execution of the control command or both represent failed execution of the control command, and if so, accepting the 4 thReturn code, if not, then do not accept the 4 th Return code.

[0092] In another aspect, the embodiment also provides a single industrial personal computer to realize 2oo2 safety display system, comprising: HILC preparation module, which is connected with external control module, sends 1 st Request to the external control module; HILC confirmation module, which is connected with the external control module, receives the 2 nd Acknowledgment sent by the external control module, and sends 3 rd Confirm to the external control module; HILC result module, which is connected with the external control module; Industrial personal computer, which comprises CPU, GPU, memory, hard disk and display interface, the industrial personal computer is connected with the HILC preparation module, HILC confirmation module and HILC result module respectively.

[0093] The external control module judges the consistency of the 1 st Request and the 3 rd Confirm, and sends 4 th Return code to the HILC result module, the HILC result module receives the 4 th Return Code and sends to the industrial personal computer, the CPU and the GPU process the 4 th Return code respectively, get two calculation results, and the two calculation results are displayed differently on the display interface.

[0094] The control module is any one of wayside resource manager, wayside train manager and on-board controller.

[0095] According to the two calculation results of the differential display, the 4 th Return code is judged, and the judgment steps comprise: judging whether the two calculation results both represent that the control command is executed successfully, if yes, then accepting the 4 th Return code, if not, then do not accept the 4 th Return code.

[0096] HILC 4 th Return code is calculated and analyzed in CPU and GPU respectively, the execution results are also calculated and displayed by CPU and GPU respectively, and finally displayed by GPU in different display blocks.

[0097] The requirement design of CPU and GPU is completed by different teams respectively.

[0098] Two independent function processing modules in CPU and GPU, one module uses GPU to store and process data, and the other module uses the CPU of the host to store and process data. The two function processing modules are completely independent and have no data interaction.

[0099] GPU and CPU use different storage spaces respectively: CPU uses CPU cache and memory, and GPU uses internal cache space of GPU.

[0100] GPU and CPU use different languages and compilers respectively: GPU uses OpenCL language (Open Computing Language), and CPU uses QT (application development framework) language; during program running, OpenCL and GPU driver are used for compilation in GPU; CPU uses VS2010+QT compiler.

[0101] The display part adopts JTC technology, that is, the title part is displayed by GPU, and the status part is displayed by CPU, and the two parts of display jointly constitute the final display result. If any one display is wrong, the operator should consider that the command execution fails.

[0102] The formats of the display execution results of GPU and CPU are different: the font color and symbol position used by GPU and CPU are different.

[0103] The operator must confirm the display of the safety operation execution result of the two parts: when the user does not click the confirmation button, the execution result of the safety operation command cannot disappear automatically.

[0104] Taking the display of the execution result of the "WSIC initialization" command as an example: if the command is issued and executed successfully, the execution result dialog box is popped up, indicating that XXX (command name) execution is successful: the display of GPU in the title part is blue font, and the "<>" symbol is on the left and right sides of the "execution success" word; the display of CPU in the status part is gray font, and the "<>" symbol is on the left and right sides of the "XXX (command name)" word.

[0105] If the command execution fails, a dialog box is popped up, indicating that XXX (command name) execution fails and the reason for failure: the display of GPU in the title part is red font, and the "<>" symbol is on the left and right sides of the "execution failure" word; the display of CPU in the status part is gray font, and the reason for failure of XXX (command name) is displayed, and the "<>" symbol is on the left and right sides of the "XXX (command name)" word.

[0106] In summary, the calculation result information of the two parts of the CPU and the GPU in the embodiment is displayed on the same industrial computer display interface, the display mode is similar to the common information display mode, there is no special or complicated step, and the operator can maintain the usual information reading habit. The common mode failure in the calculation and display of the command execution result of the industrial computer is greatly prevented by using the different design method, and the safety of the system is improved. The Diversity technology recommended in the EN standard is used, the system meets the standard requirements, and the safety and reliability of the equipment are improved.

[0107] It should be noted that the relative terms such as first and second and the like are used herein solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any such actual relationship or order between such entities or actions. Moreover, the terms "comprises", "comprising", or any other variations thereof, are intended to cover a non-exclusive inclusion such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but can include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element preceded by "comprises a" does not, without more constraints, foreclose the existence of additional identical elements in the process, method, article, or apparatus that comprises the recited element.

[0108] It should be noted that the apparatus and method disclosed in the embodiments herein can also be implemented by other ways. The apparatus embodiments described above are only schematic, and the flowcharts and block diagrams in the accompanying drawings illustrate possible implementation architectures, functions and operation of the apparatus, method and computer program product according to the embodiments herein. In this regard, each block in the flowcharts and block diagrams can represent a module, a program segment or a portion of code which comprises one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions noted in the blocks can occur out of the order noted in the flowcharts. For example, two blocks shown in succession may, in fact, be executed substantially concurrently or in the reverse order, depending on the functionality involved. It will also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can be implemented by dedicated hardware-based systems that carry out the specified functions or acts, or can be implemented by a combination of dedicated hardware and computer instructions.

[0109] In addition, each functional module in each embodiment herein can be integrated together to form an independent part, or each module can exist independently, or two or more modules can be integrated to form an independent part.

[0110] Although the present application has been described in detail by the preferred embodiments, it should be recognized that the above description is not to be considered in a limiting sense. Many modifications and variations of the present application will be apparent to those skilled in the art upon reading the above description. Therefore, it is intended that all such modifications and variations come within the scope of the present application as defined by the appended claims.

Claims

1. A method for implementing 2oo2 safety display using a single industrial control computer, characterized in that, It is applied to a subway signal control system, and the method includes: The return code is obtained from the HILC command in the system, and the return code is sent to the industrial control computer; The CPU and GPU in the industrial control computer process the return code separately to obtain two calculation results; The two calculation results are displayed differently on the industrial control computer display interface; Based on the two calculation results displayed in the differentiated presentation, the return code is determined. The steps for the CPU and GPU in the industrial control computer to process the return code include: When the HILC results module is working, the CPU reads the configuration file from the hard disk to obtain configuration data. A portion of the configuration data is used by the CPU for parsing, and another portion of the configuration data is passed through by the CPU to the GPU for parsing. After receiving the return code, the CPU transmits a copy of the return code to the GPU, where the GPU performs data storage and processing. Perform calculations and verifications to confirm the completeness and correctness of the returned code; The CPU and the GPU respectively obtain the operation ID and the configuration corresponding to the operation ID; The CPU and the GPU perform byte order conversion respectively; The CPU and the GPU respectively verify the data; Obtain the two calculation results from the CPU and the GPU respectively; The two calculation results from the CPU and the GPU are read and displayed respectively.

2. The method for implementing 2oo2 safety display using a single industrial control computer as described in claim 1, characterized in that, The steps for determining the return code include: Determine whether both calculation results indicate that the control command was executed successfully or both indicate that the control command was executed unsuccessfully. If so, the return code is accepted; otherwise, the return code is not accepted.

3. The method for implementing 2oo2 safety display using a single industrial control computer as described in claim 1, characterized in that, The HILC command includes the interaction of four messages: a request message, a receipt message, a confirmation message, and a return code. The request message, the receipt message, and the confirmation message are the issuance messages for the security operation, and the return code is the message indicating the result of the security operation.

4. The method for implementing 2oo2 safety display using a single industrial control computer as described in claim 3, characterized in that, The steps of the HILC command include: Select the operating device and operating command on the industrial computer to obtain the preparation dialog box; The HILC preparation module in the system obtains several random items and several true values ​​based on the system data in the industrial control computer, and fills the several random items and several true values ​​into the operation device drop-down list of the preparation dialog box; In the preparation dialog box, select the operating device ID from the operating device drop-down list according to your actual needs; The HILC preparation module sends the request message to the control module in the system; The control module sends the receipt message to the HILC confirmation module in the system, and the industrial control computer interface displays an operation confirmation dialog box; According to actual needs, select the operation command in the operation confirmation dialog box and enter the operation device ID in the operation device box; The HILC confirmation module sends the confirmation message to the control module; The control module determines the consistency between the request message and the confirmation message; The control module sends the return code to the HILC result module in the system; The HILC result module processes the return code and sends the result to the industrial control computer display interface for display.

5. The method for implementing 2oo2 safety display using a single industrial computer as described in claim 4, characterized in that, The plurality of random items and the plurality of true values ​​are 4 random items and 1 true value.

6. The method for implementing 2oo2 safety display using a single industrial control computer as described in claim 4, characterized in that, The control module can be any one of the following: trackside resource manager, trackside train manager, and on-board controller.

7. The method for implementing 2oo2 safety display using a single industrial control computer as described in claim 4, characterized in that, The industrial control computer includes: the CPU, the GPU, memory, and hard disk.

8. The method for implementing 2oo2 safety display using a single industrial control computer as described in claim 7, characterized in that, The CPU uses dynamic tables to calculate the verification, while the GPU uses static tables to calculate the verification.

9. The method for implementing 2oo2 safety display using a single industrial control computer as described in claim 8, characterized in that, The dynamic table is generated only during the calculation and verification, while the static table exists in the global space of the GPU after the GPU program starts.

10. The method for implementing 2oo2 safety display using a single industrial control computer as described in claim 7, characterized in that, The steps for the CPU and the GPU to obtain the operation ID and the configuration corresponding to the operation ID respectively include: The steps for the CPU to obtain the operation ID and the corresponding configuration are as follows: The CPU has only one computing unit, and it uses a loop statement to search and judge the configuration one by one until it finds a configuration that matches the operation ID. The steps for the GPU to obtain the operation ID and the configuration corresponding to the operation ID are as follows: The GPU has multiple computing units, which directly calculate the configuration that matches the operation ID, that is, directly locate the matching configuration.

11. The method for implementing 2oo2 safety display using a single industrial control computer as described in claim 7, characterized in that, The network byte order used in the returned code is big-endian, and the CPU and the GPU convert the received big-endian byte order into the byte order of the industrial control computer.

12. The method for implementing 2oo2 safety display using a single industrial control computer as described in claim 11, characterized in that, The steps for the CPU and the GPU to convert the received big-endian byte order to the byte order of the industrial control computer include: the CPU using a QT conversion function to convert the byte order of the loop statement field by field, and the GPU simultaneously converting the byte order of the field corresponding to each computing unit.

13. The method for implementing 2oo2 safety display using a single industrial control computer as described in claim 7, characterized in that, The calculation result in the CPU is a string, and the calculation result in the GPU is a character array.

14. The method for implementing 2oo2 safety display using a single industrial control computer as described in claim 7, characterized in that, The reading and displaying of calculation results specifically includes: The CPU uses an application development framework to display the calculation results and renders text; the GPU uses an open image library to display the calculation results and renders text; the CPU calculation results and the GPU calculation results are displayed differently in two parts of the industrial control computer display interface.

15. The method for implementing 2oo2 safety display using a single industrial control computer as described in claim 7, characterized in that, The CPU uses the CPU cache or the memory to store data, while the GPU uses its own storage space to store data.

16. A safety display system for 2002 implemented by a single industrial computer, characterized in that, include: The HILC preparation module is connected to the external control module and sends request messages to the external control module. The HILC confirmation module is connected to the external control module, receives the receipt message sent by the external control module, and sends a confirmation message to the external control module. The HILC results module is connected to the external control module. An industrial control computer, comprising a CPU, GPU, memory, hard disk, and display interface, is connected to the HILC preparation module, HILC confirmation module, and HILC result module, respectively. The external control module determines the consistency between the request message and the confirmation message, and sends a return code to the HILC result module. The HILC result module receives the return code and sends it to the industrial control computer. The CPU and the GPU process the return code respectively to obtain two calculation results, which are then displayed differently on the display interface. The steps for the CPU and GPU in the industrial control computer to process the return code include: When the HILC result module is working, the CPU reads the configuration file from the hard disk to obtain configuration data. A portion of the configuration data is used by the CPU for parsing, and another portion of the configuration data is passed through by the CPU to the GPU for parsing. After receiving the return code, the CPU transmits a copy of the return code to the GPU, where the GPU performs data storage and processing. Perform calculations and verifications to confirm the completeness and correctness of the returned code; The CPU and the GPU respectively obtain the operation ID and the configuration corresponding to the operation ID; The CPU and the GPU perform byte order conversion respectively; The CPU and the GPU respectively verify the data; Obtain the two calculation results from the CPU and the GPU respectively; The two calculation results from the CPU and the GPU are read and displayed respectively.

17. The single-industrial-computer-based 2oo2 safety display system as described in claim 16, characterized in that, The external control module can be any one of the following: trackside resource manager, trackside train manager, and on-board controller.

18. The single industrial computer-based 2oo2 safety display system as described in claim 16, characterized in that, Based on the two calculation results displayed in the differential display, the return code is determined, and the determination steps include: Determine whether both calculation results indicate that the control command was executed successfully or both indicate that the control command was executed unsuccessfully. If so, the return code is accepted; otherwise, the return code is not accepted.

Images