A dual-system hot standby redundant BTM device, ATP main control unit and working method

Abstract

The present invention provides a dual-system hot standby redundant BTM device, which is connected to an ATP main control unit, and includes a hot standby A-system BTM and a B-system BTM; wherein, for any system BTM: it includes an antenna unit and a main processing unit, the main processing unit is respectively connected to the antenna unit and the ATP main control unit, and is respectively connected to the two-system antenna units through a power supply enabling cross control line of the system, and can receive a control command of the ATP main control unit, and control any system antenna unit to power on or power off through the enabling cross control line according to the control command; the powered-on antenna unit communicates with the ground transponder passing by, receives the transponder message sent by the transponder and sends it to the main processing unit after processing, and the main processing unit sends it to the ATP main control unit after processing. The present invention can control the antenna units to be used alternately, prolong the service life of high-power devices, and improve the reliability and availability of BTM equipment.

Description

Technical Field

[0001] The present invention relates to the field of rail transit signals, and in particular to a dual-system hot standby redundant BTM device (balise transmission device), an ATP (automatic train overspeed protection device) main control unit and a working method. Background Art

[0002] The driving safety of my country's high-speed railways is guaranteed by CTCS (Train Control System). Starting from CTCS-2, the train control system provides automatic train overspeed protection function, among which the ATP device is the core of the on-board equipment of the entire train control system. It generates dynamic speed curves according to the target distance continuous speed control mode based on the driving permission, line parameters, temporary speed limit and other information and EMU parameters provided by the ground equipment, and monitors the safe operation of the train. The ground transponder is a ground device used to provide driving permission information, which includes passive transponders and active transponders. The passive transponder can provide information such as the length of the block section, line speed, line slope, and train positioning. The active transponder can provide information such as temporary speed limit and route parameters. The information provided by the ground transponder is transmitted to the ATP device through the BTM device in the on-board equipment. The BTM device plays a very important role in ensuring the safety of train driving.

[0003] The BTM device consists of two parts: the BTM host and the antenna unit. The BTM host controls the antenna unit to turn on or off the activation signal used to activate the ground transponder. When the antenna unit of the BTM device passes over the ground transponder, the activation signal emitted by the antenna unit will activate the ground transponder. The activated ground transponder sends the transponder message to the BTM device via the uplink signal. After receiving the uplink input data, the BTM device obtains the user data through amplification, filtering, demodulation, decoding and other operations and transmits it to the main control unit of the ATP device (hereinafter referred to as the ATP main control unit).

[0004] In railway signal systems, from the perspective of availability and reliability, BTM equipment is usually required to be dual-system redundant, with each BTM device including a BTM host and an antenna unit. From the definition of the crosstalk zone in standard TB / T 3485-2017, it can be seen that the distance between the two antenna units should be 4.0 meters or more. When this condition is not met, only one antenna unit is allowed to work at the same time. To avoid mutual interference between the two antenna units, the common working mode is cold standby, where the power supply of each BTM device is controlled by a switch, and only one system is powered on as the working BTM device, and the other system is the backup BTM device. When the working BTM device fails, it is manually switched to the backup BTM device to power on. However, this operation requires stopping the vehicle, which affects driving safety and line operation efficiency.

[0005] To solve this problem, the industry is also developing hot standby redundant BTM equipment. The hot standby redundant BTM equipment currently developed mainly has two series of BTM equipment with BTM hosts working at the same time, but the antenna units of the two series do not work at the same time. When powered on, it selects a preset antenna unit as the working antenna unit and the other antenna unit as the backup antenna unit. If the working antenna unit is normal, it will continue to work, and only automatically switch to the backup antenna unit when the working antenna unit fails. However, this method has disadvantages and hidden dangers: the power amplifier module in the antenna unit is a high-power device, which is easily damaged by long-term continuous use, reducing the reliability and availability of the BTM equipment. Summary of the invention

[0006] The object of the present invention is to provide a dual-system hot standby redundant BTM device, an ATP main control unit and a working method, which can realize the alternating use of antenna units each time the device is turned on based on the settings, or switch to the antenna unit specified by the ATP main control unit according to the command of the ATP main control unit during normal operation. By controlling the alternating use of the antenna units, their service life can be extended and the reliability and availability of the BTM device can be improved.

[0007] To achieve the above object, the present invention is implemented through the following technical solutions:

[0008] A dual-system hot standby redundant BTM device is connected to an ATP main control unit, including a hot standby A-system BTM and a B-system BTM; wherein, for any of the BTMs:

[0009] It includes an antenna unit and a main processing unit, wherein the main processing unit is connected to the antenna unit and the ATP main control unit respectively, and is connected to the two antenna units respectively through the power supply enabling cross control line of the system, and can receive the control command of the ATP main control unit, and control any antenna unit of the system to power on or power off through the enabling cross control line according to the control command;

[0010] The antenna unit that is powered on communicates with the ground transponder it passes by, receives the transponder message sent by it, and sends it to the main processing unit after processing. The main processing unit sends it to the ATP main control unit after processing.

[0011] Preferably, the antenna unit is respectively connected to the two series of main processing units through the data transmission cross line of the system, and is used to send the data output by the antenna unit to the two series of main processing units respectively, so that when one of the antenna units fails, the two series of main processing units can obtain the transponder message output by it from the other series of antenna units; and when one of the main processing units fails, the other series of main processing units can still obtain the transponder message output by it from the two series of antenna units.

[0012] Preferably, the antenna unit comprises a power amplifier module, which is connected to the two-system main processing units respectively through two-system power supply enabling cross control lines;

[0013] The power amplifier module can control the power on or off of the main body based on the power supply enable signal of any power supply enable cross control line, thereby realizing the power on operation or power off non-operation of the antenna unit.

[0014] Preferably, the antenna unit further comprises an antenna for sending and receiving wireless communication signals, and the power amplifier module is connected to the antenna;

[0015] When the power amplifier module is powered on, it can generate an activation signal and transmit it to the ground transponder passing through the antenna to activate the ground transponder; and output the uplink signal carrying the transponder message sent by the activated ground transponder received by the antenna after filtering and amplification.

[0016] Preferably, the antenna unit further comprises a demodulation module connected to the power amplifier module, and the demodulation module is respectively connected to the two system main processing units through the data transmission cross line of the system;

[0017] The demodulation module demodulates the filtered and amplified uplink signal output by the power amplifier module, generates a baseband code, and sends it to the two-system main processing units through the data transmission cross line of the system.

[0018] Preferably, the dual-system hot standby redundant BTM device further comprises a power supply unit;

[0019] The power supply unit is connected to the power amplifier module to supply power to the power amplifier module.

[0020] Preferably, the main processing unit includes a decoding module, which is connected to the demodulation module of the antenna unit of the same system through the data transmission cross line of the same system and to the demodulation module of the antenna unit of another system through the data transmission cross line of another system. The decoding module is used to receive the baseband code from the demodulation module of the antenna unit that works when it is powered on, perform decoding processing to generate a decoding message, and then output it.

[0021] Preferably, the main processing unit further comprises a communication module, and the communication module is connected to the decoding module and the ATP main control unit respectively;

[0022] The communication module receives the decoded message from the decoding module, and packages it into transponder message user data and sends it to the ATP main control unit.

[0023] Preferably, the communication module is respectively connected to the power amplifier modules of the two-system antenna units through a local power supply enabling cross control circuit.

[0024] Preferably, the working status of the communication module includes an INIT status, a READY status, a NORMAL status and a FAIL status.

[0025] Preferably, the communication module can perform power-on self-test and regular online self-test on each module of the system and the power amplifier modules of other systems, and feed back the self-test results to the ATP main control unit.

[0026] Preferably, the control commands of the ATP main control unit include NORMAL state commands;

[0027] The communication module can switch different working states according to the power-on self-test, the periodic online self-test and the NORMAL state command of the ATP main control unit, and feed back the current working state to the ATP main control unit.

[0028] Preferably, the control commands of the ATP main control unit include commands for specifying the main system;

[0029] The communication module can be designated as a main system communication module or a backup system communication module according to a control command of the ATP main control unit in the NORMAL state, or switch between the main system communication module and the backup system communication module, wherein the main system communication module is unique.

[0030] Preferably, the control command of the ATP main control unit includes an antenna unit selection command;

[0031] The main system communication module can send corresponding power supply enable signals to the power amplifier modules of the two system antenna units respectively according to the designation of the antenna unit selection command through the power supply enable cross control line of the main system.

[0032] The antenna unit selection command enables the antenna unit specified to work to be powered on, and the antenna unit specified to be inoperative to be powered off and inoperative;

[0033] Alternatively, both antenna units of the two systems are powered on and operated, or both are powered off and not operated, as specified by the antenna unit selection command.

[0034] Preferably, the power supply enable signal is a positive / negative logic level, which is used to implement power-on and power-off, or vice versa.

[0035] Preferably, when both antenna units are powered on and send baseband codes to the decoding module,

[0036] If the baseband codes from the two antenna units are successfully decoded into decoded messages, the decoding module only retains one of the decoded messages;

[0037] If the baseband code of only one series of antenna units is successfully decoded into a decoded message, the decoding module only retains this decoded message;

[0038] If the baseband codes from the two antenna units fail to be decoded, the decoding module outputs a decoding failure alarm code.

[0039] Preferably, when the communication module receives the decoding failure alarm code from the decoding module, the communication module notifies the ATP main control unit and records the decoding failure alarm code in a local non-volatile memory.

[0040] Preferably, the communication module communicates with the ATP main control unit using a secure communication protocol.

[0041] An ATP main control unit is connected to any of the above-mentioned dual-system hot standby redundant BTM devices, and can send an antenna unit selection command to the dual-system hot standby redundant BTM device to make the dual-system hot standby redundant BTM device switch its designated antenna unit.

[0042] Preferably, the ATP main control unit can also send a NORMAL state command for making the communication module enter the NORMAL state to the dual-system hot standby redundant BTM device, as well as a designated main system command for designating the main and standby system communication modules or switching the main and standby systems.

[0043] Preferably, the antenna unit selection command includes an instruction capable of specifying that one set of antenna units is working and the other set of antenna units is not working, specifying that both sets of antenna units are not working, or both sets of antenna units are working.

[0044] Preferably, the antenna unit selection command includes instructions that can realize the function of rotating and using different antenna units each time the device is turned on.

[0045] Preferably, the antenna unit selection command includes an instruction capable of implementing a function of periodically switching the working antenna unit during normal operation.

[0046] Preferably, the ATP main control unit communicates with the dual-system hot standby redundant BTM device using a redundant communication bus.

[0047] A working method of a dual-system hot standby redundant BTM device is implemented based on any of the above dual-system hot standby redundant BTM devices, comprising the steps of:

[0048] S1. After power-on, the main processing units of the two systems enter the INIT state and perform power-on self-test on each module of the BTM of the own system and the power amplifier module of the other system respectively;

[0049] After the power-on self-test passes, the main processing unit of the system enters the READY state, otherwise it enters the FAIL state.

[0050] Preferably, the method further comprises the steps of:

[0051] S2. In READY state:

[0052] The main processing units of the two systems perform regular online self-tests and regularly send the current working status and self-test results to the ATP main control unit. The content of the regular online self-test is the same as the power-on self-test.

[0053] After the regular online self-test is passed and the NORMAL state command is received from the ATP main control unit, the main processing unit of the system enters the NORMAL state;

[0054] After the regular online self-test is passed but the NORMAL state command from the ATP main control unit is not received, the main processing unit of the system remains in the READY state;

[0055] When the online self-test fails, the main processing unit of the system enters the FAIL state.

[0056] Preferably, the method further comprises the steps of:

[0057] S3. In NORMAL state:

[0058] According to the designated master system command of the ATP master control unit, the designated master processing unit becomes the master system master processing unit, and the other system master processing unit becomes the standby system master processing unit;

[0059] After receiving the antenna unit selection command from the ATP main control unit, the main processing unit of the main system controls the corresponding antenna unit to power on or off;

[0060] The main processing unit performs regular online self-test and sends the working status to the ATP main control unit regularly. The content of the regular online self-test is the same as the power-on self-test.

[0061] The main processing unit that passes the regular online self-test remains in the NORMAL state; otherwise, it enters the FAIL state;

[0062] The ATP main control unit switches the main system to the standby system according to the status of the main processing units of the two systems, so that the main processing unit of the main system is always the main processing unit in the NORMAL state;

[0063] S4. The main processing unit in FAIL state cuts off its output to the ATP main control unit.

[0064] Preferably, when the main processing unit performs power-on self-test or periodic online self-test on one series of power amplifier modules, it continuously sends a power enable signal to power on the power amplifier module of that series; and continuously sends a power enable signal to power off the other series of power amplifier modules.

[0065] Preferably, the two main processing units do not perform power-on self-test and periodic online self-test on the power amplifier module at the same time to avoid conflicts.

[0066] Preferably, when both main processing units of the two systems are in the READY state, the power amplifier modules of the two systems are controlled to be powered off simultaneously when no regular online self-check is performed.

[0067] In summary, compared with the prior art, the dual-system hot standby redundant BTM device, ATP main control unit and working method provided by the present invention have the following beneficial effects:

[0068] 1. By providing an antenna unit selection interface for the BTM device, it supports the use of different antenna units in rotation each time the device is turned on, and switches to the designated antenna unit according to the command of the ATP main control unit during normal operation, which is conducive to extending the service life of the high-power devices of the BTM device;

[0069] 2. Through the control command issued by the ATP main control unit, when driving in the section without transponders, the BTM equipment can turn off the antenna units of the two series of BTM equipment, which can extend the service life of the high-power devices of the BTM equipment and achieve energy-saving effects;

[0070] 3. The redundancy of the BTM equipment is improved by adopting a redundant communication bus design for communication between the BTM equipment and the ATP main control unit, and a cross-communication design between the antenna unit and the main processing unit of the two series of BTM equipment. BRIEF DESCRIPTION OF THE DRAWINGS

[0071] Figure 1 It is a structural schematic diagram of a dual-system hot standby redundant BTM device of the present invention;

[0072] Figure 2 Schematic diagram of the state machine of the communication module of the present invention. DETAILED DESCRIPTION

[0073] The following is a further detailed description of a dual-system hot standby redundant BTM device, ATP main control unit and working method proposed by the present invention in conjunction with the accompanying drawings and specific implementation methods. According to the following description, the advantages and features of the present invention will be clearer. It should be noted that the accompanying drawings are in a very simplified form and use non-precise proportions. They are only used to conveniently and clearly assist in explaining the purpose of the implementation method of the present invention, and are not used to limit the limiting conditions for the implementation of the present invention. Therefore, they have no technical substantive significance. Any structural modification, change in proportional relationship or adjustment of size should still fall within the scope of the technical content disclosed by the present invention without affecting the efficacy and purpose that can be achieved by the present invention.

[0074] It should be noted that, in the present invention, relational terms such as and are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only the elements explicitly listed, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0075] Combined with Figures 1-2 , a dual-system hot standby redundant BTM device, ATP main control unit and working method provided by the present invention are described in detail.

[0076] Attached Figure 1 The dual-system hot standby redundant BTM device of the present invention is shown, which is connected to the ATP main control unit of the train and communicates wirelessly with the ground transponder passed by, and is used to receive the transponder message sent by the ground transponder passed by and transmit it to the ATP main control unit after processing. The dual-system hot standby redundant BTM device includes hot standby, completely identical A-system BTM and B-system BTM, and is described in detail below using one of the BTMs as an example:

[0077] Each BTM series includes: antenna power supply unit, antenna unit and main processing unit. Among them:

[0078] The antenna power supply unit is used to supply power to the antenna unit. In some embodiments, there may be only one antenna power supply unit, which is shared by the two antenna units, but the reliability is not high, and it is preferably equipped separately for each system.

[0079] The antenna unit is connected to the antenna power supply unit (referring to the connection between the antenna power supply unit of this system and the antenna unit of this system. If there is no special specification in the text, it refers to the connection between this system and this system), and the connection between the antenna unit and the antenna power supply unit can be controlled to be open or disconnected, so as to realize the controlled power-on or power-off of the antenna unit. The powered-on antenna unit can wirelessly communicate with the ground transponder it passes through, send an activation signal to activate it when passing through the ground transponder, and receive the transponder message sent by it through the uplink signal, and generate the baseband code after filtering, amplification and demodulation; and the antenna unit is respectively connected to the main processing units of the two systems through the data transmission cross line of this system (that is, the antenna unit of the A system is respectively connected to the main processing units of the two systems through the data transmission cross line of the A system, and the antenna unit of the B system is respectively connected to the main processing units of the two systems through the data transmission cross line of the B system), and the generated baseband code is sent to the main processing units of the two systems through the data transmission cross line of this system, so as to realize the redundant backup of the data output of the antenna unit. The antenna unit includes:

[0080] Antenna, used for sending and receiving wireless communication signals.

[0081] A power amplifier module comprises an antenna port, a data output port, a power supply port and a power supply enable port; wherein the antenna port is connected to the antenna, and the power supply port is connected to the antenna power supply unit; the power amplifier module can control the power on or off of the main body based on the power supply enable signal received by the power supply enable port, thereby realizing the power on operation or power off non-operation of the antenna unit; and, when the power amplifier module is powered on, it can generate an activation signal and transmit it to the ground transponder passing through the antenna to activate the ground transponder; and the uplink signal carrying the transponder message sent by the activated ground transponder received by the antenna is output to the data output port after filtering and amplification.

[0082] The demodulation module includes a demodulation input port and a baseband code output port. The demodulation input port is connected to the data output port of the power amplifier module, and the baseband code output port is respectively connected to the two system main processing units through the data transmission cross line of the system; the demodulation module is used to demodulate the filtered and amplified uplink signal output by the power amplifier module, generate a baseband code, and send it to the two system main processing units through the data transmission cross line of the system.

[0083] As mentioned above, the main processing unit is connected to the antenna unit of the same system through the data transmission cross-line of the same system, and is connected to the antenna units of other systems through the data transmission cross-line of other systems (that is, the main processing unit of the A system is connected to the antenna unit of the A system through the data transmission cross-line of the A system, and is connected to the antenna unit of the B system through the data transmission cross-line of the B system; the main processing unit of the B system is connected to the antenna unit of the B system through the data transmission cross-line of the B system, and is connected to the antenna unit of the A system through the data transmission cross-line of the A system), and the main processing unit is connected to the ATP main control unit through the communication bus; and the main processing unit is respectively connected to the antenna units of the two systems through the power supply enabling cross-control line of the same system (that is, the main processing unit of the A system is respectively connected to the antenna units of the two systems through the power supply enabling cross-control line of the A system, and the main processing unit of the B system is respectively connected to the antenna units of the two systems through the power supply enabling cross-control line of the B system).

[0084] The main processing unit receives the control command of the ATP main control unit, specifies the main processing unit of the main and standby systems according to the control command, and the main processing unit of the main system can send different power supply enable signals to the antenna units of the two systems through the power supply enable cross control line of the system according to the control command, so that the antenna unit specified by the ATP main control unit is powered on and working, and the antenna unit of the other system is powered off and not working; or send the same power supply enable signal, so that both antenna units of the two systems are powered on and working, or both are powered off and not working; and, through the connected data transmission cross line of the system or the data transmission cross line of the other system, the baseband code is received from the powered antenna unit, and then after decoding and packaging, the transponder message user data is generated and sent to the ATP main control unit. The redundant design of the two-system data transmission cross line can realize that when one of the antenna units fails, the main processing units of the two systems can obtain the transponder message output by the other antenna unit; and when one of the main processing units fails, the main processing unit of the other system can still obtain the transponder message output by the two antenna units, which has high redundancy.

[0085] Furthermore, the main processing unit includes: a decoding module and a communication module; wherein,

[0086] The decoding module includes a decoding input port and a decoding output port, wherein the decoding input port is connected to the baseband code output port of the demodulation module of the antenna unit of the own system through the data transmission cross line of the own system, and is connected to the baseband code output port of the demodulation module of the demodulation module of the antenna unit of the other system through the data transmission cross line of the other system, and is used for receiving the baseband code from the demodulation module of the antenna unit that is powered on, and generating a decoding message after decoding processing and sending it to the decoding output port. Among them, when the antenna unit is switched when passing through the same ground transponder, so that the antenna units of the two systems are powered on successively and send the baseband code, or the antenna units of the two systems are powered on at the same time, if the baseband codes from the antenna units of the two systems are successfully decoded into a decoding message, the decoding module only retains one of the decoding messages, for example, only retains the decoding message generated based on the baseband code of the antenna unit of the own system; if the baseband code of only one antenna unit is successfully decoded into a decoding message, the decoding module only retains this decoding message; if the baseband codes from the antenna units of the two systems fail to be decoded, the decoding module sends a decoding failure alarm code to the communication module.

[0087] The communication module includes a communication input port, an ATP communication port and a power supply control port; wherein the communication input port is connected to the decoding output port of the decoding module, the ATP communication port communicates with the ATP main control unit through a communication bus, and the power supply control port is respectively connected to the power supply enable ports of the power amplifier modules of the two-system antenna units through the power supply enable cross control line of the system.

[0088] The communication module receives the decoded message from the decoding module, and packages it into transponder message user data and sends it to the ATP main control unit through the communication bus; wherein, since the transponder message user data is security-related, the communication module and the ATP main control unit communicate using a secure communication protocol, such as the RSSP-I communication protocol; when the communication module receives the decoding failure alarm code from the decoding module, the communication module notifies the ATP main control unit of the event, and records the decoding failure alarm code in the local non-volatile memory.

[0089] Furthermore, the communication module can perform power-on self-test and periodic online self-test on each module of the system and the power amplifier modules of other systems, and feed back the self-test results to the ATP main control unit; can receive control commands from the ATP main control unit, and switch different working states according to the power-on self-test, periodic online self-test and the control commands of the ATP main control unit, and feed back the current working state to the ATP main control unit; can be designated as the main system or the backup system (the main system is the only one) according to the control commands of the ATP main control unit in the NORMAL state, and perform the main-backup system switching; and, the main system communication module can send different power supply enable signals to the power amplifier modules of the antenna units of the two systems respectively through the power supply enable cross control line of the system according to the control commands of the ATP main control unit, so that the antenna units designated to work by the ATP main control unit are powered on and work, and the antenna units designated not to work are powered off and not work; or, the main system communication module can also send the same power supply enable signal according to the control commands of the ATP main control unit, so that both antenna units of the two systems are powered on and work, or both are powered off and not work. The normal working state is that only one system is powered on and the other system is powered off to prevent the power amplifier module from being lost. However, under special circumstances, both systems can be powered on or both systems can be powered off, which can flexibly meet the needs of various special scenarios: for example, when driving in an area without a transponder, the antenna units of both systems can be turned off at the same time to extend the service life of the power amplifier module and achieve energy saving. For example, when the A and B system antenna units are located at the front and rear of the train respectively, the two systems can be set to work at the same time to enhance the safety of the system.

[0090] Furthermore, the working status of the communication module includes INIT status, READY status, NORMAL status and FAIL status. The control commands of the ATP main control unit include: antenna unit selection command, NORMAL status command and main system designation command; wherein, the antenna unit selection command is used to designate the power on or off of the two-system antenna units, and can realize power on of system A and power off of system B, power on of system B and power off of system A, power on of both systems, power on of both systems, power off of both systems, and use of antenna units of different systems in rotation each time the machine is turned on, and regular switching of working system antenna units (working system antenna units refer to antenna units in the powered-on working state) during normal operation; the NORMAL status command is used to make the communication module enter the NORMAL status; the main system designation command is used to designate one of the communication modules as the main system communication module, the main processing unit in which it is located as the main system main processing unit, and the other system as the standby system. Attachment Figure 2 The state machine of the communication module is shown below. Figure 2 Describe the working process in detail:

[0091] 1. After power-on, the communication module enters the INIT state, and performs power-on self-test on each module of the BTM of the same system and the power amplifier modules of other systems. Among them, when detecting the power amplifier module of one system, the communication module continuously sends a power supply enable signal of a negative logic level to the power amplifier module of the system to power on the power amplifier module of the system; and, at the same time, continuously sends a power supply enable signal of a positive logic level to the power amplifier module of the other system to power off the power amplifier module of the system. The two communication modules do not perform power-on self-test on the power amplifier modules at the same time to avoid conflicts. After the power-on self-test passes, the communication module enters the READY state; when the power-on self-test fails, the communication module enters the FAIL state.

[0092] 2. In the READY state, the communication module performs regular online self-tests and sends the current working status and self-test results to the ATP main control unit regularly (such as 100ms). The content of the regular online self-test is the same as the power-on self-test. After the regular online self-test passes and receives the NORMAL state command from the ATP main control unit, the communication module enters the NORMAL state. Normally, both communication modules are in the NORMAL state to have better redundancy and reliability. After the regular online self-test passes but does not receive the NORMAL state command from the ATP main control unit, the communication module remains in the READY state. When the online self-test fails, the communication module enters the FAIL state. When both communication modules are in the READY state, a power supply enable signal with a positive logic level is sent to both power amplifier modules at the same time during the period when the regular online self-test is not performed, so that both power amplifier modules are powered off at the same time to avoid device loss and save energy.

[0093] 3. In the NORMAL state, according to the designated main system command of the ATP main control unit, the designated communication module becomes the main system communication module, and the main processing unit where it is located becomes the main system main processing unit; the other system communication module becomes the standby system communication module, and the main processing unit where it is located becomes the standby system main processing unit. After receiving the antenna unit selection command from the ATP main control unit, the main system communication module controls the corresponding antenna unit to be powered on or off according to the antenna unit selection command. For example, if the antenna unit selection command specifies that only the A series antenna unit is working, the communication module continuously sends a power supply enable signal of a negative logic level to the power amplifier module of the A series BTM, and continuously sends a power supply enable signal of a positive logic level to the power amplifier module of the B series BTM, so that the power amplifier module of the A series BTM is powered on and the power amplifier module of the B series BTM is powered off. In the NORMAL state, the communication module performs regular online self-test and sends the working status to the ATP main control unit regularly (such as 100ms). The content of the regular online self-test is the same as that of the power-on self-test. The communication module that passes the regular online self-test remains in the NORMAL state; otherwise, it enters the FAIL state. The ATP main control unit switches the main system to the standby system according to the status of the two main processing units, so that the main processing unit of the main system is always the main processing unit in the NORMAL state.

[0094] 4. In the FAIL state, the communication module cuts off its output to the ATP main control unit.

[0095] In addition, the present invention also provides an ATP main control unit, which is connected to any of the above-mentioned dual-system hot standby redundant BTM devices, and can send an antenna unit selection command to the dual-system hot standby redundant BTM device, so that the dual-system hot standby redundant BTM device switches its designated antenna unit. Among them, the ATP main control unit can be set to use different antenna units in rotation each time it is turned on, and can be set to switch antenna units regularly during normal operation to prevent a certain antenna unit from being damaged due to excessive use, which is beneficial to prolonging the service life of the power amplifier module; in addition, when driving in a section without a transponder, the ATP main control unit can shut down the two-system antenna units through the antenna selection command, prolong the service life of the power amplifier module, and achieve energy saving. And, it can also send the above-mentioned NORMAL state command and the designated main system command to the dual-system hot standby redundant BTM device.

[0096] Furthermore, preferably, the dual-system hot standby redundant BTM device of the present invention communicates with the ATP main control unit using a redundant communication bus to further improve redundancy.

[0097] In addition, the present invention also provides a method for switching antenna units of a dual-system hot standby redundant BTM device, which is implemented based on any of the above dual-system hot standby redundant BTM devices and includes the steps of:

[0098] S1. After power-on, the main processing units of the two systems enter the INIT state, and perform power-on self-tests on each module of the BTM of the system and the power amplifier module of the other system respectively; after the power-on self-test passes, the main processing unit of the system enters the READY state, otherwise it enters the FAIL state. Among them, when detecting the power amplifier module of one of the systems, the main processing unit that performs the power-on self-test continuously sends a power supply enable signal of a negative logic level to the power amplifier module of the antenna unit of the system to power on the power amplifier module of the system; and, at the same time, continuously sends a power supply enable signal of a positive logic level to the power amplifier module of the antenna unit of the other system to power off the power amplifier module of the system. The two main processing units do not perform power-on self-tests on the power amplifier modules at the same time to avoid conflicts.

[0099] S2. In the READY state, the two main processing units perform regular online self-tests and send the current working status and self-test results to the ATP main control unit regularly (e.g., 100ms); after the regular online self-test passes and the NORMAL state command from the ATP main control unit is received, the main processing unit enters the NORMAL state. Normally, both main processing units are in the NORMAL state to have better redundancy and reliability; after the regular online self-test passes but the NORMAL state command from the ATP main control unit is not received, the main processing unit remains in the READY state; when the online self-test fails, the main processing unit enters the FAIL state. When both main processing units are in the READY state, a power supply enable signal of a positive logic level is simultaneously sent to the two power amplifier modules during the period when the regular online self-test is not performed, so that the two power amplifier modules are powered off at the same time to avoid device loss and save energy.

[0100] S3. In the NORMAL state, according to the designated main system command of the ATP main control unit, the designated main processing unit becomes the main processing unit of the main system, and the other main processing unit becomes the main processing unit of the backup system. After receiving the antenna unit selection command of the ATP main control unit, the main processing unit of the main system controls the power on or off of the corresponding antenna unit according to the antenna unit selection command. In the NORMAL state, the main processing units of the two systems perform regular online self-tests and send the working status to the ATP main control unit regularly (such as 100ms). The main processing unit that passes the regular online self-test remains in the NORMAL state; otherwise it enters the FAIL state. The ATP main control unit switches the main and backup systems according to the status of the two main processing units, so that the main processing unit of the main system is always the main processing unit in the NORMAL state.

[0101] Among them, the antenna unit selection command of the ATP main control unit can be set to rotate the use of different antenna units each time the power is turned on, and can be set to regularly switch the antenna units during normal operation to prevent a certain series of antenna units from being damaged due to excessive use, which is beneficial to extending the service life of the power amplifier module; in addition, the antenna selection command can include shutting down two series of antenna units at the same time when driving in a section without a transponder, thereby extending the service life of the power amplifier module and achieving energy-saving effects.

[0102] S4. In the FAIL state, the main processing unit of the system cuts off its output to the ATP main control unit to ensure safety.

[0103] In summary, the dual-system hot standby redundant BTM device, ATP main control unit and working method provided by the present invention support the use of different antenna units in rotation each time the device is turned on by providing a selection interface for the antenna unit of the BTM device, and switch to the antenna unit specified by the ATP main control unit according to the command of the ATP main control unit during normal operation, which is beneficial to prolonging the service life of the high-power devices of the BTM device; through the ATP main control unit issuing control commands, when driving in a section without a transponder, the BTM device can turn off the antenna units of the two-system BTM devices, which can prolong the service life of the high-power devices of the BTM device and achieve energy-saving effects; the redundancy of the BTM device is improved by adopting a redundant communication bus for communication between the BTM device and the ATP main control unit, and adopting a cross-communication design between the antenna units of the two-system BTM devices and the main processing unit.

[0104] Although the content of the present invention has been described in detail through the above preferred embodiments, it should be appreciated that the above description should not be considered as a limitation of the present invention. After reading the above content, it will be apparent to those skilled in the art that various modifications and substitutions of the present invention will occur. Therefore, the protection scope of the present invention should be limited by the appended claims.

Claims

1. A dual-system hot standby redundant BTM device connected to an ATP main control unit, characterized in that: Including hot standby A series BTM and B series BTM; among which, for any series BTM: It includes an antenna unit and a main processing unit, wherein the main processing unit is connected to the antenna unit and the ATP main control unit respectively, and is connected to the two antenna units respectively through the power supply enabling cross control line of the system, and can receive the control command of the ATP main control unit, and control any antenna unit of the system to power on or power off through the enabling cross control line according to the control command; The antenna unit that is powered on communicates with the ground transponder that it passes by, receives the transponder message sent by it, processes it and sends it to the main processing unit, and the main processing unit processes it and sends it to the ATP main control unit; The antenna unit is connected to the two main processing units through the data transmission cross line of the system, and is used to send the data output by the antenna unit to the two main processing units, so that when one of the antenna units fails, the two main processing units can obtain the transponder message output by the other antenna unit; and when one of the main processing units fails, the other main processing unit can still obtain the transponder message output by the two antenna units; The antenna unit includes a power amplifier module, which is connected to two series of main processing units respectively through two series of power supply enabling cross control lines; The power amplifier module can control the power on or off of the main body based on the power supply enable signal of any power supply enable cross control circuit, so as to realize the power on operation or power off non-operation of the antenna unit; The antenna unit also includes an antenna for sending and receiving wireless communication signals, and the power amplifier module is connected to the antenna; When the power amplifier module is powered on, it can generate an activation signal and transmit it to the ground transponder passing through the antenna to activate the ground transponder; and output the uplink signal carrying the transponder message sent by the activated ground transponder received by the antenna after filtering and amplification; The antenna unit also includes a demodulation module connected to the power amplifier module, and the demodulation module is respectively connected to the two system main processing units through the data transmission cross line of the system; The demodulation module demodulates the filtered and amplified uplink signal output by the power amplifier module, generates a baseband code and sends it to the two-system main processing units through the data transmission cross line of the system; The main processing unit includes a decoding module, which is connected to the demodulation module of the antenna unit of the same system through the data transmission cross line of the same system and to the demodulation module of the antenna unit of another system through the data transmission cross line of another system, and is used to receive the baseband code from the demodulation module of the antenna unit that is powered on, perform decoding processing to generate a decoded message and then output it; The main processing unit also includes a communication module, which is connected to the decoding module and the ATP main control unit respectively; The communication module receives the decoded message from the decoding module, and packages it into transponder message user data and sends it to the ATP main control unit; the communication module is connected to the power amplifier modules of the two antenna units respectively through the local power supply enabling cross control line.

2. The dual-system hot standby redundant BTM device according to claim 1, characterized in that: Also includes a power supply unit; The power supply unit is connected to the power amplifier module to supply power to the power amplifier module.

3. The dual-system hot standby redundant BTM device according to claim 1, characterized in that: The working states of the communication module include INIT state, READY state, NORMAL state and FAIL state.

4. The dual-system hot standby redundant BTM device according to claim 3, characterized in that: The communication module can perform power-on self-test and regular online self-test on each module of the system and the power amplifier modules of other systems, and feed back the self-test results to the ATP main control unit.

5. The dual-system hot standby redundant BTM device according to claim 4, characterized in that: Said The control commands of the ATP master control unit include NORMAL state commands; The communication module can switch different working states according to the power-on self-test, the periodic online self-test and the NORMAL state command of the ATP main control unit, and feed back the current working state to the ATP main control unit.

6. The dual-system hot standby redundant BTM device according to claim 5, characterized in that: Said The control commands of the ATP master control unit include commands for specifying the master system; The communication module can be designated as a main system communication module or a backup system communication module according to a control command of the ATP main control unit in the NORMAL state, or switch between the main system communication module and the backup system communication module, wherein the main system communication module is unique.

7. The dual-system hot standby redundant BTM device according to claim 6, characterized in that: Said The control commands of the ATP master control unit include antenna unit selection commands; The main system communication module can send corresponding power supply enable signals to the power amplifier modules of the two system antenna units respectively according to the designation of the antenna unit selection command through the power supply enable cross control line of the main system. The antenna unit selection command enables the antenna unit specified to work to be powered on, and the antenna unit specified to be inoperative to be powered off and inoperative; Alternatively, both antenna units of the two systems are powered on and operated, or both are powered off and not operated, as specified by the antenna unit selection command.

8. The dual-system hot standby redundant BTM device according to claim 1, characterized in that: The power supply enable signal is a positive / negative logic level, which is used to implement power-on and power-off, or vice versa.

9. The dual-system hot standby redundant BTM device according to claim 1, characterized in that: When both antenna units are powered on and send baseband codes to the decoding module, if both baseband codes from the two antenna units are successfully decoded into decoded messages, the decoding module only retains one of the decoded messages; If the baseband code of only one series of antenna units is successfully decoded into a decoded message, the decoding module only retains this decoded message; If the baseband codes from the two antenna units fail to be decoded, the decoding module outputs a decoding failure alarm code.

10. The dual-system hot standby redundant BTM device according to claim 9, characterized in that: When the communication module receives the decoding failure alarm code from the decoding module, the communication module notifies the ATP main control unit and records the decoding failure alarm code in the local non-volatile memory.

11. The dual-system hot standby redundant BTM device according to claim 1, characterized in that: The communication module communicates with the ATP main control unit using a secure communication protocol.

12. An ATP main control unit, characterized in that: The dual-system hot standby redundant BTM device is connected to any one of claims 1 to 11, and can send an antenna unit selection command to the dual-system hot standby redundant BTM device to make the dual-system hot standby redundant BTM device switch its designated antenna unit.

13. The ATP main control unit according to claim 12, characterized in that: It is also possible to send a NORMAL state command for making the communication module enter the NORMAL state, and a master system designation command for designating a master-slave system communication module or switching the master-slave system to the dual-system hot standby redundant BTM device.

14. The ATP main control unit according to claim 12, characterized in that: The antenna unit selection command includes an instruction capable of specifying that one set of antenna units is working and the other set of antenna units is not working, specifying that both sets of antenna units are not working, or both sets of antenna units are working.

15. The ATP main control unit according to claim 12, characterized in that: The antenna unit selection command includes instructions that can realize the function of rotating and using different antenna units each time the device is turned on.

16. The ATP main control unit according to claim 12, characterized in that: The antenna unit selection command includes an instruction that can implement a function of periodically switching the working antenna unit during normal operation.

17. The ATP main control unit according to claim 12, characterized in that: The ATP main control unit communicates with the dual-system hot standby redundant BTM device using a redundant communication bus.

18. A working method of a dual-system hot standby redundant BTM device, characterized in that: The dual-system hot standby redundant BTM device according to any one of claims 1 to 11 is implemented, comprising the steps of: S1. After power-on, the main processing units of the two systems enter the INIT state and perform power-on self-test on each module of the BTM of the own system and the power amplifier module of the other system respectively; After the power-on self-test passes, the main processing unit of the system enters the READY state, otherwise it enters the FAIL state.

19. The working method according to claim 18, characterized in that: Also includes the steps: S2. In READY state: The main processing units of the two systems perform regular online self-tests and regularly send the current working status and self-test results to the ATP main control unit. The content of the regular online self-test is the same as the power-on self-test. After the regular online self-test is passed and the NORMAL state command is received from the ATP main control unit, the main processing unit of the system enters the NORMAL state; After the regular online self-test is passed but the NORMAL state command from the ATP main control unit is not received, the main processing unit of the system remains in the READY state; When the online self-test fails, the main processing unit of the system enters the FAIL state.

20. The working method according to claim 19, characterized in that: Also includes the steps: S3. In NORMAL state: According to the designated master system command of the ATP master control unit, the designated master processing unit becomes the master system master processing unit, and the other system master processing unit becomes the standby system master processing unit; After receiving the antenna unit selection command from the ATP main control unit, the main processing unit of the main system controls the corresponding antenna unit to power on or off; The main processing unit performs regular online self-test and sends the working status to the ATP main control unit regularly. The content of the regular online self-test is the same as the power-on self-test. The main processing unit that passes the regular online self-test remains in the NORMAL state; otherwise, it enters the FAIL state; The ATP main control unit switches the main system to the standby system according to the status of the main processing units of the two systems, so that the main processing unit of the main system is always the main processing unit in the NORMAL state; S4. The main processing unit in FAIL state cuts off its output to the ATP main control unit.

21. The working method according to claim 20, characterized in that: When the main processing unit performs power-on self-test or periodic online self-test on one series of power amplifier modules, it continuously sends a power supply enable signal to power on the power amplifier module of that series; and continuously sends a power supply enable signal to power off the other series of power amplifier modules.

22. The working method according to claim 21, characterized in that: The two main processing units do not perform power-on self-test and regular online self-test on the power amplifier module at the same time to avoid conflicts.

23. The working method according to claim 19, characterized in that: When both main processing units of the two series are in the READY state, the power amplifier modules of the two series are controlled to be powered off simultaneously when the regular online self-test is not performed.

Images