Method and device for protecting legality of transponder, vehicle-mounted controller and train

Abstract

The application discloses a transponder legitimacy protection method and device, a vehicle-mounted controller and a train. The method comprises the following steps: obtaining a driving state of the train; determining an expected transponder list, a historical transponder list and a next possible transponder according to the driving state, wherein the expected transponder list comprises transponders to be received by the train in the future, the historical transponder list comprises transponders that have been crossed by the train, and the next possible transponder is a transponder that is possibly received by the train at the next moment, and the next possible transponder is selected from the expected transponder list or the historical transponder list; and when a to-be-verified transponder matches a transponder in the expected transponder list or the next possible transponder, it is determined that the to-be-verified transponder is legitimate. Thus, the situation that an expected transponder is not received is avoided due to the inherent defects of a BTM triggered transponder or the mutual independence between double VOBC systems, so that the availability of the VOBC system is increased.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of transponder verification, in particular to a transponder legality protection method, a transponder legality protection device, a vehicle-mounted controller and a train. BACKGROUND

[0002] The commonly used transponder legality verification method is to determine the legality of the transponder by judging whether the received transponder ID (Identity Document) is consistent with the ID of the next expected transponder through VOBC (Vehicle on Board Controller).

[0003] This verification method may cause no transponder to be triggered when approaching the transponder and the transponder to be triggered when leaving the transponder in some special scenarios, such as train jumping or train turnaround scenarios, due to the inherent defects of the BTM (Balise Transmission Module) triggered transponder principle, thereby causing false reporting of not receiving the expected transponder; when the train is in a VOBC single system fault loss positioning scenario, due to the independence between the double system VOBCs, the double system received transponders are not necessarily at the same time, and if the expected transponders are directly synchronized, it will cause false reporting of not receiving the expected transponder, thereby reducing the availability of the VOBC system. SUMMARY

[0004] The present application aims to at least solve one of the technical problems in the related art. To this end, the first object of the present application is to provide a transponder legality protection method, which comprehensively determines the legality of the transponder to be verified by verifying whether the transponder to be verified matches the transponders in the expected transponder list or the next possible transponder, so as to avoid the situation of false reporting of not receiving the expected transponder due to the inherent defects of the BTM triggered transponder or the mutual independence between the double system VOBCs, thereby increasing the availability of the VOBC system.

[0005] The second object of the present application is to provide a transponder legality protection device.

[0006] The third object of the present application is to provide a vehicle-mounted controller.

[0007] The third object of the present application is to provide a train.

[0008] To achieve the above object, the first aspect of the present application provides a transponder legitimacy protection method, applied to a train, comprising: obtaining a running state of the train; determining an expected transponder list, a history transponder list and a next possible transponder according to the running state, wherein the expected transponder list comprises transponders to be received by the train in the future, the history transponder list comprises transponders that have been passed by the train, and the next possible transponder is a transponder to be received by the train at the next moment, and the next possible transponder is selected from the expected transponder list or the history transponder list; and determining that a to-be-verified transponder is legitimate when the to-be-verified transponder matches a transponder in the expected transponder list or the next possible transponder.

[0009] The transponder legitimacy protection method according to the embodiment of the present application, by obtaining a running state of the train, and determining an expected transponder list, a history transponder list and a next possible transponder according to the running state, and determining that a to-be-verified transponder is legitimate when the to-be-verified transponder matches a transponder in the expected transponder list or the next possible transponder. Thus, by verifying whether the to-be-verified transponder matches a transponder in the expected transponder list or the next possible transponder to comprehensively determine the legitimacy of the to-be-verified transponder, the situation that an expected transponder is falsely reported as not received due to the inherent defects of the BTM triggering the transponder or the mutual independence between the two VOBC systems can be avoided, thereby increasing the availability of the VOBC system.

[0010] According to an embodiment of the present application, the running state comprises at least one of a train backward-then-forward state, a train forward-then-backward state, a train end-changing state and a single-system controller fault loss positioning state of the on-board controller.

[0011] According to an embodiment of the present application, when the running state is the train backward-then-forward state, determining the expected transponder list, the history transponder list and the next possible transponder according to the running state comprises: at the beginning of train backward movement, taking the latest history transponder in the history transponder list as the next possible transponder, and keeping the history transponder list and the expected transponder list unchanged; during the train backward movement, deleting the to-be-verified transponder from the history transponder list and adding it to the expected transponder list, and taking the latest history transponder in the history transponder list after the deletion as the next possible transponder; and when the train is moving forward, if the to-be-verified transponder matches a transponder in the expected transponder list, deleting the to-be-verified transponder from the expected transponder list and adding it to the history transponder list, and clearing the next possible transponder.

[0012] According to one embodiment of the present application, when the running state is the train backward and then forward state, the expected transponder list, the history transponder list and the next possible transponder are determined according to the running state, and further comprising: when the train is running forward, if the to-be-verified transponder matches the next possible transponder, the history transponder list and the expected transponder list remain unchanged, and the next possible transponder is cleared.

[0013] According to one embodiment of the present application, when the running state is the train forward and then backward state, the expected transponder list, the history transponder list and the next possible transponder are determined according to the running state, and comprising: during the train backward process, if the to-be-verified transponder does not match the transponder in the expected transponder list, the to-be-verified transponder is deleted from the history transponder list and added to the expected transponder list, and the last history transponder in the history transponder list after the deletion is the next possible transponder; during the train backward process, if the to-be-verified transponder matches the transponder in the expected transponder list, the history transponder list and the expected transponder list remain unchanged, and the last history transponder in the history transponder list is the next possible transponder.

[0014] According to one embodiment of the present application, when the running state is the train end change state, the expected transponder list, the history transponder list and the next possible transponder are determined according to the running state, and comprising: after the train end changes, the history transponder list and the expected transponder list are updated according to the running direction of the train, and the last history transponder in the history transponder list is the next possible transponder.

[0015] According to one embodiment of the present application, when the running state is the single-vehicle controller fault loss positioning state, the expected transponder list, the history transponder list and the next possible transponder are determined according to the running state, and comprising: if the history transponder list and / or the expected transponder list is empty, the history transponder list and / or the expected transponder list in the non-fault vehicle controller is synchronized to the fault vehicle controller, and the last history transponder in the synchronized history transponder list is the next possible transponder.

[0016] To achieve the above object, the second aspect of the present application provides a balise legality protection device for a train, which comprises: a balise transmission module, configured to obtain a balise to be verified; and a vehicle-mounted controller, configured to obtain a running state of the train, and determine an expected balise list, a historical balise list and a next possible balise according to the running state, and determine that the balise to be verified is legal when the balise to be verified matches a balise in the expected balise list or the next possible balise, wherein the expected balise list comprises balises to be received by the train in the future, the historical balise list comprises balises that have been passed by the train, and the next possible balise is a balise that can be received by the train at the next moment, and the next possible balise is selected from the expected balise list or the historical balise list.

[0017] The balise legality protection device according to the embodiment of the present application obtains the balise to be verified through the balise transmission module, obtains the running state of the train through the vehicle-mounted controller, and determines the expected balise list, the historical balise list and the next possible balise according to the running state, and determines that the balise to be verified is legal when the balise to be verified matches a balise in the expected balise list or the next possible balise. Thus, the legality of the balise to be verified is comprehensively determined by checking whether the balise to be verified matches a balise in the expected balise list or the next possible balise, which can avoid the situation that the expected balise is falsely reported as not being received due to the inherent defects of the BTM triggered balise or the mutual independence between the two VOBCs, thereby increasing the availability of the VOBC system.

[0018] To achieve the above object, the third aspect of the present application provides a vehicle-mounted controller, which comprises: a memory, a processor, and a balise legality protection program stored in the memory and executable on the processor, and when the processor executes the program, the balise legality protection method in the first aspect of the present application is implemented.

[0019] The vehicle-mounted controller according to the embodiment of the present application implements the above balise legality protection method, and comprehensively determines the legality of the balise to be verified by checking whether the balise to be verified matches a balise in the expected balise list or the next possible balise, which can avoid the situation that the expected balise is falsely reported as not being received due to the inherent defects of the BTM triggered balise or the mutual independence between the two VOBCs, thereby increasing the availability of the VOBC system.

[0020] To achieve the above object, the fourth aspect of the present application provides a train, which comprises the vehicle-mounted controller in the third aspect of the present application.

[0021] According to the vehicle-mounted controller of the embodiment of the present application, the legality of the to-be-verified transponder is comprehensively judged by verifying whether the to-be-verified transponder matches the transponder in the expected transponder list or the next possible transponder, which can avoid the situation of false reporting that the expected transponder is not received due to the inherent defects of the BTM triggering the transponder or the mutual independence between the double-system VOBCs, thereby increasing the availability of the VOBC system.

[0022] Additional aspects and advantages of the present application will be described in the following description, will become apparent from the following description, or will be learned through practice of the present application. BRIEF DESCRIPTION OF DRAWINGS

[0023] Figure 1 A flowchart of a transponder legality protection method according to an embodiment of the present application;

[0024] Figure 2 A transponder position diagram during train travel according to an embodiment of the present application;

[0025] Figure 3 A transponder position diagram during train travel according to another embodiment of the present application;

[0026] Figure 4 A structure diagram of a transponder legality protection device according to an embodiment of the present application. DETAILED DESCRIPTION

[0027] Embodiments of the present application are described in detail below with reference to the accompanying drawings, in which the same or similar components are denoted by the same or similar reference numerals throughout. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to explain the present application, and should not be construed as limiting the present application.

[0028] The transponder legality protection method, device, vehicle-mounted controller and train according to the embodiments of the present application are described below with reference to the accompanying drawings.

[0029] Figure 1 A flowchart of a transponder legality protection method according to an embodiment of the present application. As shown in FIG. 1, the transponder legality protection method includes the following steps: Figure 1

[0030] Step S101, obtaining a travel state of a train.

[0031] In some embodiments, the travel state includes at least one of a train backward-then-forward state, a train forward-then-backward state, a train end-changing state and a vehicle-mounted controller single-system fault loss positioning state.

[0032] ​That is, in order to prevent the VOBC system from false alarm in special driving state during train driving, the special driving state in which the train is prone to false alarm is obtained, the special driving state includes train backward driving and then forward driving state, train forward driving and then backward driving state, train end changing state and train on-board controller single system fault and lost positioning state, and the train obtains the current driving state of the train in real time according to the VOBC system.

[0033] In step S102, the expected transponder list, the historical transponder list and the next possible transponder are determined according to the driving state.

[0034] The expected transponder list includes the transponders that the train is expected to receive in the future, the historical transponder list includes the transponders that the train has passed, and the next possible transponder is the transponder that the train is likely to receive at the next moment, and the next possible transponder is selected from the expected transponder list or the historical transponder list.

[0035] That is, in addition to the expected transponder list and the historical transponder list, the next possible transponder is added in the VOBC of the train, the expected transponder list stores some transponder IDs that the train is about to pass in the journey, the historical transponder list records some transponder IDs that the train has passed, the next possible transponder is the transponder ID that the train is likely to receive or not receive in the driving process, and the next possible transponder is determined by comprehensively judging the expected transponder list and the historical transponder list.

[0036] It should be noted that the train will pass some transponder IDs in the expected transponder list in turn in the driving process, and the passed transponder IDs are added to the historical transponder list, so as to update the expected transponder list and the historical transponder list, and to determine the next possible transponder according to the updated expected transponder list and the historical transponder list.

[0037] In some embodiments, when the driving state is the train backward driving and then forward driving state, the expected transponder list, the historical transponder list and the next possible transponder are determined according to the driving state, including: at the beginning of the train backward driving, the latest historical transponder in the historical transponder list is taken as the next possible transponder, and the historical transponder list and the expected transponder list remain unchanged; during the train backward driving, the to-be-verified transponder is deleted from the historical transponder list and added to the expected transponder list, and the latest historical transponder in the historical transponder list after deletion is taken as the next possible transponder; when the train is driving forward, if the to-be-verified transponder matches the transponder in the expected transponder list, the to-be-verified transponder is deleted from the expected transponder list and added to the historical transponder list, and the next possible transponder is cleared, or if the to-be-verified transponder matches the next possible transponder, the historical transponder list and the expected transponder list remain unchanged, and the next possible transponder is cleared.

[0038] In particular, as shown in Figure 2 suppose that the train has 10 transponders in a distance of travel, numbered 1-10, when the train is traveling forward and passes transponder 5, at which time the transponders in the expected transponder list are 6, 7, 8, 9, 10 in order, the transponders in the history transponder list are 1, 2, 3, 4, 5 in order, and the next possible transponder is temporarily empty.

[0039] When the train just starts to go backward, the latest historical transponder in the historical transponder list is taken as the next possible transponder, and the historical transponder list and the expected transponder list remain unchanged, that is, when the train starts to go backward, since the train has not passed the transponder 6 after passing the transponder 5, the latest historical transponder 5 recorded in the historical transponder list is taken as the next possible transponder, while the transponders in the expected transponder list are 6, 7, 8, 9, 10 in turn, and the transponders in the historical transponder list are 1, 2, 3, 4, 5 in turn; when the train is in the process of going backward, the to-be-verified transponder ID is first deleted from the historical transponder list and added to the expected transponder list, and the latest historical transponder in the historical transponder list after deletion is taken as the next possible transponder, assuming that the to-be-verified transponder received by the train in the process of going backward is the transponder 5, the transponder 5 is cleared from the historical transponder list, and the transponder 5 is added to the expected transponder list, while the latest historical transponder 4 in the historical transponder list after deletion is taken as the next possible transponder, and then the transponders in the expected transponder list formed finally are 5, 6, 7, 8, 9, 10 in turn, the transponders in the historical transponder list are 1, 2, 3, 4 in turn, and the next possible transponder is the transponder 4; assuming that the to-be-verified transponder received by the train is the transponder 5, that is, the train has passed the transponder 5 but has not passed the transponder 4 in the process of going backward, at this time, the train is controlled to go forward again, the transponders in the expected transponder list in the current state are 5, 6, 7, 8, 9, 10 in turn, the transponders in the historical transponder list are 1, 2, 3, 4 in turn, and the next possible transponder is the transponder 4; when the train is in the process of going forward, if the to-be-verified transponder received matches the transponder in the expected transponder list, that is, the to-be-verified transponder received by the train VOBC is the transponder 5, the to-be-verified transponder received is transferred from the expected transponder list to the historical transponder list, and the next possible transponder is cleared, that is, the transponders in the expected transponder list are updated to be 6, 7, 8, 9, 10 in turn, the transponders in the historical transponder list are updated to be 1, 2, 3, 4, 5 in turn, and the next possible transponder becomes empty; if the to-be-verified transponder received matches the next possible transponder, that is, the to-be-verified transponder received by the train VOBC is the next possible transponder 4, the historical transponder list and the expected transponder list remain unchanged, and the next possible transponder is cleared, that is, the transponders in the expected transponder list are 5, 6, 7, 8, 9, 10 in turn, the transponders in the historical transponder list are 1, 2, 3, 4 in turn, and the next possible transponder becomes empty.

[0040] In some embodiments, when the running state is the train advancing then retreating state, determining the expected transponder list, the historical transponder list and the next possible transponder according to the running state comprises: during the train retreating process, if the to-be-verified transponder does not match the transponders in the expected transponder list, deleting the to-be-verified transponder from the historical transponder list and adding it to the expected transponder list, and taking the latest historical transponder in the historical transponder list after the deletion as the next possible transponder; during the train retreating process, if the to-be-verified transponder matches the transponders in the expected transponder list, keeping the historical transponder list and the expected transponder list unchanged, and taking the latest historical transponder in the historical transponder list as the next possible transponder.

[0041] Specifically, the continuation parameter Figure 2 As shown, assuming that the train is running forward but no transponder 6 is received, at this time the transponders in the expected transponder list are 6, 7, 8, 9 and 10 in sequence, the transponders in the historical transponder list are 1, 2, 3, 4 and 5 in sequence, and the next possible transponder is empty. During the train retreating process, if the to-be-verified transponder received does not match the transponders in the expected transponder list, i.e., the transponder 5 is received during the retreating process, the received transponder 5 is deleted from the historical transponder list and added to the expected transponder list, and the latest historical transponder in the historical transponder list after the deletion is taken as the next possible transponder, i.e., the transponders in the expected transponder list are updated to 5, 6, 7, 8, 9 and 10 in sequence, the transponders in the historical transponder list after the deletion are updated to 1, 2, 3 and 4 in sequence, and the latest historical transponder 4 in the historical transponder list after the deletion is taken as the next possible transponder. If the to-be-verified transponder received matches the transponders in the expected transponder list, i.e., the transponder 6 is received during the retreating process, the historical transponder list and the expected transponder list are kept unchanged, and the latest historical transponder in the historical transponder list is taken as the next possible transponder, i.e., the transponders in the expected transponder list are 6, 7, 8, 9 and 10 in sequence, the transponders in the historical transponder list are 1, 2, 3, 4 and 5 in sequence, and the latest historical transponder 5 in the historical transponder list is kept as the next possible transponder.

[0042] In some embodiments, when the running state is the train end-changing state, determining the expected transponder list, the historical transponder list and the next possible transponder according to the running state comprises: after the train end changes, updating the historical transponder list and the expected transponder list according to the running direction of the train, and taking the latest historical transponder in the historical transponder list as the next possible transponder.

[0043] Specifically, the continuation parameter Figure 2As shown, assuming that the train travels forward through the balise 5 but not through the balise 6, the balises in the expected balise list are expected to be 6, 7, 8, 9, 10 in turn, and the balises in the historical balise list are 1, 2, 3, 4, 5 in turn, when the running state is the train end-changing state, after the train end changes, the balises in the expected balise list are updated to be 5, 4, 3, 2, 1 in turn according to the running direction of the train, and the balises in the historical balise list are updated to be 10, 9, 8, 7, 6 in turn, as shown in Figure 3 At the same time, the latest historical balise 6 in the updated historical balise list is taken as the next possible balise.

[0044] In some embodiments, when the running state is the single-VOBC-fault lost positioning state, determining the expected balise list, the historical balise list and the next possible balise according to the running state comprises: if the historical balise list and / or the expected balise list is empty, synchronizing the historical balise list and / or the expected balise list in the non-fault VOBC to the fault VOBC, and taking the latest historical balise in the synchronized historical balise list as the next possible balise.

[0045] Specifically, when the running state is the single-VOBC-fault lost positioning state, the historical balise list and the expected balise list need to be judged first before the synchronization and updating of the positioning data, continuing to refer to Figure 2 As shown, assuming that the train travels forward through the balise 5 but not through the balise 6, the balises in the expected balise list in the normal VOBC (on-board controller) are 6, 7, 8, 9, 10 in turn, and the balises in the historical balise list are 1, 2, 3, 4, 5 in turn, and the next possible balise is empty.

[0046] When the other VOBC fails, the historical balise list may be empty and the expected balise list may be normal; the expected balise list may be empty and the historical balise list may be normal; or both the historical balise list and the expected balise list may be empty.

[0047] When the historical transponder list is empty and the expected transponder list is normal, the historical transponder list in the normal VOBC is synchronized to the faulty VOBC, that is, the transponders in the historical transponder list of the original faulty VOBC are sequentially synchronized to be 1, 2, 3, 4, 5, and the latest historical transponder 5 in the synchronized historical transponder list is taken as the next possible transponder; when the expected transponder list is empty and the historical transponder list is normal, the expected transponder list in the normal VOBC is synchronized to the faulty VOBC, that is, the transponders in the expected transponder list of the original faulty VOBC are sequentially synchronized to be 6, 7, 8, 9, 10, and the latest historical transponder 5 in the historical transponder list is taken as the next possible transponder; when both the historical transponder list and the expected transponder list are empty, the expected transponder list and the historical transponder list in the normal VOBC are synchronized to the faulty VOBC, that is, the transponders in the expected transponder list of the original faulty VOBC are sequentially synchronized to be 6, 7, 8, 9, 10, and the transponders in the historical transponder list are sequentially synchronized to be 1, 2, 3, 4, 5, and the latest historical transponder 5 in the synchronized historical transponder list is taken as the next possible transponder.

[0048] In step S103, when the to-be-verified transponder matches the transponder in the expected transponder list or the next possible transponder, it is determined that the to-be-verified transponder is legal.

[0049] Specifically, it is needed to verify whether the to-be-verified transponder matches the transponder in the expected transponder list or the next possible transponder according to the running state of the train. When the running state is the train backward and then forward state, the transponders in the expected transponder list or the next possible transponder are taken as reference. Figure 2As shown, assuming that the train starts to control train forward when the train has passed the transponder 5 but has not passed the transponder 4, the transponders in the expected transponder list in the current state are 5, 6, 7, 8, 9, 10 in turn, the transponders in the historical transponder list are 1, 2, 3, 4 in turn, and the next possible transponder is the transponder 4. Due to the inherent defects of the trigger transponder principle of the BTM, when the train normally passes the transponder, the train will trigger an upward edge and a downward edge according to the energy intensity of the transponder from strong to weak, thereby judging that the train has passed the transponder once. This may cause the train not to trigger the transponder when approaching the energy upward edge of the transponder, but to trigger the transponder once when leaving the transponder in the opposite direction. That is, the train may not trigger the transponder 4 when normally retreating to the transponder 4, but may trigger the transponder 4 in the process of advancing away from the transponder 4. Since the next possible transponder is the transponder 4 at this time, if the transponder 4 is triggered, the to-be-verified transponder matches the next possible transponder, that is, it is determined that the to-be-verified transponder is legal, and at the same time, the transponders in the expected transponder list are 5, 6, 7, 8, 9, 10 in turn, the transponders in the historical transponder list are 1, 2, 3, 4 in turn, and the next possible transponder is empty. The expected transponder of the train in the advancing process is normally recorded from the transponder 5. At the same time, the train may not trigger the transponder 4 in the advancing process, but trigger the transponder 5, that is, the to-be-verified transponder matches the transponder in the expected transponder list, and it is determined that the to-be-verified transponder is legal, and at the same time, the transponders in the expected transponder list are updated to 6, 7, 8, 9, 10 in turn, the transponders in the historical transponder list are updated to 1, 2, 3, 4, 5 in turn, and the next possible transponder is empty. The expected transponder of the train in the advancing process is normally recorded from the transponder 6. That is, when the train starts to advance between the transponder 5 and the transponder 4, whether the to-be-verified transponder received is the transponder 5 or the transponder 4, the to-be-verified transponder is determined to be legal, that is, the train located between the two transponders receives the to-be-verified transponder as one of the two transponders, and the to-be-verified transponder is determined to be legal.

[0050] When the driving state is the train advancing and then retreating state, with reference to Figure 2As shown, assuming that the train starts to control the train to go backward when the train has passed the transponder 5 but has not passed the transponder 6, at this time, the transponders in the expected transponder list are 6, 7, 8, 9, and 10 in turn, the transponders in the historical transponder list are 1, 2, 3, 4, and 5 in turn, and the next possible transponder is empty. Due to the inherent defects of the trigger transponder principle of the BTM, the transponder 6 may not be triggered during normal forward movement, but may be triggered during the backward movement. That is, the to-be-verified transponder matches the transponder in the expected transponder list, so it is determined that the to-be-verified transponder is legal, and the historical transponder list and the expected transponder list remain unchanged, that is, the transponders in the expected transponder list are 6, 7, 8, 9, and 10 in turn, the transponders in the historical transponder list are 1, 2, 3, 4, and 5 in turn, and the next possible transponder is the most recent historical transponder 5 in the historical transponder list, and the historical transponder during the train backward movement is normally recorded from the transponder 5; if the transponder 6 is not triggered during the backward movement, that is, the transponder 5 is received during the backward movement, at this time, the transponders in the expected transponder list are updated to 5, 6, 7, 8, 9, and 10, that is, the to-be-verified transponder matches the transponder in the expected transponder list, so it is determined that the to-be-verified transponder is legal, and the transponders in the historical transponder list are updated to 1, 2, 3, and 4 in turn, and the next possible transponder is the most recent historical transponder 4 in the historical transponder list after deletion, and the historical transponder during the train backward movement is normally recorded from the transponder 4. That is, when the train is backward from between the transponder 5 and the transponder 6, whether the to-be-verified transponder is the transponder 5 or the transponder 6, it is determined that the to-be-verified transponder is legal, that is, the train between the two transponders receives the to-be-verified transponder as one of the two transponders, and it is determined that the to-be-verified transponder is legal.

[0051] When the driving state is the train end changing state, the parameter Figure 2 As shown, assuming that the train starts to control the train to go backward when the train has passed the transponder 5 but has not passed the transponder 6, at this time, the transponders in the expected transponder list are 6, 7, 8, 9, and 10 in turn, the transponders in the historical transponder list are 1, 2, 3, 4, and 5 in turn, and the next possible transponder is empty. Due to the inherent defects of the trigger transponder principle of the BTM, the transponder 6 may not be triggered during normal forward movement, but may be triggered during the backward movement. That is, the to-be-verified transponder matches the transponder in the expected transponder list, so it is determined that the to-be-verified transponder is legal, and the historical transponder list and the expected transponder list remain unchanged, that is, the transponders in the expected transponder list are 6, 7, 8, 9, and 10 in turn, the transponders in the historical transponder list are 1, 2, 3, 4, and 5 in turn, and the next possible transponder is the most recent historical transponder 5 in the historical transponder list, and the historical transponder during the train backward movement is normally recorded from the transponder 5; if the transponder 6 is not triggered during the backward movement, that is, the transponder 5 is received during the backward movement, at this time, the transponders in the expected transponder list are updated to 5, 6, 7, 8, 9, and 10, that is, the to-be-verified transponder matches the transponder in the expected transponder list, so it is determined that the to-be-verified transponder is legal, and the transponders in the historical transponder list are updated to 1, 2, 3, and 4 in turn, and the next possible transponder is the most recent historical transponder 4 in the historical transponder list after deletion, and the historical transponder during the train backward movement is normally recorded from the transponder 4. That is, when the train is backward from between the transponder 5 and the transponder 6, whether the to-be-verified transponder is the transponder 5 or the transponder 6, it is determined that the to-be-verified transponder is legal, that is, the train between the two transponders receives the to-be-verified transponder as one of the two transponders, and it is determined that the to-be-verified transponder is legal. Figure 3As shown, since the train is between the transponders 5 and 6, due to the inherent defect of the transponder triggering principle of the BTM, the transponder 5 signal can be received or the transponder 6 signal can be received, the transponder 5 is located in the updated expected transponder list, and the transponder 6 is the next possible transponder. When the transponder to be checked matches the transponder in the expected transponder list or the next possible transponder, it is determined that the transponder to be checked is legal. That is, when the train changes the end, if the train located between the two transponders receives the transponder to be checked as one of the two transponders, it is determined that the transponder to be checked is legal.

[0052] Therefore, by checking whether the transponder to be checked matches the transponder in the expected transponder list or the next possible transponder, the legality of the transponder to be checked can be comprehensively judged, and the situation of false reporting that the expected transponder is not received due to the inherent defect of the BTM transponder triggering principle can be avoided.

[0053] When the running state is the single-VOBC fault loss of positioning state, the parameters continue to be Figure 2 As shown, assuming that the train travels forward through the transponder 5, but does not pass through the transponder 6, the transponders in the expected transponder list in the normal VOBC (on-board controller) are 6, 7, 8, 9, and 10 in turn, the transponders in the historical transponder list are 1, 2, 3, 4, and 5 in turn, and the next possible transponder is empty. When another VOBC fails, in addition to synchronizing the historical transponder list and / or the expected transponder list in the non-faulty on-board controller to the faulty on-board controller, the latest historical transponder 5 in the synchronized historical transponder list is also synchronized as the next possible transponder. That is, when the transponder to be checked matches the transponder 5 or the transponder 6, it is determined that the transponder to be checked is legal, that is, when the transponder to be checked matches the transponder in the expected transponder list or the next possible transponder, it is determined that the transponder to be checked is legal.

[0054] Therefore, by checking whether the transponder to be checked matches the transponder in the expected transponder list or the next possible transponder, the legality of the transponder to be checked can be comprehensively judged, and the situation of false reporting that the expected transponder is not received due to the inherent defect of the BTM transponder triggering principle can be avoided.

[0055] In summary, the method for protecting legality of a transponder according to the embodiment of the application, by obtaining the running state of the train, and determining the expected transponder list, the historical transponder list and the next possible transponder according to the running state, and determining that the to-be-verified transponder is legal when the to-be-verified transponder matches the transponder in the expected transponder list or the next possible transponder. Thus, by comprehensively judging the legality of the to-be-verified transponder by checking whether the to-be-verified transponder matches the transponder in the expected transponder list or the next possible transponder, the situation of false reporting that the expected transponder is not received due to the inherent defects of the BTM triggering the transponder or the mutual independence between the double systems of the VOBC can be avoided, thereby increasing the availability of the VOBC system.

[0056] Figure 4 FIG. 1 is a structural schematic diagram of a device for protecting legality of a transponder according to an embodiment of the application. As shown in the figure, the device for protecting legality of a transponder 100 comprises a transponder transmission module 110 and a vehicle-mounted controller 120. Figure 4

[0057] The transponder transmission module 110 is configured to obtain a to-be-verified transponder. The vehicle-mounted controller 120 is configured to obtain the running state of the train, and determine the expected transponder list, the historical transponder list and the next possible transponder according to the running state, and determine that the to-be-verified transponder is legal when the to-be-verified transponder matches the transponder in the expected transponder list or the next possible transponder. The expected transponder list comprises transponders that the train is expected to receive in the future. The historical transponder list comprises transponders that the train has passed. The next possible transponder is a transponder that the train is likely to receive at the next moment. The next possible transponder is selected from the expected transponder list or the historical transponder list.

[0058] In some embodiments, the running state comprises at least one of a train backward-then-forward state, a train forward-then-backward state, a train end-changing state and a vehicle-mounted controller single-system fault loss of positioning state.

[0059] In some embodiments, when the running state is the train backward-then-forward state, the vehicle-mounted controller 120 is specifically configured to: at the beginning of train backward running, take the latest historical transponder in the historical transponder list as the next possible transponder, and keep the historical transponder list and the expected transponder list unchanged; during the train backward running, first delete the to-be-verified transponder from the historical transponder list and add it to the expected transponder list, and take the latest historical transponder in the historical transponder list after the deletion as the next possible transponder; and when the train is running forward, if the to-be-verified transponder matches the transponder in the expected transponder list, delete the to-be-verified transponder from the expected transponder list and add it to the historical transponder list, and clear the next possible transponder.

[0060] ​In some embodiments, when the running state is the train backward and then forward state, the on-board controller 120 is further specifically configured to: when the train is moving forward, if the to-be-verified transponder matches the next possible transponder, keep the historical transponder list and the expected transponder list unchanged, and clear the next possible transponder.

[0061] In some embodiments, when the running state is the train forward and then backward state, the on-board controller 120 is specifically configured to: during the train backward movement, if the to-be-verified transponder does not match the transponder in the expected transponder list, delete the to-be-verified transponder from the historical transponder list and add it to the expected transponder list, and take the most recent historical transponder in the historical transponder list after the deletion as the next possible transponder; during the train backward movement, if the to-be-verified transponder matches the transponder in the expected transponder list, keep the historical transponder list and the expected transponder list unchanged, and take the most recent historical transponder in the historical transponder list as the next possible transponder.

[0062] In some embodiments, when the running state is the train end change state, the on-board controller 120 is specifically configured to: after the train end changes, update the historical transponder list and the expected transponder list according to the running direction of the train, and take the most recent historical transponder in the historical transponder list as the next possible transponder.

[0063] In some embodiments, when the running state is the on-board controller single system fault loss of positioning state, the on-board controller 120 is specifically configured to: if the historical transponder list and / or the expected transponder list is empty, synchronize the historical transponder list and / or the expected transponder list in the non-fault on-board controller to the fault on-board controller, and take the most recent historical transponder in the synchronized historical transponder list as the next possible transponder.

[0064] It should be noted that the description of the protection device for the legality of the transponder in the present application refers to the description of the protection method for the legality of the transponder in the present application, which will not be described here in detail.

[0065] The protection device for the legality of the transponder according to the embodiments of the present application obtains the to-be-verified transponder through the transponder transmission module, obtains the running state of the train through the on-board controller, determines the expected transponder list, the historical transponder list and the next possible transponder according to the running state, and determines that the to-be-verified transponder is legal when the to-be-verified transponder matches the transponder in the expected transponder list or the next possible transponder. Thus, the legality of the to-be-verified transponder is comprehensively judged by verifying whether the to-be-verified transponder matches the transponder in the expected transponder list or the next possible transponder, which can avoid the situation of false reporting that the expected transponder is not received due to the inherent defects of the BTM triggered transponder or the mutual independence between the two VOBC systems, thereby increasing the availability of the VOBC system.

[0066] The embodiment of the present application also provides a vehicle-mounted controller, comprising a memory, a processor and a transponder legality protection program stored in the memory and executable on the processor, and when the processor executes the program, the transponder legality protection method is realized.

[0067] According to the vehicle-mounted controller of the embodiment of the present application, the transponder legality protection method is used to comprehensively judge the legality of the transponder to be verified by checking whether the transponder to be verified matches the transponders in the expected transponder list or the next possible transponder, so that the situation that the expected transponder is not received is misreported due to the inherent defects of the BTM triggered transponder or the mutual independence between the double-system VOBCs can be avoided, and thus the availability of the VOBC system is increased.

[0068] The embodiment of the present application also provides a train comprising the vehicle-mounted controller.

[0069] According to the train of the embodiment of the present application, the vehicle-mounted controller is used to comprehensively judge the legality of the transponder to be verified by checking whether the transponder to be verified matches the transponders in the expected transponder list or the next possible transponder, so that the situation that the expected transponder is not received is misreported due to the inherent defects of the BTM triggered transponder or the mutual independence between the double-system VOBCs can be avoided, and thus the availability of the VOBC system is increased.

[0070] It is to be appreciated that the above description and the examples that follow are intended to be illustrative only and that changes can be made to the description, as represented by the above listed elements, by the steps recited in the flow charts, and by the examples that follow, without departing from the spirit of the application. Accordingly, the scope of the present application is intended to be defined only by the appended claims.

[0071] It should be understood that aspects of the application can be implemented in hardware, software, firmware or a combination thereof. In the above embodiments, various steps or methods can be implemented in software or firmware that is stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, any of the following techniques, which are well known in the art of hardware implementation, can be used: a hybrid of the above techniques, a mixture of two or more of the above techniques, or a combination of the above techniques with other techniques not listed above.

[0072] In the description of the present application, the terms "one embodiment", "some embodiments", "an example", "a specific example", or "some examples" are intended to mean that a particular feature, structure, material, or characteristic described in connection with the embodiment or example is included in at least one embodiment or example of the present application. The illustrative appearances of the above-mentioned terms in various places in the specification are not intended to exclude that the terms in one place can refer to the same or similar features, structures, materials, or characteristics as other instances of the same term found in another location in the specification. Furthermore, the description of particular features, structures, materials, or characteristics in

[0073] In addition, the terms "first", "second", etc. are used only for the purpose of description, and should not be understood as indicating or implying relative importance or implying a number of the technical features indicated. Therefore, the features defined as "first", "second" can explicitly or implicitly include at least one of the features. In the description of the present application, the meaning of "a plurality of" is at least two, for example, two, three, etc., unless otherwise explicitly specified and limited.

[0074] In the present application, unless otherwise explicitly specified and limited, the terms "mounting", "connecting", "connecting", "fixing" and the like should be understood broadly, for example, it can be fixedly connected, or it can be detachably connected, or it can be integrated; it can be mechanically connected, or it can be electrically connected; it can be directly connected, or it can be indirectly connected through an intermediate medium; it can be the internal communication of two elements or the interaction relationship between two elements, unless otherwise explicitly limited. For those skilled in the art, the specific meaning of the above terms in the present application can be understood according to the specific circumstances.

[0075] Although the embodiments of the present application have been shown and described above, it can be understood that the above embodiments are exemplary and cannot be understood as limiting the present application, and those skilled in the art can make changes, modifications, replacements and variations to the above embodiments within the scope of the present application.

Claims

1. A method for protecting the legitimacy of a transponder, characterized in that: Applied to trains, the method comprises: Obtaining the running status of the train; Determining an expected transponder list, a historical transponder list, and a next possible transponder according to the driving state, wherein the expected transponder list includes transponders that the train should receive in the future, the historical transponder list includes transponders that the train has already passed, and the next possible transponder is a transponder that the train may receive at the next moment, and the next possible transponder is selected from the expected transponder list or the historical transponder list; When the transponder to be verified matches a transponder in the expected transponder list or the next possible transponder, the transponder to be verified is determined to be legitimate.

2. The method for protecting the legitimacy of a transponder according to claim 1, characterized in that: The driving state includes at least one of a train moving backward and then forward state, a train moving forward and then backward state, a train changing end state, and a vehicle controller single system failure position loss state.

3. The method for protecting the legitimacy of a transponder according to claim 2, characterized in that: When the driving state is the train moving backward and then forward, determining the expected transponder list, the historical transponder list, and the next possible transponder according to the driving state includes: When the train starts to retreat, the most recent historical transponder in the historical transponder list is used as the next possible transponder, and the historical transponder list and the expected transponder list are kept unchanged; During the train retreat process, the balise to be verified is first deleted from the historical balise list and added to the expected balise list, and the most recent historical balise in the deleted historical balise list is used as the next possible balise; When the train moves forward, if the balise to be verified matches a balise in the expected balise list, the balise to be verified is deleted from the expected balise list and added to the historical balise list, and the next possible balise is cleared.

4. The method for protecting the legitimacy of a transponder according to claim 3, characterized in that: When the driving state is the train moving backward and then forward, determining the expected transponder list, the historical transponder list, and the next possible transponder according to the driving state further includes: When the train moves forward, if the balise to be verified matches the next possible balise, the historical balise list and the expected balise list are kept unchanged, and the next possible balise is cleared.

5. The method for protecting the legitimacy of a transponder according to claim 2, characterized in that: When the driving state is the train forward-then-backward state, determining the expected transponder list, the historical transponder list, and the next possible transponder according to the driving state includes: During the train retreat process, if the balise to be verified does not match a balise in the expected balise list, the balise to be verified is deleted from the historical balise list and added to the expected balise list, and the most recent historical balise in the deleted historical balise list is used as the next possible balise; During the train retreat process, if the balise to be verified matches the balise in the expected balise list, the historical balise list and the expected balise list remain unchanged, and the most recent historical balise in the historical balise list is used as the next possible balise.

6. The method for protecting the legitimacy of a transponder according to claim 2, characterized in that: When the driving state is the train end-changing state, determining the expected transponder list, the historical transponder list, and the next possible transponder according to the driving state includes: After the train changes ends, the historical transponder list and the expected transponder list are updated according to the running direction of the train, and the most recent historical transponder in the historical transponder list is used as the next possible transponder.

7. The method for protecting the legitimacy of a transponder according to claim 2, characterized in that: When the driving state is a state where the vehicle controller has a single fault and has lost positioning, determining the expected transponder list, the historical transponder list, and the next possible transponder according to the driving state includes: If the historical responder list and / or the expected responder list is empty, the historical responder list and / or the expected responder list in the non-faulty vehicle controller is synchronized to the faulty vehicle controller, and the most recent historical responder in the synchronized historical responder list is used as the next possible responder.

8. A device for protecting the legitimacy of a transponder, characterized in that: Applied to trains, the device comprises: A transponder transmission module is used to obtain the transponder to be verified; An on-board controller is used to obtain the driving status of the train, and determine the expected transponder list, the historical transponder list and the next possible transponder according to the driving status, and determine that the transponder to be verified is legal when the transponder to be verified matches the transponder in the expected transponder list or the next possible transponder, wherein the expected transponder list includes the transponders that the train should receive in the future, the historical transponder list includes the transponders that the train has passed, and the next possible transponder is the transponder that the train may receive at the next moment, and the next possible transponder is selected from the expected transponder list or the historical transponder list.

9. A vehicle-mounted controller, characterized in that: include: A memory, a processor, and a transponder legitimacy protection program stored in the memory and executable on the processor, wherein when the processor executes the program, the transponder legitimacy protection method according to any one of claims 1 to 7 is implemented.

10. A train, characterized in that: Comprising the vehicle-mounted controller according to claim 9.

Images