All-electronic interlocking test system, method, device and electronic equipment

Abstract

The application provides a full-electronic interlocking test system, method, device and electronic equipment, and relates to the technical field of rail transit. The system comprises an ATS, an interlocking subsystem, a simulation fault device and a simulation trackside device. The simulation fault device is configured to send first indication information of a target category fault to the simulation trackside device or the interlocking subsystem based on a fault test instruction. The simulation trackside device is configured to simulate the target category fault based on the first indication information and send state information of the simulation trackside device to the interlocking subsystem. The interlocking subsystem is configured to send second indication information for instructing the ATS to perform abnormal alarm to the ATS based on the first indication information or the state information of the simulation trackside device. According to the application, different categories of full-electronic interlocking system fault information can be selected based on the simulation fault device, which can not only ensure the completeness and comprehensiveness of the full-electronic interlocking system test, but also greatly shorten the fault setting time and improve the test efficiency.

Description

Technical Field

[0001] This invention relates to the field of rail transit technology, and in particular to a fully electronic interlocking testing system, method, apparatus, and electronic equipment. Background Technology

[0002] A Full-Electronic Computer Interlocking System (ECI) is a signaling system that uses computers as the primary technology to establish interlocking relationships. As equipment related to traffic safety, its safe and reliable operation directly affects the safe operation of the entire signaling system and the efficiency of line traffic. Therefore, ECI systems must employ secure computers to improve system safety and reliability.

[0003] Currently, testing of fully electronic interlocking systems faces challenges due to the numerous types and complex designs of these systems. In the laboratory interface testing and functional verification phases, not all real equipment is available. Some signal devices are simulated for logic testing and verification, and the simulation of non-signal devices, such as axle counting equipment, is also involved, impacting the comprehensiveness of the tests and the reliability of the conclusions. Furthermore, to ensure complete and comprehensive testing, fault testing is typically performed manually. However, manual testing is time-consuming and requires relatively experienced personnel, resulting in low testing efficiency.

[0004] Therefore, how to improve the testing efficiency of fully electronic interlocking systems while ensuring complete and comprehensive testing has become an urgent problem for the industry. Summary of the Invention

[0005] To address the problems existing in the prior art, the present invention provides a fully electronic interlocking testing system, method, apparatus, and electronic device.

[0006] In a first aspect, the present invention provides a fully electronic interlocking testing system, comprising: The system includes an Automatic Train Control (ATS), an interlocking subsystem, a fault simulator, and a trackside simulator. The interlocking subsystem is connected to both the ATS and the trackside simulator, and the fault simulator is connected to both the interlocking subsystem and the trackside simulator. The simulated fault detector is used to receive fault test instructions and, based on the fault test instructions, send first indication information of the target category fault to the simulated trackside equipment or the interlocking subsystem. The simulated trackside device is used to simulate the target category fault based on the first indication information sent by the simulated fault device, and to send the status information of the simulated trackside device to the interlocking subsystem; The interlocking subsystem is used to send a second indication to the ATS based on the first indication information sent by the simulated fault device or the status information of the simulated trackside device sent by the simulated trackside device. The second indication is used to instruct the ATS to issue an abnormal alarm.

[0007] Optionally, according to the fully electronic interlocking test system provided by the present invention, the system further includes a simulated axle counting device, which is deployed on the simulated trackside equipment; The simulated axle counting device is used to simulate axle counting failures, generate axle counting failure information, and send the axle counting failure information to the interlocking subsystem through the simulated trackside device.

[0008] Optionally, according to the fully electronic interlocking test system provided by the present invention, the system further includes a simulation I / O device, which is connected to the simulation fault detector, the simulation trackside device and the interlocking subsystem respectively; The simulation I / O device is used to collect the status information of the simulation trackside equipment and send the status information of the simulation trackside equipment to the interlocking subsystem. It is also used to forward the first indication information sent by the simulation fault device to the simulation trackside equipment.

[0009] Optionally, according to the all-electronic interlocking test system provided by the present invention, the interlocking subsystem includes a stand-alone computer interlocking (CI) and a stand-alone object controller (OC), wherein the stand-alone computer interlocking (CI) is connected to the stand-alone object controller (OC).

[0010] Optionally, in the fully electronic interlocking test system provided by the present invention, the ATS is deployed in a cloud platform.

[0011] In a second aspect, the present invention also provides a fully electronic interlocking test method applied to the fully electronic interlocking test system according to any one of the first aspects, applied to the simulated fault device, the method comprising: Receive fault test command; Based on the fault test command, a first indication information of the target category fault is sent to the simulated trackside equipment or the interlocking subsystem. The first indication information is used to instruct the simulated trackside equipment to simulate the target category fault, or to instruct the interlocking subsystem to send a second indication information to the ATS. The second indication information is used to instruct the ATS to issue an abnormal alarm.

[0012] Thirdly, the present invention also provides a fully electronic interlocking testing device for use in simulating faults, the device comprising: The receiving module is used to receive fault test commands; The sending module is used to send a first indication information of a target category fault to the simulated trackside equipment or interlocking subsystem based on the fault test command. The first indication information is used to instruct the simulated trackside equipment to simulate the target category fault, or to instruct the interlocking subsystem to send a second indication information to the ATS. The second indication information is used to instruct the ATS to issue an abnormal alarm.

[0013] Fourthly, the present invention also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the program to implement the fully electronic interlocking test method as described in the second aspect.

[0014] Fifthly, the present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the fully electronic interlocking test method as described in the second aspect.

[0015] In a sixth aspect, the present invention also provides a computer program product, including a computer program that, when executed by a processor, implements the fully electronic interlocking test method as described in the second aspect.

[0016] The fully electronic interlocking testing system, method, apparatus, and electronic equipment provided by this invention selects a first indication information of a target category of fully electronic interlocking system faults specified by the user through a fault simulator, and sends the first indication information to the simulated trackside equipment or interlocking subsystem. The simulated trackside equipment then simulates the target category of faults based on the first indication information and sends its status information to the interlocking subsystem. Furthermore, the interlocking subsystem, based on the first indication information or the status information of the simulated trackside equipment, sends a second indication information to the ATS (Automatic Test System) to instruct it to issue an abnormal alarm. In other words, by selecting different categories of fully electronic interlocking system fault information based on the fault simulator, not only can the completeness and comprehensiveness of the fully electronic interlocking system testing be guaranteed, but the fault setting time can also be greatly shortened, improving testing efficiency. Attached Figure Description

[0017] To more clearly illustrate the technical solutions in this invention or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this invention. For those skilled in the art, other drawings can be obtained from these drawings without creative effort.

[0018] Figure 1 This is one of the structural schematic diagrams of the fully electronic interlocking test system provided by the present invention; Figure 2 This is a schematic diagram of the connection relationships between the interlocking subsystems and external systems provided by related technologies; Figure 3 This is the second schematic diagram of the structure of the fully electronic interlocking test system provided by the present invention; Figure 4 This is a flowchart illustrating the test process for fault scenarios of the test drive function provided by the relevant technology; Figure 5 This is a schematic diagram of the test process for fault scenarios of the test drive function provided by the present invention; Figure 6 This is a flowchart illustrating the axle counting failure scenario test provided by the relevant technology; Figure 7 This is a schematic diagram of the process for testing axle counting fault scenarios provided by the present invention; Figure 8 This is a flowchart illustrating the testing process for micro-cycle processing timeout fault scenarios provided by related technologies; Figure 9 This is a schematic diagram of the process for testing micro-cycle processing timeout fault scenarios provided by the present invention; Figure 10 This is a flowchart illustrating the fully electronic interlocking test method provided by the present invention; Figure 11 This is a schematic diagram of the structure of the fully electronic interlocking testing device provided by the present invention; Figure 12 This is a schematic diagram of the physical structure of the electronic device provided by the present invention. Detailed Implementation

[0019] To make the objectives, technical solutions, and advantages of this invention clearer, the technical solutions of this invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of this invention. All other embodiments obtained by those skilled in the art based on the embodiments of this invention without creative effort are within the scope of protection of this invention.

[0020] To facilitate a clearer understanding of the various embodiments of the present invention, some relevant background knowledge will be introduced as follows.

[0021] The Electronic Interlocking System (ECI) is a signaling system that uses computers as the primary technology to establish interlocking relationships. As equipment related to traffic safety, its safe and reliable operation directly affects the safe operation of the entire signaling system and the efficiency of line traffic. Therefore, it must comply with the fail-safe principle and be designed according to the requirements of Safety Integrity Level 4 (SIL4) of the international safety standard. The ECI system must use a safety-grade computer to improve the system's safety and reliability.

[0022] The ECI system is structured in three layers: the operation display layer, the interlocking logic layer, and the fully electronic execution layer. The interlocking machine subsystem executes the main interlocking control logic and is the core equipment of the interlocking system. The interlocking machine connects to the signal network via a communication controller, completing data interaction with the execution unit (Object Controller (OC) subsystem). A redundant Ethernet bus (red and blue signals) communicates with the execution unit, completing the status acquisition and driving functions for trackside equipment such as signals, switches, execution circuits, and axle counters. It also obtains relevant ground and vehicle-mounted information through communication with other subsystems such as the Zone Controller (ZC) and the Vehicle On-board Controller (VOBC).

[0023] ECI (Electronic Control Interface) integrates logic processing with the test track to enable shunting to non-routes on the test track, as well as control of non-route shunting signals, switches, and other equipment. The depot interlocking and test track interlocking interact to handle test requests and termination. However, compared to traditional interlocking, the interface circuit between the ECI depot interlocking equipment and the test track equipment uses serial communication for exchanging handover information. The lack of a relay-free interface prevents the simultaneous transmission of shunting track switch status information to both the depot and the test track. If a non-route signal is closed due to a switch malfunction, the non-route enters an abnormal locking state. In this case, the test request is valid, and no cancellation flag is set in the test signal mode, posing a significant challenge to the testing and acceptance of the test function under ECI control.

[0024] During the laboratory interface testing and functional verification phase, since not all real equipment was available, some signal equipment was tested and verified using simulation. Furthermore, the simulation of non-signal equipment, such as axle counting equipment, was also involved, which posed certain risks to the comprehensiveness of the tests and the reliability of the conclusions.

[0025] Furthermore, the interlocking system is a periodically operating control system, with a typical operating cycle of 300ms. This time is controlled by the logic board in the FTSM interlocking cabinet, and under its control, the interlocking software cyclically completes input, logic processing, and output control tasks within each interlocking cycle. The 300ms time period of the operating cycle is further divided according to the type of task being executed, forming multiple relatively independent smaller cycles, called micro-cycles. Currently, the operating cycle is divided into four micro-cycles: input micro-cycle, application micro-cycle, output micro-cycle, and idle micro-cycle. The duration of each micro-cycle varies, and they are operated or computed in parallel by the four processing units (PUs) within the interlocking cabinet. The interlocking host is divided into two systems, A and B. Within each system, the two PUs perform input and output data comparison to achieve the "two-way fetch" function, while the four PUs in the system synchronize information exchange to achieve the "two-way multiplication" function. Therefore, the consistency of the pace and timing of task execution among the various PUs is crucial for the correct operation of the "two-way fetch" and "two-way multiplication" functions.

[0026] When a processing unit (PU) fails to complete its task within a certain microcycle, it is called a processing timeout. This indicates a software or hardware malfunction in the PU. The timing discrepancy can prevent the two machines within the system from executing tasks synchronously, thus compromising the reliability of the output. Therefore, the system is designed with a timeout-guided crash handling mechanism. Valid and repeated data testing is required, along with specific output constraints, to ensure the normal operation of the laboratory and field ECI systems.

[0027] To ensure a complete and comprehensive test of the fully electronic interlocking system, fault testing is usually performed manually. However, manual testing is time-consuming and requires relatively experienced personnel, resulting in low testing efficiency.

[0028] To overcome the above-mentioned shortcomings, this invention provides a fully electronic interlocking testing system, method, apparatus, and electronic equipment. The following is in conjunction with... Figures 1-12 The fully electronic interlocking testing system, method, apparatus, and electronic equipment provided by this invention will be described by way of example.

[0029] Figure 1 This is one of the structural schematic diagrams of the fully electronic interlocking test system provided by the present invention, such as... Figure 1 As shown, the system includes: The system includes an Automatic Train Supervision (ATS) system, an interlocking subsystem, a fault simulator, and a simulated trackside device. The interlocking subsystem is connected to the ATS and the simulated trackside device, respectively, and the fault simulator is connected to both the interlocking subsystem and the simulated trackside device. The simulated fault detector is used to receive fault test instructions and, based on the fault test instructions, send first indication information of the target category fault to the simulated trackside equipment or the interlocking subsystem. The simulated trackside device is used to simulate the target category fault based on the first indication information sent by the simulated fault device, and to send the status information of the simulated trackside device to the interlocking subsystem; The interlocking subsystem is used to send a second indication to the ATS based on the first indication information sent by the simulated fault device or the status information of the simulated trackside device sent by the simulated trackside device. The second indication is used to instruct the ATS to issue an abnormal alarm.

[0030] Specifically, in this embodiment of the invention, in order to overcome the shortcomings of existing manual testing, which is both time-consuming and requires relatively experienced personnel to operate, resulting in low testing efficiency, this invention selects the first indication information of the target category of the fully electronic interlocking system fault by a simulated fault detector, and sends the first indication information to the simulated trackside equipment or interlocking subsystem. Then, the simulated trackside equipment simulates the target category fault based on the first indication information and sends the status information of the simulated trackside equipment to the interlocking subsystem. Furthermore, the interlocking subsystem sends the second indication information to the ATS to instruct the ATS to perform an abnormal alarm based on the first indication information or the status information of the simulated trackside equipment. That is, by selecting different categories of fully electronic interlocking system fault information based on the simulated fault detector, not only can the completeness and comprehensiveness of the testing of the fully electronic interlocking system be guaranteed, but the fault setting time can also be greatly shortened and the testing efficiency can be improved.

[0031] Optionally, the fully electronic interlocking test system provided in this embodiment of the invention may include an ATS, an interlocking subsystem, a simulated fault detector, and a simulated trackside device, wherein the interlocking subsystem is connected to the ATS and the simulated trackside device respectively, and the simulated fault detector is connected to the interlocking subsystem and the simulated trackside device respectively.

[0032] Optionally, the fully electronic interlocking test system provided in this embodiment of the invention may also include VOBC, ZC, and distributed control system (DCS), etc.

[0033] Optionally, the simulation fault detector can be used to receive fault test instructions input by the user, select first indication information of the target category of the fully electronic interlocking system fault based on the fault test instructions, and send the first indication information to the simulated trackside equipment or interlocking subsystem.

[0034] Optionally, the fault simulator may be equipped with a fault scenario test selection menu to allow users to select the target type of fault they wish to test, such as hardware faults, data faults, and protocol faults.

[0035] It is understood that, in the embodiments of the present invention, different types of faults can be selected by simulating the fault generator, which can save the cumbersome process of creating different types of faults according to the test requirements in the prior art.

[0036] Optionally, the simulated trackside equipment can be used to simulate a target category of fault in the trackside equipment based on the first indication information sent by the simulated fault device, and send the status information of the simulated trackside equipment to the interlocking subsystem, such as sending the status information of trackside equipment such as signals, turnouts, platform screen doors and staff protection key switches (SPKS) to the interlocking subsystem.

[0037] Optionally, the interlocking subsystem can be used to send a second indication to the ATS based on the first indication information sent by the simulated fault device or the status information of the simulated trackside device sent by the simulated trackside device. The second indication information is used to instruct the ATS to issue an abnormal alarm.

[0038] For example, when a user selects the turnout fault menu on the simulation fault device and sets the faulty turnout ID to the turnout at the junction of the depot and the test track, the simulated trackside equipment immediately reports the fault information to the interlocking subsystem. After judging this abnormal state, the interlocking subsystem cancels the test operation in progress on the test track. If the test operation has not been carried out, the depot will no longer allow the test.

[0039] Optionally, the ATS can issue operation commands to the interlocking subsystem. The interlocking subsystem performs logical operations on the operation commands and the received status information of the trackside equipment, thereby issuing control commands to the object controller to drive the outdoor signal or turnout action.

[0040] It is understood that the ECI consists of a computer interlocking system and an execution unit object controller. The computer interlocking system receives and processes interface information from other systems (e.g., ATS, ZC, and VOBC), while the object controller collects and drives trackside equipment in real time. In this embodiment of the invention, the user can select a target fault type through a simulated fault generator. The simulated fault generator automatically sends the corresponding fault to the simulated trackside equipment based on the user-selected target fault type, thereby allowing observation and judgment of whether the test phenomena meet the expected results, and generating a test report based on the test results.

[0041] The fully electronic interlocking test system provided by this invention selects a first indication of a target category of fully electronic interlocking system faults using a fault simulator, and sends the first indication to the simulated trackside equipment or interlocking subsystem. The simulated trackside equipment then simulates the target category of faults based on the first indication and sends its status information to the interlocking subsystem. Furthermore, the interlocking subsystem, based on the first indication or the simulated trackside equipment's status information, sends a second indication to the ATS (Automatic Test System) to instruct it to issue an abnormal alarm. In other words, by selecting different categories of fully electronic interlocking system fault information based on the fault simulator, not only can the completeness and comprehensiveness of the fully electronic interlocking system test be guaranteed, but the fault setup time can also be greatly shortened, improving testing efficiency.

[0042] Optionally, the system further includes a simulated axle counting device, which is deployed on the simulated trackside equipment; The simulated axle counting device is used to simulate axle counting failures, generate axle counting failure information, and send the axle counting failure information to the interlocking subsystem through the simulated trackside device.

[0043] Specifically, in this embodiment of the invention, the fully electronic interlocking test system may further include a simulated axle counting device, which can simulate axle counting failures, generate axle counting failure information, and send the generated axle counting failure information to the interlocking subsystem through a simulated trackside device.

[0044] For example, when the simulation axle counting device reports an axle counting data configuration anomaly to the interlocking subsystem, the interlocking subsystem, upon receiving the axle counting fault information, will send a full occupancy status guide to the safety side to the ATS.

[0045] Optionally, the simulated axle counting device can be deployed on the simulated trackside device, that is, the simulated axle counting device and the simulated trackside device can be built on the same machine to interact with each other and transmit track section occupancy, clearance and abnormal status information.

[0046] Optionally, in this embodiment of the invention, in addition to simulating axle counting failures through a simulated axle counting device, different types of axle counting failures (including: inconsistent comparison of the number of axle counting sections, incorrect configuration of axle counting ID, etc.) can be selected through a simulated failure device to observe the phenomena of ECI and ATS under different failures.

[0047] It is understood that the simulation fault switch provided by the embodiments of the present invention is more convenient, and more fault types can be set at one time, making the test more comprehensive and efficient.

[0048] The fully electronic interlocking test system provided by this invention simulates axle counting failures by simulating axle counting equipment, thereby enabling testing of axle counting information failure scenarios for ECI.

[0049] Optionally, the system further includes a simulation I / O device, which is connected to the simulation fault detector, the simulation trackside device, and the interlocking subsystem, respectively. The simulation I / O device is used to collect the status information of the simulation trackside equipment and send the status information of the simulation trackside equipment to the interlocking subsystem. It is also used to forward the first indication information sent by the simulation fault device to the simulation trackside equipment.

[0050] Specifically, in this embodiment of the invention, the fully electronic interlocking test system may further include a simulation I / O device, which is connected to the simulation fault detector, the simulation trackside device, and the interlocking subsystem. The simulation I / O device can be used to collect the status information of the simulation trackside device and send the collected status information of the simulation trackside device to the interlocking subsystem. It is also used to forward the first indication information of the target category fault sent by the simulation fault detector to the simulation trackside device.

[0051] It is understood that, in this embodiment of the invention, the simulated I / O device can be a relay I / O simulation.

[0052] It is understood that, in this embodiment of the invention, the interlocking machine subsystem can collect the occupancy status of the simulated trackside equipment through the simulated IO device and send drive commands to the simulated IO device.

[0053] The fully electronic interlocking test system provided by this invention acquires the status information of simulated trackside equipment through simulated I / O devices, which facilitates the interlocking subsystem to perform corresponding fault handling based on the status information of the simulated trackside equipment.

[0054] Optionally, the interlocking subsystem includes a standalone computer interlocking (CI) and a standalone object controller (OC), wherein the standalone computer interlocking (CI) is connected to the standalone object controller (OC).

[0055] Specifically, in this embodiment of the invention, the interlocking subsystem may include a single-machine CI and a single-machine OC, and the single-machine CI and the single-machine OC are connected.

[0056] Understandably, a standalone CI can receive and process interface information from the ATS, while a standalone OC can collect real-time status information of the simulated trackside equipment and drive the simulated trackside equipment.

[0057] The fully electronic interlocking test system provided by this invention consists of a single-machine CI and a single-machine OC forming an interlocking subsystem, which helps to realize the acquisition and driving of the status information of the simulated trackside equipment, and then realize fault handling based on the status information of the simulated trackside equipment.

[0058] Optionally, the ATS is deployed in a cloud platform.

[0059] Specifically, in this embodiment of the invention, the ATS can be deployed in a cloud platform. The cloud-based ATS and the interlocking subsystem work together to realize the train route control and trackside equipment resource management of the entire line. This can simplify the overall control logic of train operation control and reduce hardware equipment (such as ATS cabinets).

[0060] Optionally, in this embodiment of the invention, the simulated fault device, simulated trackside device, simulated axle counting device, and simulated I / O device can all be deployed in a cloud platform, thereby reducing the number of hardware devices (such as axle counting cabinets).

[0061] Optionally, in this embodiment of the invention, two real interlocking cabinet devices (depot interlocking and test line interlocking) can be connected via serial communication, and the remaining communication subsystem devices can be deployed in a cloud platform.

[0062] The fully electronic interlocking test system provided by this invention simplifies train operation control logic and reduces hardware equipment by deploying the ATS on a cloud platform.

[0063] Figure 2 This is a schematic diagram illustrating the connection relationships between various interlocking subsystems and external systems provided by relevant technologies, such as... Figure 2 As shown, the system includes the ECI system, ATS system, VOBC system, ZC system, and Line side Electronic Unit (LEU). It can be seen that the connection relationship between the various hardware devices is quite complex, making it difficult to achieve comprehensive testing of the fully electronic interlocking system.

[0064] Figure 3 This is the second structural schematic diagram of the fully electronic interlocking test system provided by the present invention, as shown below. Figure 3 As shown, it includes an ATS (ATS Cloud) deployed on a cloud platform, a standalone CI, a standalone OC, a simulated fault detector, a simulated IO, a simulated trackside, and a simulated axle counter. The simulated fault detector can select the type of fault to be tested, and then send fault codes or fault information frames to the simulated IO or the standalone CI. The simulated CI can then collect fault information from the simulated trackside through the simulated IO and send the fault information to the ATS to realize fault handling and fault alarm.

[0065] Optionally, in this embodiment of the invention, the fully electronic interlocking test system may include an interlocking subsystem, an object controller OC (real cabinet + single-unit OC), test fixtures / relay simulation IO, simulation trackside, simulation axle counter, simulation fault detector, ATS monitoring system, VOBC train control system, ZC area controller system, and DCS network communication system, etc.

[0066] Optionally, the real object controller (OC) cabinet and test fixture cabinet are connected to the simulated trackside to complete the status acquisition and driving of trackside equipment such as signals, turnouts, platform screen doors, and SPKS. A standalone OC unit connected to the simulated I / O and simulated trackside can similarly complete the status acquisition and driving of other trackside equipment in centralized areas.

[0067] Optionally, the interlocking subsystem is connected to the ATS system. The ATS issues operation commands to the interlocking subsystem, which performs logical operations on the operation commands and the collected trackside equipment status, and then issues control commands to the object controller to drive the outdoor signals and turnouts.

[0068] Optionally, the simulation fault detector is connected to the simulation trackside for data transmission. For example, when a user selects the turnout fault menu on the simulation fault detector and sets the faulty turnout ID to the turnout at the junction of the depot and the test track, the simulation trackside immediately reports the fault information to the interlocking system. After judging this abnormal state, the fully electronic interlocking system cancels the ongoing test operation on the test track. If the test operation has not been carried out, the depot will no longer allow the test.

[0069] Optionally, the interlocking subsystem is connected to the VOBC system and a simulated trackside to observe the micro-cycle information query status on the interlocking maintenance machine in scenarios such as multiple trains communicating with the interlocking system. Limiting conditions are generated based on the valid data of the maximum micro-cycle redundancy value to prevent dangerous events such as interlocking system downtime.

[0070] Understandably, using a simulation fault detector allows for the simulation of the maximum micro-cycle time for sending real VOBC and ECI communications in the laboratory without multiple real vehicles, enabling early testing with only one real VOBC and saving development costs to some extent.

[0071] It should be noted that, unlike commonly used interlocking test systems and methods, the following description will focus on three scenarios: serial communication-based test function failure, external professional axle counting failure, and micro-cycle processing maximum redundancy, to introduce the fully electronic interlocking test system provided in this embodiment of the invention.

[0072] Figure 4 This is a flowchart illustrating the test process for fault scenarios in the test drive function provided by the relevant technology, such as... Figure 4 As shown, for testing fault scenarios during test runs, existing testing methods require trackside equipment, OC equipment, IO equipment, and CI equipment to work together to collect fault codes, which is cumbersome and results in low testing efficiency.

[0073] Figure 5 This is a flowchart illustrating the test procedure for fault scenarios in the test drive function provided by the present invention, as shown below. Figure 5As shown, for testing fault scenarios in the trial operation function, the simulation fault generator can directly send the turnout fault code to the CI, and then the CI can handle the fault. Based on the simulation fault generator, the fault setting time is shortened, thereby improving the testing efficiency.

[0074] Optionally, in this embodiment of the invention, for the test run function failure scenario test of ECI, when all systems are connected normally, the depot interlocking and the test run line interlocking are real equipment and connected by serial port, and the turnouts and shunting signals on the test run line are included in the depot's interlocking control, after the depot interlocking completes the normal check of the three elements of section, shunting signal and turnout, the depot control room and the test run line control room complete the handover of control and then the test run operation is carried out.

[0075] During the test run, the test track interlocking should continuously check the conditions for allowing the test run issued by the depot. If the conditions are not met, such as the test track turnout malfunction (sent by the fault simulator), the interlocking should immediately turn off the "Test Run Approved" indicator light and send a message to the control center that the test track route is not locked. The control center will then apply emergency braking to the train that is undergoing the test run.

[0076] Figure 6 This is a flowchart illustrating the axle counting failure scenario testing process provided by relevant technologies, such as... Figure 6 As shown, for axle counting failure scenarios, the existing testing method is to simulate axle counting to generate failure information and send the generated failure information to the simulation trackside. Then, the simulation IO collects the failure information from the simulation trackside and sends the collected failure information to the simulation CI for axle counting failure processing. Since it is necessary to simulate axle counting to generate failure information, the testing efficiency is low.

[0077] Figure 7 This is a schematic diagram of the process for testing axle counting fault scenarios provided by the present invention, as shown below. Figure 7 As shown, for axle counting failure scenario testing, the simulation fault generator can directly send axle counting failure codes to the simulation CI, and then the simulation CI performs axle counting failure processing based on the axle counting failure codes sent by the simulation fault generator. This eliminates the tedious process of generating axle counting failure information and improves testing efficiency.

[0078] Optionally, in this embodiment of the invention, for the ECI axle counting fault scenario test, if the number of axle counting sections selected by the simulation fault device in a single / multiple centralized area is inconsistent with the number of axle counting sections configured in the signal system data, the simulation trackside software initialization fails, the simulation trackside software cannot be enabled, and after the interlocking subsystem collects the fault information, it immediately sends the full occupancy information of the axle counting section to the ATS, and manual emergency fault investigation is organized; if the simulation fault device selects an incorrect single axle counting ID, the trackside simulation software is enabled normally, and after receiving the faulty axle counting ID, it sends the section occupancy information involving that axle to the interlocking subsystem, which then forwards the section occupancy information of that axle to the ATS.

[0079] Figure 8 This is a flowchart illustrating the testing process for micro-cycle processing timeout fault scenarios provided by related technologies, such as... Figure 8 As shown, for testing microcycle processing timeout fault scenarios, existing testing methods require monitoring the processing time of the input microcycle, application microcycle, output microcycle, and idle microcycle separately to determine the correctness of the test results, which is quite time-consuming.

[0080] Figure 9 This is a schematic diagram of the process for testing micro-cycle processing timeout fault scenarios provided by the present invention, as shown below. Figure 9 As shown, for testing micro-cycle processing timeout fault scenarios, the corresponding micro-cycle processing timeout fault can be directly set through the simulation fault generator, thereby obtaining the fault execution result, which improves the testing efficiency of micro-cycle processing timeout faults.

[0081] Specifically, in this embodiment of the invention, for the test of the micro-cycle processing timeout fault scenario of ECI, a simulation fault generator can simulate N trains communicating with the interlocking system at the trackside, and simultaneously open N staff protection key switches (SPKS). After receiving this information, the interlocking system determines whether the maximum redundancy of the micro-cycle is met. The micro-cycle data when the interlocking system is working normally is recorded, and compared with the different N values ​​sent by the simulation fault generator after the micro-cycle processing timeout interlocking system crashes, where N is a positive integer.

[0082] It is understood that the fully electronic interlocking test system provided in this embodiment of the invention can freely select different types of faults through the fault simulator, including hardware faults, data faults and protocol faults. The menu-driven operation is simple and clear, reducing the requirements for personnel skills and greatly shortening the fault setting time, thereby improving test efficiency and comprehensiveness.

[0083] It is understood that the fully electronic interlocking test system provided in this embodiment of the invention is based on the simulation of normal test scenarios, axle counting data acquisition normal scenarios, and micro-cycle processing normal scenarios of the previous Communication Based Train Control System (CBTC) test platform ECI system equipment. On this basis, an automatic fault scenario test function is added, which can improve the comprehensiveness of the test, ensure the integrity of the system's functions after integration, and promptly and accurately detect and locate various abnormal or fault states at the system level, observing the system's response to faults. This prevents and standardizes the testing process, increases the granularity of the test, promptly identifies and resolves more problems, effectively saves testing time, reduces testing costs, and improves testing quality.

[0084] It is understood that the fully electronic interlocking test system provided in this embodiment of the invention can cover three types of scenarios: hardware equipment failure, data failure, and micro-cycle processing timeout failure. It can more comprehensively verify the functions of the fully electronic interlocking system, record the test response of the fault node, greatly enrich the test scenarios and verification phenomena, and improve the quality of indoor testing.

[0085] The fully electronic interlocking test system provided by this invention selects a first indication of a target category of fully electronic interlocking system faults using a fault simulator, and sends the first indication to the simulated trackside equipment or interlocking subsystem. The simulated trackside equipment then simulates the target category of faults based on the first indication and sends its status information to the interlocking subsystem. Furthermore, the interlocking subsystem, based on the first indication or the simulated trackside equipment's status information, sends a second indication to the ATS (Automatic Test System) to instruct it to issue an abnormal alarm. In other words, by selecting different categories of fully electronic interlocking system fault information based on the fault simulator, not only can the completeness and comprehensiveness of the fully electronic interlocking system test be guaranteed, but the fault setup time can also be greatly shortened, improving testing efficiency.

[0086] The fully electronic interlocking test method provided by the present invention is described below. The fully electronic interlocking test method described below can be referred to in correspondence with the fully electronic interlocking test system described above.

[0087] Figure 10 This is a flowchart illustrating the fully electronic interlocking testing method provided by the present invention, as shown below. Figure 10 As shown, this method is applied to a simulated fault detector, including: Step 1000: Receive fault test command; Step 1010: Based on the fault test command, send a first indication information of the target category fault to the simulated trackside equipment or the interlocking subsystem. The first indication information is used to instruct the simulated trackside equipment to simulate the target category fault, or to instruct the interlocking subsystem to send a second indication information to the ATS. The second indication information is used to instruct the ATS to issue an abnormal alarm.

[0088] The fully electronic interlocking testing method provided by this invention selects a first indication information of a target category of fully electronic interlocking system faults by a simulated fault detector, and sends the first indication information to the simulated trackside equipment or interlocking subsystem. The simulated trackside equipment then simulates the target category fault based on the first indication information and sends its status information to the interlocking subsystem. Furthermore, the interlocking subsystem, based on the first indication information or the simulated trackside equipment's status information, sends a second indication information to the ATS (Automatic Train Protection) to instruct it to issue an abnormal alarm. In other words, by selecting different categories of fully electronic interlocking system fault information based on the simulated fault detector, not only can the completeness and comprehensiveness of the fully electronic interlocking system testing be guaranteed, but the fault setting time can also be greatly shortened, improving testing efficiency.

[0089] It should be noted that the fully electronic interlocking test method provided in this embodiment of the invention can achieve all the functions implemented in the fully electronic interlocking test system embodiment and can achieve the same technical effect. Therefore, the parts that are the same as those in the system embodiment and the beneficial effects will not be described in detail here.

[0090] The fully electronic interlocking test device provided by the present invention is described below. The fully electronic interlocking test device described below and the fully electronic interlocking test method described above can be referred to and correspond to each other.

[0091] Figure 11 This is a schematic diagram of the structure of the fully electronic interlocking testing device provided by the present invention, as shown below. Figure 11 As shown, this device is used in a fault simulator and includes: a receiving module 1110 and a transmitting module 1120; wherein: Receiver module 1110 is used to receive fault test commands; The sending module 1120 is used to send a first indication information of a target category fault to the simulated trackside equipment or interlocking subsystem based on the fault test command. The first indication information is used to instruct the simulated trackside equipment to simulate the target category fault, or to instruct the interlocking subsystem to send a second indication information to the ATS. The second indication information is used to instruct the ATS to issue an abnormal alarm.

[0092] The fully electronic interlocking test device provided by this invention selects a first indication information of a target category of fully electronic interlocking system faults by a user-specified fault simulator, and sends the first indication information to the simulated trackside equipment or interlocking subsystem. The simulated trackside equipment then simulates the target category of faults based on the first indication information and sends its status information to the interlocking subsystem. Furthermore, the interlocking subsystem, based on the first indication information or the simulated trackside equipment's status information, sends a second indication information to the ATS (Automatic Train Protection) to instruct it to issue an abnormal alarm. In other words, by selecting different categories of fully electronic interlocking system fault information based on the fault simulator, not only can the completeness and comprehensiveness of the fully electronic interlocking system test be guaranteed, but the fault setting time can also be greatly shortened, improving testing efficiency.

[0093] It should be noted that the fully electronic interlocking test device provided in this embodiment of the invention can realize all the method steps implemented in the above-mentioned fully electronic interlocking test method embodiment, and can achieve the same technical effect. Here, the parts that are the same as those in the method embodiment and the beneficial effects will not be described in detail.

[0094] Figure 12 This is a schematic diagram of the physical structure of the electronic device provided by the present invention, such as... Figure 12 As shown, the electronic device may include: a processor 1210, a communications interface 1220, a memory 1230, and a communication bus 1240, wherein the processor 1210, the communications interface 1220, and the memory 1230 communicate with each other via the communication bus 1240. The processor 1210 can call logic instructions in the memory 1230 to execute the fully electronic interlocking test method provided by the above methods, which includes: Receive fault test command; Based on the fault test command, a first indication information of the target category fault is sent to the simulated trackside equipment or the interlocking subsystem. The first indication information is used to instruct the simulated trackside equipment to simulate the target category fault, or to instruct the interlocking subsystem to send a second indication information to the ATS. The second indication information is used to instruct the ATS to issue an abnormal alarm.

[0095] Furthermore, the logical instructions in the aforementioned memory 1230 can be implemented as software functional units and, when sold or used as independent products, can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, essentially, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0096] On the other hand, the present invention also provides a computer program product, the computer program product comprising a computer program stored on a non-transitory computer-readable storage medium, the computer program comprising program instructions, wherein when the program instructions are executed by a computer, the computer is able to execute the fully electronic interlocking test method provided by the above methods, the method comprising: Receive fault test command; Based on the fault test command, a first indication information of the target category fault is sent to the simulated trackside equipment or the interlocking subsystem. The first indication information is used to instruct the simulated trackside equipment to simulate the target category fault, or to instruct the interlocking subsystem to send a second indication information to the ATS. The second indication information is used to instruct the ATS to issue an abnormal alarm.

[0097] In another aspect, the present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, is implemented to perform the aforementioned fully electronic interlocking test methods, the method comprising: Receive fault test command; Based on the fault test command, a first indication information of the target category fault is sent to the simulated trackside equipment or the interlocking subsystem. The first indication information is used to instruct the simulated trackside equipment to simulate the target category fault, or to instruct the interlocking subsystem to send a second indication information to the ATS. The second indication information is used to instruct the ATS to issue an abnormal alarm.

[0098] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0099] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.

[0100] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A fully electronic interlocking testing system, characterized in that, include: The system includes an Automatic Train Control (ATS), an interlocking subsystem, a fault simulator, and a trackside simulator. The interlocking subsystem is connected to both the ATS and the trackside simulator, and the fault simulator is connected to both the interlocking subsystem and the trackside simulator. The simulated fault detector is used to receive fault test instructions and, based on the fault test instructions, send first indication information of the target category fault to the simulated trackside equipment or the interlocking subsystem. The fault simulator is equipped with a fault scenario test selection menu, which allows users to select the target category of fault they wish to test. The target category of fault includes hardware faults, data faults, and protocol faults. The simulated trackside device is used to simulate the target category fault based on the first indication information sent by the simulated fault device, and to send the status information of the simulated trackside device to the interlocking subsystem; The interlocking subsystem is used to send a second indication to the ATS based on the first indication information sent by the simulated fault device or the status information of the simulated trackside device sent by the simulated trackside device. The second indication is used to instruct the ATS to issue an abnormal alarm. The system also includes a simulated axle counting device, which is deployed on the simulated trackside device; The simulated axle counting device is used to simulate axle counting failures, generate axle counting failure information, and send the axle counting failure information to the interlocking subsystem through the simulated trackside device; The system also includes a simulation I / O device, which is connected to the simulation fault detector, the simulation trackside device and the interlocking subsystem respectively. The simulation I / O device is used to collect the status information of the simulation trackside device and send the status information of the simulation trackside device to the interlocking subsystem. It is also used to forward the first indication information sent by the simulation fault device to the simulation trackside device. The system also includes a standalone CI, a simulation fault detector for sending fault codes or fault information frames to the simulation IO or the standalone CI, and a standalone CI for collecting fault information of the simulated trackside equipment through the simulation IO device and sending the fault information to the ATS. For the ECI axle counting fault scenario test, if the number of axle counting sections selected by the simulator in a single / multiple centralized area is inconsistent with the number of axle counting sections configured in the signal system data, the simulation trackside software initialization will fail and the simulation trackside software cannot be enabled. After the interlocking subsystem collects the fault information, it sends the axle counting section full occupancy information to the ATS. If the simulation fault detector selects an incorrect single axle ID, the simulation trackside software will start normally. After receiving the faulty axle ID, it will send the section occupancy information related to that axle to the interlocking subsystem, which will then forward the section occupancy information to the ATS.

2. The fully electronic interlocking test system according to claim 1, characterized in that, The interlocking subsystem includes a stand-alone computer interlocking (CI) and a stand-alone object controller (OC), with the stand-alone computer interlocking (CI) connected to the stand-alone object controller (OC).

3. The fully electronic interlocking test system according to any one of claims 1-2, characterized in that, The ATS is deployed on a cloud platform.

4. A fully electronic interlocking test method applied to the fully electronic interlocking test system according to any one of claims 1-3, characterized in that, The method is applied to the fault simulator, which has a fault scenario test selection menu for users to select the target category of fault to be tested, including hardware faults, data faults, and protocol faults; the method includes: Receive fault test command; Based on the fault test command, a first indication information of the target category fault is sent to the simulated trackside equipment or the interlocking subsystem. The first indication information is used to instruct the simulated trackside equipment to simulate the target category fault, or to instruct the interlocking subsystem to send a second indication information to the ATS. The second indication information is used to instruct the ATS to issue an abnormal alarm.

5. A fully electronic interlocking testing device, characterized in that, Applied to a fault simulator, the device is used to implement the all-electronic interlocking test method as described in claim 4. The fault simulator is equipped with a fault scenario test selection menu for users to select the target category of fault to be tested. The target category of fault includes hardware faults, data faults, and protocol faults. The device includes: The receiving module is used to receive fault test commands; The sending module is used to send a first indication information of a target category fault to the simulated trackside equipment or interlocking subsystem based on the fault test command. The first indication information is used to instruct the simulated trackside equipment to simulate the target category fault, or to instruct the interlocking subsystem to send a second indication information to the ATS. The second indication information is used to instruct the ATS to issue an abnormal alarm.

6. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the program, it implements the all-electronic interlocking test method as described in claim 4.

7. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the all-electronic interlocking test method as described in claim 4.

8. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by the processor, it implements the all-electronic interlocking test method as described in claim 4.

Images