A SIL4 platform door system based on communication

Abstract

The present invention relates to the technical field of platform door control, and in particular to a communication-based SIL4-level platform door system, comprising a domain controller, a DCU, an external interface and other subsystem devices; the platform door system realizes interconnection and intercommunication with a signal system and other subsystem devices through bus connection and hard-wire connection, thereby ensuring high security and high reliability of the system, and adopts a dual CPU architecture inside the domain controller and the door control unit, and the dual CPU design can perform double processing and cross-verification on data to ensure the accuracy and consistency of the data, thereby replacing the existing relay circuit to achieve the SIL4 safety level; the data transparent transmission mechanism performed by a single CPU reduces data transmission delay and improves real-time response capability.

Description

Technical Field

[0001] The invention relates to the technical field of platform door control, in particular to a communication-based SIL4-level platform door system. Background Art

[0002] In modern rail transit systems, platform door systems are an important part of ensuring passenger safety; platform doors not only need to accurately control the flow of people in and out of the platform, but must also respond quickly in emergencies to ensure passenger safety. However, since platform door systems are usually in a complex operating environment, this requires the system to have a high degree of reliability and security.

[0003] At present, in order to solve the safety problem, the existing platform door system is designed with a hardware-based SIL4 platform door system. The system mainly relies on complex hard-wired circuits and a large number of relay circuits to achieve high safety and reliability. Although this traditional design can meet the basic safety requirements of SIL4, due to the complexity of the hard-wired circuits and the large number of relays, the maintenance and expansion of the system becomes very difficult. Summary of the invention

[0004] The technical problem to be solved by the present invention is that the existing SIL4-level platform door system relies on a large number of hard-wire circuits and relay circuits, and is relatively poor in maintenance and expandability.

[0005] In order to solve the technical problem, the technical solution adopted by the present invention is: to provide a communication-based SIL4 platform door system, comprising:

[0006] A platform door system, the platform door system is connected to the signal system through a bus connection and a hard-wire connection;

[0007] The platform door system is connected to other subsystem devices via bus connection and hard-wire connection;

[0008] The platform door system is provided with a domain controller, the domain controllers are connected via a bus, a plurality of DCUs are connected to the platform door system, and the DCUs are connected to the domain controller via the bus;

[0009] The domain controller and DCU perform transparent transmission through a single CPU, and pass the data to the dual CPU unit for data processing.

[0010] Optionally, the platform door system is provided with an external interface, wherein the external interface includes a hard-line interface and a network interface, which is used to switch according to the interface type of the external device.

[0011] Optionally, the number of domain controllers is two, and the two domain controllers are connected by a bus via a communication interface;

[0012] A communication unit, a secure computing unit and a secure input-output unit are arranged inside the domain controller; the communication unit is used to transparently transmit data to the secure computing unit and the secure input-output unit for data processing; the communication unit and the secure computing unit are connected by a bus using a communication interface, and the secure computing unit and the secure input-output unit are connected by a bus using a communication interface.

[0013] Optionally, a communication module is provided between the domain controllers, and the two domain controllers communicate through the communication module.

[0014] Optionally, a CPU3 is provided in the communication unit, the communication units in the domain controller are all connected to the CPU3, and the communication units are connected to the signal system through a network interface and connected to another domain controller through a network interface;

[0015] The communication unit only performs transparent transmission.

[0016] Optionally, the secure computing unit is internally provided with CPU1 and CPU2, the two CPUs communicate with each other through a network interface, and are connected to CPU3 of the communication unit through the network interface;

[0017] The safety input and output unit is internally provided with CPU4 and CPU5, which are respectively connected with CPU1 and CPU2 in the safety computing unit through a network interface;

[0018] The safety input and output circuit is connected to CPU4 and CPU5, and is connected to the signal system through a safety hard line.

[0019] Optionally, the secure computing unit uses SDTv4 according to the protocol to ensure data security.

[0020] Optionally, the DCU is connected to other subsystem devices and a domain controller via a network interface;

[0021] The DCU is provided with a communication unit and a safety control unit. The communication unit is provided with a single CPU. The communication unit synchronizes data with the dual CPUs in the safety control unit through the single CPU. Other subsystem devices and peripherals are connected to the dual CPUs in the safety control unit through circuits.

[0022] Compared with the prior art, the present invention has the following beneficial effects:

[0023] The platform door system of the present invention adopts a dual CPU architecture inside the domain controller and the door control unit. The dual CPU design can perform dual processing and cross-verification on the data to ensure the accuracy and consistency of the data, thereby achieving the SIL4 safety level; at the same time, the data transparent transmission mechanism performed by the single CPU reduces the data transmission delay and improves the real-time response capability. The redundant design of the dual CPU ensures the continuous operation of the system in the event of a single point failure. Through the dual CPU design, two times two take two is used to replace the existing relay circuit to ensure the consistency of the calculation results, thereby improving the reliability of data processing and the safety of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 It is a schematic diagram of the overall component structure of the present invention;

[0025] Figure 2 This is a schematic diagram of the domain controller component structure of the present invention;

[0026] Figure 3 It is a schematic diagram of the DCU component structure of the present invention. DETAILED DESCRIPTION

[0027] The technical solution of the present invention will be described clearly and completely below in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention. Embodiment 1:

[0028] like Figure 1 As shown, a communication-based SIL4 platform door system is provided, including a domain controller, a DCU, an external interface and other subsystem devices; the platform door system realizes interconnection with a signal system and other subsystem devices through bus connection and hard-wire connection, ensuring high safety and high reliability of the system.

[0029] Two domain controllers are provided in the platform door system, which are connected via a bus and perform data communication via a communication module. In this embodiment, TSN is used for communication to improve the reliability and real-time performance of communication. Multiple DCUs are connected to the platform door system, and the DCUs are connected to the domain controllers via a bus.

[0030] The domain controller and DCU perform transparent transmission through a single CPU, and pass the data to the dual CPU unit for data processing.

[0031] The platform door system is mainly responsible for managing and controlling the opening and closing of the platform doors, and ensuring rapid response and execution of corresponding operations in emergency situations. The system is connected to the signal system through bus connection and hard wire connection, and is connected to other subsystem equipment in the same way to achieve multi-level, multi-channel secure data transmission.

[0032] There are two domain controllers in the system, and the domain controllers are connected through a bus. Each domain controller includes a communication unit, a security computing unit and a security input and output unit.

[0033] The communication unit is responsible for transparent transmission of data, and is internally provided with CPU3 to ensure that data is not tampered with during transmission; the communication units in the domain controller are all connected to CPU3, and the communication units are connected to the signal system through a network interface and to another domain controller through a network interface;

[0034] Through transparent transmission from a single CPU, data is passed to the dual CPU unit for data processing, ensuring real-time data transmission. The transparent transmission mechanism reduces delays in data transmission and ensures that the system can respond quickly to external commands and events. The parallel processing capabilities of the dual CPUs further improve the processing efficiency of the system, ensuring that the platform door can be opened or closed quickly and accurately.

[0035] like Figure 2 As shown, a communication unit, a security computing unit and a security input-output unit are provided inside the domain controller; the communication unit is used to transparently transmit data to the security computing unit and the security input-output unit for data processing; the communication unit and the security computing unit are connected by bus using a communication interface, and the security computing unit and the security input-output unit are connected by bus using a communication interface; the security computing unit includes CPU1 and CPU2, the two CPUs communicate through a network interface, and are connected to CPU3 of the communication unit through the network interface, and are responsible for data processing and security checks.

[0036] The safety input and output unit includes CPU4 and CPU5, which are respectively connected to CPU1 and CPU2 in the safety computing unit and access the signal system through a safety hard line, and are responsible for the safe transmission and execution of input and output data.

[0037] A communication module is also set between the domain controllers, through which communication and data synchronization between the two domain controllers are realized, ensuring the reliable operation of the system under high load and complex environment.

[0038] like Figure 3As shown, multiple DCUs are connected to the platform door system, and the DCUs are connected to the domain controller through a bus. Each DCU is provided with a communication unit and a safety control unit; the communication unit has a built-in single CPU, and the CPU is responsible for data synchronization with the dual CPUs of the safety control unit, and is connected to other subsystem devices and the domain controller through a network interface.

[0039] The dual CPU architecture within the domain controller and DCU enables strict monitoring and verification of data processing and transmission, ensuring that the system reaches the SIL4 safety level; the dual CPU architecture can cross-verify data and check the consistency and correctness of data by comparing the calculation results of the two CPUs. Once an inconsistency is detected, the system will immediately take safety measures to prevent the propagation of errors, thereby ensuring the integrity and security of the data.

[0040] The platform door system is provided with external interfaces, including hard-wired interfaces and network interfaces. Since the existing SIL4 interfaces between the platform door system and the signal system are all hard-wired interfaces implemented by relays, this embodiment retains the SIL4 hard-wired interface and reserves the SIL4 communication interface, so that real-time changes can be made according to changes in the signal system.

[0041] A communication unit is provided inside the domain controller, which only performs transparent transmission without further processing and transmits the data to the secure computing unit. Then, the SDTv4 protocol is adopted according to the communication protocol to ensure security and prevent the data from being tampered with or lost during transmission.

[0042] When the platform door system receives instructions from the signal system, the communication unit transparently transmits the data to the safety computing unit through the bus. CPU1 and CPU2 in the safety computing unit process and check the safety of the data. The processed data is transmitted to the safety input and output unit through the network interface.

[0043] After receiving the processed data, the safety input and output unit transmits the instruction to the actual platform door actuator through the safety hard line to complete the opening or closing operation of the platform door.

[0044] During the execution of the system, the operating status of each subsystem and device is monitored in real time through the DCU and communication unit. Any abnormal situation will be immediately fed back to the domain controller and processed by the security computing unit to ensure the continuous and stable operation of the system.

[0045] Obviously, the above embodiments are merely examples for clear explanation, and are not intended to limit the implementation methods. For those skilled in the art, other different forms of changes or modifications can be made based on the above description. It is not necessary and impossible to list all the implementation methods here. The obvious changes or modifications derived therefrom are still within the protection scope of the invention.

Claims

1. A communication-based SIL4 platform door system, characterized in that: It includes a signal system and other subsystem equipment, and the platform door system is connected to the signal system through a bus connection and a hard-wire connection; The platform door system is connected to other subsystem devices via bus connection and hard-wire connection; The platform door system is provided with a domain controller, the domain controllers are connected via a bus, a plurality of DCUs are connected to the platform door system, and the DCUs are connected to the domain controller via the bus; Wherein, the domain controller and DCU perform transparent transmission through a single CPU, and pass the data to the dual CPU unit for data processing; The number of domain controllers is two, and the two domain controllers are connected by a bus via a communication interface; The domain controller is internally provided with a communication unit, a security computing unit and a security input and output unit; the communication unit is used to transparently transmit data to the security computing unit and the security input and output unit for data processing; the communication unit and the security computing unit are connected by a bus using a communication interface, and the security computing unit and the security input and output unit are connected by a bus using a communication interface; The communication unit is provided with a CPU3, and the communication units in the domain controller are all connected to the CPU3, and the communication units are connected to the signal system through a network interface, and are connected to another domain controller through a network interface; The communication unit only performs transparent transmission.

2. The system according to claim 1, characterized in that The platform door system is provided with an external interface, wherein the external interface includes a hard-line interface and a network interface, which is used to switch according to the interface type of the external device.

3. The system according to claim 1, characterized in that A communication module is provided between the domain controllers, and the two domain controllers communicate with each other through the communication module.

4. The system according to claim 1, characterized in that The secure computing unit is internally provided with CPU1 and CPU2, the two CPUs communicate with each other through a network interface, and are connected to CPU3 of the communication unit through the network interface; The safety input and output unit is internally provided with CPU4 and CPU5, which are respectively connected with CPU1 and CPU2 in the safety computing unit through a network interface; The safety input and output unit is connected to CPU4 and CPU5, and is connected to the signal system through a safety hard line.

5. The system according to claim 1, characterized in that The secure computing unit uses SDTv4 according to the protocol to ensure data security.

6. The system according to claim 1, characterized in that The DCU is connected to other subsystem devices and domain controllers via a network interface; Among them, the DCU is provided with a communication unit and a safety control unit. The communication unit is provided with a single CPU. The communication unit synchronizes data with the dual CPUs in the safety control unit through the single CPU. Other subsystem devices and peripherals are connected to the dual CPUs in the safety control unit through circuits.

Images