Full-electronic module redundancy switching method and device of full-electronic interlocking execution unit

Abstract

The invention belongs to the field of railway signal control, and discloses a full-electronic module redundancy switching method and device of a full-electronic interlocking execution unit. By monitoring the state information of all-electronic modules, when all-electronic modules which are redundant to each other meet redundancy switching conditions, all-electronic module redundancy switching is executed, and after switching, undisturbed switching of the states of external signal equipment and turnout equipment is guaranteed by keeping the states of historical control elements of original main all-electronic modules. The situation that equipment state representation cannot be kept due to redundancy switching is completely eradicated, the operation efficiency of a railway signal interlocking control system is improved, and the safety performance of urban rails is improved.

Description

Technical Field

[0001] The invention relates to the field of railway signal control, and in particular to a method and a device for switching full electronic module redundancy of a full electronic interlocking execution unit. Background Art

[0002] Railway signal interlocking control systems have gone through several stages, including mechanical interlocking, relay interlocking, and computer interlocking. As a new generation of interlocking products, the fully electronic interlocking control system eliminates the relays of traditional relay interlocking and directly controls external devices through fully electronic modules, which has many advantages. For example, it has the characteristics of miniaturization, low failure rate, configurability, low cost, high integration, and strong anti-interference ability. On the basis of ensuring the safety of station operations, it can effectively reduce operation and maintenance costs and has a high value of promotion and application.

[0003] At present, the fully electronic module redundant switching scheme of the fully electronic interlocking execution unit at home and abroad adopts the conventional redundant switching method. Conventional redundant switching method: When the main fully electronic module fails, the main fully electronic module is downgraded to a backup module, and the original backup fully electronic module is upgraded to the main fully electronic module, thereby replacing the original main fully electronic module. However, the full electronic module redundant switching cannot achieve disturbance-free switching of the external device status. The use of conventional redundant switching methods will cause the signal to be closed and the turnout to lose the meter, so that the state of the control object cannot be maintained. The conventional fully electronic module redundant switching method reduces the operating efficiency of the railway signal interlocking control system and the safety performance of the urban rail to a certain extent. Summary of the invention

[0004] In order to solve the problems of the prior art, realize redundant switching of all-electronic modules and achieve the purpose of disturbance-free switching, the present application provides a method and device for redundant switching of all-electronic modules of a fully electronic interlocking execution unit.

[0005] In a first aspect, a method for switching full electronic module redundancy of a full electronic interlocking execution unit is provided, which adopts the following technical solution:

[0006] Monitoring status information of the full electronic module, wherein the status information includes a fault state and a normal state;

[0007] The mutually redundant all-electronic modules meet the redundant switching conditions and perform all-electronic module redundant switching, as follows:

[0008] The mutually redundant full electronic modules include a main full electronic module and a standby full electronic module; when performing full electronic module redundancy switching, the standby full electronic module is switched to the main module, and the main module is recorded as the newly promoted main full electronic module; the main full electronic module is switched to the standby module, and the standby module is recorded as the newly demoted standby full electronic module;

[0009] Achieving a non-disruptive switch by maintaining the historical state is as follows:

[0010] After the mutually redundant all-electronic modules complete the redundant switching, the all-electronic application module uses the historical state of the main all-electronic module before the redundant switching to maintain the state of the control object, and then uses the real-time data of the newly promoted main all-electronic module after the redundant switching to control external equipment and collect status.

[0011] Furthermore, the status information of the full electronic module includes:

[0012] Fault state, that is, if there is a fault that induces redundant switching of the full electronic module, the full electronic module is set to a fault state;

[0013] The normal state means that the all-electronic module works normally, or there is a fault that cannot induce redundant switching of the all-electronic module, then the all-electronic module is set to the normal state.

[0014] Furthermore, the faults that induce redundant switching of all electronic modules include: communication failure, relay failure, drive acquisition failure, current self-test failure; the faults that cannot induce redundant switching of all electronic modules include: temperature alarm, input voltage failure, FPGA4 timeout alarm, FPGA5 timeout alarm and other fault information.

[0015] Furthermore, when monitoring the status information of the full electronic module, the method used is as follows:

[0016] The all-electronic application module receives the module information reported by the all-electronic module. If the received module information contains fault information that induces redundant switching of the all-electronic module, the all-electronic application module sets the current all-electronic module to a fault state. If the received module information does not contain fault information that induces redundant switching of the all-electronic module, the all-electronic application module makes further judgments in the following manner:

[0017] The all-electronic application module determines whether there is a communication fault between itself and the all-electronic module. If there is a communication fault, the all-electronic application module sets the current all-electronic module to a fault state; if there is no communication fault, the all-electronic application module sets the current all-electronic module to a normal state.

[0018] Further, the redundant switching condition includes redundant switching condition 1 and redundant switching condition 2. When any one of the redundant switching condition 1 and the redundant switching condition 2 is met, the full electronic module redundant switching is performed:

[0019] Redundant switching condition 1: among the mutually redundant full electronic modules, the state of the main full electronic module is a fault state, and the state of the standby full electronic module is a normal state;

[0020] Redundant switching condition 2: Among the mutually redundant full-electronic modules, the status of the main full-electronic module is a faulty state, and the fault cause is a communication fault between the full-electronic application module and the main full-electronic module; the standby full-electronic module is a faulty state, and the fault cause is not a communication fault.

[0021] Furthermore, after the mutually redundant all-electronic modules complete the redundant switching, the historical state of the main all-electronic module before the redundant switching is used to maintain the state of the controlled object, and the retention time is several all-electronic application cycles. After the historical state retention time expires, the all-electronic application module uses the real-time data of the current main all-electronic module for data collection and control.

[0022] Furthermore, the holding time is 15 full electrical application cycles.

[0023] In a second aspect, a fully electronic module redundant switching device of a fully electronic interlocking execution unit is provided, the device comprising: a processor coupled to a memory, the memory being used to store a computer program, the processor being used to run the computer program, so that the device executes the method described in the first aspect.

[0024] The beneficial effects of the present invention are as follows:

[0025] In the prior art, a conventional redundant switching method is adopted, that is, when the main all-electronic module fails, the main all-electronic module is downgraded to a backup module, and the backup all-electronic module is upgraded to the main module, but non-disturbance switching cannot be achieved. Once the full electronic module redundant switching occurs, the signal is allowed to be closed and the turnout is lost. Since the state of the external control object cannot be maintained, the operating efficiency of the railway signal interlocking control system and the safety performance of the urban rail are reduced.

[0026] In the present invention, by making real-time decisions on the module information uploaded by the all-electronic module, the all-electronic module redundant switching strategy is ensured to be effectively implemented. Mutually redundant all-electronic modules meet the redundant switching conditions, and the all-electronic module redundant switching is executed, which fully guarantees the safety of the external signal equipment for driving and mining. During the switching process, the historical control element status of the original main all-electronic module is maintained, which ensures the non-disturbance switching of external signal equipment and turnout equipment, and eliminates the situation where the control object indication cannot be maintained due to redundant switching, thereby improving the operating efficiency of the railway signal interlocking control system and the safety performance of the urban rail. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Figure 1 is an overall flow chart of the full electronic module redundancy switching method according to an embodiment of the present invention;

[0028] Figure 2 This is a full electronic module fault judgment flow chart of an embodiment of the present invention;

[0029] Figure 3 A flow chart of the judgment of the full electronic module redundancy switching strategy according to an embodiment of the present invention;

[0030] Figure 4 This is a flow chart of maintaining the state after full electronic module redundancy switching according to an embodiment of the present invention. DETAILED DESCRIPTION

[0031] The present invention is further described below.

[0032] The present invention provides a method for switching a fully electronic module redundancy of a fully electronic interlocking execution unit. The overall process is as follows: Figure 1 As shown, the specific steps are as follows:

[0033] S1, monitoring the status information of the full electronic module, wherein the status information includes a fault state and a normal state;

[0034] During normal operation, the all-electronic interlocking execution unit monitors the status information of all the all-electronic modules in the main and standby cages of the all-electronic interlocking execution unit in real time. The all-electronic application module judges the status information of the all-electronic modules and sets the status of the all-electronic modules according to the judgment results. Among them, the status of the all-electronic module includes a fault state and a normal state. The fault state refers to the existence of a fault in the all-electronic module that induces redundant switching of the all-electronic module, such as: relay fault, drive acquisition fault, current self-test fault, communication fault and other fault information; the normal state refers to the normal operation of the all-electronic module, or the existence of a fault that cannot induce redundant switching of the all-electronic module, wherein the fault that cannot induce redundant switching of the all-electronic module includes: temperature alarm, input voltage fault, FPGA4 timeout alarm, FPGA5 timeout alarm and other fault information.

[0035] Among them, the full electronic application module determines the status information of the full electronic module. The specific process of setting the status of the full electronic module is as follows: Figure 2 shown.

[0036] The all-electronic application module receives the module information reported by the all-electronic module. If the received module information contains fault information that induces redundant switching of the all-electronic module, such as relay fault, drive acquisition fault, current self-test fault, etc., the all-electronic application module sets the current all-electronic module to a fault state; if the received module information does not contain a fault that induces redundant switching of the all-electronic module, the all-electronic application module makes further judgments as follows:

[0037] The all-electronic application module determines whether there is a communication fault between itself and the all-electronic module. If there is a communication fault, the all-electronic application module sets the current all-electronic module to a fault state; if there is no communication fault, the all-electronic application module sets the current all-electronic module to a normal state.

[0038] If the all-electronic application module detects that the all-electronic module has a fault, but the fault cannot induce redundant switching of the all-electronic module, for example, temperature alarm, input voltage fault, FPGA4 timeout alarm, FPGA5 timeout alarm, etc., the state of the all-electronic module is also set to normal, and only the fault information is uploaded to the information maintenance device for common fault alarm.

[0039] S2. The mutually redundant all-electronic modules meet the redundant switching conditions, and the all-electronic module redundant switching is executed.

[0040] The redundancy switching strategy judgment flow chart of the mutually redundant full electronic modules is as follows: Figure 3 As shown, the details are as follows:

[0041] The state information of mutually redundant full electronic modules is recorded, wherein the mutually redundant full electronic modules include a main full electronic module and a standby full electronic module.

[0042] If the states of the active full electronic module and the standby full electronic module are both normal, the mutually redundant full electronic modules do not meet the redundant switching condition, and the full electronic application controls the mutually redundant full electronic modules to maintain the existing active and standby states without performing redundant switching;

[0043] If, among the mutually redundant full electronic modules, the state of the active full electronic module is normal and the state of the standby full electronic module is faulty, the mutually redundant full electronic modules do not meet the redundant switching condition, and the full electronic application module controls the mutually redundant full electronic modules to maintain the existing active and standby states without performing redundant switching;

[0044] If, among the mutually redundant full-electronic modules, the state of the main full-electronic module is a faulty state and the state of the standby full-electronic module is a normal state, the mutually redundant full-electronic modules satisfy the redundant switching condition (this is redundant switching condition one), and the full-electronic module redundant switching is performed, that is, the main full-electronic module in the faulty state is switched to the standby module, and the standby module is recorded as the newly downgraded standby full-electronic module; the standby full-electronic module in the normal state is switched to the main module, and the main module is recorded as the newly promoted main full-electronic module.

[0045] If, among the mutually redundant full-electronic modules, the main full-electronic module is in a fault state, and the fault cause is a communication fault; the backup full-electronic module is in a fault state, and the fault cause is a non-communication fault, then the mutually redundant full-electronic modules meet the redundant switching condition (this is the second redundant condition), and the full-electronic module redundant switching is performed, that is, the main full-electronic module is switched to the backup module, and the backup module is recorded as a newly downgraded backup full-electronic module; the backup full-electronic module is switched to the main module, and the main module is recorded as a newly promoted main full-electronic module.

[0046] The redundant switching conditions include redundant switching condition 1 and redundant switching condition 2. When any one of the redundant switching condition 1 and the redundant switching condition 2 is met, full electronic module redundant switching is performed.

[0047] After the full electronic module performs redundant switching, the current active / standby identification is maintained until the next switching condition is met and redundant switching is performed again.

[0048] S3: Achieve disturbance-free switching by maintaining historical status

[0049] The state retention flow chart after full electronic module redundancy switching is as follows Figure 4 As shown, the details are as follows:

[0050] After the redundant all-electronic modules complete the redundant switching, the newly promoted master all-electronic module uses the historical state of the original master all-electronic module before the redundant switching to maintain the state of the control object, thereby realizing the non-disturbance switching of the external device state. The historical state retention time is a number of (configurable through data, preferably in the range of 10-15) all-electronic application cycles, and in this embodiment, 15 all-electronic application cycles are maintained. After the historical state retention expires, that is, in this embodiment, after the expiration of 15 all-electronic application cycles, the newly promoted master all-electronic module uses real-time data to control and collect external devices.

[0051] In order to ensure that the mutually redundant all-electronic modules can achieve disturbance-free switching, when the main all-electronic module fails, the all-electronic application module saves the historical state data of the previous cycle before the redundant switching of the main all-electronic module to the global variable for maintaining the state of the newly promoted main all-electronic module. In addition, the all-electronic application module controls the judgment of the current main all-electronic module to execute the downgrade strategy. When the all-electronic module meets the redundant switching conditions, the newly promoted main all-electronic module maintains the external state by using the historical state of the original main all-electronic module saved in the global variable. The maintenance time is several all-electronic application cycles, which can be configured through data, and the preferred range is 10-15. In this embodiment, the maintenance time is 15 all-electronic application cycles. After the expiration of 15 all-electronic application cycles, the all-electronic application module uses the real-time data of the newly promoted main all-electronic module to control and collect external equipment, thereby realizing disturbance-free switching of the all-electronic redundant module.

[0052] The present invention also provides a fully electronic module redundant switching device of a fully electronic interlocking execution unit, the device comprising: a processor coupled to a memory, the memory being used to store a computer program, the processor being used to run the computer program, so that the device executes a fully electronic module redundant switching method of the fully electronic interlocking execution unit.

[0053] Although the present invention has been disclosed as above with preferred embodiments, the embodiments are not intended to limit the present invention. Any equivalent changes or modifications made without departing from the spirit and scope of the present invention also belong to the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the content defined by the claims of this application.

Claims

1. A method for switching full electronic module redundancy of a full electronic interlocking execution unit, characterized in that: The steps include: Monitoring status information of the full electronic module, wherein the status information includes a fault state and a normal state; The mutually redundant all-electronic modules meet the redundant switching conditions and perform all-electronic module redundant switching, as follows: The mutually redundant full electronic modules include a main full electronic module and a standby full electronic module; when performing full electronic module redundancy switching, the standby full electronic module is switched to the main module, and the main module is recorded as the newly promoted main full electronic module; the main full electronic module is switched to the standby module, and the standby module is recorded as the newly demoted standby full electronic module; Achieving a non-disruptive switch by maintaining the historical state is as follows: After the mutually redundant all-electronic modules complete the redundant switching, the all-electronic application module uses the historical state of the main all-electronic module before the redundant switching to maintain the state of the control object, and then uses the real-time data of the newly promoted main all-electronic module after the redundant switching to control external equipment and collect status.

2. The method for switching full electronic module redundancy of a full electronic interlocking execution unit according to claim 1, characterized in that: The status information of the full electronic module includes: Fault state, that is, if there is a fault that induces redundant switching of the full electronic module, the full electronic module is set to a fault state; The normal state means that the all-electronic module works normally, or there is a fault that cannot induce redundant switching of the all-electronic module, then the all-electronic module is set to the normal state.

3. The method for switching full electronic module redundancy of a full electronic interlocking execution unit according to claim 2, characterized in that: The faults that induce full electronic module redundant switching include: communication failure, relay failure, drive acquisition failure, and current self-test failure; the faults that cannot induce full electronic module redundant switching include: temperature alarm, input voltage failure, FPGA4 timeout alarm, and FPGA5 timeout alarm.

4. The method for switching full electronic module redundancy of a full electronic interlocking execution unit according to claim 3, characterized in that: When monitoring the status information of the full electronic module, the method used is as follows: The all-electronic application module receives the module information reported by the all-electronic module. If the received module information contains fault information that induces redundant switching of the all-electronic module, the all-electronic application module sets the current all-electronic module to a fault state. If the received module information does not contain fault information that induces redundant switching of the all-electronic module, the all-electronic application module makes further judgments in the following manner: The all-electronic application module determines whether there is a communication fault between itself and the all-electronic module. If there is a communication fault, the all-electronic application module sets the current all-electronic module to a fault state; if there is no communication fault, the all-electronic application module sets the current all-electronic module to a normal state.

5. The method for switching full electronic module redundancy of a full electronic interlocking execution unit according to claim 4, characterized in that: The redundant switching condition includes redundant switching condition 1 and redundant switching condition 2. When any one of the redundant switching condition 1 and redundant switching condition 2 is met, the full electronic module redundant switching is performed: Redundant switching condition 1: among the mutually redundant full electronic modules, the state of the main full electronic module is a fault state, and the state of the standby full electronic module is a normal state; Redundant switching condition 2: Among the mutually redundant full-electronic modules, the status of the main full-electronic module is a faulty state, and the fault cause is a communication fault between the full-electronic application module and the main full-electronic module; the standby full-electronic module is a faulty state, and the fault cause is not a communication fault.

6. The method for switching full electronic module redundancy of a full electronic interlocking execution unit according to claim 5, characterized in that: After the mutually redundant all-electronic modules complete the redundant switching, the historical state of the main all-electronic module before the redundant switching is used to maintain the state of the controlled object, and the retention time is several all-electronic application cycles. After the historical state retention time expires, the all-electronic application module uses the real-time data of the current main all-electronic module for data collection and control.

7. The method for switching full electronic module redundancy of a full electronic interlocking execution unit according to claim 6, characterized in that: The hold time is 15 full electrical application cycles.

8. A fully electronic module redundancy switching device for a fully electronic interlocking execution unit, characterized in that: The device comprises: a processor coupled to a memory, the memory being used to store a computer program, the processor being used to run the computer program, so that the device performs the method according to any one of claims 1 to 7.

Images