Train communication gateway redundant system and switching control method thereof

Abstract

The invention relates to the technical field of train communication, in particular to a train communication gateway redundant system and a switching control method thereof.The system comprises a first gateway and a second gateway, and the first gateway and the second gateway are the same in hardware configuration and each comprise a double-Ethernet-port CPU unit, an MVB unit, a WTB unit, a VME backboard unit and a PWR unit; the PWR unit is used for supplying power to the CPU unit, the MVB unit and the WTB unit, the CPU unit is respectively communicated with the MVB unit and the WTB unit through the VME backboard and carries out centralized management on the states of other units, and the CPU units of the two gateways are connected through double Ethernet and are jointly used for realizing bidirectional monitoring on the states of the CPU units between the gateways. The master gateway is monitored through the communication line between the gateways, when the master gateway is found to be in fault, the slave gateway can be rapidly switched to the master gateway, the problems that the slave gateway is not switched and switched by mistake when the master gateway is in fault are solved, the stability of a train network control system is improved, and normal operation of a train is guaranteed.

Description

Technical Field

[0001] The present invention relates to the technical field of train communications, and in particular to a train communication gateway redundant system and a switching control method thereof. Background Art

[0002] The train communication network TCN is a two-level network architecture, including a backbone network and a marshaling network. The train backbone network is used for inter-train communication, and the marshaling network is used for intra-train communication. The backbone network described in this article is the twisted-wire train bus WTB, and the marshaling network is the multi-function vehicle bus MVB.

[0003] The WTB gateway device of TCMS (Train Network Control System) is used for WTB and MVB protocol conversion, transmitting the control instructions of the central control unit MPU of the master control car to the slave control car, and transmitting the slave control car status and other information obtained by the slave control car MPU (central control unit) to the master control car, thereby realizing the interconnection and mutual control between trains.

[0004] In the prior art, the master and slave devices of the WTB gateway are redundant with each other. When the master device fails, the slave device takes over the master device. However, there are problems such as the failure of a sub-unit of the master gateway cannot be identified, resulting in the inability to switch the slave gateway to the master gateway, and the slave gateway switching is caused by the master-slave gateway cable failure or MPU redundancy switching.

[0005] In summary, in order to solve the problem of slave gateway not switching or erroneous switching when the master gateway fails in a train network control system, the present invention proposes a train communication gateway redundant system and a switching control method thereof. Summary of the invention

[0006] According to the above technical problem of the failure of the slave gateway to switch or the wrong switching when the master gateway fails in the train network control system, a train communication gateway redundancy system and its switching control method are provided. In the present invention, the master gateway is monitored through the communication line between the gateways. When the master gateway fails, the slave gateway can quickly switch to the master gateway, solving the problems of the failure of the slave gateway to switch or the wrong switching when the master gateway fails, improving the stability of the train network control system, and ensuring the normal operation of the train.

[0007] The technical means adopted by the present invention are as follows:

[0008] A train communication gateway redundancy system includes a first gateway and a second gateway.

[0009] The first gateway includes a CPU unit, an MVB unit, a WTB unit, a VME backplane unit and a PWR unit, the CPU unit includes a first Ethernet port and a second Ethernet port, the CPU unit is used to receive MVB unit data and WTB unit data, and process the MVB unit data and WTB unit data, including sending the MVB unit data to the WTB unit, and sending the WTB unit data to the MVB unit, the MVB unit is used for internal data communication within the train, the WTB unit is used for data communication between trains, and the PWR unit supplies power to the CPU unit, the MVB unit and the WTB unit through the VME backplane unit;

[0010] The second gateway has the same hardware configuration as the first gateway. The first Ethernet port of the CPU unit of the first gateway is connected to the first Ethernet port of the CPU unit of the second gateway via a first Ethernet cable, so as to realize a first monitoring path for bidirectional monitoring between the first gateway and the second gateway. The second Ethernet port of the CPU unit of the first gateway is connected to the second Ethernet port of the CPU unit of the second gateway via a second Ethernet cable, so as to realize a second monitoring path for bidirectional monitoring between the first gateway and the second gateway.

[0011] Furthermore, one of the first gateway and the second gateway is arbitrarily selected as the main gateway, and the other gateway is selected as the slave gateway. The slave gateway is a redundant device of the main gateway. When the slave gateway detects an abnormality in the main gateway, it switches to the main gateway. The slave gateway outputs data only when it switches to the main gateway to avoid conflicts.

[0012] Furthermore, the first monitoring path and the second monitoring path are dual-line redundant lines. When the status of the master gateway received by the slave gateway through the first monitoring path and the second monitoring path is abnormal at the same time, the slave gateway switches to the master gateway.

[0013] Furthermore, the MVB unit receives the MPU data of the vehicle through the MVB bus, and sends the MPU data of the vehicle to the WTB unit through the main gateway to generate WTB data of the vehicle. The WTB unit sends the WTB data of the vehicle to other vehicles through the WTB bus, and at the same time receives the WTB data of other vehicles through the WTB bus, and sends the WTB data of other vehicles to the MVB unit through the main gateway, which is then transmitted back to the MPU of the vehicle by the MVB unit.

[0014] Furthermore, the CPU unit centrally manages the status of other units. The main gateway CPU unit monitors the status of its own MVB unit, WTB unit, VME backplane unit, and PWR unit. The slave gateway CPU unit monitors the status of its own MVB unit, WTB unit, VME backplane unit, and PWR unit. The main gateway CPU unit and the slave gateway CPU unit have the same logic for monitoring the status of other units.

[0015] Furthermore, there are two ways for the master gateway CPU unit and the slave gateway CPU unit to monitor the status of their own MVB units, including:

[0016] Method 1: The CPU unit writes verification data to the verification port of the MVB unit and reads it back, then writes the inverted verification data and reads it back. If the read-back data is different from the written data and the duration exceeds t1, the MVB unit is considered abnormal.

[0017] Method 2: The CPU unit writes the changed data to the MVB unit detection port and then reads it back. If the read-back data remains unchanged and lasts for more than t1, the MVB unit is considered abnormal, where t1 is the MVB unit abnormality determination timeout threshold.

[0018] Furthermore, there are two ways for the master gateway CPU unit and the slave gateway CPU unit to monitor the status of their own WTB units, including:

[0019] Method 1: The CPU unit writes initial verification data to the verification address of the WTB unit and then reads it back, then writes the inverted verification data and then reads it back. If the read-back data is different from the written data and the duration exceeds t2, the WTB unit is considered abnormal.

[0020] Method 2: The CPU unit reads back the communication data of the WTB unit. If the read-back data remains unchanged and lasts for more than t2, the WTB unit is considered to be abnormal, where t2 is the timeout threshold for determining the abnormality of the WTB unit.

[0021] A train communication gateway redundant system switching control method is implemented based on the above train communication gateway redundant system, comprising the following steps:

[0022] (1) Complete power-on startup: The first gateway and the second gateway are started simultaneously, and their respective configuration files are loaded. By default, the first gateway is configured as the master gateway and the second gateway is configured as the slave gateway;

[0023] (2) Start working: On the one hand, the master gateway CPU unit monitors the status of its own MVB unit, WTB unit and VME backplane unit, and on the other hand, the slave gateway monitors the operating status of the master gateway through the first monitoring path and the second monitoring path between gateways;

[0024] (3) Fault handling: When the CPU unit of the master gateway detects that the status of the MVB unit, WTB unit or VME backplane unit is abnormal, the CPU unit actively resets the abnormal unit and no longer sends changed data to the slave gateway through Ethernet port 1 and Ethernet port 2. When the slave gateway detects that the data sent by the CPU unit of the master gateway through Ethernet port 1 and Ethernet port 2 remains unchanged, it switches to the master gateway;

[0025] (4) Redundancy switching is completed: the slave gateway is switched to the new master gateway. The original master gateway is actively reset and serves as the new slave gateway, receiving data from the current master gateway through the first monitoring path and the second monitoring path.

[0026] Furthermore, in step (3), the slave gateway monitors the master gateway in the following manner:

[0027] If the communication data of the main gateway monitored by the slave gateway through the first monitoring path and the second monitoring path between the gateways remains unchanged and lasts for a certain period of time exceeding t3, the main gateway is considered to be abnormal, where t3 is the monitoring path abnormal timeout threshold.

[0028] Compared with the prior art, the present invention has the following advantages:

[0029] 1. In the present invention, the system is configured with a master-slave gateway, which is redundant with each other. During the operation of the system, the slave gateway continuously monitors the master gateway. For active faults that can be resolved by reset, that is, faults that disappear after they occur and are not easy to reproduce, the slave gateway quickly takes over the function of the master gateway within 1 second to continue to maintain the normal operation of the train.

[0030] 2. In the present invention, the CPU unit of the master gateway monitors the status of its MVB unit and WTB unit. By periodically writing and reading back data, it can detect faults in time and actively reset the MVB unit and WTB unit. The system will immediately trigger the switching mechanism. If the original master gateway returns to normal after the reset, it can serve as a new slave gateway to monitor the new master gateway.

[0031] 3. In the present invention, the first Ethernet cable and the second Ethernet cable between the gateways are respectively connected to the first Ethernet port and the second Ethernet port of the CPU unit between the master gateway and the slave gateway, so as to realize the monitoring function of the slave gateway to the master gateway. The first Ethernet cable and the second Ethernet cable have dual-line redundancy, so as to reduce the risk of incorrect switching caused by line jitter.

[0032] Based on the above reasons, the present invention can be widely promoted in the technical field of train communication and the like. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0034] Figure 1 This is a schematic diagram of the gateway redundancy control principle of the present invention.

[0035] Figure 2 This is a schematic diagram of the gateway redundancy switching principle of the present invention.

[0036] Figure 3 This is the network topology diagram of the electric locomotive of the present invention.

[0037] Figure 4 This is a schematic diagram of the CPU unit monitoring the MVB unit status of the present invention.

[0038] Figure 5 This is a schematic diagram of the CPU unit monitoring the WTB unit status of the present invention.

[0039] Figure 6 This is a schematic diagram of the status of the slave gateway monitoring the master gateway in the present invention. DETAILED DESCRIPTION

[0040] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present invention.

[0041] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0042] like Figure 1 and Figure 2As shown, the present invention provides a train communication gateway redundancy system, including a first gateway and a second gateway, wherein the first gateway includes a CPU unit, an MVB unit, a WTB unit, a VME backplane unit and a PWR unit, wherein the CPU unit is used to receive data from the MVB unit and the WTB unit, and process the data, and send the MVB unit data to the WTB unit and send the WTB unit data to the MVB unit. Preferably, the CPU unit is also used to centrally manage the status of other units. Specifically, the MVB unit is used for internal data communication within the train, and the WTB unit is used for data communication between trains. The PWR unit supplies power to the CPU unit, the MVB unit and the WTB unit through the VME backplane unit, and the power supply voltage is 5V. The CPU unit communicates with the MVB unit and the WTB unit respectively through the VME backplane unit.

[0043] The second gateway has the same hardware configuration as the first gateway. The first Ethernet port of the CPU unit of the first gateway is connected to the first Ethernet port of the CPU unit of the second gateway via the first Ethernet cable, so as to realize the first monitoring path of bidirectional monitoring between the first gateway and the second gateway. The second Ethernet port of the CPU unit of the first gateway is connected to the second Ethernet port of the CPU unit of the second gateway via the second Ethernet cable, so as to realize the second monitoring path of bidirectional monitoring between the first gateway and the second gateway. In addition to managing the status of the WTB unit, MVB unit, and VME backplane unit of the second gateway, the CPU unit of the second gateway exchanges status information with the CPU unit of the first gateway via the dual Ethernet cables between gateways.

[0044] Arbitrarily select one of the first gateway and the second gateway as the master gateway, and the other gateway as the slave gateway. In this embodiment, the first gateway is configured as the master gateway by default, and the other gateway is configured as the slave gateway. The slave gateway is a redundant device of the master gateway. When an abnormality is detected in the main gateway, it switches to the main gateway. The slave gateway outputs data only when it switches to the main gateway to avoid conflicts.

[0045] The first monitoring path and the second monitoring path are dual-line redundant lines. When the status of the master gateway received by the slave gateway through the first monitoring path and the second monitoring path is abnormal at the same time, the slave gateway switches to the master gateway. When one monitoring path is abnormal and the other is not abnormal, it means that the master gateway is normal, so no action is taken.

[0046] like Figure 3 As shown, Figure 3The network topology diagram of the electric locomotive of the present invention. The MVB unit receives the MPU data of the vehicle through the MVB bus, and sends the MPU data of the vehicle to the WTB unit through the main gateway to generate the WTB data of the vehicle. The WTB unit sends the WTB data of the vehicle to other vehicles through the WTB bus, and receives the WTB data of other vehicles through the WTB bus, and sends the WTB data of other vehicles to the MVB unit through the main gateway, and the MVB unit transmits it back to the MPU of the vehicle.

[0047] The CPU unit centrally manages the status of other units. The main gateway CPU unit monitors the status of its own MVB unit, WTB unit, VME backplane unit, and PWR unit. The slave gateway CPU unit monitors the status of its own MVB unit, WTB unit, VME backplane unit, and PWR unit. The main gateway CPU unit and the slave gateway CPU unit have the same logic for monitoring the status of other units.

[0048] There are two ways for the master gateway CPU unit and the slave gateway CPU unit to monitor the status of their own MVB units, such as Figure 4 As shown, including:

[0049] Method 1: The CPU unit writes 0x55 (check data) to the MVB unit 0x999 port (verification port) and reads it back, then writes 0xaa (inverted check data) and reads it back. The polling cycle is 100ms. If the read-back data is different from the written data and the duration exceeds t1, the MVB unit is considered abnormal.

[0050] Method 2: The CPU unit writes the changed data to the MVB unit 0x998 port (detection port) and then reads it back. The polling cycle is 100ms. If the read-back data remains unchanged and lasts for more than t1, the MVB unit is considered abnormal.

[0051] Wherein, t1 is the MVB unit abnormality determination timeout threshold, and t1 is 1500ms.

[0052] If any of the above two abnormalities are detected, the CPU unit will actively reset the MVB unit.

[0053] There are two ways for the master gateway CPU unit and the slave gateway CPU unit to monitor their own WTB unit status, such as Figure 5 As shown, including:

[0054] Method 1: The CPU unit writes 0x55 (initial verification data) to the WTB unit 0x70000 address (verification port) and then reads it back. Then, it writes 0xaa (reverse verification data) and then reads it back. If the read-back data is different from the written data and the duration exceeds t2, the WTB unit is considered abnormal.

[0055] Method 2: The CPU unit reads back the life signal of the WTB unit. If the read-back life signal remains unchanged and lasts for more than t2, the WTB unit is considered abnormal.

[0056] Among them, t2 is the timeout threshold for determining abnormality of the WTB unit, and preferably t2 is 1500ms.

[0057] If any of the above two abnormalities are detected, the CPU unit will actively reset the WTB unit.

[0058] A train communication gateway redundant system switching control method comprises the following steps:

[0059] (1) Complete power-on startup: The first gateway and the second gateway are started simultaneously, and their respective configuration files are loaded. By default, the first gateway is configured as the master gateway, and the other gateway is configured as the slave gateway;

[0060] (2) Start working: On the one hand, the main gateway CPU unit monitors the status of its own MVB unit, WTB unit and VME backplane, and on the other hand, the slave gateway monitors the operating status of the main gateway through the first monitoring path and the second monitoring path between gateways;

[0061] (3) Fault handling: When the CPU unit of the master gateway detects that the status of the MVB unit, WTB unit or VME backplane is abnormal, the CPU unit actively resets and no longer sends changed data to the slave gateway through Ethernet port 1 and Ethernet port 2. When the slave gateway detects that the data sent by the CPU unit of the master gateway through Ethernet port 1 and Ethernet port 2 remains unchanged, the slave gateway is switched to the master gateway;

[0062] (4) Redundancy switching is completed: the slave gateway is switched to the new master gateway. The original master gateway is reset and serves as the new slave gateway, receiving data from the current master gateway through the first monitoring path and the second monitoring path.

[0063] In step (3), if Figure 6 As shown, the way for the slave gateway to monitor the master gateway is:

[0064] If the life signal data of the main gateway monitored by the slave gateway through the first monitoring path and the second monitoring path between the gateways remains unchanged and lasts for a certain period of time exceeding t3, the main gateway is considered abnormal.

[0065] Among them, t3 is the monitoring path abnormality timeout threshold, and preferably t3 is 600ms.

[0066] During specific implementation, as a preferred embodiment of the present invention, taking into account the master-slave polling mechanism of MVB communication, when monitoring the life signal of the MVB unit, it is necessary to consider the judgment of the sending and receiving status of the master gateway MVB and the sending and receiving status of the slave gateway to avoid erroneous operation of the gateway redundancy switching due to external actions (such as when the MPU redundancy switches, the MVB bus master disappears, which will also cause the gateway MVB board to fail to send data).

[0067] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A train communication gateway redundancy system, characterized in that: comprising a first gateway and a second gateway, The first gateway includes a CPU unit, an MVB unit, a WTB unit, a VME backplane unit and a PWR unit, the CPU unit includes a first Ethernet port and a second Ethernet port, the CPU unit is used to receive MVB unit data and WTB unit data, and process the MVB unit data and WTB unit data, including sending the MVB unit data to the WTB unit, and sending the WTB unit data to the MVB unit, the MVB unit is used for internal data communication within the train, the WTB unit is used for data communication between trains, and the PWR unit supplies power to the CPU unit, the MVB unit and the WTB unit through the VME backplane unit; The second gateway has the same hardware configuration as the first gateway. The first Ethernet port of the CPU unit of the first gateway is connected to the first Ethernet port of the CPU unit of the second gateway via a first Ethernet cable, so as to realize a first monitoring path for bidirectional monitoring between the first gateway and the second gateway. The second Ethernet port of the CPU unit of the first gateway is connected to the second Ethernet port of the CPU unit of the second gateway via a second Ethernet cable, so as to realize a second monitoring path for bidirectional monitoring between the first gateway and the second gateway.

2. The train communication gateway redundant system according to claim 1, characterized in that: Arbitrarily select one of the first gateway and the second gateway as the main gateway, and the other gateway as the slave gateway. The slave gateway is a redundant device of the main gateway. When the slave gateway detects an abnormality in the main gateway, it switches to the main gateway. The slave gateway outputs data only when it switches to the main gateway to avoid conflicts.

3. The train communication gateway redundant system according to claim 1, characterized in that: The first monitoring path and the second monitoring path are dual-line redundant lines. When the status of the master gateway received by the slave gateway through the first monitoring path and the second monitoring path is abnormal at the same time, the slave gateway switches to the master gateway.

4. The train communication gateway redundant system according to claim 1, characterized in that: The MVB unit receives the MPU data of the vehicle through the MVB bus, and sends the MPU data of the vehicle to the WTB unit through the main gateway to generate the WTB data of the vehicle. The WTB unit sends the WTB data of the vehicle to other vehicles through the WTB bus, and at the same time receives the WTB data of other vehicles through the WTB bus, and sends the WTB data of other vehicles to the MVB unit through the main gateway, and the MVB unit transmits it back to the MPU of the vehicle.

5. The train communication gateway redundant system according to claim 1, characterized in that: The CPU unit centrally manages the status of other units. The main gateway CPU unit monitors the status of its own MVB unit, WTB unit, VME backplane unit, and PWR unit. The slave gateway CPU unit monitors the status of its own MVB unit, WTB unit, VME backplane unit, and PWR unit. The main gateway CPU unit and the slave gateway CPU unit have the same logic for monitoring the status of other units.

6. A train communication gateway redundancy system according to claim 5, characterized in that: There are two ways for the master and slave gateway CPU units to monitor the status of their own MVB units, including: Method 1: The CPU unit writes verification data to the verification port of the MVB unit and reads it back, then writes the inverted verification data and reads it back. If the read-back data is different from the written data and the duration exceeds t1, the MVB unit is considered abnormal. Method 2: The CPU unit writes the changed data to the MVB unit detection port and then reads it back. If the read-back data remains unchanged and lasts for more than t1, the MVB unit is considered abnormal, where t1 is the MVB unit abnormality determination timeout threshold.

7. A train communication gateway redundancy system according to claim 5, characterized in that: There are two ways for the master gateway CPU unit and the slave gateway CPU unit to monitor the status of their own WTB units, including: Method 1: The CPU unit writes initial verification data to the verification address of the WTB unit and then reads it back, then writes the inverted verification data and then reads it back. If the read-back data is different from the written data and the duration exceeds t2, the WTB unit is considered abnormal. Method 2: The CPU unit reads back the communication data of the WTB unit. If the read-back data remains unchanged and lasts for more than t2, the WTB unit is considered to be abnormal, where t2 is the timeout threshold for determining the abnormality of the WTB unit.

8. A train communication gateway redundant system switching control method, implemented based on the train communication gateway redundant system according to any one of claims 1 to 7, characterized in that: The following steps are involved: (1) Complete power-on startup: The first gateway and the second gateway are started simultaneously, and their respective configuration files are loaded. By default, the first gateway is configured as the master gateway and the second gateway is configured as the slave gateway; (2) Start working: On the one hand, the master gateway CPU unit monitors the status of its own MVB unit, WTB unit and VME backplane unit, and on the other hand, the slave gateway monitors the operating status of the master gateway through the first monitoring path and the second monitoring path between gateways; (3) Fault handling: When the CPU unit of the master gateway detects that the status of the MVB unit, WTB unit or VME backplane unit is abnormal, the CPU unit actively resets the abnormal unit and no longer sends changed data to the slave gateway through Ethernet port 1 and Ethernet port 2. When the slave gateway detects that the data sent by the CPU unit of the master gateway through Ethernet port 1 and Ethernet port 2 remains unchanged, it switches to the master gateway; (4) Redundancy switching is completed: the slave gateway is switched to the new master gateway. The original master gateway is actively reset and serves as the new slave gateway, receiving data from the current master gateway through the first monitoring path and the second monitoring path.

9. A train communication gateway redundant system switching control method according to claim 8, characterized in that: In step (3), the slave gateway monitors the master gateway in the following manner: If the communication data of the main gateway monitored by the slave gateway through the first monitoring path and the second monitoring path between the gateways remains unchanged and lasts for a certain period of time exceeding t3, the main gateway is considered to be abnormal, where t3 is the monitoring path abnormal timeout threshold.

Images