Double-loop network safety communication door opening and closing control device and method for platform door control system

Abstract

The invention relates to a double-loop network safety communication door opening and closing control device and method for a platform door control system, the door opening and closing control device comprises a platform door controller PEDC and a plurality of door control units DCU, the platform door controller PEDC is used as an EtherCAT main station, and the door control units DCU are used as a plurality of door control units DCU. The door control units DCU serve as EtherCAT slave stations to form an EtherCAT network, and communication is conducted between the platform door controller PEDC and the multiple door control units DCU through an FSOE safety communication protocol. The platform door controller PEDC comprises a PEDC A system and a PEDC B system, each door control unit DCU comprises a first processor and a second processor, the PEDC A system and the first controllers of the plurality of door control units DCU form a first communication topological structure, the PEDC B system and the second controllers of the plurality of door control units DCU form a second communication topological structure, and the first communication topological structure and the second communication topological structure form a second communication topological structure. The first communication topological structure and the second communication topological structure are independent of each other. According to the invention, safe and reliable communication between the platform door controller PEDC and the plurality of door control units DCU is realized.

Description

Technical Field

[0001] The invention relates to the field of rail transit platform door control, in particular to a platform door control system double-ring network safety communication switch door control device and method. Background Art

[0002] With the rapid development of urban rail transit, platform door control systems play a vital role in ensuring passenger safety and improving operational efficiency. Traditional platform door control systems mainly rely on hard-wired door opening and closing methods. Although this method provides a certain degree of stability in the short term, it is insufficient in flexibility and adaptability in the face of complex operating environments with multiple models and multiple train sets. Hard-wired systems are difficult to quickly adapt to changes in vehicle models and have limitations in maintenance and expansion, which restricts the further development of platform door control systems.

[0003] To meet this challenge, the demand for modernization of platform door control systems is growing, and multi-unit trains have become the norm. This requires the platform door control system to be able to flexibly adapt to the door opening and closing requirements of different models while ensuring the safety and reliability of the system. Therefore, it is particularly important to develop a technology that can achieve point-to-point door opening and closing control through communication. This technology needs to solve the problems of security and reliability of communication control, as well as communication delay and response synchronization, while also meeting the real-time and bandwidth requirements of the communication interface to adapt to the growing operational needs and improve the overall performance of the system.

[0004] One of the biggest difficulties that prevents the platform door control system from realizing communication door opening and closing is the need to solve the problem of safety. Safety Integrity Level (SIL) is an important indicator to measure the safety of the system. Functional safety design is crucial in the platform door control system. In the existing technology, the functional integrity of the door opening and closing function of the previous platform door control system can only reach the SIL2 level. The SIL2 level cannot meet the strict requirements of the system for safety and reliability in some complex and safety-critical rail transit application scenarios. The market demand for the SIL4 level door opening and closing function of the platform door control system is getting higher and higher. For example, on lines with high-density train operation, or in fully automatic unmanned rail transit systems, the platform door control system needs to further improve the safety integrity level to ensure that the platform door control system can accurately perform door opening and closing control and the safety of passengers during train operation.

[0005] To sum up, in order for the communication switch door control technology to be applied to the platform door control system, the technical solution must have high security and retain the high reliability of hard-wired control itself as much as possible. Summary of the invention

[0006] The purpose of the present invention is to overcome the deficiencies of the prior art and provide a platform door control system dual-ring network safety communication switch door control device and method, thereby achieving safe and reliable communication between the platform door controller PEDC and multiple door control units DCU.

[0007] The objective of the present invention is achieved through the following technical solutions:

[0008] A platform door control system dual-ring network safety communication switch door control device, the switch door control device includes a platform door controller PEDC and multiple door control units DCU, the switch door control device uses the platform door controller PEDC as an EtherCAT master station and the door control unit DCU as an EtherCAT slave station to form an EtherCAT network to communicate between the platform door controller PEDC and the multiple door control units DCU through the FSOE safety communication protocol; the platform door controller PEDC includes a PEDC A system and a PEDC B system, the door control unit DCU includes a first processor and a second processor, the PEDC A system and the first controllers of the multiple door control units DCU form a first communication topology structure, the PEDC B system and the second controllers of the multiple door control units DCU form a second communication topology structure, and the first communication topology structure and the second communication topology structure are independent of each other.

[0009] Furthermore, the first communication topology structure and the second communication topology structure are both ring topologies.

[0010] Furthermore, the ring topology structure is networked in a cable redundancy manner.

[0011] Furthermore, the platform door controller PEDC and the door control unit DCU both adopt a two-out-of-two architecture design.

[0012] Furthermore, the first controller and the second controller of the door control unit DCU respectively use two independent and mutually isolated Ethernet interfaces to construct the first communication topology structure and the second communication topology structure.

[0013] A platform door control system dual-ring network safety communication switch door control method, the switch door control method realizes communication between PEDC A system and the first controller through a first communication topology structure, and the switch door control method realizes communication between PEDC B system and the second controller through a second communication topology structure.

[0014] Furthermore, the method for processing the data stream from the PEDC A system by the switch gate control method includes the following steps:

[0015] S11: PEDC A system sends the door opening and closing control command to the FSOE master station of PEDC A system, and the FSOE master station of PEDC A system converts the door opening and closing control command into a master station safety protocol data unit and sends the master station safety protocol data unit to the EtherCAT slave station of the first processor of the door control unit DCU via the EtherCAT master station of PEDC A system;

[0016] S12: The EtherCAT slave of the first processor sends the received master safety protocol data unit to the FSOE slave of the door control unit DCU;

[0017] S13: The FSOE slave station of the door control unit DCU processes the received master station safety protocol data unit and sends the obtained response door opening and closing control command to the door opening and closing execution interface, and responds to the slave station safety protocol data unit to the EtherCAT slave station of the first processor;

[0018] S14: The EtherCAT slave of the first processor sends the responding slave safety protocol data unit to the FSOE master of the PEDC A system via the EtherCAT master of the PEDC A system;

[0019] Furthermore, the method for processing the data stream from the PEDC B system by the switch gate control method includes the following steps:

[0020] S21: PEDC B system sends the door opening and closing control command to the FSOE master station of PEDC B system, and the FSOE master station of PEDC B system converts the door opening and closing control command into a master station safety protocol data unit and sends the master station safety protocol data unit to the EtherCAT slave station of the second processor of the door control unit DCU via the EtherCAT master station of PEDC B system;

[0021] S22: The EtherCAT slave of the second processor sends the received master safety protocol data unit to the FSOE slave of the door control unit DCU;

[0022] S23: The FSOE slave station of the door control unit DCU processes the received master station safety protocol data unit and sends the obtained response door opening and closing control command to the door opening and closing execution interface, and responds to the slave station safety protocol data unit to the EtherCAT slave station of the second processor;

[0023] S24: The EtherCAT slave of the second processor sends the responding slave safety protocol data unit to the FSOE master of the PEDC B system via the EtherCAT master of the PEDC B system.

[0024] Further, the switch gate control method performs a fault handling method for the first communication topology structure and the second communication topology structure as follows:

[0025] If one of the first communication topology structure and the second communication topology structure fails and the other one is operating normally, the door control unit DCU receives the master station safety protocol data unit of the normally operating one of the two, and the FSOE slave station processes the master station safety protocol data unit to obtain a response to the door opening and closing control command and respond to the slave station safety protocol data unit, and transmits the slave station safety protocol data unit through the normally operating one of the first communication topology structure and the second communication topology structure.

[0026] Furthermore, the door opening and closing control method includes the following steps for synchronizing the communication between the platform door controller PEDC and a plurality of door control units DCU:

[0027] 1) The platform door controller PEDC receives the slave station safety protocol data unit;

[0028] 2) Send door opening and closing control commands to the FSOE master station;

[0029] 3) The FSOE master station processes the door opening and closing control command into the master station safety protocol data unit;

[0030] 4) If the traversal processing of the slave station safety protocol data units of all gate control units DCU is not completed, return to step 3);

[0031] 5) Synchronously update the master station security protocol data unit that interfaces with the door control unit DCU;

[0032] 6) The FSOE master station of the platform door controller PEDC sends the master station safety protocol data unit.

[0033] The beneficial effects of the present invention are:

[0034] Through the EtherCAT network and FSOE safety communication protocol, secure communication between the platform door controller PEDC and multiple door control units DCU is achieved. Through two independent communication topologies, a redundant EtherCAT network is realized, and the network communication channels are isolated from each other to improve communication reliability. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] Figure 1 It is a structural schematic diagram of the present invention;

[0036] Figure 2 It is a redundant communication mechanism for EtherCAT cables;

[0037] Figure 3 Control data flow for dual-ring network security communication switch;

[0038] Figure 4 2-out-of-2 deployment architecture diagram for secure communication switch gates;

[0039] Figure 5 Flowchart for DCU redundant slave station switching process;

[0040] Figure 6 Provide a flow chart for PEDC secure communication data synchronization;

[0041] Figure 7 Software architecture diagram for PEDC safety communication switch gate;

[0042] Figure 8 This is the software architecture diagram for DCU secure communication switch door. DETAILED DESCRIPTION

[0043] The following describes the embodiments of the present invention by specific examples, and those skilled in the art can easily understand other advantages and effects of the present invention from the contents disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments, and the details in this specification can also be modified or changed in various ways based on different viewpoints and applications without departing from the spirit of the present invention. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict.

[0044] It should be noted that the illustrations provided in the following embodiments are only schematic illustrations of the basic concept of the present invention, and thus the drawings only show components related to the present invention rather than being drawn according to the number, shape and size of components in actual implementation. In actual implementation, the type, quantity and proportion of each component may be changed arbitrarily, and the component layout may also be more complicated.

[0045] Embodiment 1:

[0046] like Figures 1 to 8 As shown, a platform door control system dual-ring network safety communication switch door control device, the switch door control device includes a platform door controller PEDC and multiple door control units DCU, the switch door control device uses the platform door controller PEDC as an EtherCAT master station and the door control unit DCU as an EtherCAT slave station to form an EtherCAT network to communicate between the platform door controller PEDC and the multiple door control units DCU through the FSOE safety communication protocol; the platform door controller PEDC includes a PEDC A system and a PEDC B system, the door control unit DCU includes a first processor and a second processor, the PEDCA system forms a first communication topology with the first controllers of the multiple door control units DCU, the PEDC B system forms a second communication topology with the second controllers of the multiple door control units DCU, and the first communication topology and the second communication topology are independent of each other.

[0047] The first communication topology structure and the second communication topology structure are both ring topologies.

[0048] The platform door controller PEDC and the door control unit DCU both adopt a two-out-of-two architecture design.

[0049] The two-out-of-two architecture design means that it has two independent judgment mechanisms, and only when these two judgment mechanisms reach valid conclusions can the whole be considered valid.

[0050] Through the EtherCAT network and FSOE safety communication protocol, secure communication between the platform door controller PEDC and multiple door control units DCU is achieved. Through two independent communication topologies, a redundant EtherCAT network is realized, and the network communication channels are isolated from each other to improve communication reliability.

[0051] Note: DCU, Door Control Unit, door control unit DCU; PEDC, Platform Edge Door Controller, platform door controller PEDC.

[0052] The door opening and closing control method is implemented based on the EtherCAT network. The FSOE safety communication protocol is deployed on the EtherCAT network, and the door opening and closing control data is transmitted through the safety communication protocol.

[0053] In the network networking solution, PEDC assumes the role of EtherCAT master station, DCU assumes the role of EtherCAT slave station, and deploys the master station FSOE on PEDC, and the slave station FSOE on DCU. Moreover, PEDC and DCU both adopt a two-out-of-two architecture design, thus adapting to the deployment architecture required by the FSOE safety communication protocol itself. In order to improve the reliability of network transmission deployment applications, the network adopts EtherCAT cable redundancy and hot-swap technology, and innovatively proposes "redundant master station + redundant slave station" to realize a dual-ring network, which fully improves the reliability of the network transmission channel.

[0054] The signals of the PEDC A system are transmitted one by one to the first controllers of the plurality of gate control units DCU and then returned to the PEDC A system;

[0055] The signals of the PEDC B system are transmitted to the second controllers of the multiple gate control units DCU one by one and then returned to the PEDC B system.

[0056] Redundant communication: PEDC network master stations A and B can establish EtherCAT communication with a single DCU at the same time, and the network communication channels are isolated from each other. A single DCU has the function of sending and receiving communication data with the A and B master stations at the same time.

[0057] Secure communication: FSoE secure communication defines a unique master / slave relationship between an ESoE master and an FSoE slave. In a FSoE secure communication connection, each device returns its own new message only after receiving a new message from the connected device. In each FSoE cycle, the complete transmission mode between the FSoE master and the FSoE slave is monitored by a separate watchdog timer on both devices.

[0058] In application deployment, the DCU maintains only one valid FSOE safety communication data by default. When the EtherCAT communication is disconnected, another EtherCAT communication takes over to maintain the FSOE safety communication and reports the communication fault status.

[0059] The ring topology structure is networked in a cable redundancy manner.

[0060] Cable redundancy: Single-channel EtherCAT network communication uses cable redundancy to form a network. When one DCU fails and loses communication, it will not affect the communication of the remaining DCUs on the entire side of the platform.

[0061] like Figure 2 In the figure, the frame sent on MAC1 is processed by the left part of the network, and the frame sent on MAC2 is processed by the right part of the network; the EtherCAT master receives both frames and merges the results, and the application is notified about the "line failure". In the figure, slave N-2 fails.

[0062] A platform door control system dual-ring network safety communication switch door control method, the switch door control method realizes communication between PEDC A system and the first controller through a first communication topology structure, and the switch door control method realizes communication between PEDC B system and the second controller through a second communication topology structure.

[0063] The method for processing the data stream from the PEDC A system by the switch gate control method comprises the following steps:

[0064] S11: PEDC A sends the door opening and closing control command to the FSOE master station of PEDC A, and the FSOE master station of PEDC A converts the door opening and closing control command into the master station safety protocol data unit (i.e. Figure 3 The master station safety PDU in the gate control unit) sends the master station safety protocol data unit to the EtherCAT slave of the first processor of the gate control unit DCU via the EtherCAT master of the PEDC A system;

[0065] S12: The EtherCAT slave of the first processor sends the received master safety protocol data unit to the FSOE slave of the door control unit DCU;

[0066] S13: The FSOE slave station of the door control unit DCU processes the received master station safety protocol data unit and sends the obtained response door opening and closing control command to the door opening and closing execution interface, and responds to the slave station safety protocol data unit to the EtherCAT slave station of the first processor;

[0067] S14: The EtherCAT slave of the first processor sends the responding slave safety protocol data unit to the FSOE master of the PEDC A system via the EtherCAT master of the PEDC A system;

[0068] The method for processing the data stream from the PEDC A system by the switch gate control method comprises the following steps:

[0069] S21: PEDC B system sends the door opening and closing control command to the FSOE master station of PEDC B system, and the FSOE master station of PEDC B system converts the door opening and closing control command into a master station safety protocol data unit and sends the master station safety protocol data unit to the EtherCAT slave station of the second processor of the door control unit DCU via the EtherCAT master station of PEDC B system;

[0070] S22: The EtherCAT slave of the second processor sends the received master safety protocol data unit to the FSOE slave of the door control unit DCU;

[0071] S23: The FSOE slave station of the door control unit DCU processes the received master station safety protocol data unit and sends the obtained response door opening and closing control command to the door opening and closing execution interface, and responds to the slave station safety protocol data unit to the EtherCAT slave station of the second processor;

[0072] S24: The EtherCAT slave of the second processor sends the responding slave safety protocol data unit to the FSOE master of the PEDC B system via the EtherCAT master of the PEDC B system.

[0073] The door opening and closing control commands of the PEDC A series and the PEDC B series are received through the door opening and closing command interface.

[0074] The control data flow of the door opening and closing control using dual-loop network security communication in the platform door control system is as follows Figure 3 As shown, the control flow from receiving the door opening and closing instructions from PEDC to DCU receiving and executing the door opening and closing is described.

[0075] The door opening and closing command collection of the PEDC A system and the PEDC B system, the FSOE master station safety communication, and the FSOE slave station safety communication of the door control unit DCU all adopt a 2-out-of-2 design, such as Figure 4, ensuring the security of communication and door opening and closing commands between PEDC and DCU.

[0076] Therefore, the processors of the PEDC A series and the PEDC B series are electrically connected to perform dual-core synchronization, and the first controller and the second controller of the gate control unit DCU are electrically connected to perform dual-core synchronization.

[0077] The first controller and the second controller of the door control unit DCU respectively use two independent and mutually isolated Ethernet interfaces to construct the first communication topology structure and the second communication topology structure.

[0078] The Ethernet interface of the first controller is a first input interface and a first output interface, and the Ethernet interface of the second controller is a second input interface and a second output interface.

[0079] The Ethernet output end of the PEDC A series is electrically connected to the first input interface of the first-level gating control unit DCU, and the Ethernet input end of the PEDC A series is electrically connected to the first output interface of the final-level gating control unit DCU, and the first output interface of the gating control unit DCU is electrically connected to the first input interface of the next-level gating control unit DCU one by one; the Ethernet output end of the PEDC B series is electrically connected to the second input interface of the first-level gating control unit DCU, and the Ethernet input end of the PEDC B series is electrically connected to the second output interface of the final-level gating control unit DCU, and the second output interface of the gating control unit DCU is electrically connected to the second input interface of the next-level gating control unit DCU one by one.

[0080] Reliability design: PEDC and DCU are designed with two redundant safety communication ring networks. Thanks to the two independent and isolated Ethernet interfaces designed for the DCU safety slave station, when a certain PEDC system is completely offline, the DCU internal slave station FSOE interface will automatically switch to another one, thereby maintaining the normal issuance of the door opening and closing control instructions. From the perspective of network interface reliability, as long as one of the four network ports of the two PEDC systems remains normal, or one of the four network ports of a single DCU remains normal, the safety communication door opening and closing functions will continue to be maintained, fully reflecting the high reliability of the network communication door opening and closing control solution.

[0081] The method for handling the faults of the first communication topology structure and the second communication topology structure by the switch gate control method is as follows:

[0082] If one of the first communication topology structure and the second communication topology structure fails and the other one is operating normally, the door control unit DCU receives the master station safety protocol data unit of the normally operating one of the two, and the FSOE slave station processes the master station safety protocol data unit to obtain a response to the door opening and closing control command and respond to the slave station safety protocol data unit, and transmits the slave station safety protocol data unit through the normally operating one of the first communication topology structure and the second communication topology structure.

[0083] Synchronization design: Since the secure communication mechanism between PEDC and DCU requires point-to-point maintenance, in order to solve the problem of delayed reception of DCU door opening and closing commands caused by internal processing delay of PEDC software when maintaining communication with multiple DCUs, PEDC designed a data synchronization mechanism in the EtherCAT data transmission interface, such as Figure 6 As shown in the figure, the synchronization of door opening and closing commands is achieved. At the same time, the 100Mbps network transmission bandwidth of the EtherCAT network also ensures the real-time communication transmission.

[0084] The method for synchronizing the communication between the platform door controller PEDC and multiple door control units DCU in the door opening and closing control method comprises the following steps:

[0085] 1) The platform door controller PEDC receives the slave station safety protocol data unit;

[0086] 2) Send door opening and closing control commands to the FSOE master station;

[0087] 3) The FSOE master station processes the door opening and closing control command into the master station safety protocol data unit;

[0088] 4) If the traversal processing of the slave station safety protocol data units of all gate control units DCU is not completed, return to step 3);

[0089] 5) Synchronously update the master station security protocol data unit that interfaces with the door control unit DCU;

[0090] 6) The FSOE master station of the platform door controller PEDC sends the master station safety protocol data unit.

[0091] This embodiment describes a case of realizing multiple marshaling safety communication door opening and closing based on the platform door control system dual-ring network safety communication door opening and closing control technology.

[0092] PEDC deployment case introduction

[0093] The main control chip of the platform door controller PEDC is AMD-Xilinx XCZU2CG, which integrates two Cortex TM -A53 processor core, two Cortex TM-R5 real-time processing unit and 16nm FinFET+ programmable logic form a heterogeneous processing system. It adopts a 2-out-of-2 architecture and dual-core lockstep LockStep design. This architecture ensures the stable operation of the system through dual redundancy and ensures the security of the system through 2-out-of-2. The Ethercat master station runs in the A53 Linux environment, and the Fsoe master station and the switch command acquisition and processing module are deployed between the R5 and the soft core, realizing 2-out-of-2 heterogeneous processing.

[0094] Figure 7 The PEDC safety communication switch software architecture diagram:

[0095] APP1: It is the system communication module, responsible for communication with other disciplines (signal system, integrated monitoring system, etc.).

[0096] APP2: It is the system monitoring module, responsible for monitoring the operating status of the platform door system.

[0097] APP3: It is the control module of the system and is responsible for the opening and closing control of the platform doors.

[0098] Component 1: is the network layer component of the computer network.

[0099] Component 2: Application layer components of computer networks.

[0100] Communication interface 1 and communication interface 2: Both are hard wired.

[0101] Communication interface 3: It is the network communication interface of the system, including the EtherCAT network port.

[0102] PEDC deploys the system's door opening and closing acquisition control module and FSOE master station on processor R5 and processor Microblaze to achieve two-out-of-two control, and runs the Ethercat master station in the A53 Linux environment to transmit secure communication data.

[0103] DCU deployment case introduction

[0104] The first processor and the second processor of the door control unit DCU are two Renesas RX72M processors with integrated Ethercat slave ESC cores; the slave has two completely independent Ethernet interfaces, and the single-channel network adopts a one-input and one-output design. The two cores deploy Fsoe slaves and switch door control execution modules to achieve 2-out-of-2 processing. In order to achieve redundant disconnection of the slave network, independent Ethercat slaves are deployed on both cores, as well as serial synchronous data interfaces used for redundant disconnection of the backup system to transmit safety communication data.

[0105] This embodiment has the following advantages:

[0106] 1. Flexibility of communication control scheme: Breaking through the limitations of traditional hard-wired control, this safe communication door opening and closing technology solution enables platform doors to fully adapt to trains of different models and formations, as well as the deployment and application of virtual formations, providing unprecedented flexibility for platform door control systems, which is crucial to meeting the diverse operational needs of rail transit.

[0107] 2. Reliability of the communication control solution: Based on the dual-core architecture, an isolated dual-network slave station interface solution is designed inside the DCU, creating an independent two-way ring network architecture for the main PEDC and the backup PEDC, fully improving the reliability of the communication switch solution.

[0108] 3. Security of the communication control solution: The PEDC and DCU of this solution both adopt a 2-out-of-2 architecture. Under this architectural design, the door opening and closing command transmission process can overcome the hazards caused by various single-point failures, greatly improving the security of the door opening and closing command transmission of the platform door control system, making the solution widely applicable to various complex application scenarios with high security requirements.

[0109] In short, the dual-ring network safety communication control technology is deployed on PEDC and DCU with a 2-out-of-2 architecture. FSOE safety communication also uses a 2-out mechanism to verify and analyze safety data, ensuring the security and accuracy of data transmission, eliminating the risk of harm caused by single point failures, and significantly improving the safety of door opening and closing functions.

[0110] Based on the dual-ring network structure of "redundant master station + redundant slave station" deployed by EtherCAT network, the system can automatically switch to the backup communication transmission path when any master station fails or the network interface fails, maintaining the normal issuance of the door opening and closing control instructions. This redundant design not only reduces the risk of single point failure, but also improves the fault tolerance of the system, ensuring the stable operation of the platform door control system under various abnormal conditions, fully demonstrating the high reliability of the control solution.

[0111] The technical solution realizes the corresponding door opening and closing control of multiple trains through automatic adaptation of communication, providing flexible adaptability to different models and trains. This flexibility is mainly due to the implementation of the safe communication solution, which enables the system to quickly respond to the door opening and closing requirements of different trains. In addition, the system's automation level has been improved, reducing the risk of human intervention and improving the overall safety management level of the platform. At the same time, it also adapts to the needs of mixed operation of multiple train models, enhancing the applicability and flexibility of the system.

[0112] The 100Mbps transmission bandwidth of the EtherCAT network ensures high real-time communication transmission and meets the requirements of the platform door control system for large data volumes and fast response. This high real-time network transmission capability ensures the rapid issuance and execution of door opening and closing commands, reduces communication delays, and improves the response speed of the system. At the same time, the larger data bandwidth also provides the system with more data processing interfaces, improving the overall performance of the system.

[0113] The long-distance advantage of network transmission enables it to adapt to more scenarios with complex electrical deployment environments. At the same time, the technical solution is not only applicable to subway platform doors, but can also be widely used in rail transit fields such as high-speed rail platform doors. This universal applicability gives the technical solution a broad market application prospect. Whether it is the construction of new projects or the renovation of old projects, the technical solution can provide effective solutions to meet the needs of different rail transit scenarios. This wide applicability enables the technical solution to play a role in a variety of environments, providing a new security communication control solution for rail transit platform door control systems.

[0114] In the platform door control system, a secure communication control solution deployed between PEDC (Platform Edge Door Controller) and DCU (Door Control Unit) is proposed. In order to adapt to different vehicle grouping scenarios, the platform door control system can automatically adapt to the corresponding multiple grouping door opening and closing controls through communication, and can also ensure the synchronization of communication door opening and closing controls. At the same time, it can solve the security and reliability problems of the communication solution itself. This solution can be widely used in the field of rail transit, including but not limited to subway platform doors and high-speed rail platform doors.

[0115] The above-mentioned embodiments only express the specific implementation of the present invention, and the description thereof is relatively specific and detailed, but it cannot be understood as limiting the scope of the present invention. It should be pointed out that, for ordinary technicians in this field, several variations and improvements can be made without departing from the concept of the present invention, which all belong to the protection scope of the present invention.

Claims

1. Platform door control system double ring network safety communication switch door control device, characterized by: The switch door control device includes a platform door controller PEDC and multiple gate control units DCU. The switch door control device uses the platform door controller PEDC as the EtherCAT master station and the gate control unit DCU as the EtherCAT slave station to form an EtherCAT network, and communicates between the platform door controller PEDC and the multiple gate control units DCU through the FSOE safety communication protocol; the platform door controller PEDC includes a PEDC A system and a PEDC B system, and the gate control unit DCU includes a first processor and a second processor. The PEDC A system forms a first communication topology with the first controllers of the multiple gate control units DCU, and the PEDC B system forms a second communication topology with the second controllers of the multiple gate control units DCU. The first communication topology and the second communication topology are independent of each other.

2. The platform door control system double-ring network safety communication door switch control device according to claim 1 is characterized by: The first communication topology structure and the second communication topology structure are both ring topologies.

3. The platform door control system double-ring network safety communication door switch control device according to claim 2 is characterized by: The ring topology structure is networked in a cable redundancy manner.

4. The platform door control system double-ring network safety communication door switch control device according to claim 1, characterized in that: The platform door controller PEDC and the door control unit DCU both adopt a two-out-of-two architecture design.

5. The platform door control system double-ring network safety communication door switch control device according to claim 1, characterized in that: The first controller and the second controller of the door control unit DCU respectively use two independent and mutually isolated Ethernet interfaces to construct the first communication topology structure and the second communication topology structure.

6. A platform door control system double-ring network safety communication door opening and closing control method, applied to the platform door control system double-ring network safety communication door opening and closing control device according to claim 1, characterized in that: The switch gate control method realizes the communication between the PEDC A system and the first controller through the first communication topology structure, and the switch gate control method realizes the communication between the PEDC B system and the second controller through the second communication topology structure.

7. The platform door control system double-ring network safety communication door opening and closing control method according to claim 6 is characterized by: The method for processing the data stream from the PEDC A system by the switch gate control method comprises the following steps: S11: PEDC A system sends the door opening and closing control command to the FSOE master station of PEDC A system, and the FSOE master station of PEDC A system converts the door opening and closing control command into a master station safety protocol data unit and sends the master station safety protocol data unit to the EtherCAT slave station of the first processor of the door control unit DCU via the EtherCAT master station of PEDC A system; S12: The EtherCAT slave of the first processor sends the received master safety protocol data unit to the FSOE slave of the door control unit DCU; S13: The FSOE slave station of the door control unit DCU processes the received master station safety protocol data unit and sends the obtained response door opening and closing control command to the door opening and closing execution interface, and responds to the slave station safety protocol data unit to the EtherCAT slave station of the first processor; S14: The EtherCAT slave of the first processor sends the responding slave safety protocol data unit to the FSOE master of the PEDC A series via the EtherCAT master of the PEDC A series.

8. The platform door control system double-ring network safety communication door opening and closing control method according to claim 7 is characterized by: The method for processing the data stream from the PEDC B system by the switch gate control method comprises the following steps: S21: PEDC B system sends the door opening and closing control command to the FSOE master station of PEDC B system, and the FSOE master station of PEDC B system converts the door opening and closing control command into a master station safety protocol data unit and sends the master station safety protocol data unit to the EtherCAT slave station of the second processor of the door control unit DCU via the EtherCAT master station of PEDC B system; S22: The EtherCAT slave of the second processor sends the received master safety protocol data unit to the FSOE slave of the door control unit DCU; S23: The FSOE slave station of the door control unit DCU processes the received master station safety protocol data unit and sends the obtained response door opening and closing control command to the door opening and closing execution interface, and responds to the slave station safety protocol data unit to the EtherCAT slave station of the second processor; S24: The EtherCAT slave of the second processor sends the responding slave safety protocol data unit to the FSOE master of the PEDC B system via the EtherCAT master of the PEDC B system.

9. The platform door control system double-ring network safety communication door opening and closing control method according to claim 7, characterized in that: The method for handling the faults of the first communication topology structure and the second communication topology structure by the switch gate control method is as follows: If one of the first communication topology structure and the second communication topology structure fails and the other one is operating normally, the door control unit DCU receives the master station safety protocol data unit of the normally operating one of the two, and the FSOE slave station processes the master station safety protocol data unit to obtain a response to the door opening and closing control command and respond to the slave station safety protocol data unit, and transmits the slave station safety protocol data unit through the normally operating one of the first communication topology structure and the second communication topology structure.

10. The platform door control system double-ring network safety communication door opening and closing control method according to claim 6, characterized in that: The method for synchronizing the communication between the platform door controller PEDC and multiple door control units DCU in the door opening and closing control method comprises the following steps: 1) The platform door controller PEDC receives the slave station safety protocol data unit; 2) Send door opening and closing control commands to the FSOE master station; 3) The FSOE master station processes the door opening and closing control command into the master station safety protocol data unit; 4) If the traversal processing of the slave station safety protocol data units of all gate control units DCU is not completed, return to step 3); 5) Synchronously update the master station security protocol data unit that interfaces with the door control unit DCU; 6) The FSOE master station of the platform door controller PEDC sends the master station safety protocol data unit.

Images