Redundancy control method, system and equipment of vehicle-mounted operation control equipment and medium

Abstract

The invention relates to the technical field of rail transit, in particular to a redundancy control method, system and device for vehicle-mounted operation control equipment and a medium. The vehicle-mounted double systems are independent units, the double systems and peripheral interaction data channels are independent, data interaction is periodically carried out between the main system and the standby system, various types of fault flag bits of the system are added in synchronous data of the double systems, the running condition of the opposite systems is rapidly judged, the standby system is rapidly responded to be switched into standby system running when the main system is down, and the system reliability is improved. And a 600km / h train high-speed operation switching scene is met. The automatic protection system of the rail transit train is higher in usability, safer and more reliable. The vehicle-mounted double systems are independent units and can normally communicate with peripherals when being independently used, train operation is controlled, and the situation that train operation is affected due to abnormal communication of the vehicle-mounted double systems caused by one-way interference is avoided. According to the method and the device, the conditions of standby system downtime and hot standby function failure caused by short-time communication interference, packet loss and the like can be avoided, the availability of double-system redundancy is improved, and normal operation of a train is ensured.

Description

Technical Field

[0001] The present disclosure relates to the field of rail transit technology, and in particular to a redundant control method, system, device and medium for vehicle-mounted transportation control equipment. Background Art

[0002] Rail transit has gradually become the first choice for people's transportation due to its operational safety, high efficiency and shorter running intervals. As an important part of the high-speed maglev train operation control system, the onboard operation control system cooperates with the ground control system and vehicle equipment to realize the operation command and safety protection of the train.

[0003] In the existing technology, in the redundant solution of the on-board operation control system, the data of the main system and the backup system of the on-board operation control system cannot be shared consistently. If there is occasional packet loss or short-term communication interference during the operation of the backup system, it will crash and lose the hot standby function. The main system and the backup system are connected to the communication channel of the peripheral equipment. When a communication channel of the equipment fails, communication interference is formed on the communication channel, which will cause the failure of both systems to crash and the train will stop. Summary of the invention

[0004] In view of the above problems, the present disclosure provides a redundant control method, system, device and medium for vehicle-mounted transportation control equipment, which are used to ensure that the vehicle-mounted transportation control system operates safely and reliably under high-speed conditions.

[0005] In a first aspect, a redundant control method for a vehicle-mounted transportation control device comprises: The on-board transport control equipment uses an independently operated main system and backup system; After the main system and the standby system are started, they will self-check and initialize, and perform the following processes periodically and sequentially: Record the running data of this system, and the mainboard of this system sends synchronization status data to the other system; As a backup system, it periodically monitors the device's own status, parses peripheral communication data, and sends status data to the main system. The backup system periodically starts parsing the main system data and synchronizes the current interaction status information between the main system and the peripherals. As the master system, it periodically monitors the device's own status, analyzes peripheral communication data, sends status data to the backup system, receives backup system status data, and exchanges data with peripherals; When the backup system does not receive the communication signal from the main system within the preset time, it means that the main system has failed. If the backup system runs normally without any fault, it will be upgraded to the main system and exchange data with the peripherals.

[0006] Furthermore, after the main system and the standby system are started, they are self-checked and initialized, including: During the startup self-test, the dual-system mainboards interact with the communication function board to confirm the communication status of the board and the status of the peripherals; After the self-test is completed, it will start normal operation, initialize various parameters, and record the main and standby status of the system.

[0007] Furthermore, synchronization status data includes: Various types of fault flags, master / slave status, operation mode status, brake information, peripheral status and fault information, communication status, and status of each board.

[0008] Furthermore, it also includes: Two independent channels are used for data exchange between the main system and the backup system. Only when the backup system cannot receive data from the main system through both channels will the main system be considered to be faulty.

[0009] Furthermore, it also includes: Add various types of fault flags in the data synchronized between the main system and the backup system; When the standby system communication is normal and there are no faults, but the main system communication is abnormal, the main system will automatically shut down and the standby system will be upgraded to the main system to ensure the normal operation of the train.

[0010] Furthermore, it also includes: The switching between the main system and the backup system ensures that only one host is allowed to run at the same time through communication status monitoring.

[0011] Furthermore, it also includes: The periodic synchronization data between the primary and backup systems includes verification, serial number and status data; The standby system starts parsing and verifying the main system synchronization status data at the beginning of the cycle. After verifying that the main system data is correct, the serial number is updated, and there is no communication failure, the main system status data can be synchronized and the peripheral data can be parsed. Otherwise, the main system synchronization data is not used, and the peripheral data is directly parsed to start executing the tasks of this cycle.

[0012] For one-time interactive command status data, the backup system unconditionally follows the main system conversion.

[0013] In a second aspect, a redundant control system for vehicle-mounted transportation control equipment includes: a vehicle-mounted transportation control system I and a vehicle-mounted transportation control system II; The vehicle-mounted transportation control system I and vehicle-mounted transportation control system II have the same configuration and are both completely independent operating systems; The vehicle-mounted transportation control system I and vehicle-mounted transportation control system II each have a main board and multiple function boards; The on-board transportation control system I and the on-board transportation control system II communicate independently, and establish external communication with the on-board peripherals and vehicle relays through the corresponding function boards respectively; The vehicle-borne transportation control system I and the vehicle-borne transportation control system II are used as the main system and the backup system of the vehicle-borne transportation control equipment, and the redundant control method of the vehicle-borne transportation control equipment mentioned above is used for control.

[0014] In a third aspect, an electronic device includes a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other via the communication bus; a memory storing a computer program; The processor is used to implement the above-mentioned redundant control method of the vehicle-mounted transportation control equipment when executing the computer program stored in the memory.

[0015] In a fourth aspect, a computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the redundant control method of a vehicle-mounted transportation control device described above is implemented.

[0016] The present disclosure has at least the following beneficial effects: The disclosure is aimed at the automatic protection system of high-speed maglev and other rail transit trains. Both on-board systems are independent units, and the data channels for interaction between the two systems and peripherals are independent. The main and standby systems periodically interact with each other, and the fault flags of various types of the system are added to the data synchronized by the two systems to quickly judge the operation status of the two systems. When the main system fails, the standby system quickly responds and switches to the standby system to meet the high-speed operation switching scenario of 600km / h trains. The automatic protection system of rail transit trains has higher availability, safety and reliability.

[0017] The present disclosure optimizes and improves the dual-system redundancy function of on-board equipment, improves the safety and availability of on-board equipment, and has good foresight and application prospects. For the vehicle control function of on-board signal equipment of high-speed maglev and other rail transit, the rail transit train automatic protection system has higher availability, more safety and reliability.

[0018] Other features and advantages of the present disclosure will be described in the following description, and partly become apparent from the description, or be understood by implementing the present disclosure. The purpose and other advantages of the present disclosure can be realized and obtained by the structures indicated in the description and the drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] In order to more clearly illustrate the embodiments of the present disclosure or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0020] Figure 1 This is a flow chart of the control method according to the embodiment of the present disclosure; Figure 2 This is a schematic diagram of the control system structure of the embodiment of the present disclosure; Figure 3 This is a schematic diagram of the control method principle of the embodiment of the present disclosure; Figure 4 It is a schematic diagram of the structure of an electronic device according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0021] In order to make the purpose, technical solution and advantages of the embodiments of the present disclosure clearer, the technical solution in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are part of the embodiments of the present disclosure, not all of the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present disclosure.

[0022] When the vehicle is in operation, the on-board signal equipment needs to communicate with multiple on-board peripherals to obtain multiple signals such as the track section of the ground equipment, the speed and position of the train, and the vehicle relay. If a certain signal is poorly received or the signal path is interfered with during the operation of the train, the train will stop in an emergency, affecting safety and operation efficiency.

[0023] In response to the above problems, Figure 1 As shown, a redundant control method for vehicle-mounted transportation control equipment includes: S101, the vehicle-mounted transport control equipment uses an independently operated main system and backup system; S102: After the main system and the standby system are started, they will self-check and initialize, and periodically perform the following processes in sequence: S103, recording the operation data of the system, and the mainboard of the system sends synchronization status data to the other system; S104, as a standby system, periodically monitors the device status, parses the peripheral communication data, and sends status data to the main system. The standby system periodically starts to parse the main system data and synchronizes the current interaction status information between the main system and the peripherals; As the master system, it periodically monitors the device's own status, analyzes peripheral communication data, sends status data to the backup system, receives backup system status data, and exchanges data with peripherals; S105, when the standby system does not receive the communication signal of the main system within the preset time, that is, the main system has failed, and the standby system operates normally without any failure, it is upgraded to the main system operation and exchanges data with the peripheral device.

[0024] The specific implementation is as follows: like Figure 2 As shown in the figure, the automatic train protection system includes the on-board operation control system I and the on-board operation control system II. Both systems have the same configuration and are completely independent systems, each with a host board and multiple function boards. System I and system 11 have independent internal communications, and system I and system 11 establish external communications with on-board peripherals and vehicle relays respectively.

[0025] like Figure 3 As shown, after the vehicle-mounted transportation control system is started, it performs a startup self-check and initialization, and then executes it periodically and sequentially until it is shut down.

[0026] During the self-test, the two mainboards exchange data with the communication function board to confirm the communication status of the boards and peripherals, etc. The left mainboard is the main system, and the right mainboard is the standby system to establish communication.

[0027] After the self-test is completed, it will start normal operation, initialize various parameters, and record the main and standby status of the system.

[0028] Record the running data of this system. The main board of this system sends synchronous status data to the opposite system, including various types of fault flags, master and standby status, running mode status, braking information, peripheral status and fault information, communication status, status of each board, etc.

[0029] Determine whether the system is the main system or the backup system, and perform the following tasks respectively: Backup system tasks: periodically monitor the device's own status, parse peripheral communication data, send main system status data, and start parsing and verifying the main system synchronization status data at the beginning of the backup system cycle, synchronizing the current status information such as the interaction between the main system and peripherals.

[0030] Main system tasks: periodically monitor the device's own status, parse peripheral communication data, receive standby system status data, and exchange data with peripherals.

[0031] If the backup system does not receive the communication signal from the main system within the specified time, it means that the main system has failed. If the backup system runs normally without any faults, it will be upgraded to the main system and exchange data with peripherals.

[0032] Two independent channels are used for data exchange between the primary and backup systems. Only when the backup system cannot receive data from the primary system through both channels will the primary system be considered to be faulty.

[0033] Both systems are independent units and can communicate normally with peripherals when used separately to control train operation, avoiding interference along the way that may cause abnormal communication between the on-board dual systems and affect train operation.

[0034] The synchronization data of the two systems should include verification, sequence number, and status data.

[0035] The standby system starts parsing and verifying the main system synchronization status data. If the data verification is correct, the serial number is updated, and there is no communication failure, the main system status data can be synchronized and the peripheral data can be parsed; otherwise, the main system synchronization data is not used, and the peripheral data is directly parsed to start executing the tasks of this cycle. Because the main system and the peripherals interact with each other in real time, the interactive response of the one-time command is completed by the main system, so the standby system unconditionally follows the main system conversion of the one-time interactive command status data, such as the login state, that is, there is no need to execute the one-time interactive command again when switching.

[0036] When the standby system and the peripheral equipment do not meet the conditions for upgrading to the main system due to short-term communication interference, packet loss, etc., the standby system does not need to shut down immediately when the main system is operating normally. It can synchronize the main system's operating status data. After the short-term interference, packet loss, etc. are eliminated, the standby system can continue to operate normally. At the same time, before the standby system is upgraded to the main system, it will also determine whether it is currently operating normally without faults. If it meets the conditions for upgrading to the main system, it will be directed to safe measurement and processing. During the operation of the train, the standby system will not be down due to short-term communication interference or packet loss, which improves the availability of dual-system redundancy and ensures the normal operation of the train.

[0037] The switching between the main and backup systems ensures that only one host is allowed to run at the same time through communication status monitoring, and any system failure will not automatically restart and re-enter. Ensure the consistency of external data and the uniqueness of the data source. Only one system controls the vehicle at the same time.

[0038] Add various types of fault flags to the data of dual-system synchronization. If the standby system communication is normal and fault-free, but the main system communication is abnormal, the main system will automatically shut down and the standby system will be upgraded to the main system to ensure the normal operation of the train, and the train will not stop due to abnormal communication in a single system. The flags can be used to quickly determine the operation of the system. After the dual-channel main system communication signal stops, the standby system will quickly respond and switch to the main system to meet the high-speed operation switching scenario of 600km / h trains.

[0039] like Figure 2 As shown, a redundant control system of a vehicle-mounted transportation control device comprises: a vehicle-mounted transportation control system I and a vehicle-mounted transportation control system II; The vehicle-mounted transportation control system I and vehicle-mounted transportation control system II have the same configuration and are both completely independent operating systems; The vehicle-mounted transportation control system I and vehicle-mounted transportation control system II each have a main board and multiple function boards; The on-board transportation control system I and the on-board transportation control system II communicate independently, and establish external communication with the on-board peripherals and vehicle relays through the corresponding function boards respectively; The vehicle-borne transportation control system I and the vehicle-borne transportation control system II are used as the main system and the backup system of the vehicle-borne transportation control equipment, and the redundant control method of the vehicle-borne transportation control equipment mentioned above is used for control.

[0040] In specific implementation, the disclosed on-board dual systems are both independent units, and can communicate normally with peripherals when used alone to control train operation, avoiding interference along the way that may cause abnormal communication between the on-board dual systems and affect train operation.

[0041] The present disclosure can avoid the standby system downtime and hot standby function failure caused by short-term communication interference, packet loss, etc., improve the availability of dual-system redundancy, and ensure the normal operation of the train.

[0042] The present invention adds various types of fault flags of the system to the data synchronized with the dual systems, so as to quickly judge the operation status of the other system. When the main system fails, the backup system quickly responds and switches to the main system, meeting the switching scenario of 600km / h train high-speed operation.

[0043] like Figure 4 As shown, the present disclosure provides an electronic device, including a processor 401, a communication interface 402, a memory 403 and a communication bus 404, wherein the processor 401, the communication interface 402 and the memory 403 communicate with each other through the communication bus 404; Memory 403, storing computer programs; The processor 401 is configured to implement the above method when executing the computer program stored in the memory 403 .

[0044] The present disclosure provides a computer-readable storage medium storing a computer program, wherein the computer program implements the above method when executed by a processor.

[0045] The computer-readable storage medium may be included in the device / apparatus described in the above embodiment; or it may exist independently without being assembled into the device / apparatus. The above computer-readable storage medium carries one or more programs, and when the above one or more programs are executed, the method according to the embodiment of the present disclosure is implemented.

[0046] According to an embodiment of the present disclosure, a computer-readable storage medium may be a non-volatile computer-readable storage medium, for example, may include but is not limited to: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, apparatus, or device.

[0047] Although the present disclosure has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present disclosure.

Claims

1. A redundant control method for vehicle-mounted transportation control equipment, characterized in that: include: The on-board transport control equipment uses an independently operated main system and backup system; After the main system and the standby system are started, they will self-check and initialize, and perform the following processes periodically and sequentially: Record the running data of this system, and the mainboard of this system sends synchronization status data to the other system; As a backup system, it periodically monitors the device's own status, parses peripheral communication data, and sends status data to the main system. The backup system periodically starts parsing the main system data and synchronizes the current interaction status information between the main system and the peripherals. As the master system, it periodically monitors the device's own status, analyzes peripheral communication data, sends status data to the backup system, receives backup system status data, and exchanges data with peripherals; When the backup system does not receive the communication signal from the main system within the preset time, it means that the main system has failed. If the backup system runs normally without any fault, it will be upgraded to the main system and exchange data with the peripherals.

2. The redundant control method of vehicle-mounted transportation control equipment according to claim 1, characterized in that: After startup, the main system and standby system will perform self-test and initialization, including: During the startup self-test, the dual-system mainboards interact with the communication function board to confirm the communication status of the board and the status of the peripherals; After the self-test is completed, it will start normal operation, initialize various parameters, and record the main and standby status of the system.

3. The redundant control method of a vehicle-mounted transportation control device according to claim 1, characterized in that: Synchronization status data, including: Various types of fault flags, master / slave status, operation mode status, brake information, peripheral status and fault information, communication status, and status of each board.

4. The redundant control method of a vehicle-mounted transportation control device according to claim 1, characterized in that: Also includes: Two independent channels are used for data exchange between the main system and the backup system. Only when the backup system cannot receive data from the main system through both channels will the main system be considered to be faulty.

5. The redundant control method of vehicle-mounted transportation control equipment according to claim 1, characterized in that: Also includes: Add various types of fault flags in the data synchronized between the main system and the backup system; When the standby system communication is normal and there are no faults, but the main system communication is abnormal, the main system will automatically shut down and the standby system will be upgraded to the main system to ensure the normal operation of the train.

6. The redundant control method of a vehicle-mounted transportation control device according to claim 1, characterized in that: Also includes: The switching between the main system and the backup system ensures that only one host is allowed to run at the same time through communication status monitoring.

7. The redundant control method of vehicle-mounted transportation control equipment according to claim 1, characterized in that: Also includes: The periodic synchronization data between the primary and backup systems includes verification, serial number and status data; The standby system starts parsing and verifying the main system synchronization status data. After verifying that the main system data is correct, the serial number is updated, and there is no communication failure, the main system status data can be synchronized and the peripheral data can be parsed. Otherwise, the main system synchronization data is not used, and the peripheral data is directly parsed to start executing the tasks of this cycle. For one-time interactive command status data, the backup system unconditionally follows the main system conversion.

8. A redundant control system for vehicle-mounted transport control equipment, characterized in that: include: On-board transportation control system I and on-board transportation control system II; The vehicle-mounted transportation control system I and vehicle-mounted transportation control system II have the same configuration and are both completely independent operating systems; The vehicle-mounted transportation control system I and vehicle-mounted transportation control system II each have a main board and multiple function boards; The on-board transportation control system I and the on-board transportation control system II communicate independently, and establish external communication with the on-board peripherals and vehicle relays through the corresponding function boards respectively; The vehicle-borne transportation control system I and the vehicle-borne transportation control system II are used as the main system and the backup system of the vehicle-borne transportation control equipment, and a redundant control method for vehicle-borne transportation control equipment according to any one of claims 1 to 7 is used for control.

9. An electronic device, characterized in that: It includes a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory communicate with each other via the communication bus; a memory storing a computer program; The processor is used to implement a redundant control method for a vehicle-mounted transportation control device according to any one of claims 1 to 7 when executing a computer program stored in a memory.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, a redundant control method for a vehicle-mounted transportation control device according to any one of claims 1 to 7 is implemented.

Images